[ 50.801760][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.839357][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.877212][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.918032][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. 1970/01/01 00:00:54 parsed 1 programs [ 55.919038][ T4371] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 56.011936][ T136] device hsr_slave_0 left promiscuous mode [ 56.043917][ T136] device hsr_slave_1 left promiscuous mode [ 56.123844][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.125097][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.126557][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.127610][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.128925][ T136] device bridge_slave_1 left promiscuous mode [ 56.129953][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.185170][ T136] device bridge_slave_0 left promiscuous mode [ 56.186171][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.333496][ T136] device veth1_macvtap left promiscuous mode [ 56.334461][ T136] device veth0_macvtap left promiscuous mode [ 56.335452][ T136] device veth1_vlan left promiscuous mode [ 56.336391][ T136] device veth0_vlan left promiscuous mode [ 56.496106][ T136] team0 (unregistering): Port device team_slave_1 removed [ 56.500643][ T136] team0 (unregistering): Port device team_slave_0 removed [ 56.513467][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.547213][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.658286][ T136] bond0 (unregistering): Released all slaves [ 59.003068][ T4445] chnl_net:caif_netlink_parms(): no params data found [ 59.036134][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.037224][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.038813][ T4445] device bridge_slave_0 entered promiscuous mode [ 59.040903][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.041984][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.043886][ T4445] device bridge_slave_1 entered promiscuous mode [ 59.053996][ T4445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.056595][ T4445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.066233][ T4445] team0: Port device team_slave_0 added [ 59.068168][ T4445] team0: Port device team_slave_1 added [ 59.077005][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.077988][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.081393][ T4445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.084110][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.085194][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.088952][ T4445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.135430][ T4445] device hsr_slave_0 entered promiscuous mode [ 59.184119][ T4445] device hsr_slave_1 entered promiscuous mode [ 59.728151][ T4445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.765888][ T4445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.805644][ T4445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.834775][ T4445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.908742][ T4445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.913084][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.914941][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.918362][ T4445] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.927651][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.929324][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.930784][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.931812][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.933134][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.943850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.945412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.946722][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.947868][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.949218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.950859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.952447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.955169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.958188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.966666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.968440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.970666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.972143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.974096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.975530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.979287][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.028488][ T4445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.038461][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.039680][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.043253][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.046927][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.054111][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.055634][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.057192][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.058461][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.061269][ T4445] device veth0_vlan entered promiscuous mode [ 60.066773][ T4445] device veth1_vlan entered promiscuous mode [ 60.087134][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.088766][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.090075][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.091450][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.094609][ T4445] device veth0_macvtap entered promiscuous mode [ 60.096952][ T4445] device veth1_macvtap entered promiscuous mode [ 60.102159][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.106643][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.107805][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.109355][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.110954][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.112546][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.115588][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.117110][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.121110][ T4445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.122373][ T4445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.124353][ T4445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.125766][ T4445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.203156][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.204824][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.206609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.213400][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.214589][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.215828][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:00 executed programs: 0 [ 60.548247][ T4587] chnl_net:caif_netlink_parms(): no params data found [ 60.569548][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.570679][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.572183][ T4587] device bridge_slave_0 entered promiscuous mode [ 60.574679][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.575828][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.577475][ T4587] device bridge_slave_1 entered promiscuous mode [ 60.588998][ T4587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.591705][ T4587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.601332][ T4587] team0: Port device team_slave_0 added [ 60.603519][ T4587] team0: Port device team_slave_1 added [ 60.611489][ T4587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.612556][ T4587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.616736][ T4587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.619035][ T4587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.620066][ T4587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.624181][ T4587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.674873][ T4587] device hsr_slave_0 entered promiscuous mode [ 60.723823][ T4587] device hsr_slave_1 entered promiscuous mode [ 60.744098][ T4587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.745368][ T4587] Cannot create hsr debugfs directory [ 60.790782][ T4587] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.503645][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 63.568235][ T4587] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.583466][ T4174] Bluetooth: hci0: command 0x041b tx timeout [ 65.817365][ T4587] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.869534][ T4587] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.047779][ T4587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.109703][ T4587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.166112][ T4587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.204738][ T4587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.269359][ T4587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.273290][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.275187][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.278342][ T4587] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.280884][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.282473][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.285127][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.286127][ T1620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.287400][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.291286][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.292945][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.294551][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.295563][ T1620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.298919][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.301688][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.307587][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.309676][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.311296][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.315619][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.317372][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.318961][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.320400][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.323235][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.327136][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.329766][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.372976][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.374301][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.378238][ T4587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.386377][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.388045][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.409453][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.411038][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.412600][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.414618][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.418811][ T4587] device veth0_vlan entered promiscuous mode [ 66.422581][ T4587] device veth1_vlan entered promiscuous mode [ 66.432797][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.435664][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.437081][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.438579][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.440990][ T4587] device veth0_macvtap entered promiscuous mode [ 66.448210][ T4587] device veth1_macvtap entered promiscuous mode [ 66.453617][ T4587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.455411][ T4587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.457460][ T4587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.459386][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.460888][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.462260][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.464075][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.466601][ T4587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.468131][ T4587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.470190][ T4587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.472265][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.473989][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.475833][ T4587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.477182][ T4587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.478541][ T4587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.479787][ T4587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.520240][ T1620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.521354][ T1620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.522479][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.530884][ T342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.532126][ T342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.534146][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:06 executed programs: 2 [ 66.555883][ T4714] loop0: detected capacity change from 0 to 128 [ 66.606658][ T4714] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.607787][ T4714] Bad inode number on dev loop0: 2 is out of range [ 66.608711][ T4714] SysV FS: get root inode failed [ 66.609415][ T4714] oldfs: cannot read superblock [ 66.610207][ T4714] ------------[ cut here ]------------ [ 66.610996][ T4714] VFS: brelse: Trying to free free buffer [ 66.611819][ T4714] WARNING: CPU: 1 PID: 4714 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.613011][ T4714] Modules linked in: [ 66.613569][ T4714] CPU: 1 PID: 4714 Comm: syz.0.16 Not tainted syzkaller #0 [ 66.614669][ T4714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.616051][ T4714] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.617118][ T4714] pc : invalidate_bh_lru+0x128/0x22c [ 66.617868][ T4714] lr : invalidate_bh_lru+0x128/0x22c [ 66.618655][ T4714] sp : ffff80001fbb7710 [ 66.619325][ T4714] x29: ffff80001fbb7710 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 66.620468][ T4714] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 66.621606][ T4714] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dee02060 [ 66.622786][ T4714] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 66.623889][ T4714] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 66.625012][ T4714] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 66.626211][ T4714] x11: ff8080000830061c x10: 0000000000000000 x9 : 8fece64c4a214c00 [ 66.627260][ T4714] x8 : 8fece64c4a214c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.628315][ T4714] x5 : ffff80001fbb7018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.629487][ T4714] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 66.630676][ T4714] Call trace: [ 66.631170][ T4714] invalidate_bh_lru+0x128/0x22c [ 66.631995][ T4714] smp_call_function_many_cond+0xa5c/0xec0 [ 66.632797][ T4714] on_each_cpu_cond_mask+0x5c/0xc4 [ 66.633481][ T4714] invalidate_bh_lrus+0x34/0x40 [ 66.634192][ T4714] blkdev_flush_mapping+0x16c/0x334 [ 66.634984][ T4714] blkdev_put+0x444/0x6c4 [ 66.635540][ T4714] kill_block_super+0xa0/0xe0 [ 66.636210][ T4714] deactivate_locked_super+0xc0/0x13c [ 66.637013][ T4714] mount_bdev+0x284/0x35c [ 66.637663][ T4714] sysv_mount+0x44/0x58 [ 66.638320][ T4714] legacy_get_tree+0xd8/0x174 [ 66.638973][ T4714] vfs_get_tree+0x90/0x278 [ 66.639546][ T4714] do_new_mount+0x228/0x804 [ 66.640113][ T4714] path_mount+0x57c/0xfe8 [ 66.640768][ T4714] __arm64_sys_mount+0x488/0x5f8 [ 66.641542][ T4714] invoke_syscall+0x98/0x28c [ 66.642200][ T4714] el0_svc_common+0x13c/0x258 [ 66.642868][ T4714] do_el0_svc+0x5c/0x140 [ 66.643420][ T4714] el0_svc+0x78/0x1d0 [ 66.643990][ T4714] el0t_64_sync_handler+0xcc/0xe4 [ 66.644675][ T4714] el0t_64_sync+0x1a0/0x1a4 [ 66.645303][ T4714] irq event stamp: 1410 [ 66.645871][ T4714] hardirqs last enabled at (1409): [] kasan_quarantine_put+0xc4/0x200 [ 66.647286][ T4714] hardirqs last disabled at (1410): [] smp_call_function_many_cond+0xa50/0xec0 [ 66.648721][ T4714] softirqs last enabled at (1098): [] local_bh_enable+0x10/0x34 [ 66.649970][ T4714] softirqs last disabled at (1096): [] local_bh_disable+0x10/0x34 [ 66.651252][ T4714] ---[ end trace a72683cc467bd4a2 ]--- [ 66.663476][ T3622] Bluetooth: hci0: command 0x040f tx timeout [ 66.747561][ T4716] loop0: detected capacity change from 0 to 128 [ 66.751007][ T4716] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.752115][ T4716] Bad inode number on dev loop0: 2 is out of range [ 66.753036][ T4716] SysV FS: get root inode failed [ 66.754262][ T4716] oldfs: cannot read superblock [ 66.759019][ T4708] ------------[ cut here ]------------ [ 66.759892][ T4708] VFS: brelse: Trying to free free buffer [ 66.760962][ T4708] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.762278][ T4708] Modules linked in: [ 66.762931][ T4708] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 66.764361][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.765994][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.767122][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 66.767870][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 66.768650][ T4708] sp : ffff80001fc177d0 [ 66.769247][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 66.770490][ T4708] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 66.771765][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e28df888 [ 66.772940][ T4708] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 66.774171][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 66.775385][ T4708] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 66.776560][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 66.777694][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.778803][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.779917][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 66.781080][ T4708] Call trace: [ 66.781586][ T4708] invalidate_bh_lru+0x128/0x22c [ 66.782410][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 66.783281][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 66.784058][ T4708] invalidate_bh_lrus+0x34/0x40 [ 66.784795][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 66.785555][ T4708] blkdev_put+0x444/0x6c4 [ 66.786204][ T4708] blkdev_close+0x74/0xb0 [ 66.786918][ T4708] __fput+0x1b8/0x7e8 [ 66.787485][ T4708] ____fput+0x20/0x30 [ 66.788055][ T4708] task_work_run+0x13c/0x1e8 [ 66.788843][ T4708] do_notify_resume+0x2488/0x30a8 [ 66.789746][ T4708] el0_svc+0xf0/0x1d0 [ 66.790446][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 66.791299][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 66.792049][ T4708] irq event stamp: 14992 [ 66.792756][ T4708] hardirqs last enabled at (14991): [] kasan_quarantine_put+0xc4/0x200 [ 66.794228][ T4708] hardirqs last disabled at (14992): [] smp_call_function_many_cond+0xa50/0xec0 [ 66.795771][ T4708] softirqs last enabled at (14718): [] local_bh_enable+0x10/0x34 [ 66.797074][ T4708] softirqs last disabled at (14716): [] local_bh_disable+0x10/0x34 [ 66.798470][ T4708] ---[ end trace a72683cc467bd4a3 ]--- [ 66.841738][ T4718] loop0: detected capacity change from 0 to 128 [ 66.929638][ T4718] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.930848][ T4718] Bad inode number on dev loop0: 2 is out of range [ 66.931795][ T4718] SysV FS: get root inode failed [ 66.932349][ T4718] oldfs: cannot read superblock [ 66.948292][ T4708] ------------[ cut here ]------------ [ 66.949180][ T4708] VFS: brelse: Trying to free free buffer [ 66.949944][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.951106][ T4708] Modules linked in: [ 66.951666][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 66.953531][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.955176][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.956294][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 66.957086][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 66.957876][ T4708] sp : ffff80001fc177d0 [ 66.958498][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 66.959659][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 66.960794][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dee02400 [ 66.961896][ T4708] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 66.963013][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 66.964292][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 66.965454][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 66.966597][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.967761][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.968893][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 66.969986][ T4708] Call trace: [ 66.970412][ T4708] invalidate_bh_lru+0x128/0x22c [ 66.971118][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 66.971966][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 66.972758][ T4708] invalidate_bh_lrus+0x34/0x40 [ 66.973443][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 66.974123][ T4708] blkdev_put+0x444/0x6c4 [ 66.974769][ T4708] blkdev_close+0x74/0xb0 [ 66.975377][ T4708] __fput+0x1b8/0x7e8 [ 66.975935][ T4708] ____fput+0x20/0x30 [ 66.976454][ T4708] task_work_run+0x13c/0x1e8 [ 66.977109][ T4708] do_notify_resume+0x2488/0x30a8 [ 66.977879][ T4708] el0_svc+0xf0/0x1d0 [ 66.978459][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 66.979233][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 66.979834][ T4708] irq event stamp: 28144 [ 66.980395][ T4708] hardirqs last enabled at (28143): [] kasan_quarantine_put+0xc4/0x200 [ 66.981733][ T4708] hardirqs last disabled at (28144): [] smp_call_function_many_cond+0xa50/0xec0 [ 66.983212][ T4708] softirqs last enabled at (27876): [] local_bh_enable+0x10/0x34 [ 66.984525][ T4708] softirqs last disabled at (27874): [] local_bh_disable+0x10/0x34 [ 66.985738][ T4708] ---[ end trace a72683cc467bd4a4 ]--- [ 67.007155][ T4720] loop0: detected capacity change from 0 to 128 [ 67.010400][ T4720] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.011442][ T4720] Bad inode number on dev loop0: 2 is out of range [ 67.012360][ T4720] SysV FS: get root inode failed [ 67.013032][ T4720] oldfs: cannot read superblock [ 67.022668][ C1] ------------[ cut here ]------------ [ 67.023490][ C1] VFS: brelse: Trying to free free buffer [ 67.024314][ C1] WARNING: CPU: 1 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.025525][ C1] Modules linked in: [ 67.026123][ C1] CPU: 1 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.027378][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.028845][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.029974][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 67.030728][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 67.031411][ C1] sp : ffff800008017df0 [ 67.032027][ C1] x29: ffff800008017df0 x28: ffff0000c8370000 x27: 1fffe000341d4a5c [ 67.033154][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 67.034222][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dee027a0 [ 67.035246][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 67.036354][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 67.037635][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 67.038646][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : ca04e80e70640500 [ 67.039675][ C1] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.040831][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.041873][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 67.043003][ C1] Call trace: [ 67.043451][ C1] invalidate_bh_lru+0x128/0x22c [ 67.044164][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 67.044962][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.045900][ C1] ipi_handler+0x10c/0x70c [ 67.046496][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 67.047247][ C1] handle_domain_irq+0x148/0x200 [ 67.047987][ C1] gic_handle_irq+0x78/0x1b8 [ 67.048651][ C1] call_on_irq_stack+0x30/0x48 [ 67.049291][ C1] do_interrupt_handler+0x6c/0x88 [ 67.050000][ C1] el1_interrupt+0x30/0x58 [ 67.050647][ C1] el1h_64_irq_handler+0x18/0x24 [ 67.051301][ C1] el1h_64_irq+0x78/0x7c [ 67.051942][ C1] __local_bh_enable_ip+0x204/0x37c [ 67.052627][ C1] local_bh_enable+0x28/0x34 [ 67.053232][ C1] fpsimd_preserve_current_state+0xa8/0x164 [ 67.053979][ C1] arch_dup_task_struct+0x54/0x164 [ 67.054622][ C1] dup_task_struct+0x358/0xc24 [ 67.055327][ C1] copy_process+0x4e0/0x3734 [ 67.055939][ C1] kernel_clone+0x1ec/0xa10 [ 67.056531][ C1] __arm64_sys_clone+0x154/0x1c0 [ 67.057225][ C1] invoke_syscall+0x98/0x28c [ 67.057842][ C1] el0_svc_common+0x13c/0x258 [ 67.058511][ C1] do_el0_svc+0x5c/0x140 [ 67.059058][ C1] el0_svc+0x78/0x1d0 [ 67.059610][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 67.060348][ C1] el0t_64_sync+0x1a0/0x1a4 [ 67.061025][ C1] irq event stamp: 180908 [ 67.061577][ C1] hardirqs last enabled at (180907): [] __local_bh_enable_ip+0x1f8/0x37c [ 67.062976][ C1] hardirqs last disabled at (180908): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.064350][ C1] softirqs last enabled at (180906): [] local_bh_enable+0x10/0x34 [ 67.065660][ C1] softirqs last disabled at (180904): [] local_bh_disable+0x10/0x34 [ 67.066963][ C1] ---[ end trace a72683cc467bd4a5 ]--- [ 67.100134][ T4722] loop0: detected capacity change from 0 to 128 [ 67.103126][ T4722] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.104724][ T4722] Bad inode number on dev loop0: 2 is out of range [ 67.105851][ T4722] SysV FS: get root inode failed [ 67.107009][ T4722] oldfs: cannot read superblock [ 67.115773][ C0] ------------[ cut here ]------------ [ 67.116685][ C0] VFS: brelse: Trying to free free buffer [ 67.117626][ C0] WARNING: CPU: 0 PID: 4723 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.119002][ C0] Modules linked in: [ 67.119583][ C0] CPU: 0 PID: 4723 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.120942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.122392][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.123505][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 67.124318][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 67.125031][ C0] sp : ffff800008007df0 [ 67.125610][ C0] x29: ffff800008007df0 x28: ffff0000cce99b40 x27: 1fffe000341d085c [ 67.126758][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 67.127855][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e28dfc28 [ 67.128976][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 67.130241][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 67.131430][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 67.132626][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 3507bfc955876c00 [ 67.133793][ C0] x8 : 3507bfc955876c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.135032][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.136166][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 67.137317][ C0] Call trace: [ 67.137809][ C0] invalidate_bh_lru+0x128/0x22c [ 67.138484][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 67.139392][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.140302][ C0] ipi_handler+0x10c/0x70c [ 67.140895][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 67.141606][ C0] handle_domain_irq+0x148/0x200 [ 67.142246][ C0] gic_handle_irq+0x78/0x1b8 [ 67.142882][ C0] call_on_irq_stack+0x30/0x48 [ 67.143544][ C0] do_interrupt_handler+0x6c/0x88 [ 67.144241][ C0] el1_interrupt+0x30/0x58 [ 67.144885][ C0] el1h_64_irq_handler+0x18/0x24 [ 67.145506][ C0] el1h_64_irq+0x78/0x7c [ 67.146091][ C0] lock_acquire+0x234/0x618 [ 67.146791][ C0] down_write_nested+0xc0/0x130 [ 67.147477][ C0] filename_create+0x1b0/0x3a8 [ 67.148152][ C0] do_symlinkat+0xc8/0x5b4 [ 67.148769][ C0] __arm64_sys_symlinkat+0xa4/0xbc [ 67.149505][ C0] invoke_syscall+0x98/0x28c [ 67.150154][ C0] el0_svc_common+0x13c/0x258 [ 67.150827][ C0] do_el0_svc+0x5c/0x140 [ 67.151493][ C0] el0_svc+0x78/0x1d0 [ 67.152028][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 67.152732][ C0] el0t_64_sync+0x1a0/0x1a4 [ 67.153352][ C0] irq event stamp: 598 [ 67.153911][ C0] hardirqs last enabled at (597): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 67.155393][ C0] hardirqs last disabled at (598): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.156732][ C0] softirqs last enabled at (552): [] local_bh_enable+0x10/0x34 [ 67.158140][ C0] softirqs last disabled at (550): [] local_bh_disable+0x10/0x34 [ 67.159415][ C0] ---[ end trace a72683cc467bd4a6 ]--- [ 67.197112][ T4724] loop0: detected capacity change from 0 to 128 [ 67.239181][ T4724] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.240360][ T4724] Bad inode number on dev loop0: 2 is out of range [ 67.241286][ T4724] SysV FS: get root inode failed [ 67.242004][ T4724] oldfs: cannot read superblock [ 67.251595][ T4708] ------------[ cut here ]------------ [ 67.252449][ T4708] VFS: brelse: Trying to free free buffer [ 67.253390][ T4708] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.254757][ T4708] Modules linked in: [ 67.255367][ T4708] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 67.256533][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.257934][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.259021][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 67.259773][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 67.260528][ T4708] sp : ffff80001fc177d0 [ 67.261152][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 67.262294][ T4708] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 67.263402][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000cfc0ac28 [ 67.264574][ T4708] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 67.265798][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 67.266969][ T4708] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 67.268183][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 67.269287][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.270495][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.271715][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 67.272884][ T4708] Call trace: [ 67.273359][ T4708] invalidate_bh_lru+0x128/0x22c [ 67.274037][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 67.274875][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 67.275596][ T4708] invalidate_bh_lrus+0x34/0x40 [ 67.276266][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 67.277026][ T4708] blkdev_put+0x444/0x6c4 [ 67.277617][ T4708] blkdev_close+0x74/0xb0 [ 67.278257][ T4708] __fput+0x1b8/0x7e8 [ 67.278907][ T4708] ____fput+0x20/0x30 [ 67.279523][ T4708] task_work_run+0x13c/0x1e8 [ 67.280204][ T4708] do_notify_resume+0x2488/0x30a8 [ 67.280883][ T4708] el0_svc+0xf0/0x1d0 [ 67.281421][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 67.282090][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 67.282737][ T4708] irq event stamp: 43432 [ 67.283311][ T4708] hardirqs last enabled at (43431): [] kasan_quarantine_put+0xc4/0x200 [ 67.284708][ T4708] hardirqs last disabled at (43432): [] smp_call_function_many_cond+0xa50/0xec0 [ 67.286194][ T4708] softirqs last enabled at (43160): [] local_bh_enable+0x10/0x34 [ 67.287487][ T4708] softirqs last disabled at (43158): [] local_bh_disable+0x10/0x34 [ 67.288745][ T4708] ---[ end trace a72683cc467bd4a7 ]--- [ 67.316248][ T4726] loop0: detected capacity change from 0 to 128 [ 67.319369][ T4726] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.320638][ T4726] Bad inode number on dev loop0: 2 is out of range [ 67.321582][ T4726] SysV FS: get root inode failed [ 67.322255][ T4726] oldfs: cannot read superblock [ 67.332575][ T4708] ------------[ cut here ]------------ [ 67.333448][ T4708] VFS: brelse: Trying to free free buffer [ 67.334414][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.335628][ T4708] Modules linked in: [ 67.336183][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 67.337415][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.338944][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.339954][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 67.340701][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 67.341441][ T4708] sp : ffff80001fc177d0 [ 67.342021][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 67.343088][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 67.344275][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dee02b40 [ 67.345514][ T4708] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 67.346819][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 67.348034][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 67.349243][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 67.350529][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.351739][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.352836][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 67.354126][ T4708] Call trace: [ 67.354584][ T4708] invalidate_bh_lru+0x128/0x22c [ 67.355224][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 67.356058][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 67.356793][ T4708] invalidate_bh_lrus+0x34/0x40 [ 67.357512][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 67.358239][ T4708] blkdev_put+0x444/0x6c4 [ 67.358798][ T4708] blkdev_close+0x74/0xb0 [ 67.359419][ T4708] __fput+0x1b8/0x7e8 [ 67.359988][ T4708] ____fput+0x20/0x30 [ 67.360513][ T4708] task_work_run+0x13c/0x1e8 [ 67.361127][ T4708] do_notify_resume+0x2488/0x30a8 [ 67.361832][ T4708] el0_svc+0xf0/0x1d0 [ 67.362441][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 67.363088][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 67.363693][ T4708] irq event stamp: 47176 [ 67.364332][ T4708] hardirqs last enabled at (47175): [] kasan_quarantine_put+0xc4/0x200 [ 67.365664][ T4708] hardirqs last disabled at (47176): [] smp_call_function_many_cond+0xa50/0xec0 [ 67.367041][ T4708] softirqs last enabled at (46910): [] local_bh_enable+0x10/0x34 [ 67.368334][ T4708] softirqs last disabled at (46908): [] local_bh_disable+0x10/0x34 [ 67.369775][ T4708] ---[ end trace a72683cc467bd4a8 ]--- [ 67.407037][ T4728] loop0: detected capacity change from 0 to 128 [ 67.410461][ T4728] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.411508][ T4728] Bad inode number on dev loop0: 2 is out of range [ 67.412456][ T4728] SysV FS: get root inode failed [ 67.413310][ T4728] oldfs: cannot read superblock [ 67.417332][ C1] ------------[ cut here ]------------ [ 67.418161][ C1] VFS: brelse: Trying to free free buffer [ 67.418964][ C1] WARNING: CPU: 1 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.420274][ C1] Modules linked in: [ 67.420806][ C1] CPU: 1 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.421993][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.423225][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.424282][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 67.424996][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 67.425775][ C1] sp : ffff800008017df0 [ 67.426346][ C1] x29: ffff800008017df0 x28: ffff0000c8370000 x27: 1fffe000341d4a5c [ 67.427367][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 67.428468][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dee02ee0 [ 67.429565][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 67.430660][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 67.431716][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 67.432876][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : ca04e80e70640500 [ 67.433963][ C1] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.435075][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.436180][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 67.437308][ C1] Call trace: [ 67.437730][ C1] invalidate_bh_lru+0x128/0x22c [ 67.438381][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 67.439160][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.440160][ C1] ipi_handler+0x10c/0x70c [ 67.440842][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 67.441561][ C1] handle_domain_irq+0x148/0x200 [ 67.442259][ C1] gic_handle_irq+0x78/0x1b8 [ 67.442935][ C1] call_on_irq_stack+0x30/0x48 [ 67.443571][ C1] do_interrupt_handler+0x6c/0x88 [ 67.444253][ C1] el1_interrupt+0x30/0x58 [ 67.444893][ C1] el1h_64_irq_handler+0x18/0x24 [ 67.445535][ C1] el1h_64_irq+0x78/0x7c [ 67.446069][ C1] arch_local_irq_restore+0x8/0x10 [ 67.446764][ C1] ___might_sleep+0x48/0x4dc [ 67.447443][ C1] __might_sleep+0x98/0x124 [ 67.448029][ C1] __might_fault+0x80/0x128 [ 67.448675][ C1] filldir64+0x64c/0xa08 [ 67.449248][ C1] dcache_readdir+0x374/0x668 [ 67.449860][ C1] iterate_dir+0x1f0/0x4d0 [ 67.450496][ C1] __arm64_sys_getdents64+0x11c/0x338 [ 67.451303][ C1] invoke_syscall+0x98/0x28c [ 67.451932][ C1] el0_svc_common+0x13c/0x258 [ 67.452583][ C1] do_el0_svc+0x5c/0x140 [ 67.453173][ C1] el0_svc+0x78/0x1d0 [ 67.453686][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 67.454426][ C1] el0t_64_sync+0x1a0/0x1a4 [ 67.455056][ C1] irq event stamp: 191532 [ 67.455658][ C1] hardirqs last enabled at (191531): [] el0_svc_common+0xa0/0x258 [ 67.457053][ C1] hardirqs last disabled at (191532): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.458476][ C1] softirqs last enabled at (191460): [] local_bh_enable+0x10/0x34 [ 67.459838][ C1] softirqs last disabled at (191458): [] local_bh_disable+0x10/0x34 [ 67.461108][ C1] ---[ end trace a72683cc467bd4a9 ]--- [ 67.496301][ T4730] loop0: detected capacity change from 0 to 128 [ 67.584762][ T4730] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.585961][ T4730] Bad inode number on dev loop0: 2 is out of range [ 67.586847][ T4730] SysV FS: get root inode failed [ 67.588898][ T4730] oldfs: cannot read superblock [ 67.598043][ T4708] ------------[ cut here ]------------ [ 67.598951][ T4708] VFS: brelse: Trying to free free buffer [ 67.599907][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.601427][ T4708] Modules linked in: [ 67.601977][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 67.603260][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.604733][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.605945][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 67.606764][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 67.607560][ T4708] sp : ffff80001fc177d0 [ 67.608194][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 67.609443][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 67.610642][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedfe318 [ 67.611919][ T4708] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 67.613296][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 67.614698][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 67.616058][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 67.617346][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.618598][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.619794][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 67.621087][ T4708] Call trace: [ 67.621591][ T4708] invalidate_bh_lru+0x128/0x22c [ 67.622232][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 67.623286][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 67.624037][ T4708] invalidate_bh_lrus+0x34/0x40 [ 67.624740][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 67.625568][ T4708] blkdev_put+0x444/0x6c4 [ 67.626258][ T4708] blkdev_close+0x74/0xb0 [ 67.626872][ T4708] __fput+0x1b8/0x7e8 [ 67.627406][ T4708] ____fput+0x20/0x30 [ 67.628008][ T4708] task_work_run+0x13c/0x1e8 [ 67.628655][ T4708] do_notify_resume+0x2488/0x30a8 [ 67.629415][ T4708] el0_svc+0xf0/0x1d0 [ 67.630011][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 67.630756][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 67.631393][ T4708] irq event stamp: 56024 [ 67.632040][ T4708] hardirqs last enabled at (56023): [] kasan_quarantine_put+0xc4/0x200 [ 67.633469][ T4708] hardirqs last disabled at (56024): [] smp_call_function_many_cond+0xa50/0xec0 [ 67.634935][ T4708] softirqs last enabled at (55744): [] local_bh_enable+0x10/0x34 [ 67.636304][ T4708] softirqs last disabled at (55742): [] local_bh_disable+0x10/0x34 [ 67.637678][ T4708] ---[ end trace a72683cc467bd4aa ]--- [ 67.666503][ T4732] loop0: detected capacity change from 0 to 128 [ 67.706014][ T4732] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.707144][ T4732] Bad inode number on dev loop0: 2 is out of range [ 67.708109][ T4732] SysV FS: get root inode failed [ 67.708923][ T4732] oldfs: cannot read superblock [ 67.715831][ C1] ------------[ cut here ]------------ [ 67.716741][ C1] VFS: brelse: Trying to free free buffer [ 67.717568][ C1] WARNING: CPU: 1 PID: 4367 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.718886][ C1] Modules linked in: [ 67.719447][ C1] CPU: 1 PID: 4367 Comm: syz-execprog Tainted: G W syzkaller #0 [ 67.720750][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.722142][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.723320][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 67.724080][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 67.724900][ C1] sp : ffff800008017df0 [ 67.725532][ C1] x29: ffff800008017df0 x28: ffff0000c8f70000 x27: 1fffe000341d4a5b [ 67.726751][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 67.728131][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedfe6b8 [ 67.729294][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 67.730441][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 67.731762][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 67.732977][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 3d9aee3845ad1300 [ 67.734200][ C1] x8 : 3d9aee3845ad1300 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.735388][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.736739][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 67.737962][ C1] Call trace: [ 67.738462][ C1] invalidate_bh_lru+0x128/0x22c [ 67.739241][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 67.740172][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.741276][ C1] ipi_handler+0x10c/0x70c [ 67.741942][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 67.742725][ C1] handle_domain_irq+0x148/0x200 [ 67.743429][ C1] gic_handle_irq+0x78/0x1b8 [ 67.744042][ C1] call_on_irq_stack+0x30/0x48 [ 67.744682][ C1] do_interrupt_handler+0x6c/0x88 [ 67.745526][ C1] el1_interrupt+0x30/0x58 [ 67.746183][ C1] el1h_64_irq_handler+0x18/0x24 [ 67.746907][ C1] el1h_64_irq+0x78/0x7c [ 67.747501][ C1] arch_local_irq_restore+0x8/0x10 [ 67.748243][ C1] ___might_sleep+0x98/0x4dc [ 67.748912][ C1] __might_sleep+0x98/0x124 [ 67.749544][ C1] __mutex_lock_common+0xd4/0x1ea4 [ 67.750242][ C1] mutex_lock_nested+0xac/0x11c [ 67.751002][ C1] ep_poll+0x598/0x1650 [ 67.751625][ C1] do_epoll_wait+0x19c/0x204 [ 67.752302][ C1] do_epoll_pwait+0x70/0x194 [ 67.752999][ C1] __arm64_sys_epoll_pwait+0x200/0x258 [ 67.753841][ C1] invoke_syscall+0x98/0x28c [ 67.754498][ C1] el0_svc_common+0x13c/0x258 [ 67.755135][ C1] do_el0_svc+0x5c/0x140 [ 67.755728][ C1] el0_svc+0x78/0x1d0 [ 67.756341][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 67.757141][ C1] el0t_64_sync+0x1a0/0x1a4 [ 67.757806][ C1] irq event stamp: 691138 [ 67.758471][ C1] hardirqs last enabled at (691137): [] __free_object+0x1e8/0x878 [ 67.759924][ C1] hardirqs last disabled at (691138): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.761323][ C1] softirqs last enabled at (691106): [] release_sock+0x1d0/0x258 [ 67.762832][ C1] softirqs last disabled at (691104): [] release_sock+0x34/0x258 [ 67.764284][ C1] ---[ end trace a72683cc467bd4ab ]--- [ 67.826190][ T4734] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.827487][ T4734] Bad inode number on dev loop0: 2 is out of range [ 67.828411][ T4734] SysV FS: get root inode failed [ 67.829092][ T4734] oldfs: cannot read superblock [ 67.853539][ T4708] ------------[ cut here ]------------ [ 67.854396][ T4708] VFS: brelse: Trying to free free buffer [ 67.855249][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.856488][ T4708] Modules linked in: [ 67.857044][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 67.858324][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.859759][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.860984][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 67.861768][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 67.862594][ T4708] sp : ffff80001fc177d0 [ 67.863224][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5c [ 67.864343][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 67.865552][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedfea58 [ 67.866750][ T4708] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 67.867981][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 67.869295][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 67.870357][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 67.871511][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.872836][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.874021][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 67.875220][ T4708] Call trace: [ 67.875743][ T4708] invalidate_bh_lru+0x128/0x22c [ 67.876470][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 67.877263][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 67.878014][ T4708] invalidate_bh_lrus+0x34/0x40 [ 67.878692][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 67.879488][ T4708] blkdev_put+0x444/0x6c4 [ 67.880084][ T4708] blkdev_close+0x74/0xb0 [ 67.880642][ T4708] __fput+0x1b8/0x7e8 [ 67.881221][ T4708] ____fput+0x20/0x30 [ 67.881870][ T4708] task_work_run+0x13c/0x1e8 [ 67.882564][ T4708] do_notify_resume+0x2488/0x30a8 [ 67.883279][ T4708] el0_svc+0xf0/0x1d0 [ 67.883830][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 67.884639][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 67.885257][ T4708] irq event stamp: 68632 [ 67.885850][ T4708] hardirqs last enabled at (68631): [] kasan_quarantine_put+0xc4/0x200 [ 67.887150][ T4708] hardirqs last disabled at (68632): [] smp_call_function_many_cond+0xa50/0xec0 [ 67.888661][ T4708] softirqs last enabled at (68618): [] local_bh_enable+0x10/0x34 [ 67.889962][ T4708] softirqs last disabled at (68616): [] local_bh_disable+0x10/0x34 [ 67.891283][ T4708] ---[ end trace a72683cc467bd4ac ]--- [ 67.939086][ T4738] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.940308][ T4738] Bad inode number on dev loop0: 2 is out of range [ 67.941400][ T4738] SysV FS: get root inode failed [ 67.942083][ T4738] oldfs: cannot read superblock [ 67.947644][ C0] ------------[ cut here ]------------ [ 67.948406][ C0] VFS: brelse: Trying to free free buffer [ 67.949197][ C0] WARNING: CPU: 0 PID: 4738 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.950454][ C0] Modules linked in: [ 67.951112][ C0] CPU: 0 PID: 4738 Comm: syz.0.28 Tainted: G W syzkaller #0 [ 67.952290][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.953667][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.954785][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 67.955444][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 67.956123][ C0] sp : ffff800008007df0 [ 67.956705][ C0] x29: ffff800008007df0 x28: ffff0000c237d1c0 x27: 1fffe000341d085c [ 67.957922][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 67.959078][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f0060 [ 67.960110][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 67.961182][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 67.962275][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 67.963289][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 62177904f8923600 [ 67.964477][ C0] x8 : 62177904f8923600 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.965589][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.966615][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 67.967693][ C0] Call trace: [ 67.968106][ C0] invalidate_bh_lru+0x128/0x22c [ 67.968784][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 67.969686][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.970643][ C0] ipi_handler+0x10c/0x70c [ 67.971220][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 67.971963][ C0] handle_domain_irq+0x148/0x200 [ 67.972634][ C0] gic_handle_irq+0x78/0x1b8 [ 67.973214][ C0] call_on_irq_stack+0x30/0x48 [ 67.973808][ C0] do_interrupt_handler+0x6c/0x88 [ 67.974482][ C0] el1_interrupt+0x30/0x58 [ 67.975019][ C0] el1h_64_irq_handler+0x18/0x24 [ 67.975681][ C0] el1h_64_irq+0x78/0x7c [ 67.976238][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 67.976989][ C0] debug_check_no_obj_freed+0x39c/0x454 [ 67.977695][ C0] slab_free_freelist_hook+0x9c/0x1e4 [ 67.978479][ C0] kmem_cache_free+0xdc/0x3b4 [ 67.979090][ C0] pgtable_pmd_page_dtor+0x78/0x200 [ 67.979823][ C0] free_pgd_range+0x7a4/0xb5c [ 67.980496][ C0] free_pgtables+0x244/0x280 [ 67.981096][ C0] exit_mmap+0x2d8/0x510 [ 67.981629][ C0] __mmput+0xe8/0x3a0 [ 67.982146][ C0] mmput+0x80/0xc0 [ 67.982705][ C0] exit_mm+0x5dc/0x704 [ 67.983287][ C0] do_exit+0x4bc/0x1f54 [ 67.983895][ C0] do_group_exit+0x104/0x274 [ 67.984513][ C0] get_signal+0x638/0x13b0 [ 67.985166][ C0] do_notify_resume+0x344/0x30a8 [ 67.985831][ C0] el0_svc+0xf0/0x1d0 [ 67.986381][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 67.987044][ C0] el0t_64_sync+0x1a0/0x1a4 [ 67.987636][ C0] irq event stamp: 2548 [ 67.988204][ C0] hardirqs last enabled at (2547): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 67.989564][ C0] hardirqs last disabled at (2548): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.991079][ C0] softirqs last enabled at (1220): [] local_bh_enable+0x10/0x34 [ 67.992307][ C0] softirqs last disabled at (1218): [] local_bh_disable+0x10/0x34 [ 67.993584][ C0] ---[ end trace a72683cc467bd4ad ]--- [ 68.085129][ T4740] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.086275][ T4740] Bad inode number on dev loop0: 2 is out of range [ 68.087197][ T4740] SysV FS: get root inode failed [ 68.087919][ T4740] oldfs: cannot read superblock [ 68.095619][ C1] ------------[ cut here ]------------ [ 68.096500][ C1] VFS: brelse: Trying to free free buffer [ 68.097320][ C1] WARNING: CPU: 1 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.098609][ C1] Modules linked in: [ 68.099152][ C1] CPU: 1 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.100540][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.101812][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.102847][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 68.103643][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 68.104365][ C1] sp : ffff800008017df0 [ 68.104893][ C1] x29: ffff800008017df0 x28: ffff0000c8370000 x27: 1fffe000341d4a5b [ 68.106223][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 68.107346][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedfedf8 [ 68.108404][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.109531][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.110715][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 68.111864][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : ca04e80e70640500 [ 68.112991][ C1] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.114071][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.115133][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.116250][ C1] Call trace: [ 68.116688][ C1] invalidate_bh_lru+0x128/0x22c [ 68.117362][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 68.118147][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.119077][ C1] ipi_handler+0x10c/0x70c [ 68.119652][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 68.120351][ C1] handle_domain_irq+0x148/0x200 [ 68.121009][ C1] gic_handle_irq+0x78/0x1b8 [ 68.121632][ C1] call_on_irq_stack+0x30/0x48 [ 68.122291][ C1] do_interrupt_handler+0x6c/0x88 [ 68.122956][ C1] el1_interrupt+0x30/0x58 [ 68.123554][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.124167][ C1] el1h_64_irq+0x78/0x7c [ 68.124700][ C1] el0_svc_common+0xac/0x258 [ 68.125350][ C1] do_el0_svc+0x5c/0x140 [ 68.125893][ C1] el0_svc+0x78/0x1d0 [ 68.126426][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 68.127122][ C1] el0t_64_sync+0x1a0/0x1a4 [ 68.127801][ C1] irq event stamp: 210756 [ 68.128431][ C1] hardirqs last enabled at (210755): [] el0_svc_common+0xa0/0x258 [ 68.129830][ C1] hardirqs last disabled at (210756): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.131153][ C1] softirqs last enabled at (210738): [] local_bh_enable+0x10/0x34 [ 68.132566][ C1] softirqs last disabled at (210736): [] local_bh_disable+0x10/0x34 [ 68.133882][ C1] ---[ end trace a72683cc467bd4ae ]--- [ 68.185469][ T4742] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.186588][ T4742] Bad inode number on dev loop0: 2 is out of range [ 68.187557][ T4742] SysV FS: get root inode failed [ 68.188264][ T4742] oldfs: cannot read superblock [ 68.196650][ C0] ------------[ cut here ]------------ [ 68.197434][ C0] VFS: brelse: Trying to free free buffer [ 68.198168][ C0] WARNING: CPU: 0 PID: 4743 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.199372][ C0] Modules linked in: [ 68.199907][ C0] CPU: 0 PID: 4743 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.201065][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.202413][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.203389][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.204066][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.204801][ C0] sp : ffff800008007df0 [ 68.205412][ C0] x29: ffff800008007df0 x28: ffff0000ccf8d1c0 x27: 1fffe000341d085b [ 68.206592][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 68.207757][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f0400 [ 68.208853][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.210101][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.211148][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.212255][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 3037a10954c12a00 [ 68.213398][ C0] x8 : 3037a10954c12a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.214462][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.215527][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.216518][ C0] Call trace: [ 68.216939][ C0] invalidate_bh_lru+0x128/0x22c [ 68.217638][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.218457][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.219365][ C0] ipi_handler+0x10c/0x70c [ 68.220007][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.220721][ C0] handle_domain_irq+0x148/0x200 [ 68.221412][ C0] gic_handle_irq+0x78/0x1b8 [ 68.222078][ C0] call_on_irq_stack+0x30/0x48 [ 68.222722][ C0] do_interrupt_handler+0x6c/0x88 [ 68.223374][ C0] el1_interrupt+0x30/0x58 [ 68.224000][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.224765][ C0] el1h_64_irq+0x78/0x7c [ 68.225385][ C0] kmem_cache_alloc+0xe8/0x3d8 [ 68.226022][ C0] proc_alloc_inode+0x24/0xb0 [ 68.226711][ C0] new_inode_pseudo+0x68/0x200 [ 68.227399][ C0] new_inode+0x38/0x174 [ 68.227973][ C0] proc_pid_make_inode+0x30/0x1a8 [ 68.228619][ C0] proc_pid_instantiate+0x5c/0x27c [ 68.229320][ C0] proc_pid_lookup+0x2e0/0x454 [ 68.229949][ C0] proc_root_lookup+0x30/0x68 [ 68.230620][ C0] __lookup_slow+0x25c/0x39c [ 68.231345][ C0] lookup_slow+0x60/0x84 [ 68.231956][ C0] walk_component+0x2b8/0x3b8 [ 68.232545][ C0] link_path_walk+0x5a0/0xbd4 [ 68.233245][ C0] path_openat+0x1c0/0x2808 [ 68.233888][ C0] do_filp_open+0x188/0x370 [ 68.234471][ C0] do_sys_openat2+0x134/0x3fc [ 68.235187][ C0] __arm64_sys_openat+0x11c/0x150 [ 68.235901][ C0] invoke_syscall+0x98/0x28c [ 68.236518][ C0] el0_svc_common+0x13c/0x258 [ 68.237125][ C0] do_el0_svc+0x5c/0x140 [ 68.237752][ C0] el0_svc+0x78/0x1d0 [ 68.238297][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 68.239004][ C0] el0t_64_sync+0x1a0/0x1a4 [ 68.239636][ C0] irq event stamp: 746 [ 68.240126][ C0] hardirqs last enabled at (745): [] read_seqbegin+0x1fc/0x300 [ 68.241330][ C0] hardirqs last disabled at (746): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.242657][ C0] softirqs last enabled at (730): [] local_bh_enable+0x10/0x34 [ 68.243986][ C0] softirqs last disabled at (728): [] local_bh_disable+0x10/0x34 [ 68.245177][ C0] ---[ end trace a72683cc467bd4af ]--- [ 68.329462][ T4744] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.330591][ T4744] Bad inode number on dev loop0: 2 is out of range [ 68.331555][ T4744] SysV FS: get root inode failed [ 68.332226][ T4744] oldfs: cannot read superblock [ 68.342678][ T4708] ------------[ cut here ]------------ [ 68.343483][ T4708] VFS: brelse: Trying to free free buffer [ 68.344324][ T4708] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.345495][ T4708] Modules linked in: [ 68.346035][ T4708] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 68.347254][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.348638][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.349746][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 68.350504][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 68.351313][ T4708] sp : ffff80001fc177d0 [ 68.351941][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 68.353077][ T4708] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 68.354246][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f07a0 [ 68.355331][ T4708] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 68.356464][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 68.357564][ T4708] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.358699][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 68.359774][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.360943][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.362048][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.363168][ T4708] Call trace: [ 68.363590][ T4708] invalidate_bh_lru+0x128/0x22c [ 68.364242][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 68.365038][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.365723][ T4708] invalidate_bh_lrus+0x34/0x40 [ 68.366393][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 68.367114][ T4708] blkdev_put+0x444/0x6c4 [ 68.367665][ T4708] blkdev_close+0x74/0xb0 [ 68.368265][ T4708] __fput+0x1b8/0x7e8 [ 68.368883][ T4708] ____fput+0x20/0x30 [ 68.369382][ T4708] task_work_run+0x13c/0x1e8 [ 68.369966][ T4708] do_notify_resume+0x2488/0x30a8 [ 68.370662][ T4708] el0_svc+0xf0/0x1d0 [ 68.371201][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 68.371904][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 68.372482][ T4708] irq event stamp: 89610 [ 68.373055][ T4708] hardirqs last enabled at (89609): [] kasan_quarantine_put+0xc4/0x200 [ 68.374350][ T4708] hardirqs last disabled at (89610): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.375749][ T4708] softirqs last enabled at (89344): [] local_bh_enable+0x10/0x34 [ 68.377034][ T4708] softirqs last disabled at (89342): [] local_bh_disable+0x10/0x34 [ 68.378279][ T4708] ---[ end trace a72683cc467bd4b0 ]--- [ 68.410550][ T4746] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.411601][ T4746] Bad inode number on dev loop0: 2 is out of range [ 68.412472][ T4746] SysV FS: get root inode failed [ 68.413167][ T4746] oldfs: cannot read superblock [ 68.416928][ C0] ------------[ cut here ]------------ [ 68.417719][ C0] VFS: brelse: Trying to free free buffer [ 68.418604][ C0] WARNING: CPU: 0 PID: 4746 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.419713][ C0] Modules linked in: [ 68.420230][ C0] CPU: 0 PID: 4746 Comm: syz.0.32 Tainted: G W syzkaller #0 [ 68.421376][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.422749][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.423774][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.424469][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.425201][ C0] sp : ffff800008007df0 [ 68.425763][ C0] x29: ffff800008007df0 x28: ffff0000d7230000 x27: 1fffe000341d085c [ 68.427026][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 68.428075][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f0b40 [ 68.429158][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.430209][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.431286][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.432435][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 9ad9853df6b56c00 [ 68.433530][ C0] x8 : 9ad9853df6b56c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.434764][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.435913][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.437175][ C0] Call trace: [ 68.437649][ C0] invalidate_bh_lru+0x128/0x22c [ 68.438282][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.439083][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.439977][ C0] ipi_handler+0x10c/0x70c [ 68.440544][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.441292][ C0] handle_domain_irq+0x148/0x200 [ 68.441975][ C0] gic_handle_irq+0x78/0x1b8 [ 68.442623][ C0] call_on_irq_stack+0x30/0x48 [ 68.443302][ C0] do_interrupt_handler+0x6c/0x88 [ 68.443942][ C0] el1_interrupt+0x30/0x58 [ 68.444592][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.445257][ C0] el1h_64_irq+0x78/0x7c [ 68.445864][ C0] vma_interval_tree_remove+0x734/0x900 [ 68.446639][ C0] unlink_file_vma+0xe4/0x128 [ 68.447286][ C0] free_pgtables+0x15c/0x280 [ 68.447932][ C0] exit_mmap+0x2d8/0x510 [ 68.448503][ C0] __mmput+0xe8/0x3a0 [ 68.448986][ C0] mmput+0x80/0xc0 [ 68.449580][ C0] exit_mm+0x5dc/0x704 [ 68.450214][ C0] do_exit+0x4bc/0x1f54 [ 68.450824][ C0] do_group_exit+0x104/0x274 [ 68.451465][ C0] get_signal+0x638/0x13b0 [ 68.452085][ C0] do_notify_resume+0x344/0x30a8 [ 68.452858][ C0] el0_svc+0xf0/0x1d0 [ 68.453378][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 68.454100][ C0] el0t_64_sync+0x1a0/0x1a4 [ 68.454751][ C0] irq event stamp: 2988 [ 68.455343][ C0] hardirqs last enabled at (2987): [] kasan_quarantine_put+0xc4/0x200 [ 68.456698][ C0] hardirqs last disabled at (2988): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.458002][ C0] softirqs last enabled at (1640): [] handle_softirqs+0xa70/0xc14 [ 68.459270][ C0] softirqs last disabled at (1621): [] __irq_exit_rcu+0x240/0x434 [ 68.460657][ C0] ---[ end trace a72683cc467bd4b1 ]--- [ 68.546246][ T4748] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.547475][ T4748] Bad inode number on dev loop0: 2 is out of range [ 68.548469][ T4748] SysV FS: get root inode failed [ 68.549216][ T4748] oldfs: cannot read superblock [ 68.556386][ C1] ------------[ cut here ]------------ [ 68.557190][ C1] VFS: brelse: Trying to free free buffer [ 68.558046][ C1] WARNING: CPU: 1 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.559255][ C1] Modules linked in: [ 68.559797][ C1] CPU: 1 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.561000][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.562357][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.563544][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 68.564312][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 68.565125][ C1] sp : ffff800008017df0 [ 68.565802][ C1] x29: ffff800008017df0 x28: ffff0000c8370000 x27: 1fffe000341d4a5c [ 68.566999][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 68.568093][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedfa230 [ 68.569307][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.570406][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.571532][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 68.572877][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : ca04e80e70640500 [ 68.574094][ C1] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.575335][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.576525][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.577703][ C1] Call trace: [ 68.578151][ C1] invalidate_bh_lru+0x128/0x22c [ 68.578825][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 68.579674][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.580732][ C1] ipi_handler+0x10c/0x70c [ 68.581366][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 68.582193][ C1] handle_domain_irq+0x148/0x200 [ 68.583006][ C1] gic_handle_irq+0x78/0x1b8 [ 68.583711][ C1] call_on_irq_stack+0x30/0x48 [ 68.584424][ C1] do_interrupt_handler+0x6c/0x88 [ 68.585123][ C1] el1_interrupt+0x30/0x58 [ 68.585819][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.586533][ C1] el1h_64_irq+0x78/0x7c [ 68.587152][ C1] stack_trace_consume_entry+0xe0/0x20c [ 68.588319][ C1] arch_stack_walk+0x1f4/0x2c0 [ 68.588998][ C1] stack_trace_save+0x9c/0xf0 [ 68.589744][ C1] __kasan_slab_alloc+0x8c/0xcc [ 68.590594][ C1] slab_post_alloc_hook+0x74/0x3f8 [ 68.591367][ C1] kmem_cache_alloc+0x1dc/0x3d8 [ 68.592043][ C1] pte_alloc_one+0x78/0x254 [ 68.592751][ C1] __pte_alloc+0x34/0x214 [ 68.593349][ C1] copy_page_range+0x1e44/0x2348 [ 68.594151][ C1] copy_mm+0x9f0/0x1070 [ 68.594805][ C1] copy_process+0x15fc/0x3734 [ 68.595459][ C1] kernel_clone+0x1ec/0xa10 [ 68.596078][ C1] __arm64_sys_clone+0x154/0x1c0 [ 68.596785][ C1] invoke_syscall+0x98/0x28c [ 68.597464][ C1] el0_svc_common+0x13c/0x258 [ 68.598195][ C1] do_el0_svc+0x5c/0x140 [ 68.598835][ C1] el0_svc+0x78/0x1d0 [ 68.599409][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 68.600091][ C1] el0t_64_sync+0x1a0/0x1a4 [ 68.600819][ C1] irq event stamp: 226188 [ 68.601442][ C1] hardirqs last enabled at (226187): [] ___slab_alloc+0xc10/0xd84 [ 68.603051][ C1] hardirqs last disabled at (226188): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.604683][ C1] softirqs last enabled at (226024): [] local_bh_enable+0x10/0x34 [ 68.606006][ C1] softirqs last disabled at (226022): [] local_bh_disable+0x10/0x34 [ 68.607358][ C1] ---[ end trace a72683cc467bd4b2 ]--- [ 68.689340][ T4750] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.690403][ T4750] Bad inode number on dev loop0: 2 is out of range [ 68.691276][ T4750] SysV FS: get root inode failed [ 68.691937][ T4750] oldfs: cannot read superblock [ 68.694732][ C0] ------------[ cut here ]------------ [ 68.695628][ C0] VFS: brelse: Trying to free free buffer [ 68.696474][ C0] WARNING: CPU: 0 PID: 4371 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.697675][ C0] Modules linked in: [ 68.698269][ C0] CPU: 0 PID: 4371 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.699905][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.701459][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.702549][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.703395][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.704343][ C0] sp : ffff800008007df0 [ 68.705063][ C0] x29: ffff800008007df0 x28: ffff0000cc553680 x27: 1fffe000341d085c [ 68.706375][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 68.707535][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f0ee0 [ 68.708654][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.709748][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.710886][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.712141][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 0a4df80f999cee00 [ 68.713360][ C0] x8 : 0a4df80f999cee00 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.714704][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.715866][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.716959][ C0] Call trace: [ 68.717419][ C0] invalidate_bh_lru+0x128/0x22c [ 68.718147][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.719061][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.720097][ C0] ipi_handler+0x10c/0x70c [ 68.720846][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.721640][ C0] handle_domain_irq+0x148/0x200 [ 68.722348][ C0] gic_handle_irq+0x78/0x1b8 [ 68.723130][ C0] call_on_irq_stack+0x30/0x48 [ 68.723808][ C0] do_interrupt_handler+0x6c/0x88 [ 68.724552][ C0] el1_interrupt+0x30/0x58 [ 68.725249][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.726028][ C0] el1h_64_irq+0x78/0x7c [ 68.726566][ C0] __fget_light+0x11c/0x1e0 [ 68.727210][ C0] __fdget+0x24/0x34 [ 68.727803][ C0] do_select+0xb7c/0x1298 [ 68.728343][ C0] core_sys_select+0x588/0x718 [ 68.729024][ C0] __arm64_sys_pselect6+0x4c4/0x5d8 [ 68.729819][ C0] invoke_syscall+0x98/0x28c [ 68.730489][ C0] el0_svc_common+0x13c/0x258 [ 68.731145][ C0] do_el0_svc+0x5c/0x140 [ 68.731806][ C0] el0_svc+0x78/0x1d0 [ 68.732345][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 68.733137][ C0] el0t_64_sync+0x1a0/0x1a4 [ 68.733778][ C0] irq event stamp: 598674 [ 68.734388][ C0] hardirqs last enabled at (598673): [] __free_object+0x1e8/0x878 [ 68.735668][ C0] hardirqs last disabled at (598674): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.737098][ C0] softirqs last enabled at (598642): [] local_bh_enable+0x10/0x34 [ 68.738356][ C0] softirqs last disabled at (598640): [] local_bh_disable+0x10/0x34 [ 68.739590][ C0] ---[ end trace a72683cc467bd4b3 ]--- [ 68.753416][ T4198] Bluetooth: hci0: command 0x0419 tx timeout [ 68.784771][ T4752] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.786033][ T4752] Bad inode number on dev loop0: 2 is out of range [ 68.787143][ T4752] SysV FS: get root inode failed [ 68.787997][ T4752] oldfs: cannot read superblock [ 68.790466][ C1] ------------[ cut here ]------------ [ 68.791269][ C1] VFS: brelse: Trying to free free buffer [ 68.792086][ C1] WARNING: CPU: 1 PID: 4752 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.793425][ C1] Modules linked in: [ 68.793984][ C1] CPU: 1 PID: 4752 Comm: syz.0.35 Tainted: G W syzkaller #0 [ 68.795197][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.796788][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.797959][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 68.798781][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 68.799553][ C1] sp : ffff800008017df0 [ 68.800152][ C1] x29: ffff800008017df0 x28: ffff0000ce1e3680 x27: 1fffe000341d4a5c [ 68.801306][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 68.802496][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedfa5d0 [ 68.803611][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 68.804626][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 68.805791][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 68.807001][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : db40d25119156b00 [ 68.808123][ C1] x8 : db40d25119156b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.809345][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.810586][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 68.811860][ C1] Call trace: [ 68.812370][ C1] invalidate_bh_lru+0x128/0x22c [ 68.813071][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 68.814097][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.815320][ C1] ipi_handler+0x10c/0x70c [ 68.816108][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 68.817021][ C1] handle_domain_irq+0x148/0x200 [ 68.817753][ C1] gic_handle_irq+0x78/0x1b8 [ 68.818415][ C1] call_on_irq_stack+0x30/0x48 [ 68.819143][ C1] do_interrupt_handler+0x6c/0x88 [ 68.819921][ C1] el1_interrupt+0x30/0x58 [ 68.820558][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.821228][ C1] el1h_64_irq+0x78/0x7c [ 68.821797][ C1] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 68.822712][ C1] debug_check_no_obj_freed+0x39c/0x454 [ 68.823516][ C1] free_unref_page_prepare+0x2fc/0xa94 [ 68.824243][ C1] free_unref_page_list+0xdc/0x740 [ 68.824984][ C1] release_pages+0x13a0/0x16c0 [ 68.825613][ C1] free_pages_and_swap_cache+0x9c/0xb4 [ 68.826419][ C1] tlb_finish_mmu+0x1a0/0x37c [ 68.827064][ C1] exit_mmap+0x2e0/0x510 [ 68.827724][ C1] __mmput+0xe8/0x3a0 [ 68.828270][ C1] mmput+0x80/0xc0 [ 68.828770][ C1] exit_mm+0x5dc/0x704 [ 68.829413][ C1] do_exit+0x4bc/0x1f54 [ 68.829995][ C1] do_group_exit+0x104/0x274 [ 68.830676][ C1] get_signal+0x638/0x13b0 [ 68.831360][ C1] do_notify_resume+0x344/0x30a8 [ 68.831982][ C1] el0_svc+0xf0/0x1d0 [ 68.832571][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 68.833328][ C1] el0t_64_sync+0x1a0/0x1a4 [ 68.833916][ C1] irq event stamp: 3124 [ 68.834427][ C1] hardirqs last enabled at (3123): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 68.835796][ C1] hardirqs last disabled at (3124): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.837186][ C1] softirqs last enabled at (1784): [] local_bh_enable+0x10/0x34 [ 68.838629][ C1] softirqs last disabled at (1782): [] local_bh_disable+0x10/0x34 [ 68.839887][ C1] ---[ end trace a72683cc467bd4b4 ]--- [ 68.884135][ T4754] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.885300][ T4754] Bad inode number on dev loop0: 2 is out of range [ 68.886265][ T4754] SysV FS: get root inode failed [ 68.886962][ T4754] oldfs: cannot read superblock [ 68.890936][ T4708] ------------[ cut here ]------------ [ 68.891823][ T4708] VFS: brelse: Trying to free free buffer [ 68.892705][ T4708] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.893839][ T4708] Modules linked in: [ 68.894347][ T4708] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 68.895581][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.896962][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.897994][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 68.898793][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 68.899612][ T4708] sp : ffff80001fc177d0 [ 68.900184][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 68.901303][ T4708] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 68.902402][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeb5318 [ 68.903497][ T4708] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 68.904636][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 68.905754][ T4708] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.906880][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 68.907961][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.909109][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.910205][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.911316][ T4708] Call trace: [ 68.911717][ T4708] invalidate_bh_lru+0x128/0x22c [ 68.912354][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 68.913144][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.913856][ T4708] invalidate_bh_lrus+0x34/0x40 [ 68.914514][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 68.915293][ T4708] blkdev_put+0x444/0x6c4 [ 68.915876][ T4708] blkdev_close+0x74/0xb0 [ 68.916516][ T4708] __fput+0x1b8/0x7e8 [ 68.917076][ T4708] ____fput+0x20/0x30 [ 68.917672][ T4708] task_work_run+0x13c/0x1e8 [ 68.918219][ T4708] do_notify_resume+0x2488/0x30a8 [ 68.918938][ T4708] el0_svc+0xf0/0x1d0 [ 68.919527][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 68.920210][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 68.920830][ T4708] irq event stamp: 113226 [ 68.921421][ T4708] hardirqs last enabled at (113225): [] kasan_quarantine_put+0xc4/0x200 [ 68.922732][ T4708] hardirqs last disabled at (113226): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.924111][ T4708] softirqs last enabled at (112968): [] local_bh_enable+0x10/0x34 [ 68.925382][ T4708] softirqs last disabled at (112966): [] local_bh_disable+0x10/0x34 [ 68.926705][ T4708] ---[ end trace a72683cc467bd4b5 ]--- [ 69.025945][ T4756] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.027086][ T4756] Bad inode number on dev loop0: 2 is out of range [ 69.028181][ T4756] SysV FS: get root inode failed [ 69.028794][ T4756] oldfs: cannot read superblock [ 69.055827][ C0] ------------[ cut here ]------------ [ 69.056725][ C0] VFS: brelse: Trying to free free buffer [ 69.057546][ C0] WARNING: CPU: 0 PID: 4760 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.058817][ C0] Modules linked in: [ 69.059339][ C0] CPU: 0 PID: 4760 Comm: syz.0.39 Tainted: G W syzkaller #0 [ 69.060526][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.062024][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.063166][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.063934][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.064650][ C0] sp : ffff800008007df0 [ 69.065208][ C0] x29: ffff800008007df0 x28: ffff0000d7193680 x27: 1fffe000341d085c [ 69.066299][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 69.067417][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeb56b8 [ 69.068529][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 69.069721][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 69.070829][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.071951][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : cbe77c79f4ff7c00 [ 69.073326][ C0] x8 : cbe77c79f4ff7c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.074532][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.075782][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 69.077005][ C0] Call trace: [ 69.077489][ C0] invalidate_bh_lru+0x128/0x22c [ 69.078166][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.078980][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.079983][ C0] ipi_handler+0x10c/0x70c [ 69.080607][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.081425][ C0] handle_domain_irq+0x148/0x200 [ 69.082169][ C0] gic_handle_irq+0x78/0x1b8 [ 69.082885][ C0] call_on_irq_stack+0x30/0x48 [ 69.083594][ C0] do_interrupt_handler+0x6c/0x88 [ 69.084338][ C0] el1_interrupt+0x30/0x58 [ 69.085026][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.085732][ C0] el1h_64_irq+0x78/0x7c [ 69.086347][ C0] finish_lock_switch+0xb8/0x1c8 [ 69.087049][ C0] finish_task_switch+0x120/0x6f4 [ 69.087812][ C0] schedule_tail+0x20/0x140 [ 69.088431][ C0] ret_from_fork+0x4/0x20 [ 69.089079][ C0] irq event stamp: 2 [ 69.089597][ C0] hardirqs last enabled at (1): [] finish_lock_switch+0xb0/0x1c8 [ 69.090845][ C0] hardirqs last disabled at (2): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.092185][ C0] softirqs last enabled at (0): [] copy_process+0x1244/0x3734 [ 69.093627][ C0] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 69.094780][ C0] ---[ end trace a72683cc467bd4b6 ]--- [ 69.169305][ T4760] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.170728][ T4760] Bad inode number on dev loop0: 2 is out of range [ 69.171713][ T4760] SysV FS: get root inode failed [ 69.172490][ T4760] oldfs: cannot read superblock [ 69.173298][ T4760] ------------[ cut here ]------------ [ 69.174189][ T4760] VFS: brelse: Trying to free free buffer [ 69.175131][ T4760] WARNING: CPU: 0 PID: 4760 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.176462][ T4760] Modules linked in: [ 69.177040][ T4760] CPU: 0 PID: 4760 Comm: syz.0.39 Tainted: G W syzkaller #0 [ 69.178315][ T4760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.179831][ T4760] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.180989][ T4760] pc : invalidate_bh_lru+0x128/0x22c [ 69.181783][ T4760] lr : invalidate_bh_lru+0x128/0x22c [ 69.182584][ T4760] sp : ffff8000200a7710 [ 69.183149][ T4760] x29: ffff8000200a7710 x28: ffff80001438d000 x27: 1fffe000341d085b [ 69.184373][ T4760] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 69.185647][ T4760] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeb5a58 [ 69.186852][ T4760] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 69.188108][ T4760] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 69.189328][ T4760] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.190534][ T4760] x11: ff8080000830061c x10: 0000000000000000 x9 : cbe77c79f4ff7c00 [ 69.191747][ T4760] x8 : cbe77c79f4ff7c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.192930][ T4760] x5 : ffff8000200a7018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.194134][ T4760] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.195292][ T4760] Call trace: [ 69.195800][ T4760] invalidate_bh_lru+0x128/0x22c [ 69.196428][ T4760] smp_call_function_many_cond+0xa5c/0xec0 [ 69.197335][ T4760] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.198138][ T4760] invalidate_bh_lrus+0x34/0x40 [ 69.198904][ T4760] blkdev_flush_mapping+0x16c/0x334 [ 69.199662][ T4760] blkdev_put+0x444/0x6c4 [ 69.200251][ T4760] kill_block_super+0xa0/0xe0 [ 69.200878][ T4760] deactivate_locked_super+0xc0/0x13c [ 69.201575][ T4760] mount_bdev+0x284/0x35c [ 69.202259][ T4760] sysv_mount+0x44/0x58 [ 69.202838][ T4760] legacy_get_tree+0xd8/0x174 [ 69.203489][ T4760] vfs_get_tree+0x90/0x278 [ 69.204136][ T4760] do_new_mount+0x228/0x804 [ 69.204768][ T4760] path_mount+0x57c/0xfe8 [ 69.205333][ T4760] __arm64_sys_mount+0x488/0x5f8 [ 69.206042][ T4760] invoke_syscall+0x98/0x28c [ 69.206759][ T4760] el0_svc_common+0x13c/0x258 [ 69.207498][ T4760] do_el0_svc+0x5c/0x140 [ 69.208131][ T4760] el0_svc+0x78/0x1d0 [ 69.208716][ T4760] el0t_64_sync_handler+0xcc/0xe4 [ 69.209531][ T4760] el0t_64_sync+0x1a0/0x1a4 [ 69.210195][ T4760] irq event stamp: 1282 [ 69.210923][ T4760] hardirqs last enabled at (1281): [] kasan_quarantine_put+0xc4/0x200 [ 69.212385][ T4760] hardirqs last disabled at (1282): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.213933][ T4760] softirqs last enabled at (1030): [] local_bh_enable+0x10/0x34 [ 69.215338][ T4760] softirqs last disabled at (1028): [] local_bh_disable+0x10/0x34 [ 69.216859][ T4760] ---[ end trace a72683cc467bd4b7 ]--- [ 69.346945][ T4765] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.348814][ T4765] Bad inode number on dev loop0: 2 is out of range [ 69.349719][ T4765] SysV FS: get root inode failed [ 69.350327][ T4765] oldfs: cannot read superblock [ 69.360896][ T136] device hsr_slave_0 left promiscuous mode [ 69.367400][ T4708] ------------[ cut here ]------------ [ 69.368271][ T4708] VFS: brelse: Trying to free free buffer [ 69.369239][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.370478][ T4708] Modules linked in: [ 69.371105][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 69.372078][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.373439][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.374561][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 69.375324][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 69.376004][ T4708] sp : ffff80001fc177d0 [ 69.376588][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5c [ 69.377790][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 69.378851][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedfa970 [ 69.380366][ T4708] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 69.381545][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 69.382634][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 69.383804][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 69.384980][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.386117][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.387233][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.388272][ T4708] Call trace: [ 69.388654][ T4708] invalidate_bh_lru+0x128/0x22c [ 69.389278][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 69.389972][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.390702][ T4708] invalidate_bh_lrus+0x34/0x40 [ 69.391427][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 69.392177][ T4708] blkdev_put+0x444/0x6c4 [ 69.392807][ T4708] blkdev_close+0x74/0xb0 [ 69.393353][ T4708] __fput+0x1b8/0x7e8 [ 69.393890][ T4708] ____fput+0x20/0x30 [ 69.394415][ T4708] task_work_run+0x13c/0x1e8 [ 69.395068][ T4708] do_notify_resume+0x2488/0x30a8 [ 69.395810][ T4708] el0_svc+0xf0/0x1d0 [ 69.396381][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 69.397082][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 69.397678][ T4708] irq event stamp: 132470 [ 69.398246][ T4708] hardirqs last enabled at (132469): [] kasan_quarantine_put+0xc4/0x200 [ 69.399530][ T4708] hardirqs last disabled at (132470): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.401123][ T4708] softirqs last enabled at (132222): [] local_bh_enable+0x10/0x34 [ 69.402446][ T4708] softirqs last disabled at (132220): [] local_bh_disable+0x10/0x34 [ 69.403704][ T4708] ---[ end trace a72683cc467bd4b8 ]--- [ 69.425030][ T136] device hsr_slave_1 left promiscuous mode [ 69.441738][ T4769] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.442896][ T4769] Bad inode number on dev loop0: 2 is out of range [ 69.443929][ T4769] SysV FS: get root inode failed [ 69.444788][ T4769] oldfs: cannot read superblock [ 69.458266][ C1] ------------[ cut here ]------------ [ 69.459069][ C1] VFS: brelse: Trying to free free buffer [ 69.459954][ C1] WARNING: CPU: 1 PID: 4771 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.461124][ C1] Modules linked in: [ 69.461760][ C1] CPU: 1 PID: 4771 Comm: syz.0.44 Tainted: G W syzkaller #0 [ 69.462983][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.464251][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.465415][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 69.466135][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 69.466831][ C1] sp : ffff800008017df0 [ 69.467455][ C1] x29: ffff800008017df0 x28: ffff0000d9b63680 x27: 1fffe000341d4a5c [ 69.468571][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 69.469629][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedfad10 [ 69.470751][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 69.471867][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 69.473049][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 69.474202][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 4cbb5f8d8d5fd600 [ 69.475304][ C1] x8 : 4cbb5f8d8d5fd600 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.476441][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.477491][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 69.478603][ C1] Call trace: [ 69.479063][ C1] invalidate_bh_lru+0x128/0x22c [ 69.479745][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 69.480552][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.481498][ C1] ipi_handler+0x10c/0x70c [ 69.482221][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 69.483027][ C1] handle_domain_irq+0x148/0x200 [ 69.483780][ C1] gic_handle_irq+0x78/0x1b8 [ 69.484381][ C1] call_on_irq_stack+0x30/0x48 [ 69.484971][ C1] do_interrupt_handler+0x6c/0x88 [ 69.485616][ C1] el1_interrupt+0x30/0x58 [ 69.486245][ C1] el1h_64_irq_handler+0x18/0x24 [ 69.486954][ C1] el1h_64_irq+0x78/0x7c [ 69.487492][ C1] lock_page_memcg+0x120/0x22c [ 69.488187][ C1] page_remove_rmap+0x3c/0xfb4 [ 69.488821][ C1] unmap_page_range+0xa60/0x180c [ 69.489471][ C1] unmap_single_vma+0x13c/0x1e4 [ 69.490130][ C1] unmap_vmas+0x110/0x218 [ 69.490711][ C1] exit_mmap+0x2c4/0x510 [ 69.491278][ C1] __mmput+0xe8/0x3a0 [ 69.491871][ C1] mmput+0x80/0xc0 [ 69.492408][ C1] exit_mm+0x5dc/0x704 [ 69.493000][ C1] do_exit+0x4bc/0x1f54 [ 69.493586][ C1] do_group_exit+0x104/0x274 [ 69.494285][ C1] get_signal+0x638/0x13b0 [ 69.495035][ C1] do_notify_resume+0x344/0x30a8 [ 69.495792][ C1] el0_svc+0xf0/0x1d0 [ 69.496509][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 69.497256][ C1] el0t_64_sync+0x1a0/0x1a4 [ 69.497868][ C1] irq event stamp: 2016 [ 69.498398][ C1] hardirqs last enabled at (2015): [] lock_page_memcg+0x110/0x22c [ 69.499674][ C1] hardirqs last disabled at (2016): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.501056][ C1] softirqs last enabled at (802): [] local_bh_enable+0x10/0x34 [ 69.502325][ C1] softirqs last disabled at (800): [] local_bh_disable+0x10/0x34 [ 69.503563][ C1] ---[ end trace a72683cc467bd4b9 ]--- [ 69.524046][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.525194][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.526516][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.527485][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.536688][ T136] device bridge_slave_1 left promiscuous mode [ 69.537802][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.539911][ T4773] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.541051][ T4773] Bad inode number on dev loop0: 2 is out of range [ 69.541940][ T4773] SysV FS: get root inode failed [ 69.542592][ T4773] oldfs: cannot read superblock [ 69.548604][ T4708] ------------[ cut here ]------------ [ 69.549470][ T4708] VFS: brelse: Trying to free free buffer [ 69.550335][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.551575][ T4708] Modules linked in: [ 69.552068][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 69.553267][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.554695][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.555811][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 69.556583][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 69.557284][ T4708] sp : ffff80001fc177d0 [ 69.557917][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 69.559172][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 69.560306][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedf7148 [ 69.561515][ T4708] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 69.562633][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 69.563696][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 69.564908][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 69.566034][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.567084][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.568250][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.569355][ T4708] Call trace: [ 69.569826][ T4708] invalidate_bh_lru+0x128/0x22c [ 69.570594][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 69.571386][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.572151][ T4708] invalidate_bh_lrus+0x34/0x40 [ 69.572978][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 69.573740][ T4708] blkdev_put+0x444/0x6c4 [ 69.574359][ T4708] blkdev_close+0x74/0xb0 [ 69.574995][ T4708] __fput+0x1b8/0x7e8 [ 69.575550][ T4708] ____fput+0x20/0x30 [ 69.576063][ T4708] task_work_run+0x13c/0x1e8 [ 69.576641][ T4708] do_notify_resume+0x2488/0x30a8 [ 69.577312][ T4708] el0_svc+0xf0/0x1d0 [ 69.577919][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 69.578632][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 69.579208][ T4708] irq event stamp: 145586 [ 69.579787][ T4708] hardirqs last enabled at (145585): [] kasan_quarantine_put+0xc4/0x200 [ 69.581150][ T4708] hardirqs last disabled at (145586): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.582510][ T4708] softirqs last enabled at (145324): [] local_bh_enable+0x10/0x34 [ 69.583788][ T4708] softirqs last disabled at (145322): [] local_bh_disable+0x10/0x34 [ 69.584864][ T4708] ---[ end trace a72683cc467bd4ba ]--- [ 69.604622][ T136] device bridge_slave_0 left promiscuous mode [ 69.605674][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.623260][ T4775] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.626993][ T4775] Bad inode number on dev loop0: 2 is out of range [ 69.628090][ T4775] SysV FS: get root inode failed [ 69.628810][ T4775] oldfs: cannot read superblock [ 69.631109][ T21] cfg80211: failed to load regulatory.db [ 69.635034][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.636009][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.651043][ T4708] ------------[ cut here ]------------ [ 69.651939][ T4708] VFS: brelse: Trying to free free buffer [ 69.652806][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.654018][ T4708] Modules linked in: [ 69.654580][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 69.655840][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.657297][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.658491][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 69.659313][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 69.660091][ T4708] sp : ffff80001fc177d0 [ 69.660764][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5c [ 69.661897][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 69.663088][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedf74e8 [ 69.664285][ T4708] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 69.665513][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 69.666818][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 69.667983][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 69.669123][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.670241][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.671431][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.672736][ T4708] Call trace: [ 69.673304][ T4708] invalidate_bh_lru+0x128/0x22c [ 69.674054][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 69.674956][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.675666][ T4708] invalidate_bh_lrus+0x34/0x40 [ 69.676400][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 69.677103][ T4708] blkdev_put+0x444/0x6c4 [ 69.677571][ T4708] blkdev_close+0x74/0xb0 [ 69.678223][ T4708] __fput+0x1b8/0x7e8 [ 69.678790][ T4708] ____fput+0x20/0x30 [ 69.679492][ T4708] task_work_run+0x13c/0x1e8 [ 69.680223][ T4708] do_notify_resume+0x2488/0x30a8 [ 69.681012][ T4708] el0_svc+0xf0/0x1d0 [ 69.681621][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 69.682373][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 69.683060][ T4708] irq event stamp: 153114 [ 69.683705][ T4708] hardirqs last enabled at (153113): [] kasan_quarantine_put+0xc4/0x200 [ 69.685177][ T4708] hardirqs last disabled at (153114): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.686744][ T4708] softirqs last enabled at (152834): [] local_bh_enable+0x10/0x34 [ 69.687987][ T4708] softirqs last disabled at (152832): [] local_bh_disable+0x10/0x34 [ 69.689370][ T4708] ---[ end trace a72683cc467bd4bb ]--- [ 69.763581][ T136] device veth1_macvtap left promiscuous mode [ 69.764583][ T136] device veth0_macvtap left promiscuous mode [ 69.765557][ T136] device veth1_vlan left promiscuous mode [ 69.765849][ T4777] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.766479][ T136] device veth0_vlan left promiscuous mode [ 69.767456][ T4777] Bad inode number on dev loop0: 2 is out of range [ 69.783500][ T4777] SysV FS: get root inode failed [ 69.784316][ T4777] oldfs: cannot read superblock [ 69.797505][ C0] ------------[ cut here ]------------ [ 69.798453][ C0] VFS: brelse: Trying to free free buffer [ 69.799326][ C0] WARNING: CPU: 0 PID: 1620 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.800535][ C0] Modules linked in: [ 69.801071][ C0] CPU: 0 PID: 1620 Comm: kworker/u4:5 Tainted: G W syzkaller #0 [ 69.802281][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.803649][ C0] Workqueue: events_power_efficient gc_worker [ 69.804504][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.805569][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.806342][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.807090][ C0] sp : ffff800008007df0 [ 69.807698][ C0] x29: ffff800008007df0 x28: ffff0000ccf1d1c0 x27: 1fffe000341d085b [ 69.808707][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 69.809898][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeb5df8 [ 69.810974][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 69.812141][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 69.813305][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.814377][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 124afa011a520300 [ 69.815451][ C0] x8 : 124afa011a520300 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.816567][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.817746][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.818786][ C0] Call trace: [ 69.819231][ C0] invalidate_bh_lru+0x128/0x22c [ 69.819891][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.820704][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.821566][ C0] ipi_handler+0x10c/0x70c [ 69.822187][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.822914][ C0] handle_domain_irq+0x148/0x200 [ 69.823540][ C0] gic_handle_irq+0x78/0x1b8 [ 69.824181][ C0] call_on_irq_stack+0x30/0x48 [ 69.824831][ C0] do_interrupt_handler+0x6c/0x88 [ 69.825459][ C0] el1_interrupt+0x30/0x58 [ 69.826027][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.826782][ C0] el1h_64_irq+0x78/0x7c [ 69.827406][ C0] seqcount_lockdep_reader_access+0x21c/0x2c0 [ 69.828331][ C0] gc_worker+0x28c/0x1170 [ 69.828991][ C0] process_one_work+0x7a4/0x1178 [ 69.829639][ C0] worker_thread+0x8fc/0x103c [ 69.830234][ C0] kthread+0x37c/0x460 [ 69.830781][ C0] ret_from_fork+0x10/0x20 [ 69.831331][ C0] irq event stamp: 947218 [ 69.831880][ C0] hardirqs last enabled at (947217): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 69.833267][ C0] hardirqs last disabled at (947218): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.834490][ C0] softirqs last enabled at (941700): [] handle_softirqs+0xa70/0xc14 [ 69.835714][ C0] softirqs last disabled at (941685): [] __irq_exit_rcu+0x240/0x434 [ 69.837108][ C0] ---[ end trace a72683cc467bd4bc ]--- [ 69.966740][ T136] team0 (unregistering): Port device team_slave_1 removed [ 69.971532][ T136] team0 (unregistering): Port device team_slave_0 removed [ 69.976112][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.990134][ T4780] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.991270][ T4780] Bad inode number on dev loop0: 2 is out of range [ 69.992213][ T4780] SysV FS: get root inode failed [ 69.993046][ T4780] oldfs: cannot read superblock [ 70.001664][ C0] ------------[ cut here ]------------ [ 70.002570][ C0] VFS: brelse: Trying to free free buffer [ 70.003416][ C0] WARNING: CPU: 0 PID: 3644 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.004711][ C0] Modules linked in: [ 70.005316][ C0] CPU: 0 PID: 3644 Comm: syslogd Tainted: G W syzkaller #0 [ 70.006665][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.008098][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.009131][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.009893][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.010641][ C0] sp : ffff800008007df0 [ 70.011252][ C0] x29: ffff800008007df0 x28: ffff0000d6208000 x27: 1fffe000341d085b [ 70.012398][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 70.013644][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeb66b8 [ 70.014953][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 70.016291][ C0] x17: 0000000000010002 x16: ffff8000082dbd3c x15: 0000000000000012 [ 70.017530][ C0] x14: 0000000000000001 x13: 1ffff00001000edc x12: 0000000000000000 [ 70.018790][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 082372e20c4df500 [ 70.020021][ C0] x8 : 082372e20c4df500 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.021121][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff800008307f44 [ 70.022263][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.023333][ C0] Call trace: [ 70.023789][ C0] invalidate_bh_lru+0x128/0x22c [ 70.024613][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.025471][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.026420][ C0] ipi_handler+0x10c/0x70c [ 70.027055][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.027843][ C0] handle_domain_irq+0x148/0x200 [ 70.028517][ C0] gic_handle_irq+0x78/0x1b8 [ 70.029152][ C0] call_on_irq_stack+0x30/0x48 [ 70.029845][ C0] do_interrupt_handler+0x6c/0x88 [ 70.030571][ C0] el1_interrupt+0x30/0x58 [ 70.031225][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.031994][ C0] el1h_64_irq+0x78/0x7c [ 70.032553][ C0] sock_read_iter+0x74/0x304 [ 70.033233][ C0] vfs_read+0x58c/0xa4c [ 70.033820][ C0] ksys_read+0x12c/0x228 [ 70.034359][ C0] __arm64_sys_read+0x7c/0x90 [ 70.035022][ C0] invoke_syscall+0x98/0x28c [ 70.035698][ C0] el0_svc_common+0x13c/0x258 [ 70.036416][ C0] do_el0_svc+0x5c/0x140 [ 70.036997][ C0] el0_svc+0x78/0x1d0 [ 70.037527][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 70.038239][ C0] el0t_64_sync+0x1a0/0x1a4 [ 70.038907][ C0] irq event stamp: 84946 [ 70.039504][ C0] hardirqs last enabled at (84945): [] el0_svc_common+0xa0/0x258 [ 70.040856][ C0] hardirqs last disabled at (84946): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.042150][ C0] softirqs last enabled at (84940): [] local_bh_enable+0x10/0x34 [ 70.043753][ C0] softirqs last disabled at (84938): [] local_bh_disable+0x10/0x34 [ 70.045260][ C0] ---[ end trace a72683cc467bd4bd ]--- [ 70.067831][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.186549][ T4782] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.187631][ T4782] Bad inode number on dev loop0: 2 is out of range [ 70.188527][ T4782] SysV FS: get root inode failed [ 70.189245][ T4782] oldfs: cannot read superblock [ 70.189975][ T4782] ------------[ cut here ]------------ [ 70.190740][ T4782] VFS: brelse: Trying to free free buffer [ 70.191641][ T4782] WARNING: CPU: 0 PID: 4782 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.192945][ T4782] Modules linked in: [ 70.193572][ T4782] CPU: 0 PID: 4782 Comm: syz.0.49 Tainted: G W syzkaller #0 [ 70.194884][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.196193][ T4782] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.197315][ T4782] pc : invalidate_bh_lru+0x128/0x22c [ 70.197810][ T136] bond0 (unregistering): Released all slaves [ 70.198064][ T4782] lr : invalidate_bh_lru+0x128/0x22c [ 70.199656][ T4782] sp : ffff800020107710 [ 70.200187][ T4782] x29: ffff800020107710 x28: ffff80001438d000 x27: 1fffe000341d085b [ 70.201325][ T4782] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 70.202446][ T4782] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeb6230 [ 70.203671][ T4782] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.204628][ T4782] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.205677][ T4782] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 70.206735][ T4782] x11: ff8080000830061c x10: 0000000000000000 x9 : a228049d05ee3900 [ 70.207911][ T4782] x8 : a228049d05ee3900 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.209037][ T4782] x5 : ffff800020107018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.210174][ T4782] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.211217][ T4782] Call trace: [ 70.211660][ T4782] invalidate_bh_lru+0x128/0x22c [ 70.212291][ T4782] smp_call_function_many_cond+0xa5c/0xec0 [ 70.213086][ T4782] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.213853][ T4782] invalidate_bh_lrus+0x34/0x40 [ 70.214547][ T4782] blkdev_flush_mapping+0x16c/0x334 [ 70.215321][ T4782] blkdev_put+0x444/0x6c4 [ 70.215965][ T4782] kill_block_super+0xa0/0xe0 [ 70.216668][ T4782] deactivate_locked_super+0xc0/0x13c [ 70.217534][ T4782] mount_bdev+0x284/0x35c [ 70.218170][ T4782] sysv_mount+0x44/0x58 [ 70.218758][ T4782] legacy_get_tree+0xd8/0x174 [ 70.219429][ T4782] vfs_get_tree+0x90/0x278 [ 70.220050][ T4782] do_new_mount+0x228/0x804 [ 70.220724][ T4782] path_mount+0x57c/0xfe8 [ 70.221324][ T4782] __arm64_sys_mount+0x488/0x5f8 [ 70.222051][ T4782] invoke_syscall+0x98/0x28c [ 70.222697][ T4782] el0_svc_common+0x13c/0x258 [ 70.223378][ T4782] do_el0_svc+0x5c/0x140 [ 70.223993][ T4782] el0_svc+0x78/0x1d0 [ 70.224579][ T4782] el0t_64_sync_handler+0xcc/0xe4 [ 70.225271][ T4782] el0t_64_sync+0x1a0/0x1a4 [ 70.225904][ T4782] irq event stamp: 1150 [ 70.226473][ T4782] hardirqs last enabled at (1149): [] kasan_quarantine_put+0xc4/0x200 [ 70.227748][ T4782] hardirqs last disabled at (1150): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.229170][ T4782] softirqs last enabled at (922): [] local_bh_enable+0x10/0x34 [ 70.230580][ T4782] softirqs last disabled at (920): [] local_bh_disable+0x10/0x34 [ 70.231872][ T4782] ---[ end trace a72683cc467bd4be ]--- [ 70.376061][ T4784] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.377219][ T4784] Bad inode number on dev loop0: 2 is out of range [ 70.378235][ T4784] SysV FS: get root inode failed [ 70.379104][ T4784] oldfs: cannot read superblock [ 70.386831][ T4708] ------------[ cut here ]------------ [ 70.387729][ T4708] VFS: brelse: Trying to free free buffer [ 70.388638][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.389853][ T4708] Modules linked in: [ 70.390397][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 70.391492][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.392896][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.393969][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 70.394703][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 70.395506][ T4708] sp : ffff80001fc177d0 [ 70.396161][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5c [ 70.397193][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 70.398244][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedf7888 [ 70.399353][ T4708] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.400607][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.401645][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.402746][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 70.403910][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.405022][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.406149][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.407232][ T4708] Call trace: [ 70.407779][ T4708] invalidate_bh_lru+0x128/0x22c [ 70.408395][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 70.409181][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.409849][ T4708] invalidate_bh_lrus+0x34/0x40 [ 70.410541][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 70.411241][ T4708] blkdev_put+0x444/0x6c4 [ 70.411821][ T4708] blkdev_close+0x74/0xb0 [ 70.412642][ T4708] __fput+0x1b8/0x7e8 [ 70.413201][ T4708] ____fput+0x20/0x30 [ 70.413687][ T4708] task_work_run+0x13c/0x1e8 [ 70.414334][ T4708] do_notify_resume+0x2488/0x30a8 [ 70.414984][ T4708] el0_svc+0xf0/0x1d0 [ 70.415625][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 70.416353][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 70.417028][ T4708] irq event stamp: 177812 [ 70.417690][ T4708] hardirqs last enabled at (177811): [] kasan_quarantine_put+0xc4/0x200 [ 70.418935][ T4708] hardirqs last disabled at (177812): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.420382][ T4708] softirqs last enabled at (177546): [] local_bh_enable+0x10/0x34 [ 70.421713][ T4708] softirqs last disabled at (177544): [] local_bh_disable+0x10/0x34 [ 70.423038][ T4708] ---[ end trace a72683cc467bd4bf ]--- [ 70.469284][ T4786] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.470530][ T4786] Bad inode number on dev loop0: 2 is out of range [ 70.471474][ T4786] SysV FS: get root inode failed [ 70.472226][ T4786] oldfs: cannot read superblock [ 70.481652][ T4708] ------------[ cut here ]------------ [ 70.482478][ T4708] VFS: brelse: Trying to free free buffer [ 70.483387][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.484581][ T4708] Modules linked in: [ 70.485083][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 70.486294][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.487600][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.488597][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 70.489395][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 70.490053][ T4708] sp : ffff80001fc177d0 [ 70.490605][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 70.491694][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 70.492838][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedf7c28 [ 70.493920][ T4708] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.495057][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.496131][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.497214][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 70.498264][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.499355][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.500399][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.501462][ T4708] Call trace: [ 70.501943][ T4708] invalidate_bh_lru+0x128/0x22c [ 70.502605][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 70.503487][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.504234][ T4708] invalidate_bh_lrus+0x34/0x40 [ 70.504946][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 70.505662][ T4708] blkdev_put+0x444/0x6c4 [ 70.506340][ T4708] blkdev_close+0x74/0xb0 [ 70.506988][ T4708] __fput+0x1b8/0x7e8 [ 70.507508][ T4708] ____fput+0x20/0x30 [ 70.507984][ T4708] task_work_run+0x13c/0x1e8 [ 70.508678][ T4708] do_notify_resume+0x2488/0x30a8 [ 70.509386][ T4708] el0_svc+0xf0/0x1d0 [ 70.509998][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 70.510711][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 70.511255][ T4708] irq event stamp: 182080 [ 70.511851][ T4708] hardirqs last enabled at (182079): [] kasan_quarantine_put+0xc4/0x200 [ 70.513270][ T4708] hardirqs last disabled at (182080): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.514838][ T4708] softirqs last enabled at (181788): [] local_bh_enable+0x10/0x34 [ 70.516100][ T4708] softirqs last disabled at (181786): [] local_bh_disable+0x10/0x34 [ 70.517434][ T4708] ---[ end trace a72683cc467bd4c0 ]--- [ 70.605063][ T4788] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.606163][ T4788] Bad inode number on dev loop0: 2 is out of range [ 70.607036][ T4788] SysV FS: get root inode failed [ 70.607777][ T4788] oldfs: cannot read superblock [ 70.616413][ T4708] ------------[ cut here ]------------ [ 70.617228][ T4708] VFS: brelse: Trying to free free buffer [ 70.618018][ T4708] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.619197][ T4708] Modules linked in: [ 70.619684][ T4708] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 70.620925][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.622261][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.623289][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 70.624064][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 70.624891][ T4708] sp : ffff80001fc177d0 [ 70.625480][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 70.626611][ T4708] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 70.627777][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dec5a4e8 [ 70.629002][ T4708] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.630228][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.631412][ T4708] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 70.632580][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 70.633592][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.634752][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.635788][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.636894][ T4708] Call trace: [ 70.637311][ T4708] invalidate_bh_lru+0x128/0x22c [ 70.637971][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 70.638825][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.639550][ T4708] invalidate_bh_lrus+0x34/0x40 [ 70.640180][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 70.640903][ T4708] blkdev_put+0x444/0x6c4 [ 70.641456][ T4708] blkdev_close+0x74/0xb0 [ 70.642021][ T4708] __fput+0x1b8/0x7e8 [ 70.642475][ T4708] ____fput+0x20/0x30 [ 70.643019][ T4708] task_work_run+0x13c/0x1e8 [ 70.643667][ T4708] do_notify_resume+0x2488/0x30a8 [ 70.644351][ T4708] el0_svc+0xf0/0x1d0 [ 70.644935][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 70.645592][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 70.646244][ T4708] irq event stamp: 185868 [ 70.646821][ T4708] hardirqs last enabled at (185867): [] kasan_quarantine_put+0xc4/0x200 [ 70.648189][ T4708] hardirqs last disabled at (185868): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.649844][ T4708] softirqs last enabled at (185588): [] local_bh_enable+0x10/0x34 [ 70.651090][ T4708] softirqs last disabled at (185586): [] local_bh_disable+0x10/0x34 [ 70.652388][ T4708] ---[ end trace a72683cc467bd4c1 ]--- [ 70.774510][ T4790] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.775723][ T4790] Bad inode number on dev loop0: 2 is out of range [ 70.776647][ T4790] SysV FS: get root inode failed [ 70.777346][ T4790] oldfs: cannot read superblock [ 70.788478][ C0] ------------[ cut here ]------------ [ 70.789348][ C0] VFS: brelse: Trying to free free buffer [ 70.790199][ C0] WARNING: CPU: 0 PID: 4792 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.791442][ C0] Modules linked in: [ 70.792027][ C0] CPU: 0 PID: 4792 Comm: syz.0.54 Tainted: G W syzkaller #0 [ 70.793316][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.794720][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.795842][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.796585][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.797360][ C0] sp : ffff800008007df0 [ 70.797994][ C0] x29: ffff800008007df0 x28: ffff0000daddb680 x27: 1fffe000341d085c [ 70.799148][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 70.800368][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dec5a888 [ 70.801555][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 70.802819][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 70.804012][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 70.805326][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 98e8dae2282f3100 [ 70.806608][ C0] x8 : 98e8dae2282f3100 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.807769][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.808927][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.810117][ C0] Call trace: [ 70.810587][ C0] invalidate_bh_lru+0x128/0x22c [ 70.811289][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.812236][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.813160][ C0] ipi_handler+0x10c/0x70c [ 70.813739][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.814509][ C0] handle_domain_irq+0x148/0x200 [ 70.815219][ C0] gic_handle_irq+0x78/0x1b8 [ 70.815905][ C0] call_on_irq_stack+0x30/0x48 [ 70.816605][ C0] do_interrupt_handler+0x6c/0x88 [ 70.817290][ C0] el0_interrupt+0x94/0x248 [ 70.817900][ C0] __el0_irq_handler_common+0x18/0x24 [ 70.818648][ C0] el0t_64_irq_handler+0x10/0x1c [ 70.819440][ C0] el0t_64_irq+0x1a0/0x1a4 [ 70.820055][ C0] irq event stamp: 362 [ 70.820746][ C0] hardirqs last enabled at (361): [] el0t_64_sync_handler+0xd8/0xe4 [ 70.822128][ C0] hardirqs last disabled at (362): [] __el0_irq_handler_common+0x18/0x24 [ 70.823619][ C0] softirqs last enabled at (92): [] local_bh_enable+0x10/0x34 [ 70.824921][ C0] softirqs last disabled at (90): [] local_bh_disable+0x10/0x34 [ 70.826306][ C0] ---[ end trace a72683cc467bd4c2 ]--- [ 70.848663][ T4792] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.850113][ T4792] Bad inode number on dev loop0: 2 is out of range [ 70.851102][ T4792] SysV FS: get root inode failed [ 70.851865][ T4792] oldfs: cannot read superblock [ 70.862547][ C1] ------------[ cut here ]------------ [ 70.863428][ C1] VFS: brelse: Trying to free free buffer [ 70.864333][ C1] WARNING: CPU: 1 PID: 4794 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.865613][ C1] Modules linked in: [ 70.866155][ C1] CPU: 1 PID: 4794 Comm: syz.0.55 Tainted: G W syzkaller #0 [ 70.867395][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.868838][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.869975][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.870821][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.871599][ C1] sp : ffff800008017df0 [ 70.872216][ C1] x29: ffff800008017df0 x28: ffff0000d768d1c0 x27: 1fffe000341d4a5c [ 70.873293][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 70.874488][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedf3060 [ 70.875686][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 70.877085][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 70.878289][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.879356][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 0cb152e3afd78f00 [ 70.880388][ C1] x8 : 0cb152e3afd78f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.881443][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.882507][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.883646][ C1] Call trace: [ 70.884061][ C1] invalidate_bh_lru+0x128/0x22c [ 70.884784][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.885617][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.886641][ C1] ipi_handler+0x10c/0x70c [ 70.887284][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.888098][ C1] handle_domain_irq+0x148/0x200 [ 70.888780][ C1] gic_handle_irq+0x78/0x1b8 [ 70.889392][ C1] call_on_irq_stack+0x30/0x48 [ 70.890050][ C1] do_interrupt_handler+0x6c/0x88 [ 70.890799][ C1] el1_interrupt+0x30/0x58 [ 70.891409][ C1] el1h_64_irq_handler+0x18/0x24 [ 70.892164][ C1] el1h_64_irq+0x78/0x7c [ 70.892816][ C1] qlist_free_all+0x38/0xa8 [ 70.893388][ C1] kasan_quarantine_reduce+0x124/0x130 [ 70.894123][ C1] __kasan_slab_alloc+0x34/0xcc [ 70.894786][ C1] slab_post_alloc_hook+0x74/0x3f8 [ 70.895534][ C1] __kmalloc+0x204/0x440 [ 70.896088][ C1] __arm64_sys_memfd_create+0x164/0x50c [ 70.896872][ C1] invoke_syscall+0x98/0x28c [ 70.897523][ C1] el0_svc_common+0x13c/0x258 [ 70.898180][ C1] do_el0_svc+0x5c/0x140 [ 70.898718][ C1] el0_svc+0x78/0x1d0 [ 70.899258][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 70.899911][ C1] el0t_64_sync+0x1a0/0x1a4 [ 70.900535][ C1] irq event stamp: 320 [ 70.901079][ C1] hardirqs last enabled at (319): [] free_unref_page+0x148/0x1f8 [ 70.902471][ C1] hardirqs last disabled at (320): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.903825][ C1] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 70.905096][ C1] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 70.906527][ C1] ---[ end trace a72683cc467bd4c3 ]--- [ 70.960855][ T4794] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.962393][ T4794] Bad inode number on dev loop0: 2 is out of range [ 70.964690][ T4794] SysV FS: get root inode failed [ 70.965441][ T4794] oldfs: cannot read superblock [ 70.971710][ C1] ------------[ cut here ]------------ [ 70.972511][ C1] VFS: brelse: Trying to free free buffer [ 70.973284][ C1] WARNING: CPU: 1 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.974479][ C1] Modules linked in: [ 70.975021][ C1] CPU: 1 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.976319][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.977842][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.978864][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.979646][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.980358][ C1] sp : ffff800008017df0 [ 70.980954][ C1] x29: ffff800008017df0 x28: ffff0000c8370000 x27: 1fffe000341d4a5c [ 70.982237][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 70.983330][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedf3400 [ 70.984447][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 70.985580][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 70.986646][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.987699][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : ca04e80e70640500 [ 70.988736][ C1] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.989827][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.990924][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 70.992130][ C1] Call trace: [ 70.992539][ C1] invalidate_bh_lru+0x128/0x22c [ 70.993251][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.994043][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.994957][ C1] ipi_handler+0x10c/0x70c [ 70.995548][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.996369][ C1] handle_domain_irq+0x148/0x200 [ 70.997167][ C1] gic_handle_irq+0x78/0x1b8 [ 70.997739][ C1] call_on_irq_stack+0x30/0x48 [ 70.998357][ C1] do_interrupt_handler+0x6c/0x88 [ 70.999024][ C1] el1_interrupt+0x30/0x58 [ 70.999682][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.000395][ C1] el1h_64_irq+0x78/0x7c [ 71.000987][ C1] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 71.001828][ C1] debug_check_no_obj_freed+0x39c/0x454 [ 71.002624][ C1] slab_free_freelist_hook+0x9c/0x1e4 [ 71.003334][ C1] kfree+0x16c/0x404 [ 71.003850][ C1] kvfree+0x40/0x50 [ 71.004400][ C1] xt_free_table_info+0x150/0x1b4 [ 71.005103][ C1] __do_replace+0x6ec/0x9c0 [ 71.005707][ C1] do_ipt_set_ctl+0xadc/0xe38 [ 71.006356][ C1] nf_setsockopt+0x260/0x280 [ 71.006931][ C1] ip_setsockopt+0x1da0/0x29bc [ 71.007566][ C1] tcp_setsockopt+0x1f4/0x1b8c [ 71.008216][ C1] sock_common_setsockopt+0xb0/0xcc [ 71.008932][ C1] __sys_setsockopt+0x260/0x36c [ 71.009542][ C1] __arm64_sys_setsockopt+0xc0/0xdc [ 71.010296][ C1] invoke_syscall+0x98/0x28c [ 71.010994][ C1] el0_svc_common+0x13c/0x258 [ 71.011612][ C1] do_el0_svc+0x5c/0x140 [ 71.012167][ C1] el0_svc+0x78/0x1d0 [ 71.012681][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.013418][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.014058][ C1] irq event stamp: 291364 [ 71.014653][ C1] hardirqs last enabled at (291363): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 71.016172][ C1] hardirqs last disabled at (291364): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.017567][ C1] softirqs last enabled at (291350): [] local_bh_enable+0x10/0x34 [ 71.018972][ C1] softirqs last disabled at (291348): [] local_bh_disable+0x10/0x34 [ 71.020235][ C1] ---[ end trace a72683cc467bd4c4 ]--- [ 71.155544][ T4796] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.156602][ T4796] Bad inode number on dev loop0: 2 is out of range [ 71.157449][ T4796] SysV FS: get root inode failed [ 71.158069][ T4796] oldfs: cannot read superblock [ 71.158801][ T4796] ------------[ cut here ]------------ [ 71.159490][ T4796] VFS: brelse: Trying to free free buffer [ 71.160251][ T4796] WARNING: CPU: 1 PID: 4796 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.161498][ T4796] Modules linked in: [ 71.162046][ T4796] CPU: 1 PID: 4796 Comm: syz.0.56 Tainted: G W syzkaller #0 [ 71.163257][ T4796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.164758][ T4796] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.165852][ T4796] pc : invalidate_bh_lru+0x128/0x22c [ 71.166601][ T4796] lr : invalidate_bh_lru+0x128/0x22c [ 71.167364][ T4796] sp : ffff80001f997710 [ 71.168035][ T4796] x29: ffff80001f997710 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 71.169121][ T4796] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 71.170256][ T4796] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedf37a0 [ 71.171808][ T4796] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 71.172939][ T4796] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 71.174057][ T4796] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 71.175159][ T4796] x11: ff8080000830061c x10: 0000000000000000 x9 : 37e4dc746c195100 [ 71.176298][ T4796] x8 : 37e4dc746c195100 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.177422][ T4796] x5 : ffff80001f997018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.178592][ T4796] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.179703][ T4796] Call trace: [ 71.180131][ T4796] invalidate_bh_lru+0x128/0x22c [ 71.180753][ T4796] smp_call_function_many_cond+0xa5c/0xec0 [ 71.181483][ T4796] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.182219][ T4796] invalidate_bh_lrus+0x34/0x40 [ 71.182860][ T4796] blkdev_flush_mapping+0x16c/0x334 [ 71.183565][ T4796] blkdev_put+0x444/0x6c4 [ 71.184178][ T4796] kill_block_super+0xa0/0xe0 [ 71.184846][ T4796] deactivate_locked_super+0xc0/0x13c [ 71.185586][ T4796] mount_bdev+0x284/0x35c [ 71.186215][ T4796] sysv_mount+0x44/0x58 [ 71.186757][ T4796] legacy_get_tree+0xd8/0x174 [ 71.187387][ T4796] vfs_get_tree+0x90/0x278 [ 71.188035][ T4796] do_new_mount+0x228/0x804 [ 71.188757][ T4796] path_mount+0x57c/0xfe8 [ 71.189634][ T4796] __arm64_sys_mount+0x488/0x5f8 [ 71.190368][ T4796] invoke_syscall+0x98/0x28c [ 71.190980][ T4796] el0_svc_common+0x13c/0x258 [ 71.191617][ T4796] do_el0_svc+0x5c/0x140 [ 71.192192][ T4796] el0_svc+0x78/0x1d0 [ 71.192702][ T4796] el0t_64_sync_handler+0xcc/0xe4 [ 71.193375][ T4796] el0t_64_sync+0x1a0/0x1a4 [ 71.194033][ T4796] irq event stamp: 1178 [ 71.194558][ T4796] hardirqs last enabled at (1177): [] kasan_quarantine_put+0xc4/0x200 [ 71.195963][ T4796] hardirqs last disabled at (1178): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.197442][ T4796] softirqs last enabled at (940): [] local_bh_enable+0x10/0x34 [ 71.198685][ T4796] softirqs last disabled at (938): [] local_bh_disable+0x10/0x34 [ 71.199977][ T4796] ---[ end trace a72683cc467bd4c5 ]--- [ 71.317004][ T4798] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.318113][ T4798] Bad inode number on dev loop0: 2 is out of range [ 71.319053][ T4798] SysV FS: get root inode failed [ 71.319769][ T4798] oldfs: cannot read superblock [ 71.322859][ C1] ------------[ cut here ]------------ [ 71.323698][ C1] VFS: brelse: Trying to free free buffer [ 71.324591][ C1] WARNING: CPU: 1 PID: 4798 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.326048][ C1] Modules linked in: [ 71.326584][ C1] CPU: 1 PID: 4798 Comm: syz.0.57 Tainted: G W syzkaller #0 [ 71.327785][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.329124][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.330161][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.330950][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.331776][ C1] sp : ffff800008017df0 [ 71.332326][ C1] x29: ffff800008017df0 x28: ffff0000dadd8000 x27: 1fffe000341d4a5b [ 71.333510][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 71.334635][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedf3b40 [ 71.335771][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 71.336812][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 71.337984][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 71.339015][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : f0cc796025c36b00 [ 71.340101][ C1] x8 : f0cc796025c36b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.341156][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.342288][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.343396][ C1] Call trace: [ 71.343875][ C1] invalidate_bh_lru+0x128/0x22c [ 71.344524][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.345379][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.346363][ C1] ipi_handler+0x10c/0x70c [ 71.347049][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.347813][ C1] handle_domain_irq+0x148/0x200 [ 71.348449][ C1] gic_handle_irq+0x78/0x1b8 [ 71.349137][ C1] call_on_irq_stack+0x30/0x48 [ 71.349831][ C1] do_interrupt_handler+0x6c/0x88 [ 71.350589][ C1] el1_interrupt+0x30/0x58 [ 71.351205][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.351981][ C1] el1h_64_irq+0x78/0x7c [ 71.352539][ C1] unmap_page_range+0x2c8/0x180c [ 71.353214][ C1] unmap_single_vma+0x13c/0x1e4 [ 71.353878][ C1] unmap_vmas+0x110/0x218 [ 71.354555][ C1] exit_mmap+0x2c4/0x510 [ 71.355209][ C1] __mmput+0xe8/0x3a0 [ 71.355750][ C1] mmput+0x80/0xc0 [ 71.356247][ C1] exit_mm+0x5dc/0x704 [ 71.356787][ C1] do_exit+0x4bc/0x1f54 [ 71.357332][ C1] do_group_exit+0x104/0x274 [ 71.358009][ C1] get_signal+0x638/0x13b0 [ 71.358610][ C1] do_notify_resume+0x344/0x30a8 [ 71.359334][ C1] el0_svc+0xf0/0x1d0 [ 71.359814][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.360565][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.361347][ C1] irq event stamp: 2350 [ 71.361917][ C1] hardirqs last enabled at (2349): [] lock_page_memcg+0x110/0x22c [ 71.363207][ C1] hardirqs last disabled at (2350): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.364622][ C1] softirqs last enabled at (1224): [] local_bh_enable+0x10/0x34 [ 71.365827][ C1] softirqs last disabled at (1222): [] local_bh_disable+0x10/0x34 [ 71.367086][ C1] ---[ end trace a72683cc467bd4c6 ]--- [ 71.429307][ T4800] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.430690][ T4800] Bad inode number on dev loop0: 2 is out of range [ 71.431757][ T4800] SysV FS: get root inode failed [ 71.432496][ T4800] oldfs: cannot read superblock [ 71.438372][ C0] ------------[ cut here ]------------ [ 71.439302][ C0] VFS: brelse: Trying to free free buffer [ 71.440127][ C0] WARNING: CPU: 0 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.441369][ C0] Modules linked in: [ 71.441899][ C0] CPU: 0 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.443040][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.444353][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.445391][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 71.446189][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 71.446947][ C0] sp : ffff800008007df0 [ 71.447458][ C0] x29: ffff800008007df0 x28: ffff0000c8370000 x27: 1fffe000341d085c [ 71.448456][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 71.449568][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dec5ac28 [ 71.450638][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 71.451714][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 71.452863][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.453910][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : ca04e80e70640500 [ 71.454973][ C0] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.456203][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.457295][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.458435][ C0] Call trace: [ 71.458916][ C0] invalidate_bh_lru+0x128/0x22c [ 71.459643][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 71.460516][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.461504][ C0] ipi_handler+0x10c/0x70c [ 71.462116][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 71.462857][ C0] handle_domain_irq+0x148/0x200 [ 71.463511][ C0] gic_handle_irq+0x78/0x1b8 [ 71.464101][ C0] call_on_irq_stack+0x30/0x48 [ 71.464730][ C0] do_interrupt_handler+0x6c/0x88 [ 71.465480][ C0] el1_interrupt+0x30/0x58 [ 71.466100][ C0] el1h_64_irq_handler+0x18/0x24 [ 71.466765][ C0] el1h_64_irq+0x78/0x7c [ 71.467294][ C0] arch_local_irq_restore+0x8/0x10 [ 71.468037][ C0] ___might_sleep+0x48/0x4dc [ 71.468717][ C0] __might_sleep+0x98/0x124 [ 71.469291][ C0] __might_fault+0x80/0x128 [ 71.469942][ C0] filldir64+0x728/0xa08 [ 71.470552][ C0] dcache_readdir+0x374/0x668 [ 71.471177][ C0] iterate_dir+0x1f0/0x4d0 [ 71.471733][ C0] __arm64_sys_getdents64+0x11c/0x338 [ 71.472432][ C0] invoke_syscall+0x98/0x28c [ 71.473078][ C0] el0_svc_common+0x13c/0x258 [ 71.473729][ C0] do_el0_svc+0x5c/0x140 [ 71.474343][ C0] el0_svc+0x78/0x1d0 [ 71.474845][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 71.475579][ C0] el0t_64_sync+0x1a0/0x1a4 [ 71.476213][ C0] irq event stamp: 300744 [ 71.476859][ C0] hardirqs last enabled at (300743): [] el0_svc_common+0xa0/0x258 [ 71.478217][ C0] hardirqs last disabled at (300744): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.479661][ C0] softirqs last enabled at (300664): [] local_bh_enable+0x10/0x34 [ 71.481049][ C0] softirqs last disabled at (300662): [] local_bh_disable+0x10/0x34 [ 71.482247][ C0] ---[ end trace a72683cc467bd4c7 ]--- [ 71.569680][ T4802] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.570709][ T4802] Bad inode number on dev loop0: 2 is out of range [ 71.571725][ T4802] SysV FS: get root inode failed [ 71.572469][ T4802] oldfs: cannot read superblock [ 71.582752][ T4708] ------------[ cut here ]------------ [ 71.583628][ T4708] VFS: brelse: Trying to free free buffer [ 71.584562][ T4708] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.585990][ T4708] Modules linked in: [ 71.586556][ T4708] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 71.587669][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.589022][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.589985][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 71.590877][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 71.591602][ T4708] sp : ffff80001fc177d0 [ 71.592177][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 71.593284][ T4708] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 71.594460][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f24e8 [ 71.595561][ T4708] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 71.596680][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 71.597778][ T4708] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.598877][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 71.599985][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.601114][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.602242][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.603279][ T4708] Call trace: [ 71.603690][ T4708] invalidate_bh_lru+0x128/0x22c [ 71.604411][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 71.605197][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.605953][ T4708] invalidate_bh_lrus+0x34/0x40 [ 71.606659][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 71.607503][ T4708] blkdev_put+0x444/0x6c4 [ 71.608121][ T4708] blkdev_close+0x74/0xb0 [ 71.608735][ T4708] __fput+0x1b8/0x7e8 [ 71.609340][ T4708] ____fput+0x20/0x30 [ 71.609892][ T4708] task_work_run+0x13c/0x1e8 [ 71.610525][ T4708] do_notify_resume+0x2488/0x30a8 [ 71.611192][ T4708] el0_svc+0xf0/0x1d0 [ 71.611826][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 71.612481][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 71.613095][ T4708] irq event stamp: 220458 [ 71.613699][ T4708] hardirqs last enabled at (220457): [] kasan_quarantine_put+0xc4/0x200 [ 71.615060][ T4708] hardirqs last disabled at (220458): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.616460][ T4708] softirqs last enabled at (220202): [] local_bh_enable+0x10/0x34 [ 71.617752][ T4708] softirqs last disabled at (220200): [] local_bh_disable+0x10/0x34 [ 71.619042][ T4708] ---[ end trace a72683cc467bd4c8 ]--- 1970/01/01 00:01:11 executed programs: 46 [ 71.656737][ T4804] set_capacity_and_notify: 29 callbacks suppressed [ 71.656750][ T4804] loop0: detected capacity change from 0 to 128 [ 71.663446][ T4804] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.664508][ T4804] Bad inode number on dev loop0: 2 is out of range [ 71.665479][ T4804] SysV FS: get root inode failed [ 71.666158][ T4804] oldfs: cannot read superblock [ 71.668585][ C0] ------------[ cut here ]------------ [ 71.669332][ C0] VFS: brelse: Trying to free free buffer [ 71.670170][ C0] WARNING: CPU: 0 PID: 4804 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.671405][ C0] Modules linked in: [ 71.671989][ C0] CPU: 0 PID: 4804 Comm: syz.0.60 Tainted: G W syzkaller #0 [ 71.673126][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.674477][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.675615][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 71.676450][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 71.677213][ C0] sp : ffff800008007df0 [ 71.677870][ C0] x29: ffff800008007df0 x28: ffff0000dab18000 x27: 1fffe000341d085c [ 71.678955][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 71.680044][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f2888 [ 71.681155][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 71.682282][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 71.683393][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.684645][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : eb44776393837300 [ 71.685773][ C0] x8 : eb44776393837300 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.686856][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.688037][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.689152][ C0] Call trace: [ 71.689600][ C0] invalidate_bh_lru+0x128/0x22c [ 71.690248][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 71.691068][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.691962][ C0] ipi_handler+0x10c/0x70c [ 71.692516][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 71.693256][ C0] handle_domain_irq+0x148/0x200 [ 71.693967][ C0] gic_handle_irq+0x78/0x1b8 [ 71.694532][ C0] call_on_irq_stack+0x30/0x48 [ 71.695177][ C0] do_interrupt_handler+0x6c/0x88 [ 71.695834][ C0] el1_interrupt+0x30/0x58 [ 71.696453][ C0] el1h_64_irq_handler+0x18/0x24 [ 71.697217][ C0] el1h_64_irq+0x78/0x7c [ 71.697758][ C0] unwind_frame+0x64/0x684 [ 71.698288][ C0] arch_stack_walk+0x204/0x2c0 [ 71.699000][ C0] stack_trace_save+0x9c/0xf0 [ 71.699653][ C0] kasan_set_track+0x4c/0x84 [ 71.700323][ C0] kasan_set_free_info+0x28/0x4c [ 71.701026][ C0] ____kasan_slab_free+0x118/0x164 [ 71.701737][ C0] __kasan_slab_free+0x18/0x28 [ 71.702382][ C0] slab_free_freelist_hook+0x128/0x1e4 [ 71.703159][ C0] kmem_cache_free+0xdc/0x3b4 [ 71.703814][ C0] unlink_anon_vmas+0x224/0x53c [ 71.704478][ C0] free_pgtables+0x154/0x280 [ 71.705056][ C0] exit_mmap+0x2d8/0x510 [ 71.705656][ C0] __mmput+0xe8/0x3a0 [ 71.706187][ C0] mmput+0x80/0xc0 [ 71.706783][ C0] exit_mm+0x5dc/0x704 [ 71.707301][ C0] do_exit+0x4bc/0x1f54 [ 71.707912][ C0] do_group_exit+0x104/0x274 [ 71.708556][ C0] get_signal+0x638/0x13b0 [ 71.709141][ C0] do_notify_resume+0x344/0x30a8 [ 71.709836][ C0] el0_svc+0xf0/0x1d0 [ 71.710387][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 71.711153][ C0] el0t_64_sync+0x1a0/0x1a4 [ 71.711763][ C0] irq event stamp: 2522 [ 71.712322][ C0] hardirqs last enabled at (2521): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 71.713783][ C0] hardirqs last disabled at (2522): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.715029][ C0] softirqs last enabled at (1260): [] local_bh_enable+0x10/0x34 [ 71.716288][ C0] softirqs last disabled at (1258): [] local_bh_disable+0x10/0x34 [ 71.717620][ C0] ---[ end trace a72683cc467bd4c9 ]--- [ 71.770901][ T4806] loop0: detected capacity change from 0 to 128 [ 71.775858][ T4806] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.776978][ T4806] Bad inode number on dev loop0: 2 is out of range [ 71.777972][ T4806] SysV FS: get root inode failed [ 71.778638][ T4806] oldfs: cannot read superblock [ 71.782515][ C1] ------------[ cut here ]------------ [ 71.783356][ C1] VFS: brelse: Trying to free free buffer [ 71.784260][ C1] WARNING: CPU: 1 PID: 3659 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.785461][ C1] Modules linked in: [ 71.786036][ C1] CPU: 1 PID: 3659 Comm: udevd Tainted: G W syzkaller #0 [ 71.787177][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.788466][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.789509][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.790248][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.790977][ C1] sp : ffff800008017df0 [ 71.791548][ C1] x29: ffff800008017df0 x28: ffff0000d6fcb680 x27: 1fffe000341d4a5c [ 71.792737][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 71.793888][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedefdf8 [ 71.794990][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 71.796067][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 71.797149][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 71.798252][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 023c6101a9d52800 [ 71.799469][ C1] x8 : 023c6101a9d52800 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.800647][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.801797][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.802891][ C1] Call trace: [ 71.803342][ C1] invalidate_bh_lru+0x128/0x22c [ 71.804006][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.804882][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.805840][ C1] ipi_handler+0x10c/0x70c [ 71.806444][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.807204][ C1] handle_domain_irq+0x148/0x200 [ 71.807857][ C1] gic_handle_irq+0x78/0x1b8 [ 71.808535][ C1] call_on_irq_stack+0x30/0x48 [ 71.809144][ C1] do_interrupt_handler+0x6c/0x88 [ 71.809923][ C1] el1_interrupt+0x30/0x58 [ 71.810566][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.811292][ C1] el1h_64_irq+0x78/0x7c [ 71.811850][ C1] arch_local_irq_restore+0x8/0x10 [ 71.812546][ C1] kernfs_dop_revalidate+0xc4/0x470 [ 71.813235][ C1] lookup_fast+0x2cc/0x594 [ 71.813831][ C1] walk_component+0x8c/0x3b8 [ 71.814438][ C1] link_path_walk+0x5a0/0xbd4 [ 71.815114][ C1] path_lookupat+0xb4/0x3f0 [ 71.815727][ C1] filename_lookup+0x1c8/0x478 [ 71.816401][ C1] user_path_at_empty+0x5c/0x1a0 [ 71.817044][ C1] do_readlinkat+0xe0/0x3fc [ 71.817665][ C1] __arm64_sys_readlinkat+0xa0/0xbc [ 71.818412][ C1] invoke_syscall+0x98/0x28c [ 71.819023][ C1] el0_svc_common+0x13c/0x258 [ 71.819641][ C1] do_el0_svc+0x5c/0x140 [ 71.820194][ C1] el0_svc+0x78/0x1d0 [ 71.820753][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.821436][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.822038][ C1] irq event stamp: 1251352 [ 71.822776][ C1] hardirqs last enabled at (1251351): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 71.824308][ C1] hardirqs last disabled at (1251352): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.825703][ C1] softirqs last enabled at (1251342): [] local_bh_enable+0x10/0x34 [ 71.827133][ C1] softirqs last disabled at (1251340): [] local_bh_disable+0x10/0x34 [ 71.828549][ C1] ---[ end trace a72683cc467bd4ca ]--- [ 71.883661][ T4808] loop0: detected capacity change from 0 to 128 [ 71.887561][ T4808] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.888640][ T4808] Bad inode number on dev loop0: 2 is out of range [ 71.889526][ T4808] SysV FS: get root inode failed [ 71.890244][ T4808] oldfs: cannot read superblock [ 71.897191][ C1] ------------[ cut here ]------------ [ 71.898008][ C1] VFS: brelse: Trying to free free buffer [ 71.898782][ C1] WARNING: CPU: 1 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.900043][ C1] Modules linked in: [ 71.900594][ C1] CPU: 1 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.901857][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.903296][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.904344][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.905098][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.905918][ C1] sp : ffff800008017df0 [ 71.906485][ C1] x29: ffff800008017df0 x28: ffff0000c8370000 x27: 1fffe000341d4a5c [ 71.907519][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 71.908687][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedeb230 [ 71.909823][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 71.910826][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 71.911940][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 71.913082][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : ca04e80e70640500 [ 71.914138][ C1] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.915257][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.916228][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 71.917430][ C1] Call trace: [ 71.917878][ C1] invalidate_bh_lru+0x128/0x22c [ 71.918560][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.919404][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.920377][ C1] ipi_handler+0x10c/0x70c [ 71.921062][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.921796][ C1] handle_domain_irq+0x148/0x200 [ 71.922460][ C1] gic_handle_irq+0x78/0x1b8 [ 71.923054][ C1] call_on_irq_stack+0x30/0x48 [ 71.923693][ C1] do_interrupt_handler+0x6c/0x88 [ 71.924417][ C1] el1_interrupt+0x30/0x58 [ 71.924956][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.925589][ C1] el1h_64_irq+0x78/0x7c [ 71.926165][ C1] rcu_is_watching+0x98/0x134 [ 71.926808][ C1] get_mem_cgroup_from_objcg+0xe0/0x138 [ 71.927591][ C1] obj_cgroup_charge_pages+0x80/0x1a4 [ 71.928338][ C1] __memcg_kmem_charge_page+0x3c0/0x59c [ 71.929152][ C1] __alloc_pages+0x1d0/0x474 [ 71.929825][ C1] alloc_pages+0x34c/0x5c0 [ 71.930434][ C1] get_zeroed_page+0x20/0x8c [ 71.931076][ C1] __pud_alloc+0x48/0x1c4 [ 71.931682][ C1] copy_page_range+0x2040/0x2348 [ 71.932472][ C1] copy_mm+0x9f0/0x1070 [ 71.933056][ C1] copy_process+0x15fc/0x3734 [ 71.933671][ C1] kernel_clone+0x1ec/0xa10 [ 71.934317][ C1] __arm64_sys_clone+0x154/0x1c0 [ 71.934934][ C1] invoke_syscall+0x98/0x28c [ 71.935599][ C1] el0_svc_common+0x13c/0x258 [ 71.936200][ C1] do_el0_svc+0x5c/0x140 [ 71.936796][ C1] el0_svc+0x78/0x1d0 [ 71.937368][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.938041][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.938628][ C1] irq event stamp: 315820 [ 71.939272][ C1] hardirqs last enabled at (315819): [] seqcount_lockdep_reader_access+0x14c/0x22c [ 71.940730][ C1] hardirqs last disabled at (315820): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.942266][ C1] softirqs last enabled at (315718): [] local_bh_enable+0x10/0x34 [ 71.943661][ C1] softirqs last disabled at (315716): [] local_bh_disable+0x10/0x34 [ 71.944942][ C1] ---[ end trace a72683cc467bd4cb ]--- [ 71.985686][ T4810] loop0: detected capacity change from 0 to 128 [ 71.990277][ T4810] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.991356][ T4810] Bad inode number on dev loop0: 2 is out of range [ 71.992300][ T4810] SysV FS: get root inode failed [ 71.992995][ T4810] oldfs: cannot read superblock [ 72.010098][ T4708] ------------[ cut here ]------------ [ 72.011009][ T4708] VFS: brelse: Trying to free free buffer [ 72.011924][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.013097][ T4708] Modules linked in: [ 72.013592][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 72.014881][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.016244][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.017487][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 72.018134][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 72.018728][ T4708] sp : ffff80001fc177d0 [ 72.019345][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 72.020744][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 72.021876][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedeb5d0 [ 72.022971][ T4708] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 72.024124][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 72.025311][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.026563][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 72.027721][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.028871][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.030083][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 72.031284][ T4708] Call trace: [ 72.031780][ T4708] invalidate_bh_lru+0x128/0x22c [ 72.032446][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 72.033369][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 72.034095][ T4708] invalidate_bh_lrus+0x34/0x40 [ 72.034716][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 72.035361][ T4708] blkdev_put+0x444/0x6c4 [ 72.035908][ T4708] blkdev_close+0x74/0xb0 [ 72.036464][ T4708] __fput+0x1b8/0x7e8 [ 72.037032][ T4708] ____fput+0x20/0x30 [ 72.037566][ T4708] task_work_run+0x13c/0x1e8 [ 72.038176][ T4708] do_notify_resume+0x2488/0x30a8 [ 72.038903][ T4708] el0_svc+0xf0/0x1d0 [ 72.039522][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 72.040188][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 72.040789][ T4708] irq event stamp: 243398 [ 72.041415][ T4708] hardirqs last enabled at (243397): [] kasan_quarantine_put+0xc4/0x200 [ 72.042789][ T4708] hardirqs last disabled at (243398): [] smp_call_function_many_cond+0xa50/0xec0 [ 72.044235][ T4708] softirqs last enabled at (242556): [] local_bh_enable+0x10/0x34 [ 72.045609][ T4708] softirqs last disabled at (242554): [] local_bh_disable+0x10/0x34 [ 72.046860][ T4708] ---[ end trace a72683cc467bd4cc ]--- [ 72.105697][ T4812] loop0: detected capacity change from 0 to 128 [ 72.158172][ T4812] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.159331][ T4812] Bad inode number on dev loop0: 2 is out of range [ 72.160407][ T4812] SysV FS: get root inode failed [ 72.161122][ T4812] oldfs: cannot read superblock [ 72.161837][ T4812] ------------[ cut here ]------------ [ 72.162644][ T4812] VFS: brelse: Trying to free free buffer [ 72.163476][ T4812] WARNING: CPU: 1 PID: 4812 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.164753][ T4812] Modules linked in: [ 72.165250][ T4812] CPU: 1 PID: 4812 Comm: syz.0.64 Tainted: G W syzkaller #0 [ 72.166399][ T4812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.167757][ T4812] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.168883][ T4812] pc : invalidate_bh_lru+0x128/0x22c [ 72.169581][ T4812] lr : invalidate_bh_lru+0x128/0x22c [ 72.170374][ T4812] sp : ffff800020147710 [ 72.170952][ T4812] x29: ffff800020147710 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 72.172088][ T4812] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 72.173228][ T4812] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedeb970 [ 72.174340][ T4812] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 72.175493][ T4812] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 72.176618][ T4812] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.177718][ T4812] x11: ff8080000830061c x10: 0000000000000000 x9 : 1e4d81ba597d8800 [ 72.178831][ T4812] x8 : 1e4d81ba597d8800 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.180087][ T4812] x5 : ffff800020147018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.181189][ T4812] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 72.182321][ T4812] Call trace: [ 72.182846][ T4812] invalidate_bh_lru+0x128/0x22c [ 72.183557][ T4812] smp_call_function_many_cond+0xa5c/0xec0 [ 72.184395][ T4812] on_each_cpu_cond_mask+0x5c/0xc4 [ 72.185111][ T4812] invalidate_bh_lrus+0x34/0x40 [ 72.185893][ T4812] blkdev_flush_mapping+0x16c/0x334 [ 72.186577][ T4812] blkdev_put+0x444/0x6c4 [ 72.187164][ T4812] kill_block_super+0xa0/0xe0 [ 72.187846][ T4812] deactivate_locked_super+0xc0/0x13c [ 72.188595][ T4812] mount_bdev+0x284/0x35c [ 72.189193][ T4812] sysv_mount+0x44/0x58 [ 72.189772][ T4812] legacy_get_tree+0xd8/0x174 [ 72.190392][ T4812] vfs_get_tree+0x90/0x278 [ 72.191043][ T4812] do_new_mount+0x228/0x804 [ 72.191739][ T4812] path_mount+0x57c/0xfe8 [ 72.192277][ T4812] __arm64_sys_mount+0x488/0x5f8 [ 72.192992][ T4812] invoke_syscall+0x98/0x28c [ 72.193655][ T4812] el0_svc_common+0x13c/0x258 [ 72.194302][ T4812] do_el0_svc+0x5c/0x140 [ 72.194925][ T4812] el0_svc+0x78/0x1d0 [ 72.195481][ T4812] el0t_64_sync_handler+0xcc/0xe4 [ 72.196153][ T4812] el0t_64_sync+0x1a0/0x1a4 [ 72.196821][ T4812] irq event stamp: 1204 [ 72.197437][ T4812] hardirqs last enabled at (1203): [] kasan_quarantine_put+0xc4/0x200 [ 72.198749][ T4812] hardirqs last disabled at (1204): [] smp_call_function_many_cond+0xa50/0xec0 [ 72.200062][ T4812] softirqs last enabled at (956): [] local_bh_enable+0x10/0x34 [ 72.201271][ T4812] softirqs last disabled at (954): [] local_bh_disable+0x10/0x34 [ 72.202655][ T4812] ---[ end trace a72683cc467bd4cd ]--- [ 72.348846][ T4814] loop0: detected capacity change from 0 to 128 [ 72.352433][ T4814] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.355871][ T4814] Bad inode number on dev loop0: 2 is out of range [ 72.357255][ T4814] SysV FS: get root inode failed [ 72.357995][ T4814] oldfs: cannot read superblock [ 72.363950][ T4708] ------------[ cut here ]------------ [ 72.364731][ T4708] VFS: brelse: Trying to free free buffer [ 72.365546][ T4708] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.366704][ T4708] Modules linked in: [ 72.367220][ T4708] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 72.368390][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.369715][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.370679][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 72.371359][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 72.372142][ T4708] sp : ffff80001fc177d0 [ 72.372752][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 72.373818][ T4708] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 72.374936][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f2c28 [ 72.376051][ T4708] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 72.377155][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 72.378200][ T4708] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 72.379363][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 72.380392][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.381383][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.382489][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 72.383583][ T4708] Call trace: [ 72.384007][ T4708] invalidate_bh_lru+0x128/0x22c [ 72.384648][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 72.385374][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 72.386042][ T4708] invalidate_bh_lrus+0x34/0x40 [ 72.386682][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 72.387390][ T4708] blkdev_put+0x444/0x6c4 [ 72.388019][ T4708] blkdev_close+0x74/0xb0 [ 72.388508][ T4708] __fput+0x1b8/0x7e8 [ 72.388990][ T4708] ____fput+0x20/0x30 [ 72.389506][ T4708] task_work_run+0x13c/0x1e8 [ 72.390089][ T4708] do_notify_resume+0x2488/0x30a8 [ 72.390761][ T4708] el0_svc+0xf0/0x1d0 [ 72.391293][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 72.391967][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 72.392540][ T4708] irq event stamp: 257084 [ 72.393111][ T4708] hardirqs last enabled at (257083): [] kasan_quarantine_put+0xc4/0x200 [ 72.394433][ T4708] hardirqs last disabled at (257084): [] smp_call_function_many_cond+0xa50/0xec0 [ 72.395730][ T4708] softirqs last enabled at (256828): [] local_bh_enable+0x10/0x34 [ 72.396979][ T4708] softirqs last disabled at (256826): [] local_bh_disable+0x10/0x34 [ 72.398280][ T4708] ---[ end trace a72683cc467bd4ce ]--- [ 72.416504][ T4816] loop0: detected capacity change from 0 to 128 [ 72.461087][ T4816] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.462265][ T4816] Bad inode number on dev loop0: 2 is out of range [ 72.463161][ T4816] SysV FS: get root inode failed [ 72.464279][ T4816] oldfs: cannot read superblock [ 72.465086][ T4816] ------------[ cut here ]------------ [ 72.465882][ T4816] VFS: brelse: Trying to free free buffer [ 72.466691][ T4816] WARNING: CPU: 1 PID: 4816 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.467866][ T4816] Modules linked in: [ 72.468418][ T4816] CPU: 1 PID: 4816 Comm: syz.0.66 Tainted: G W syzkaller #0 [ 72.469590][ T4816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.470891][ T4816] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.471970][ T4816] pc : invalidate_bh_lru+0x128/0x22c [ 72.472705][ T4816] lr : invalidate_bh_lru+0x128/0x22c [ 72.473407][ T4816] sp : ffff800020197710 [ 72.473941][ T4816] x29: ffff800020197710 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 72.475106][ T4816] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 72.476207][ T4816] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dedebd10 [ 72.477270][ T4816] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 72.478374][ T4816] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 72.479475][ T4816] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.480794][ T4816] x11: ff8080000830061c x10: 0000000000000000 x9 : fbf8d6a0e0fc9600 [ 72.482340][ T4816] x8 : fbf8d6a0e0fc9600 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.483453][ T4816] x5 : ffff800020197018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.484575][ T4816] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 72.485568][ T4816] Call trace: [ 72.486012][ T4816] invalidate_bh_lru+0x128/0x22c [ 72.486717][ T4816] smp_call_function_many_cond+0xa5c/0xec0 [ 72.487530][ T4816] on_each_cpu_cond_mask+0x5c/0xc4 [ 72.488224][ T4816] invalidate_bh_lrus+0x34/0x40 [ 72.488845][ T4816] blkdev_flush_mapping+0x16c/0x334 [ 72.489581][ T4816] blkdev_put+0x444/0x6c4 [ 72.490169][ T4816] kill_block_super+0xa0/0xe0 [ 72.490776][ T4816] deactivate_locked_super+0xc0/0x13c [ 72.491483][ T4816] mount_bdev+0x284/0x35c [ 72.492080][ T4816] sysv_mount+0x44/0x58 [ 72.492611][ T4816] legacy_get_tree+0xd8/0x174 [ 72.493228][ T4816] vfs_get_tree+0x90/0x278 [ 72.493815][ T4816] do_new_mount+0x228/0x804 [ 72.494392][ T4816] path_mount+0x57c/0xfe8 [ 72.494942][ T4816] __arm64_sys_mount+0x488/0x5f8 [ 72.495646][ T4816] invoke_syscall+0x98/0x28c [ 72.496269][ T4816] el0_svc_common+0x13c/0x258 [ 72.496882][ T4816] do_el0_svc+0x5c/0x140 [ 72.497459][ T4816] el0_svc+0x78/0x1d0 [ 72.497979][ T4816] el0t_64_sync_handler+0xcc/0xe4 [ 72.498602][ T4816] el0t_64_sync+0x1a0/0x1a4 [ 72.499203][ T4816] irq event stamp: 1914 [ 72.499769][ T4816] hardirqs last enabled at (1913): [] kasan_quarantine_put+0xc4/0x200 [ 72.501044][ T4816] hardirqs last disabled at (1914): [] smp_call_function_many_cond+0xa50/0xec0 [ 72.502502][ T4816] softirqs last enabled at (1892): [] handle_softirqs+0xa70/0xc14 [ 72.503743][ T4816] softirqs last disabled at (1871): [] __irq_exit_rcu+0x240/0x434 [ 72.505020][ T4816] ---[ end trace a72683cc467bd4cf ]--- [ 72.616286][ T4818] loop0: detected capacity change from 0 to 128 [ 72.621144][ T4818] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.622225][ T4818] Bad inode number on dev loop0: 2 is out of range [ 72.624542][ T4818] SysV FS: get root inode failed [ 72.625728][ T4818] oldfs: cannot read superblock [ 72.632253][ C0] ------------[ cut here ]------------ [ 72.633100][ C0] VFS: brelse: Trying to free free buffer [ 72.633916][ C0] WARNING: CPU: 0 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.635136][ C0] Modules linked in: [ 72.635692][ C0] CPU: 0 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.636861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.638218][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.639268][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.639897][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.640603][ C0] sp : ffff800008007df0 [ 72.641203][ C0] x29: ffff800008007df0 x28: ffff0000c8370000 x27: 1fffe000341d085b [ 72.642304][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 72.643373][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f3060 [ 72.644400][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 72.645502][ C0] x17: 0000000000010003 x16: ffff8000082dbd3c x15: 0000000000000012 [ 72.646655][ C0] x14: 0000000000000001 x13: 1ffff00001000edc x12: 0000000000000000 [ 72.647599][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : ca04e80e70640500 [ 72.648726][ C0] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.649748][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff800008307f44 [ 72.650780][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 72.651888][ C0] Call trace: [ 72.652499][ C0] invalidate_bh_lru+0x128/0x22c [ 72.653343][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.654202][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.655055][ C0] ipi_handler+0x10c/0x70c [ 72.655838][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.656560][ C0] handle_domain_irq+0x148/0x200 [ 72.657232][ C0] gic_handle_irq+0x78/0x1b8 [ 72.657867][ C0] call_on_irq_stack+0x30/0x48 [ 72.658838][ C0] do_interrupt_handler+0x6c/0x88 [ 72.659482][ C0] el1_interrupt+0x30/0x58 [ 72.660063][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.660757][ C0] el1h_64_irq+0x78/0x7c [ 72.661312][ C0] __sanitizer_cov_trace_const_cmp4+0x14/0xc4 [ 72.662187][ C0] walk_stackframe+0x5c/0xa8 [ 72.662869][ C0] return_address+0xd8/0x15c [ 72.663438][ C0] preempt_count_add+0x14c/0x41c [ 72.664137][ C0] _raw_spin_lock+0x24/0x10c [ 72.664822][ C0] free_vmap_area_noflush+0x1dc/0x8a4 [ 72.665526][ C0] remove_vm_area+0x1ac/0x1c4 [ 72.666251][ C0] __vunmap+0x310/0x9e4 [ 72.666758][ C0] vfree+0xbc/0x154 [ 72.667318][ C0] do_ip6t_get_ctl+0x11a8/0x1464 [ 72.668039][ C0] nf_getsockopt+0x254/0x274 [ 72.668679][ C0] ipv6_getsockopt+0x588/0x256c [ 72.669341][ C0] tcp_getsockopt+0x214/0x2d2c [ 72.670033][ C0] sock_common_getsockopt+0xa8/0xc4 [ 72.670793][ C0] __sys_getsockopt+0x1b8/0x250 [ 72.671463][ C0] __arm64_sys_getsockopt+0xc0/0xdc [ 72.672134][ C0] invoke_syscall+0x98/0x28c [ 72.672840][ C0] el0_svc_common+0x13c/0x258 [ 72.673443][ C0] do_el0_svc+0x5c/0x140 [ 72.674032][ C0] el0_svc+0x78/0x1d0 [ 72.674533][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 72.675252][ C0] el0t_64_sync+0x1a0/0x1a4 [ 72.675888][ C0] irq event stamp: 332690 [ 72.676466][ C0] hardirqs last enabled at (332689): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 72.677857][ C0] hardirqs last disabled at (332690): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.679191][ C0] softirqs last enabled at (332610): [] local_bh_enable+0x10/0x34 [ 72.680556][ C0] softirqs last disabled at (332608): [] local_bh_disable+0x10/0x34 [ 72.681823][ C0] ---[ end trace a72683cc467bd4d0 ]--- [ 72.726970][ T4820] loop0: detected capacity change from 0 to 128 [ 72.733868][ T4820] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.734995][ T4820] Bad inode number on dev loop0: 2 is out of range [ 72.735990][ T4820] SysV FS: get root inode failed [ 72.736674][ T4820] oldfs: cannot read superblock [ 72.738655][ C1] ------------[ cut here ]------------ [ 72.739477][ C1] VFS: brelse: Trying to free free buffer [ 72.740346][ C1] WARNING: CPU: 1 PID: 3659 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.741733][ C1] Modules linked in: [ 72.742294][ C1] CPU: 1 PID: 3659 Comm: udevd Tainted: G W syzkaller #0 [ 72.743491][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.745038][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.746214][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.746919][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.747608][ C1] sp : ffff800008017df0 [ 72.748156][ C1] x29: ffff800008017df0 x28: ffff0000d6fcb680 x27: 1fffe000341d4a5b [ 72.749351][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 72.750559][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dede8148 [ 72.751825][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 72.753102][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 72.754399][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.755593][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 023c6101a9d52800 [ 72.756843][ C1] x8 : 023c6101a9d52800 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.758082][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.759278][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.760485][ C1] Call trace: [ 72.760975][ C1] invalidate_bh_lru+0x128/0x22c [ 72.761810][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.762757][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.763804][ C1] ipi_handler+0x10c/0x70c [ 72.764408][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.765169][ C1] handle_domain_irq+0x148/0x200 [ 72.765912][ C1] gic_handle_irq+0x78/0x1b8 [ 72.766574][ C1] call_on_irq_stack+0x30/0x48 [ 72.767229][ C1] do_interrupt_handler+0x6c/0x88 [ 72.767993][ C1] el1_interrupt+0x30/0x58 [ 72.768676][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.769396][ C1] el1h_64_irq+0x78/0x7c [ 72.770004][ C1] __memset+0x170/0x1c0 [ 72.770530][ C1] kmem_cache_alloc+0x1dc/0x3d8 [ 72.771203][ C1] getname_flags+0xb8/0x44c [ 72.771833][ C1] user_path_at_empty+0x40/0x1a0 [ 72.772529][ C1] do_readlinkat+0xe0/0x3fc [ 72.773187][ C1] __arm64_sys_readlinkat+0xa0/0xbc [ 72.773896][ C1] invoke_syscall+0x98/0x28c [ 72.774542][ C1] el0_svc_common+0x13c/0x258 [ 72.775157][ C1] do_el0_svc+0x5c/0x140 [ 72.775767][ C1] el0_svc+0x78/0x1d0 [ 72.776317][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 72.777002][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.777655][ C1] irq event stamp: 1282594 [ 72.778251][ C1] hardirqs last enabled at (1282593): [] el0_svc_common+0xa0/0x258 [ 72.779645][ C1] hardirqs last disabled at (1282594): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.781165][ C1] softirqs last enabled at (1282588): [] local_bh_enable+0x10/0x34 [ 72.782646][ C1] softirqs last disabled at (1282586): [] local_bh_disable+0x10/0x34 [ 72.784073][ C1] ---[ end trace a72683cc467bd4d1 ]--- [ 72.822883][ T4822] loop0: detected capacity change from 0 to 128 [ 72.904768][ T4822] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.905898][ T4822] Bad inode number on dev loop0: 2 is out of range [ 72.906813][ T4822] SysV FS: get root inode failed [ 72.907519][ T4822] oldfs: cannot read superblock [ 72.908281][ C1] ------------[ cut here ]------------ [ 72.909100][ C1] VFS: brelse: Trying to free free buffer [ 72.909869][ C1] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.911235][ C1] Modules linked in: [ 72.911762][ C1] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 72.912983][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.914367][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.915537][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.916356][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.917146][ C1] sp : ffff800008017df0 [ 72.917725][ C1] x29: ffff800008017df0 x28: ffff0000cafc51c0 x27: 1fffe000341d4a5b [ 72.918889][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 72.920033][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dede84e8 [ 72.921149][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 72.922328][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 72.923410][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.924597][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : c35095dc35abab00 [ 72.925633][ C1] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.926690][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.927757][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 72.928842][ C1] Call trace: [ 72.929309][ C1] invalidate_bh_lru+0x128/0x22c [ 72.929982][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.930763][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.931652][ C1] ipi_handler+0x10c/0x70c [ 72.932245][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.932992][ C1] handle_domain_irq+0x148/0x200 [ 72.933675][ C1] gic_handle_irq+0x78/0x1b8 [ 72.934274][ C1] call_on_irq_stack+0x30/0x48 [ 72.934973][ C1] do_interrupt_handler+0x6c/0x88 [ 72.935741][ C1] el1_interrupt+0x30/0x58 [ 72.936314][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.936930][ C1] el1h_64_irq+0x78/0x7c [ 72.937512][ C1] ___slab_alloc+0x2dc/0xd84 [ 72.938142][ C1] __slab_alloc+0x68/0xc0 [ 72.938741][ C1] __kmalloc+0x2e8/0x440 [ 72.939281][ C1] tomoyo_encode+0x260/0x484 [ 72.939940][ C1] tomoyo_realpath_from_path+0x4ec/0x540 [ 72.940713][ C1] tomoyo_check_open_permission+0x19c/0x35c [ 72.941513][ C1] tomoyo_file_open+0x130/0x1a8 [ 72.942191][ C1] security_file_open+0x6c/0xac [ 72.942859][ C1] do_dentry_open+0x2a4/0xea4 [ 72.943543][ C1] vfs_open+0x7c/0x90 [ 72.944086][ C1] path_openat+0x1ff8/0x2808 [ 72.944647][ C1] do_filp_open+0x188/0x370 [ 72.945295][ C1] do_sys_openat2+0x134/0x3fc [ 72.945952][ C1] __arm64_sys_openat+0x11c/0x150 [ 72.946636][ C1] invoke_syscall+0x98/0x28c [ 72.947283][ C1] el0_svc_common+0x13c/0x258 [ 72.947923][ C1] do_el0_svc+0x5c/0x140 [ 72.948534][ C1] el0_svc+0x78/0x1d0 [ 72.949247][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 72.949940][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.950535][ C1] irq event stamp: 273346 [ 72.951089][ C1] hardirqs last enabled at (273345): [] ___slab_alloc+0x2cc/0xd84 [ 72.952373][ C1] hardirqs last disabled at (273346): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.953717][ C1] softirqs last enabled at (273330): [] local_bh_enable+0x10/0x34 [ 72.955070][ C1] softirqs last disabled at (273328): [] local_bh_disable+0x10/0x34 [ 72.956397][ C1] ---[ end trace a72683cc467bd4d2 ]--- [ 73.070009][ T4826] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.071203][ T4826] Bad inode number on dev loop0: 2 is out of range [ 73.072119][ T4826] SysV FS: get root inode failed [ 73.072795][ T4826] oldfs: cannot read superblock [ 73.081648][ C1] ------------[ cut here ]------------ [ 73.082459][ C1] VFS: brelse: Trying to free free buffer [ 73.083276][ C1] WARNING: CPU: 1 PID: 4828 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.084511][ C1] Modules linked in: [ 73.085061][ C1] CPU: 1 PID: 4828 Comm: syz.0.72 Tainted: G W syzkaller #0 [ 73.086268][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.087690][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.088820][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.089512][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.090294][ C1] sp : ffff800008017df0 [ 73.090848][ C1] x29: ffff800008017df0 x28: ffff0000c8ef9b40 x27: 1fffe000341d4a5c [ 73.091956][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 73.093055][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dede8888 [ 73.094290][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.095449][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.096625][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 73.097800][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 9a899c5581be1900 [ 73.098890][ C1] x8 : 9a899c5581be1900 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.100009][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.101158][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.102281][ C1] Call trace: [ 73.102743][ C1] invalidate_bh_lru+0x128/0x22c [ 73.103438][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.104343][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.105282][ C1] ipi_handler+0x10c/0x70c [ 73.105879][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.106576][ C1] handle_domain_irq+0x148/0x200 [ 73.107233][ C1] gic_handle_irq+0x78/0x1b8 [ 73.107868][ C1] call_on_irq_stack+0x30/0x48 [ 73.108491][ C1] do_interrupt_handler+0x6c/0x88 [ 73.109188][ C1] el1_interrupt+0x30/0x58 [ 73.109806][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.110503][ C1] el1h_64_irq+0x78/0x7c [ 73.111086][ C1] get_page_from_freelist+0x20c0/0x2a5c [ 73.111919][ C1] __alloc_pages+0x1a4/0x474 [ 73.112512][ C1] alloc_pages_vma+0x284/0x790 [ 73.113226][ C1] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 73.114128][ C1] handle_mm_fault+0x17f4/0x2aac [ 73.114765][ C1] do_page_fault+0x690/0xad0 [ 73.115446][ C1] do_translation_fault+0xe0/0x130 [ 73.116277][ C1] do_mem_abort+0x6c/0x1b0 [ 73.116932][ C1] el0_da+0x90/0x1ec [ 73.117454][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 73.118218][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.118840][ C1] irq event stamp: 146 [ 73.119433][ C1] hardirqs last enabled at (145): [] get_page_from_freelist+0x20ac/0x2a5c [ 73.120879][ C1] hardirqs last disabled at (146): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.122283][ C1] softirqs last enabled at (88): [] local_bh_enable+0x10/0x34 [ 73.123633][ C1] softirqs last disabled at (86): [] local_bh_disable+0x10/0x34 [ 73.124950][ C1] ---[ end trace a72683cc467bd4d3 ]--- [ 73.149873][ T4828] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.151074][ T4828] Bad inode number on dev loop0: 2 is out of range [ 73.151949][ T4828] SysV FS: get root inode failed [ 73.152628][ T4828] oldfs: cannot read superblock [ 73.160476][ T4708] ------------[ cut here ]------------ [ 73.161441][ T4708] VFS: brelse: Trying to free free buffer [ 73.162357][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.163551][ T4708] Modules linked in: [ 73.164068][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 73.165295][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.166754][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.167834][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 73.168602][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 73.169374][ T4708] sp : ffff80001fc177d0 [ 73.169913][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5c [ 73.170949][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 73.172103][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dede8c28 [ 73.173258][ T4708] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 73.174375][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 73.175531][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 73.176700][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 73.177870][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.178918][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.180049][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.181184][ T4708] Call trace: [ 73.181642][ T4708] invalidate_bh_lru+0x128/0x22c [ 73.182335][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 73.183214][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.183954][ T4708] invalidate_bh_lrus+0x34/0x40 [ 73.184661][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 73.185385][ T4708] blkdev_put+0x444/0x6c4 [ 73.185992][ T4708] blkdev_close+0x74/0xb0 [ 73.186574][ T4708] __fput+0x1b8/0x7e8 [ 73.187148][ T4708] ____fput+0x20/0x30 [ 73.187690][ T4708] task_work_run+0x13c/0x1e8 [ 73.188337][ T4708] do_notify_resume+0x2488/0x30a8 [ 73.189104][ T4708] el0_svc+0xf0/0x1d0 [ 73.189689][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 73.190510][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 73.191107][ T4708] irq event stamp: 292558 [ 73.191725][ T4708] hardirqs last enabled at (292557): [] kasan_quarantine_put+0xc4/0x200 [ 73.193110][ T4708] hardirqs last disabled at (292558): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.194594][ T4708] softirqs last enabled at (292422): [] local_bh_enable+0x10/0x34 [ 73.195873][ T4708] softirqs last disabled at (292420): [] local_bh_disable+0x10/0x34 [ 73.197160][ T4708] ---[ end trace a72683cc467bd4d4 ]--- [ 73.276516][ T4830] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.277682][ T4830] Bad inode number on dev loop0: 2 is out of range [ 73.278697][ T4830] SysV FS: get root inode failed [ 73.279368][ T4830] oldfs: cannot read superblock [ 73.289802][ C1] ------------[ cut here ]------------ [ 73.290688][ C1] VFS: brelse: Trying to free free buffer [ 73.291534][ C1] WARNING: CPU: 1 PID: 4832 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.292793][ C1] Modules linked in: [ 73.293346][ C1] CPU: 1 PID: 4832 Comm: syz.0.74 Tainted: G W syzkaller #0 [ 73.294580][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.295908][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.297201][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.297970][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.298711][ C1] sp : ffff800008017df0 [ 73.299307][ C1] x29: ffff800008017df0 x28: ffff0000d1458000 x27: 1fffe000341d4a5c [ 73.300544][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 73.301773][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dede4060 [ 73.303008][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.304162][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.305289][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 73.306461][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 8c6083ed422deb00 [ 73.307685][ C1] x8 : 8c6083ed422deb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.308950][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.310061][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.311196][ C1] Call trace: [ 73.311696][ C1] invalidate_bh_lru+0x128/0x22c [ 73.312420][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.313237][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.314218][ C1] ipi_handler+0x10c/0x70c [ 73.314847][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.315543][ C1] handle_domain_irq+0x148/0x200 [ 73.316227][ C1] gic_handle_irq+0x78/0x1b8 [ 73.316823][ C1] call_on_irq_stack+0x30/0x48 [ 73.317554][ C1] do_interrupt_handler+0x6c/0x88 [ 73.318225][ C1] el1_interrupt+0x30/0x58 [ 73.318853][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.319561][ C1] el1h_64_irq+0x78/0x7c [ 73.320107][ C1] local_daif_restore+0x20/0x3c [ 73.320776][ C1] el0_da+0x80/0x1ec [ 73.321319][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 73.321975][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.322632][ C1] irq event stamp: 348 [ 73.323298][ C1] hardirqs last enabled at (347): [] local_daif_restore+0x1c/0x3c [ 73.324584][ C1] hardirqs last disabled at (348): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.325942][ C1] softirqs last enabled at (92): [] local_bh_enable+0x10/0x34 [ 73.327214][ C1] softirqs last disabled at (90): [] local_bh_disable+0x10/0x34 [ 73.328549][ C1] ---[ end trace a72683cc467bd4d5 ]--- [ 73.419385][ T4832] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.420519][ T4832] Bad inode number on dev loop0: 2 is out of range [ 73.421476][ T4832] SysV FS: get root inode failed [ 73.422232][ T4832] oldfs: cannot read superblock [ 73.424563][ C1] ------------[ cut here ]------------ [ 73.425332][ C1] VFS: brelse: Trying to free free buffer [ 73.426176][ C1] WARNING: CPU: 1 PID: 3659 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.427429][ C1] Modules linked in: [ 73.427924][ C1] CPU: 1 PID: 3659 Comm: udevd Tainted: G W syzkaller #0 [ 73.429035][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.430524][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.431547][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.432252][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.433056][ C1] sp : ffff800008017df0 [ 73.433615][ C1] x29: ffff800008017df0 x28: ffff0000d6fcb680 x27: 1fffe000341d4a5b [ 73.434803][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 73.435952][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dede4400 [ 73.436958][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 73.438087][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 73.439375][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 73.440537][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 023c6101a9d52800 [ 73.441710][ C1] x8 : 023c6101a9d52800 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.442836][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.444037][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 73.445078][ C1] Call trace: [ 73.445506][ C1] invalidate_bh_lru+0x128/0x22c [ 73.446203][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.447011][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.447898][ C1] ipi_handler+0x10c/0x70c [ 73.448494][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.449195][ C1] handle_domain_irq+0x148/0x200 [ 73.449807][ C1] gic_handle_irq+0x78/0x1b8 [ 73.450485][ C1] call_on_irq_stack+0x30/0x48 [ 73.451214][ C1] do_interrupt_handler+0x6c/0x88 [ 73.451929][ C1] el1_interrupt+0x30/0x58 [ 73.452601][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.453294][ C1] el1h_64_irq+0x78/0x7c [ 73.453867][ C1] __sanitizer_cov_trace_cmp8+0xb8/0xbc [ 73.454650][ C1] walk_stackframe+0x6c/0xa8 [ 73.455229][ C1] return_address+0xd8/0x15c [ 73.455847][ C1] preempt_count_add+0x14c/0x41c [ 73.456558][ C1] _raw_spin_lock+0x24/0x10c [ 73.457243][ C1] kernfs_iop_permission+0x6c/0x2d8 [ 73.457883][ C1] inode_permission+0x1d0/0x3c0 [ 73.458530][ C1] link_path_walk+0x28c/0xbd4 [ 73.459157][ C1] path_openat+0x1c0/0x2808 [ 73.459776][ C1] do_filp_open+0x188/0x370 [ 73.460408][ C1] do_sys_openat2+0x134/0x3fc [ 73.461115][ C1] __arm64_sys_openat+0x11c/0x150 [ 73.461826][ C1] invoke_syscall+0x98/0x28c [ 73.462421][ C1] el0_svc_common+0x13c/0x258 [ 73.463075][ C1] do_el0_svc+0x5c/0x140 [ 73.463608][ C1] el0_svc+0x78/0x1d0 [ 73.464194][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 73.464878][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.465447][ C1] irq event stamp: 1314028 [ 73.466075][ C1] hardirqs last enabled at (1314027): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 73.467611][ C1] hardirqs last disabled at (1314028): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.469183][ C1] softirqs last enabled at (1313998): [] local_bh_enable+0x10/0x34 [ 73.470530][ C1] softirqs last disabled at (1313996): [] local_bh_disable+0x10/0x34 [ 73.471821][ C1] ---[ end trace a72683cc467bd4d6 ]--- [ 73.548832][ T4834] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.549939][ T4834] Bad inode number on dev loop0: 2 is out of range [ 73.550987][ T4834] SysV FS: get root inode failed [ 73.551883][ T4834] oldfs: cannot read superblock [ 73.560756][ C1] ------------[ cut here ]------------ [ 73.561581][ C1] VFS: brelse: Trying to free free buffer [ 73.562390][ C1] WARNING: CPU: 1 PID: 4835 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.563477][ C1] Modules linked in: [ 73.564031][ C1] CPU: 1 PID: 4835 Comm: syz.0.76 Tainted: G W syzkaller #0 [ 73.565215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.566621][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.567732][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.568485][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.569276][ C1] sp : ffff800008017df0 [ 73.569836][ C1] x29: ffff800008017df0 x28: ffff0000d8dd9b40 x27: 1fffe000341d4a5c [ 73.570994][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 73.572206][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dede47a0 [ 73.573301][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 73.574409][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 73.575515][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 73.576617][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 063149b04c100d00 [ 73.577728][ C1] x8 : 063149b04c100d00 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.578894][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.579935][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 73.581242][ C1] Call trace: [ 73.581651][ C1] invalidate_bh_lru+0x128/0x22c [ 73.582305][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.583186][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.584220][ C1] ipi_handler+0x10c/0x70c [ 73.584829][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.585577][ C1] handle_domain_irq+0x148/0x200 [ 73.586202][ C1] gic_handle_irq+0x78/0x1b8 [ 73.586837][ C1] call_on_irq_stack+0x30/0x48 [ 73.587466][ C1] do_interrupt_handler+0x6c/0x88 [ 73.588289][ C1] el1_interrupt+0x30/0x58 [ 73.588896][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.589576][ C1] el1h_64_irq+0x78/0x7c [ 73.590041][ C1] _raw_spin_unlock_irq+0xa0/0x128 [ 73.590756][ C1] alloc_pid+0x734/0xa3c [ 73.591403][ C1] copy_process+0x18f8/0x3734 [ 73.592107][ C1] kernel_clone+0x1ec/0xa10 [ 73.592698][ C1] __arm64_sys_clone3+0x340/0x374 [ 73.593400][ C1] invoke_syscall+0x98/0x28c [ 73.594003][ C1] el0_svc_common+0x13c/0x258 [ 73.594712][ C1] do_el0_svc+0x5c/0x140 [ 73.595282][ C1] el0_svc+0x78/0x1d0 [ 73.595867][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 73.596600][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.597223][ C1] irq event stamp: 1460 [ 73.597780][ C1] hardirqs last enabled at (1459): [] _raw_spin_unlock_irq+0x98/0x128 [ 73.599110][ C1] hardirqs last disabled at (1460): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.600412][ C1] softirqs last enabled at (1428): [] local_bh_enable+0x10/0x34 [ 73.601665][ C1] softirqs last disabled at (1426): [] local_bh_disable+0x10/0x34 [ 73.602930][ C1] ---[ end trace a72683cc467bd4d7 ]--- [ 73.639070][ T4836] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.640495][ T4836] Bad inode number on dev loop0: 2 is out of range [ 73.641418][ T4836] SysV FS: get root inode failed [ 73.642248][ T4836] oldfs: cannot read superblock [ 73.648276][ C0] ------------[ cut here ]------------ [ 73.649053][ C0] VFS: brelse: Trying to free free buffer [ 73.649913][ C0] WARNING: CPU: 0 PID: 3659 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.651062][ C0] Modules linked in: [ 73.651605][ C0] CPU: 0 PID: 3659 Comm: udevd Tainted: G W syzkaller #0 [ 73.652700][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.654193][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.655256][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.656006][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.656776][ C0] sp : ffff800008007df0 [ 73.657379][ C0] x29: ffff800008007df0 x28: ffff0000d6fcb680 x27: 1fffe000341d085c [ 73.658522][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.659627][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f3400 [ 73.660685][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.661793][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.663047][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.664095][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 023c6101a9d52800 [ 73.665201][ C0] x8 : 023c6101a9d52800 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.666281][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.667323][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.668457][ C0] Call trace: [ 73.668970][ C0] invalidate_bh_lru+0x128/0x22c [ 73.669664][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.670509][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.671415][ C0] ipi_handler+0x10c/0x70c [ 73.671967][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.672775][ C0] handle_domain_irq+0x148/0x200 [ 73.673433][ C0] gic_handle_irq+0x78/0x1b8 [ 73.674029][ C0] call_on_irq_stack+0x30/0x48 [ 73.674699][ C0] do_interrupt_handler+0x6c/0x88 [ 73.675390][ C0] el1_interrupt+0x30/0x58 [ 73.675995][ C0] el1h_64_irq_handler+0x18/0x24 [ 73.676705][ C0] el1h_64_irq+0x78/0x7c [ 73.677335][ C0] seqcount_lockdep_reader_access+0x214/0x2b8 [ 73.678158][ C0] prepend_path+0xfc/0xab8 [ 73.678779][ C0] d_absolute_path+0xa0/0x148 [ 73.679422][ C0] tomoyo_realpath_from_path+0x2a4/0x540 [ 73.680180][ C0] tomoyo_check_open_permission+0x19c/0x35c [ 73.680929][ C0] tomoyo_file_open+0x130/0x1a8 [ 73.681506][ C0] security_file_open+0x6c/0xac [ 73.682183][ C0] do_dentry_open+0x2a4/0xea4 [ 73.682826][ C0] vfs_open+0x7c/0x90 [ 73.683376][ C0] path_openat+0x1ff8/0x2808 [ 73.683960][ C0] do_filp_open+0x188/0x370 [ 73.684529][ C0] do_sys_openat2+0x134/0x3fc [ 73.685164][ C0] __arm64_sys_openat+0x11c/0x150 [ 73.685895][ C0] invoke_syscall+0x98/0x28c [ 73.686488][ C0] el0_svc_common+0x13c/0x258 [ 73.687144][ C0] do_el0_svc+0x5c/0x140 [ 73.687729][ C0] el0_svc+0x78/0x1d0 [ 73.688214][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 73.688849][ C0] el0t_64_sync+0x1a0/0x1a4 [ 73.689412][ C0] irq event stamp: 1318914 [ 73.690009][ C0] hardirqs last enabled at (1318913): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 73.691551][ C0] hardirqs last disabled at (1318914): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.692838][ C0] softirqs last enabled at (1318846): [] local_bh_enable+0x10/0x34 [ 73.693937][ C0] softirqs last disabled at (1318844): [] local_bh_disable+0x10/0x34 [ 73.695254][ C0] ---[ end trace a72683cc467bd4d8 ]--- [ 73.744137][ T4838] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.745314][ T4838] Bad inode number on dev loop0: 2 is out of range [ 73.746321][ T4838] SysV FS: get root inode failed [ 73.747008][ T4838] oldfs: cannot read superblock [ 73.754671][ C0] ------------[ cut here ]------------ [ 73.755531][ C0] VFS: brelse: Trying to free free buffer [ 73.756355][ C0] WARNING: CPU: 0 PID: 4839 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.757467][ C0] Modules linked in: [ 73.758005][ C0] CPU: 0 PID: 4839 Comm: syz-executor Tainted: G W syzkaller #0 [ 73.759274][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.760531][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.761560][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.762252][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.762995][ C0] sp : ffff800008007df0 [ 73.763497][ C0] x29: ffff800008007df0 x28: ffff0000c870b680 x27: 1fffe000341d085c [ 73.764585][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.765549][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f37a0 [ 73.766737][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 73.767782][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 73.768949][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.770114][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 48eedb0734241b00 [ 73.771220][ C0] x8 : 48eedb0734241b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.772331][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.773455][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 73.774566][ C0] Call trace: [ 73.774972][ C0] invalidate_bh_lru+0x128/0x22c [ 73.775638][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.776428][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.777386][ C0] ipi_handler+0x10c/0x70c [ 73.778016][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.778719][ C0] handle_domain_irq+0x148/0x200 [ 73.779376][ C0] gic_handle_irq+0x78/0x1b8 [ 73.780011][ C0] call_on_irq_stack+0x30/0x48 [ 73.780677][ C0] do_interrupt_handler+0x6c/0x88 [ 73.781371][ C0] el1_interrupt+0x30/0x58 [ 73.781997][ C0] el1h_64_irq_handler+0x18/0x24 [ 73.782729][ C0] el1h_64_irq+0x78/0x7c [ 73.783285][ C0] __sanitizer_cov_trace_pc+0xa0/0xa8 [ 73.783952][ C0] filemap_map_pages+0x964/0xc44 [ 73.784565][ C0] handle_mm_fault+0x18b0/0x2aac [ 73.785193][ C0] do_page_fault+0x690/0xad0 [ 73.785798][ C0] do_translation_fault+0xe0/0x130 [ 73.786504][ C0] do_mem_abort+0x6c/0x1b0 [ 73.787066][ C0] el0_da+0x90/0x1ec [ 73.787611][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 73.788319][ C0] el0t_64_sync+0x1a0/0x1a4 [ 73.788962][ C0] irq event stamp: 316 [ 73.789527][ C0] hardirqs last enabled at (315): [] lock_page_memcg+0x110/0x22c [ 73.790785][ C0] hardirqs last disabled at (316): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.792114][ C0] softirqs last enabled at (64): [] local_bh_enable+0x10/0x34 [ 73.793421][ C0] softirqs last disabled at (62): [] local_bh_disable+0x10/0x34 [ 73.794682][ C0] ---[ end trace a72683cc467bd4d9 ]--- [ 73.815386][ T4840] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.816641][ T4840] Bad inode number on dev loop0: 2 is out of range [ 73.817591][ T4840] SysV FS: get root inode failed [ 73.818332][ T4840] oldfs: cannot read superblock [ 73.822906][ C1] ------------[ cut here ]------------ [ 73.823743][ C1] VFS: brelse: Trying to free free buffer [ 73.824567][ C1] WARNING: CPU: 1 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.825773][ C1] Modules linked in: [ 73.826343][ C1] CPU: 1 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 73.827836][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.829220][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.830283][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.830969][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.831680][ C1] sp : ffff800008017df0 [ 73.832272][ C1] x29: ffff800008017df0 x28: ffff0000c8370000 x27: 1fffe000341d4a5c [ 73.833344][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 73.834479][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dede4b40 [ 73.835623][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.836643][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.837768][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 73.838915][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : ca04e80e70640500 [ 73.840018][ C1] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.841107][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.842318][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.843456][ C1] Call trace: [ 73.843902][ C1] invalidate_bh_lru+0x128/0x22c [ 73.844524][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.845349][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.846199][ C1] ipi_handler+0x10c/0x70c [ 73.846758][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.847438][ C1] handle_domain_irq+0x148/0x200 [ 73.848154][ C1] gic_handle_irq+0x78/0x1b8 [ 73.848740][ C1] call_on_irq_stack+0x30/0x48 [ 73.849337][ C1] do_interrupt_handler+0x6c/0x88 [ 73.850031][ C1] el1_interrupt+0x30/0x58 [ 73.850621][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.851296][ C1] el1h_64_irq+0x78/0x7c [ 73.851828][ C1] free_unref_page+0x158/0x1f8 [ 73.852536][ C1] __free_pages+0x17c/0x1d0 [ 73.853128][ C1] __free_slab+0x174/0x38c [ 73.853749][ C1] discard_slab+0x64/0xd8 [ 73.854373][ C1] __slab_free+0x1b8/0x240 [ 73.854934][ C1] ___cache_free+0x178/0x1bc [ 73.855621][ C1] qlink_free+0x5c/0xa0 [ 73.856168][ C1] qlist_free_all+0x40/0xa8 [ 73.856862][ C1] kasan_quarantine_reduce+0x124/0x130 [ 73.857714][ C1] __kasan_slab_alloc+0x34/0xcc [ 73.858454][ C1] slab_post_alloc_hook+0x74/0x3f8 [ 73.859147][ C1] kmem_cache_alloc+0x1dc/0x3d8 [ 73.859801][ C1] getname_flags+0xb8/0x44c [ 73.860425][ C1] __arm64_sys_unlinkat+0xb4/0xfc [ 73.861169][ C1] invoke_syscall+0x98/0x28c [ 73.861873][ C1] el0_svc_common+0x13c/0x258 [ 73.862562][ C1] do_el0_svc+0x5c/0x140 [ 73.863113][ C1] el0_svc+0x78/0x1d0 [ 73.863629][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 73.864261][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.864816][ C1] irq event stamp: 363912 [ 73.865377][ C1] hardirqs last enabled at (363911): [] free_unref_page+0x148/0x1f8 [ 73.866762][ C1] hardirqs last disabled at (363912): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.868082][ C1] softirqs last enabled at (363762): [] local_bh_enable+0x10/0x34 [ 73.869405][ C1] softirqs last disabled at (363760): [] local_bh_disable+0x10/0x34 [ 73.870696][ C1] ---[ end trace a72683cc467bd4da ]--- [ 73.936855][ T4842] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.937940][ T4842] Bad inode number on dev loop0: 2 is out of range [ 73.938910][ T4842] SysV FS: get root inode failed [ 73.939553][ T4842] oldfs: cannot read superblock [ 73.958391][ C0] ------------[ cut here ]------------ [ 73.959268][ C0] VFS: brelse: Trying to free free buffer [ 73.960081][ C0] WARNING: CPU: 0 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.961200][ C0] Modules linked in: [ 73.961753][ C0] CPU: 0 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 73.962918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.964298][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.965478][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.966221][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.966954][ C0] sp : ffff800008007df0 [ 73.967539][ C0] x29: ffff800008007df0 x28: ffff0000c8370000 x27: 1fffe000341d085c [ 73.968603][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.969695][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f3b40 [ 73.970745][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.971840][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.972994][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.974140][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : ca04e80e70640500 [ 73.975229][ C0] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.976277][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.977413][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.978545][ C0] Call trace: [ 73.979023][ C0] invalidate_bh_lru+0x128/0x22c [ 73.979637][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.980468][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.981454][ C0] ipi_handler+0x10c/0x70c [ 73.982038][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.982753][ C0] handle_domain_irq+0x148/0x200 [ 73.983391][ C0] gic_handle_irq+0x78/0x1b8 [ 73.984013][ C0] call_on_irq_stack+0x30/0x48 [ 73.984803][ C0] do_interrupt_handler+0x6c/0x88 [ 73.985505][ C0] el1_interrupt+0x30/0x58 [ 73.986116][ C0] el1h_64_irq_handler+0x18/0x24 [ 73.986955][ C0] el1h_64_irq+0x78/0x7c [ 73.987520][ C0] __sanitizer_cov_trace_pc+0x38/0xa8 [ 73.988268][ C0] tomoyo_path_permission+0x16c/0x31c [ 73.988977][ C0] tomoyo_path_perm+0x35c/0x49c [ 73.989948][ C0] tomoyo_inode_getattr+0x28/0x38 [ 73.990708][ C0] security_inode_getattr+0xd8/0x124 [ 73.991585][ C0] __arm64_sys_newfstat+0x100/0x1fc [ 73.992440][ C0] invoke_syscall+0x98/0x28c [ 73.993077][ C0] el0_svc_common+0x13c/0x258 [ 73.993757][ C0] do_el0_svc+0x5c/0x140 [ 73.994313][ C0] el0_svc+0x78/0x1d0 [ 73.994898][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 73.995596][ C0] el0t_64_sync+0x1a0/0x1a4 [ 73.996169][ C0] irq event stamp: 370168 [ 73.996771][ C0] hardirqs last enabled at (370167): [] kasan_quarantine_put+0xc4/0x200 [ 73.997979][ C0] hardirqs last disabled at (370168): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.999328][ C0] softirqs last enabled at (370100): [] local_bh_enable+0x10/0x34 [ 74.000714][ C0] softirqs last disabled at (370098): [] local_bh_disable+0x10/0x34 [ 74.001968][ C0] ---[ end trace a72683cc467bd4db ]--- [ 74.078498][ T4846] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.079653][ T4846] Bad inode number on dev loop0: 2 is out of range [ 74.080473][ T4846] SysV FS: get root inode failed [ 74.081163][ T4846] oldfs: cannot read superblock [ 74.085924][ T4708] ------------[ cut here ]------------ [ 74.086750][ T4708] VFS: brelse: Trying to free free buffer [ 74.087482][ T4708] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.088653][ T4708] Modules linked in: [ 74.089139][ T4708] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 74.090144][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.091470][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.092505][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 74.093255][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 74.094044][ T4708] sp : ffff80001fc177d0 [ 74.094544][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d085c [ 74.095744][ T4708] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 74.096895][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e29f3ee0 [ 74.098013][ T4708] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 74.099083][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 74.100200][ T4708] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 74.101274][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 74.102344][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.103385][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.104482][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.105527][ T4708] Call trace: [ 74.106005][ T4708] invalidate_bh_lru+0x128/0x22c [ 74.106675][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 74.107409][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.108122][ T4708] invalidate_bh_lrus+0x34/0x40 [ 74.108829][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 74.109553][ T4708] blkdev_put+0x444/0x6c4 [ 74.110199][ T4708] blkdev_close+0x74/0xb0 [ 74.110779][ T4708] __fput+0x1b8/0x7e8 [ 74.111392][ T4708] ____fput+0x20/0x30 [ 74.112002][ T4708] task_work_run+0x13c/0x1e8 [ 74.112628][ T4708] do_notify_resume+0x2488/0x30a8 [ 74.113268][ T4708] el0_svc+0xf0/0x1d0 [ 74.113808][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 74.114493][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 74.115129][ T4708] irq event stamp: 343984 [ 74.115748][ T4708] hardirqs last enabled at (343983): [] kasan_quarantine_put+0xc4/0x200 [ 74.117102][ T4708] hardirqs last disabled at (343984): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.118493][ T4708] softirqs last enabled at (343812): [] local_bh_enable+0x10/0x34 [ 74.119696][ T4708] softirqs last disabled at (343810): [] local_bh_disable+0x10/0x34 [ 74.120935][ T4708] ---[ end trace a72683cc467bd4dc ]--- [ 74.195117][ T4848] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.196272][ T4848] Bad inode number on dev loop0: 2 is out of range [ 74.197219][ T4848] SysV FS: get root inode failed [ 74.197964][ T4848] oldfs: cannot read superblock [ 74.198753][ T4848] ------------[ cut here ]------------ [ 74.199533][ T4848] VFS: brelse: Trying to free free buffer [ 74.200387][ T4848] WARNING: CPU: 1 PID: 4848 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.201615][ T4848] Modules linked in: [ 74.202130][ T4848] CPU: 1 PID: 4848 Comm: syz.0.82 Tainted: G W syzkaller #0 [ 74.203414][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.204809][ T4848] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.206032][ T4848] pc : invalidate_bh_lru+0x128/0x22c [ 74.206882][ T4848] lr : invalidate_bh_lru+0x128/0x22c [ 74.207683][ T4848] sp : ffff8000201b7710 [ 74.208310][ T4848] x29: ffff8000201b7710 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 74.209495][ T4848] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 74.210813][ T4848] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dede4ee0 [ 74.212036][ T4848] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 74.213240][ T4848] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 74.214458][ T4848] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.215612][ T4848] x11: ff8080000830061c x10: 0000000000000000 x9 : b725ac2552292400 [ 74.216779][ T4848] x8 : b725ac2552292400 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.217943][ T4848] x5 : ffff8000201b7018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.219126][ T4848] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.220254][ T4848] Call trace: [ 74.220740][ T4848] invalidate_bh_lru+0x128/0x22c [ 74.221487][ T4848] smp_call_function_many_cond+0xa5c/0xec0 [ 74.222323][ T4848] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.223081][ T4848] invalidate_bh_lrus+0x34/0x40 [ 74.223847][ T4848] blkdev_flush_mapping+0x16c/0x334 [ 74.224613][ T4848] blkdev_put+0x444/0x6c4 [ 74.225185][ T4848] kill_block_super+0xa0/0xe0 [ 74.225835][ T4848] deactivate_locked_super+0xc0/0x13c [ 74.226654][ T4848] mount_bdev+0x284/0x35c [ 74.227277][ T4848] sysv_mount+0x44/0x58 [ 74.227892][ T4848] legacy_get_tree+0xd8/0x174 [ 74.228559][ T4848] vfs_get_tree+0x90/0x278 [ 74.229242][ T4848] do_new_mount+0x228/0x804 [ 74.229896][ T4848] path_mount+0x57c/0xfe8 [ 74.230512][ T4848] __arm64_sys_mount+0x488/0x5f8 [ 74.231330][ T4848] invoke_syscall+0x98/0x28c [ 74.232057][ T4848] el0_svc_common+0x13c/0x258 [ 74.232764][ T4848] do_el0_svc+0x5c/0x140 [ 74.233401][ T4848] el0_svc+0x78/0x1d0 [ 74.233949][ T4848] el0t_64_sync_handler+0xcc/0xe4 [ 74.234678][ T4848] el0t_64_sync+0x1a0/0x1a4 [ 74.235261][ T4848] irq event stamp: 1138 [ 74.235934][ T4848] hardirqs last enabled at (1137): [] kasan_quarantine_put+0xc4/0x200 [ 74.237407][ T4848] hardirqs last disabled at (1138): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.238928][ T4848] softirqs last enabled at (886): [] local_bh_enable+0x10/0x34 [ 74.240346][ T4848] softirqs last disabled at (884): [] local_bh_disable+0x10/0x34 [ 74.241666][ T4848] ---[ end trace a72683cc467bd4dd ]--- [ 74.375328][ T4850] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.377388][ T4850] Bad inode number on dev loop0: 2 is out of range [ 74.378458][ T4850] SysV FS: get root inode failed [ 74.379159][ T4850] oldfs: cannot read superblock [ 74.388882][ T4708] ------------[ cut here ]------------ [ 74.389759][ T4708] VFS: brelse: Trying to free free buffer [ 74.390613][ T4708] WARNING: CPU: 1 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.391833][ T4708] Modules linked in: [ 74.392432][ T4708] CPU: 1 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 74.393620][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.395026][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.396127][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 74.396818][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 74.397559][ T4708] sp : ffff80001fc177d0 [ 74.398158][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 74.399320][ T4708] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 74.400470][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52e9318 [ 74.401572][ T4708] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 74.402668][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 74.403813][ T4708] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.405038][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 74.406096][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.407286][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.408417][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.409742][ T4708] Call trace: [ 74.410124][ T4708] invalidate_bh_lru+0x128/0x22c [ 74.410870][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 74.411712][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.412339][ T4708] invalidate_bh_lrus+0x34/0x40 [ 74.412938][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 74.413703][ T4708] blkdev_put+0x444/0x6c4 [ 74.414427][ T4708] blkdev_close+0x74/0xb0 [ 74.415073][ T4708] __fput+0x1b8/0x7e8 [ 74.415717][ T4708] ____fput+0x20/0x30 [ 74.416299][ T4708] task_work_run+0x13c/0x1e8 [ 74.416781][ T4708] do_notify_resume+0x2488/0x30a8 [ 74.417491][ T4708] el0_svc+0xf0/0x1d0 [ 74.418024][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 74.418774][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 74.419353][ T4708] irq event stamp: 354226 [ 74.419877][ T4708] hardirqs last enabled at (354225): [] kasan_quarantine_put+0xc4/0x200 [ 74.421187][ T4708] hardirqs last disabled at (354226): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.422674][ T4708] softirqs last enabled at (353964): [] local_bh_enable+0x10/0x34 [ 74.424034][ T4708] softirqs last disabled at (353962): [] local_bh_disable+0x10/0x34 [ 74.425427][ T4708] ---[ end trace a72683cc467bd4de ]--- [ 74.498827][ T4852] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.499900][ T4852] Bad inode number on dev loop0: 2 is out of range [ 74.500948][ T4852] SysV FS: get root inode failed [ 74.501663][ T4852] oldfs: cannot read superblock [ 74.509004][ C1] ------------[ cut here ]------------ [ 74.509776][ C1] VFS: brelse: Trying to free free buffer [ 74.510582][ C1] WARNING: CPU: 1 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.511786][ C1] Modules linked in: [ 74.512306][ C1] CPU: 1 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.513589][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.515032][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.516153][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.516918][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.517675][ C1] sp : ffff800008017df0 [ 74.518250][ C1] x29: ffff800008017df0 x28: ffff0000c8370000 x27: 1fffe000341d4a5c [ 74.519429][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 74.520689][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52e96b8 [ 74.521797][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 74.522936][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 74.524115][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.525221][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : ca04e80e70640500 [ 74.526360][ C1] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.527470][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.528819][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 74.530100][ C1] Call trace: [ 74.530534][ C1] invalidate_bh_lru+0x128/0x22c [ 74.531193][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 74.531948][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.532858][ C1] ipi_handler+0x10c/0x70c [ 74.533477][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 74.534237][ C1] handle_domain_irq+0x148/0x200 [ 74.534922][ C1] gic_handle_irq+0x78/0x1b8 [ 74.535575][ C1] call_on_irq_stack+0x30/0x48 [ 74.536151][ C1] do_interrupt_handler+0x6c/0x88 [ 74.536944][ C1] el1_interrupt+0x30/0x58 [ 74.537555][ C1] el1h_64_irq_handler+0x18/0x24 [ 74.538282][ C1] el1h_64_irq+0x78/0x7c [ 74.538859][ C1] arch_local_irq_restore+0x8/0x10 [ 74.539600][ C1] mem_cgroup_from_task+0x64/0x120 [ 74.540312][ C1] __memcg_kmem_charge_page+0x284/0x59c [ 74.541094][ C1] dup_task_struct+0x890/0xc24 [ 74.541729][ C1] copy_process+0x4e0/0x3734 [ 74.542389][ C1] kernel_clone+0x1ec/0xa10 [ 74.543008][ C1] __arm64_sys_clone+0x154/0x1c0 [ 74.543664][ C1] invoke_syscall+0x98/0x28c [ 74.544296][ C1] el0_svc_common+0x13c/0x258 [ 74.544896][ C1] do_el0_svc+0x5c/0x140 [ 74.545442][ C1] el0_svc+0x78/0x1d0 [ 74.546016][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 74.546773][ C1] el0t_64_sync+0x1a0/0x1a4 [ 74.547376][ C1] irq event stamp: 384956 [ 74.547945][ C1] hardirqs last enabled at (384955): [] try_charge_memcg+0x1c8/0x115c [ 74.549335][ C1] hardirqs last disabled at (384956): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.550757][ C1] softirqs last enabled at (384876): [] release_sock+0x1d0/0x258 [ 74.552146][ C1] softirqs last disabled at (384874): [] release_sock+0x34/0x258 [ 74.553305][ C1] ---[ end trace a72683cc467bd4df ]--- [ 74.577944][ T4854] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.579054][ T4854] Bad inode number on dev loop0: 2 is out of range [ 74.579870][ T4854] SysV FS: get root inode failed [ 74.580541][ T4854] oldfs: cannot read superblock [ 74.586768][ C0] ------------[ cut here ]------------ [ 74.587580][ C0] VFS: brelse: Trying to free free buffer [ 74.588203][ C0] WARNING: CPU: 0 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.589087][ C0] Modules linked in: [ 74.589471][ C0] CPU: 0 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.590352][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.591327][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.592101][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 74.592644][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 74.593162][ C0] sp : ffff800008007df0 [ 74.593573][ C0] x29: ffff800008007df0 x28: ffff0000c8370000 x27: 1fffe000341d085c [ 74.594403][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 74.595223][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2a46318 [ 74.596026][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 74.596824][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 74.597623][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 74.598721][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : ca04e80e70640500 [ 74.599761][ C0] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.600731][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.601745][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 74.602798][ C0] Call trace: [ 74.603301][ C0] invalidate_bh_lru+0x128/0x22c [ 74.603958][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 74.604802][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.605784][ C0] ipi_handler+0x10c/0x70c [ 74.606386][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 74.607161][ C0] handle_domain_irq+0x148/0x200 [ 74.607826][ C0] gic_handle_irq+0x78/0x1b8 [ 74.608459][ C0] call_on_irq_stack+0x30/0x48 [ 74.609110][ C0] do_interrupt_handler+0x6c/0x88 [ 74.609791][ C0] el1_interrupt+0x30/0x58 [ 74.610416][ C0] el1h_64_irq_handler+0x18/0x24 [ 74.611104][ C0] el1h_64_irq+0x78/0x7c [ 74.611647][ C0] kasan_quarantine_put+0xd4/0x200 [ 74.612275][ C0] ____kasan_slab_free+0x124/0x164 [ 74.612892][ C0] __kasan_slab_free+0x18/0x28 [ 74.613467][ C0] slab_free_freelist_hook+0x128/0x1e4 [ 74.614199][ C0] kmem_cache_free+0xdc/0x3b4 [ 74.614807][ C0] free_vmap_area_noflush+0x774/0x8a4 [ 74.615537][ C0] remove_vm_area+0x1ac/0x1c4 [ 74.616208][ C0] __vunmap+0x310/0x9e4 [ 74.616698][ C0] vfree+0xbc/0x154 [ 74.617252][ C0] do_ipt_get_ctl+0x11a8/0x1464 [ 74.617873][ C0] nf_getsockopt+0x254/0x274 [ 74.618549][ C0] ip_getsockopt+0x1218/0x1664 [ 74.619241][ C0] tcp_getsockopt+0x214/0x2d2c [ 74.619921][ C0] sock_common_getsockopt+0xa8/0xc4 [ 74.620622][ C0] __sys_getsockopt+0x1b8/0x250 [ 74.621337][ C0] __arm64_sys_getsockopt+0xc0/0xdc [ 74.622076][ C0] invoke_syscall+0x98/0x28c [ 74.622706][ C0] el0_svc_common+0x13c/0x258 [ 74.623353][ C0] do_el0_svc+0x5c/0x140 [ 74.623970][ C0] el0_svc+0x78/0x1d0 [ 74.624503][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 74.625176][ C0] el0t_64_sync+0x1a0/0x1a4 [ 74.625778][ C0] irq event stamp: 387854 [ 74.626358][ C0] hardirqs last enabled at (387853): [] kasan_quarantine_put+0xc4/0x200 [ 74.627564][ C0] hardirqs last disabled at (387854): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.629120][ C0] softirqs last enabled at (387822): [] release_sock+0x1d0/0x258 [ 74.630411][ C0] softirqs last disabled at (387820): [] release_sock+0x34/0x258 [ 74.631602][ C0] ---[ end trace a72683cc467bd4e0 ]--- [ 74.736910][ T4856] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.737951][ T4856] Bad inode number on dev loop0: 2 is out of range [ 74.738970][ T4856] SysV FS: get root inode failed [ 74.739658][ T4856] oldfs: cannot read superblock [ 74.758516][ C1] ------------[ cut here ]------------ [ 74.759405][ C1] VFS: brelse: Trying to free free buffer [ 74.760300][ C1] WARNING: CPU: 1 PID: 4861 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.761638][ C1] Modules linked in: [ 74.762220][ C1] CPU: 1 PID: 4861 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.763639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.765132][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.766241][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.767039][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.767771][ C1] sp : ffff800008017df0 [ 74.768360][ C1] x29: ffff800008017df0 x28: ffff0000db5f9b40 x27: 1fffe000341d4a5c [ 74.769597][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 74.770796][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52e9a58 [ 74.771941][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 74.773067][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 74.774271][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.775428][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 31575f0ebba68500 [ 74.776687][ C1] x8 : 31575f0ebba68500 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.777821][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.779060][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 74.780112][ C1] Call trace: [ 74.780555][ C1] invalidate_bh_lru+0x128/0x22c [ 74.781314][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 74.782140][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.783149][ C1] ipi_handler+0x10c/0x70c [ 74.783787][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 74.784522][ C1] handle_domain_irq+0x148/0x200 [ 74.785874][ C1] gic_handle_irq+0x78/0x1b8 [ 74.786610][ C1] call_on_irq_stack+0x30/0x48 [ 74.787366][ C1] do_interrupt_handler+0x6c/0x88 [ 74.788098][ C1] el1_interrupt+0x30/0x58 [ 74.788771][ C1] el1h_64_irq_handler+0x18/0x24 [ 74.789476][ C1] el1h_64_irq+0x78/0x7c [ 74.790066][ C1] __sanitizer_cov_trace_pc+0x40/0xa8 [ 74.790922][ C1] tomoyo_path_permission+0x16c/0x31c [ 74.791683][ C1] tomoyo_path_perm+0x2a4/0x49c [ 74.792388][ C1] tomoyo_path_symlink+0xac/0xf8 [ 74.793076][ C1] security_path_symlink+0xec/0x13c [ 74.793911][ C1] do_symlinkat+0x10c/0x5b4 [ 74.794633][ C1] __arm64_sys_symlinkat+0xa4/0xbc [ 74.795372][ C1] invoke_syscall+0x98/0x28c [ 74.795980][ C1] el0_svc_common+0x13c/0x258 [ 74.796627][ C1] do_el0_svc+0x5c/0x140 [ 74.797220][ C1] el0_svc+0x78/0x1d0 [ 74.797834][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 74.798618][ C1] el0t_64_sync+0x1a0/0x1a4 [ 74.799166][ C1] irq event stamp: 758 [ 74.799805][ C1] hardirqs last enabled at (757): [] kasan_quarantine_put+0xc4/0x200 [ 74.801182][ C1] hardirqs last disabled at (758): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.802526][ C1] softirqs last enabled at (732): [] local_bh_enable+0x10/0x34 [ 74.803760][ C1] softirqs last disabled at (730): [] local_bh_disable+0x10/0x34 [ 74.805219][ C1] ---[ end trace a72683cc467bd4e1 ]--- [ 74.831162][ T4862] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.832197][ T4862] Bad inode number on dev loop0: 2 is out of range [ 74.833174][ T4862] SysV FS: get root inode failed [ 74.834040][ T4862] oldfs: cannot read superblock [ 74.842967][ T4708] ------------[ cut here ]------------ [ 74.843859][ T4708] VFS: brelse: Trying to free free buffer [ 74.844745][ T4708] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.845962][ T4708] Modules linked in: [ 74.846499][ T4708] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 74.847702][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.849147][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.850130][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 74.850819][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 74.851518][ T4708] sp : ffff80001fc177d0 [ 74.852105][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 74.853148][ T4708] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 74.854310][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2a466b8 [ 74.855413][ T4708] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 74.856558][ T4708] x17: 0000000000000000 x16: ffff8000082dbd3c x15: 0000000000000012 [ 74.857611][ T4708] x14: 0000000000000001 x13: 1ffff00003f82e18 x12: 0000000000000000 [ 74.858757][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 74.859824][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.860835][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff800008307f44 [ 74.862059][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.863145][ T4708] Call trace: [ 74.863581][ T4708] invalidate_bh_lru+0x128/0x22c [ 74.864352][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 74.865140][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.865891][ T4708] invalidate_bh_lrus+0x34/0x40 [ 74.866522][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 74.867243][ T4708] blkdev_put+0x444/0x6c4 [ 74.867845][ T4708] blkdev_close+0x74/0xb0 [ 74.868448][ T4708] __fput+0x1b8/0x7e8 [ 74.868996][ T4708] ____fput+0x20/0x30 [ 74.869593][ T4708] task_work_run+0x13c/0x1e8 [ 74.870261][ T4708] do_notify_resume+0x2488/0x30a8 [ 74.870977][ T4708] el0_svc+0xf0/0x1d0 [ 74.871595][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 74.872283][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 74.872886][ T4708] irq event stamp: 376626 [ 74.873567][ T4708] hardirqs last enabled at (376625): [] kasan_quarantine_put+0xc4/0x200 [ 74.874916][ T4708] hardirqs last disabled at (376626): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.876361][ T4708] softirqs last enabled at (376362): [] local_bh_enable+0x10/0x34 [ 74.877525][ T4708] softirqs last disabled at (376360): [] local_bh_disable+0x10/0x34 [ 74.878817][ T4708] ---[ end trace a72683cc467bd4e2 ]--- [ 74.918171][ T4864] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.919460][ T4864] Bad inode number on dev loop0: 2 is out of range [ 74.920443][ T4864] SysV FS: get root inode failed [ 74.921236][ T4864] oldfs: cannot read superblock [ 74.928816][ C0] ------------[ cut here ]------------ [ 74.929637][ C0] VFS: brelse: Trying to free free buffer [ 74.930431][ C0] WARNING: CPU: 0 PID: 4865 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.931650][ C0] Modules linked in: [ 74.932170][ C0] CPU: 0 PID: 4865 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.933428][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.934782][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.935920][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 74.936667][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 74.937324][ C0] sp : ffff800008007df0 [ 74.937860][ C0] x29: ffff800008007df0 x28: ffff0000c6189b40 x27: 1fffe000341d085c [ 74.938903][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 74.939968][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2a46a58 [ 74.940995][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010004 [ 74.942015][ C0] x17: 0000000000010004 x16: ffff80001134e478 x15: 0000000000000012 [ 74.943039][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 74.944227][ C0] x11: ff8080000830061c x10: 0000000000010003 x9 : 2d4bd24d1a114200 [ 74.945351][ C0] x8 : 2d4bd24d1a114200 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.946466][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.947538][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000027 [ 74.948658][ C0] Call trace: [ 74.949065][ C0] invalidate_bh_lru+0x128/0x22c [ 74.949781][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 74.950584][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.951510][ C0] ipi_handler+0x10c/0x70c [ 74.952069][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 74.952843][ C0] handle_domain_irq+0x148/0x200 [ 74.953524][ C0] gic_handle_irq+0x78/0x1b8 [ 74.954199][ C0] call_on_irq_stack+0x30/0x48 [ 74.954793][ C0] do_interrupt_handler+0x6c/0x88 [ 74.955421][ C0] el1_interrupt+0x30/0x58 [ 74.956061][ C0] el1h_64_irq_handler+0x18/0x24 [ 74.956795][ C0] el1h_64_irq+0x78/0x7c [ 74.957321][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 74.958004][ C0] debug_object_activate+0x25c/0x4bc [ 74.958693][ C0] call_rcu+0x54/0x8e4 [ 74.959299][ C0] put_task_struct_rcu_user+0x70/0xd8 [ 74.960068][ C0] finish_task_switch+0x34c/0x6f4 [ 74.960805][ C0] schedule_tail+0x20/0x140 [ 74.961427][ C0] ret_from_fork+0x4/0x20 [ 74.961968][ C0] irq event stamp: 38 [ 74.962513][ C0] hardirqs last enabled at (37): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 74.963854][ C0] hardirqs last disabled at (38): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.965207][ C0] softirqs last enabled at (0): [] copy_process+0x1244/0x3734 [ 74.966436][ C0] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 74.967428][ C0] ---[ end trace a72683cc467bd4e3 ]--- [ 75.035076][ T4866] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.036367][ T4866] Bad inode number on dev loop0: 2 is out of range [ 75.037277][ T4866] SysV FS: get root inode failed [ 75.037947][ T4866] oldfs: cannot read superblock [ 75.048373][ C1] ------------[ cut here ]------------ [ 75.049259][ C1] VFS: brelse: Trying to free free buffer [ 75.050143][ C1] WARNING: CPU: 1 PID: 4868 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.051349][ C1] Modules linked in: [ 75.051864][ C1] CPU: 1 PID: 4868 Comm: syz.0.91 Tainted: G W syzkaller #0 [ 75.053108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.054435][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.055455][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.056123][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.056763][ C1] sp : ffff800008017df0 [ 75.057324][ C1] x29: ffff800008017df0 x28: ffff0000cc7eb680 x27: 1fffe000341d4a5c [ 75.058410][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 75.059482][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52e9df8 [ 75.060581][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.061648][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.062804][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 75.063805][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : b56d1abebcc38a00 [ 75.064830][ C1] x8 : b56d1abebcc38a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.065885][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.066966][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.068115][ C1] Call trace: [ 75.068624][ C1] invalidate_bh_lru+0x128/0x22c [ 75.069275][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.070085][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.071057][ C1] ipi_handler+0x10c/0x70c [ 75.071771][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.072581][ C1] handle_domain_irq+0x148/0x200 [ 75.073330][ C1] gic_handle_irq+0x78/0x1b8 [ 75.073962][ C1] call_on_irq_stack+0x30/0x48 [ 75.074735][ C1] do_interrupt_handler+0x6c/0x88 [ 75.075430][ C1] el0_interrupt+0x94/0x248 [ 75.076061][ C1] __el0_irq_handler_common+0x18/0x24 [ 75.076819][ C1] el0t_64_irq_handler+0x10/0x1c [ 75.077528][ C1] el0t_64_irq+0x1a0/0x1a4 [ 75.078153][ C1] irq event stamp: 362 [ 75.078702][ C1] hardirqs last enabled at (361): [] el0t_64_sync_handler+0xd8/0xe4 [ 75.080018][ C1] hardirqs last disabled at (362): [] __el0_irq_handler_common+0x18/0x24 [ 75.081495][ C1] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 75.082872][ C1] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 75.084070][ C1] ---[ end trace a72683cc467bd4e4 ]--- [ 75.108669][ T4868] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.109747][ T4868] Bad inode number on dev loop0: 2 is out of range [ 75.110584][ T4868] SysV FS: get root inode failed [ 75.111301][ T4868] oldfs: cannot read superblock [ 75.116697][ C0] ------------[ cut here ]------------ [ 75.117690][ C0] VFS: brelse: Trying to free free buffer [ 75.118512][ C0] WARNING: CPU: 0 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.119760][ C0] Modules linked in: [ 75.120281][ C0] CPU: 0 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.121458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.122894][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.124001][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.124707][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.125365][ C0] sp : ffff800008007df0 [ 75.125935][ C0] x29: ffff800008007df0 x28: ffff0000c8370000 x27: 1fffe000341d085c [ 75.127041][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 75.128159][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2a46df8 [ 75.129278][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.130286][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.131272][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 75.132368][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : ca04e80e70640500 [ 75.133453][ C0] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.134570][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.135677][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.136769][ C0] Call trace: [ 75.137258][ C0] invalidate_bh_lru+0x128/0x22c [ 75.137965][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.138877][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.139868][ C0] ipi_handler+0x10c/0x70c [ 75.140471][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.141338][ C0] handle_domain_irq+0x148/0x200 [ 75.142079][ C0] gic_handle_irq+0x78/0x1b8 [ 75.142789][ C0] call_on_irq_stack+0x30/0x48 [ 75.143409][ C0] do_interrupt_handler+0x6c/0x88 [ 75.144045][ C0] el1_interrupt+0x30/0x58 [ 75.144614][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.145240][ C0] el1h_64_irq+0x78/0x7c [ 75.145874][ C0] call_rcu+0x5a8/0x8e4 [ 75.146518][ C0] evict+0x74c/0x824 [ 75.147070][ C0] iput+0x6b4/0x770 [ 75.147559][ C0] do_unlinkat+0x35c/0x624 [ 75.148147][ C0] __arm64_sys_unlinkat+0xe0/0xfc [ 75.148840][ C0] invoke_syscall+0x98/0x28c [ 75.149543][ C0] el0_svc_common+0x13c/0x258 [ 75.150219][ C0] do_el0_svc+0x5c/0x140 [ 75.150786][ C0] el0_svc+0x78/0x1d0 [ 75.151325][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 75.152048][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.152749][ C0] irq event stamp: 403158 [ 75.153322][ C0] hardirqs last enabled at (403157): [] call_rcu+0x598/0x8e4 [ 75.154507][ C0] hardirqs last disabled at (403158): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.155794][ C0] softirqs last enabled at (403066): [] local_bh_enable+0x10/0x34 [ 75.157050][ C0] softirqs last disabled at (403064): [] local_bh_disable+0x10/0x34 [ 75.158311][ C0] ---[ end trace a72683cc467bd4e5 ]--- [ 75.192632][ T4870] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.193913][ T4870] Bad inode number on dev loop0: 2 is out of range [ 75.194849][ T4870] SysV FS: get root inode failed [ 75.195545][ T4870] oldfs: cannot read superblock [ 75.205104][ C1] ------------[ cut here ]------------ [ 75.205950][ C1] VFS: brelse: Trying to free free buffer [ 75.206802][ C1] WARNING: CPU: 1 PID: 4871 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.208086][ C1] Modules linked in: [ 75.208599][ C1] CPU: 1 PID: 4871 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.209812][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.211229][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.212433][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.213152][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.213970][ C1] sp : ffff800008017df0 [ 75.214571][ C1] x29: ffff800008017df0 x28: ffff0000d77b0000 x27: 1fffe000341d4a5c [ 75.215686][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 75.216782][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e28fb230 [ 75.217984][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.219196][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.220340][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 75.221461][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 8df71d9d1d07b100 [ 75.222557][ C1] x8 : 8df71d9d1d07b100 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.223747][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.224833][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.226071][ C1] Call trace: [ 75.226595][ C1] invalidate_bh_lru+0x128/0x22c [ 75.227302][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.228196][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.229197][ C1] ipi_handler+0x10c/0x70c [ 75.229884][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.230836][ C1] handle_domain_irq+0x148/0x200 [ 75.231585][ C1] gic_handle_irq+0x78/0x1b8 [ 75.232227][ C1] call_on_irq_stack+0x30/0x48 [ 75.232950][ C1] do_interrupt_handler+0x6c/0x88 [ 75.233616][ C1] el1_interrupt+0x30/0x58 [ 75.234283][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.234947][ C1] el1h_64_irq+0x78/0x7c [ 75.235538][ C1] lock_acquire+0x234/0x618 [ 75.236257][ C1] __might_fault+0xc8/0x128 [ 75.236900][ C1] oom_score_adj_write+0xe0/0x2ec [ 75.237534][ C1] vfs_write+0x28c/0xa64 [ 75.238123][ C1] ksys_write+0x12c/0x228 [ 75.238756][ C1] __arm64_sys_write+0x7c/0x90 [ 75.239547][ C1] invoke_syscall+0x98/0x28c [ 75.240416][ C1] el0_svc_common+0x13c/0x258 [ 75.241096][ C1] do_el0_svc+0x5c/0x140 [ 75.241642][ C1] el0_svc+0x78/0x1d0 [ 75.242185][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 75.242923][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.243605][ C1] irq event stamp: 848 [ 75.244097][ C1] hardirqs last enabled at (847): [] el0_svc_common+0xa0/0x258 [ 75.245296][ C1] hardirqs last disabled at (848): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.246623][ C1] softirqs last enabled at (776): [] local_bh_enable+0x10/0x34 [ 75.248022][ C1] softirqs last disabled at (774): [] local_bh_disable+0x10/0x34 [ 75.249230][ C1] ---[ end trace a72683cc467bd4e6 ]--- [ 75.338197][ T4872] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.339335][ T4872] Bad inode number on dev loop0: 2 is out of range [ 75.340228][ T4872] SysV FS: get root inode failed [ 75.340814][ T4872] oldfs: cannot read superblock [ 75.344187][ C1] ------------[ cut here ]------------ [ 75.344947][ C1] VFS: brelse: Trying to free free buffer [ 75.345674][ C1] WARNING: CPU: 1 PID: 4374 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.346910][ C1] Modules linked in: [ 75.347539][ C1] CPU: 1 PID: 4374 Comm: syz-execprog Tainted: G W syzkaller #0 [ 75.348689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.350183][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.351270][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.351983][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.352656][ C1] sp : ffff800008017df0 [ 75.353262][ C1] x29: ffff800008017df0 x28: ffff0000c6188000 x27: 1fffe000341d4a5c [ 75.354473][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 75.355592][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e28fb5d0 [ 75.356733][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010004 [ 75.357881][ C1] x17: 0000000000010004 x16: ffff80001134e478 x15: 0000000000000012 [ 75.358965][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 75.360035][ C1] x11: ff8080000830061c x10: 0000000000010003 x9 : 5c0c321af7669900 [ 75.361178][ C1] x8 : 5c0c321af7669900 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.362315][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.363511][ C1] x2 : 0000000000000001 x1 : 0000000000010003 x0 : 0000000000000027 [ 75.364595][ C1] Call trace: [ 75.365029][ C1] invalidate_bh_lru+0x128/0x22c [ 75.365713][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.366463][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.367487][ C1] ipi_handler+0x10c/0x70c [ 75.368135][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.368877][ C1] handle_domain_irq+0x148/0x200 [ 75.369571][ C1] gic_handle_irq+0x78/0x1b8 [ 75.370192][ C1] call_on_irq_stack+0x30/0x48 [ 75.370848][ C1] do_interrupt_handler+0x6c/0x88 [ 75.371581][ C1] el1_interrupt+0x30/0x58 [ 75.372243][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.373022][ C1] el1h_64_irq+0x78/0x7c [ 75.373589][ C1] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 75.374367][ C1] try_to_wake_up+0x3a4/0xa94 [ 75.375045][ C1] wake_up_q+0x94/0x110 [ 75.375650][ C1] futex_wake+0x474/0x500 [ 75.376270][ C1] do_futex+0x169c/0x255c [ 75.376821][ C1] __arm64_sys_futex+0x3a0/0x424 [ 75.377516][ C1] invoke_syscall+0x98/0x28c [ 75.378138][ C1] el0_svc_common+0x13c/0x258 [ 75.378755][ C1] do_el0_svc+0x5c/0x140 [ 75.379335][ C1] el0_svc+0x78/0x1d0 [ 75.379898][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 75.380579][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.381201][ C1] irq event stamp: 1022134 [ 75.381796][ C1] hardirqs last enabled at (1022133): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 75.383252][ C1] hardirqs last disabled at (1022134): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.384644][ C1] softirqs last enabled at (1022126): [] local_bh_enable+0x10/0x34 [ 75.385948][ C1] softirqs last disabled at (1022124): [] local_bh_disable+0x10/0x34 [ 75.387308][ C1] ---[ end trace a72683cc467bd4e7 ]--- [ 75.464894][ T4876] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.466108][ T4876] Bad inode number on dev loop0: 2 is out of range [ 75.467107][ T4876] SysV FS: get root inode failed [ 75.467874][ T4876] oldfs: cannot read superblock [ 75.482477][ C0] ------------[ cut here ]------------ [ 75.483380][ C0] VFS: brelse: Trying to free free buffer [ 75.484278][ C0] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.485494][ C0] Modules linked in: [ 75.486028][ C0] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 75.487158][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.488519][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.489575][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.490425][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.491127][ C0] sp : ffff800008007df0 [ 75.491696][ C0] x29: ffff800008007df0 x28: ffff0000cafc51c0 x27: 1fffe000341d085b [ 75.492861][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 75.494096][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e6c915d0 [ 75.495244][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 75.496470][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 75.497727][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 75.498936][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : c35095dc35abab00 [ 75.500119][ C0] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.501229][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.502360][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 75.503574][ C0] Call trace: [ 75.504043][ C0] invalidate_bh_lru+0x128/0x22c [ 75.504763][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.505619][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.506694][ C0] ipi_handler+0x10c/0x70c [ 75.507409][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.508184][ C0] handle_domain_irq+0x148/0x200 [ 75.508889][ C0] gic_handle_irq+0x78/0x1b8 [ 75.509555][ C0] call_on_irq_stack+0x30/0x48 [ 75.510320][ C0] do_interrupt_handler+0x6c/0x88 [ 75.511072][ C0] el1_interrupt+0x30/0x58 [ 75.511790][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.512534][ C0] el1h_64_irq+0x78/0x7c [ 75.513117][ C0] __preempt_count_add+0x28/0x6c [ 75.513847][ C0] lock_is_held_type+0x34/0x198 [ 75.514626][ C0] __schedule+0x1a4/0x1c6c [ 75.515216][ C0] schedule+0x11c/0x1c8 [ 75.515771][ C0] schedule_hrtimeout_range_clock+0x240/0x34c [ 75.516689][ C0] schedule_hrtimeout_range+0x38/0x4c [ 75.517437][ C0] ep_poll+0x13cc/0x1650 [ 75.518070][ C0] do_epoll_wait+0x19c/0x204 [ 75.518724][ C0] do_epoll_pwait+0x70/0x194 [ 75.519395][ C0] __arm64_sys_epoll_pwait+0x200/0x258 [ 75.520256][ C0] invoke_syscall+0x98/0x28c [ 75.520948][ C0] el0_svc_common+0x13c/0x258 [ 75.521658][ C0] do_el0_svc+0x5c/0x140 [ 75.522299][ C0] el0_svc+0x78/0x1d0 [ 75.522857][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 75.523626][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.524270][ C0] irq event stamp: 407624 [ 75.524857][ C0] hardirqs last enabled at (407623): [] _raw_write_unlock_irq+0x98/0x128 [ 75.526327][ C0] hardirqs last disabled at (407624): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.527638][ C0] softirqs last enabled at (407578): [] local_bh_enable+0x10/0x34 [ 75.528915][ C0] softirqs last disabled at (407576): [] local_bh_disable+0x10/0x34 [ 75.530269][ C0] ---[ end trace a72683cc467bd4e8 ]--- [ 75.589887][ T4880] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.591027][ T4880] Bad inode number on dev loop0: 2 is out of range [ 75.591999][ T4880] SysV FS: get root inode failed [ 75.592781][ T4880] oldfs: cannot read superblock [ 75.601392][ C0] ------------[ cut here ]------------ [ 75.602209][ C0] VFS: brelse: Trying to free free buffer [ 75.603118][ C0] WARNING: CPU: 0 PID: 4881 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.604484][ C0] Modules linked in: [ 75.604986][ C0] CPU: 0 PID: 4881 Comm: syz.0.97 Tainted: G W syzkaller #0 [ 75.606291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.607685][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.608829][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.609696][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.610479][ C0] sp : ffff800008007df0 [ 75.611082][ C0] x29: ffff800008007df0 x28: ffff0000cd07b680 x27: 1fffe000341d085c [ 75.612232][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 75.613418][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e6c91970 [ 75.614677][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.615859][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.617016][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 75.618255][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 19209f070b0fdd00 [ 75.619346][ C0] x8 : 19209f070b0fdd00 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.620508][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.621620][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.622828][ C0] Call trace: [ 75.623325][ C0] invalidate_bh_lru+0x128/0x22c [ 75.624003][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.624883][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.625873][ C0] ipi_handler+0x10c/0x70c [ 75.627984][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.628738][ C0] handle_domain_irq+0x148/0x200 [ 75.629463][ C0] gic_handle_irq+0x78/0x1b8 [ 75.630155][ C0] call_on_irq_stack+0x30/0x48 [ 75.630870][ C0] do_interrupt_handler+0x6c/0x88 [ 75.631668][ C0] el1_interrupt+0x30/0x58 [ 75.632373][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.633172][ C0] el1h_64_irq+0x78/0x7c [ 75.633831][ C0] lock_acquire+0x234/0x618 [ 75.634536][ C0] down_read+0xc0/0x38c [ 75.635132][ C0] validate_mm+0x94/0x864 [ 75.635827][ C0] __vma_adjust+0x1500/0x1888 [ 75.636457][ C0] vma_merge+0x8f0/0xae4 [ 75.637063][ C0] mmap_region+0x954/0x13d4 [ 75.637683][ C0] do_mmap+0x6d0/0xe24 [ 75.638230][ C0] vm_mmap_pgoff+0x194/0x298 [ 75.638911][ C0] ksys_mmap_pgoff+0x11c/0x638 [ 75.639599][ C0] __arm64_sys_mmap+0x108/0x120 [ 75.640243][ C0] invoke_syscall+0x98/0x28c [ 75.641012][ C0] el0_svc_common+0x13c/0x258 [ 75.641694][ C0] do_el0_svc+0x5c/0x140 [ 75.642415][ C0] el0_svc+0x78/0x1d0 [ 75.642948][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 75.643717][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.644483][ C0] irq event stamp: 1330 [ 75.645054][ C0] hardirqs last enabled at (1329): [] el0_svc_common+0xa0/0x258 [ 75.646438][ C0] hardirqs last disabled at (1330): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.647738][ C0] softirqs last enabled at (1110): [] local_bh_enable+0x10/0x34 [ 75.649197][ C0] softirqs last disabled at (1108): [] local_bh_disable+0x10/0x34 [ 75.650672][ C0] ---[ end trace a72683cc467bd4e9 ]--- [ 75.679543][ T4883] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.680623][ T4883] Bad inode number on dev loop0: 2 is out of range [ 75.681505][ T4883] SysV FS: get root inode failed [ 75.682150][ T4883] oldfs: cannot read superblock [ 75.685942][ C1] ------------[ cut here ]------------ [ 75.686879][ C1] VFS: brelse: Trying to free free buffer [ 75.687727][ C1] WARNING: CPU: 1 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.689100][ C1] Modules linked in: [ 75.689646][ C1] CPU: 1 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.690942][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.692405][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.693521][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.694247][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.694891][ C1] sp : ffff800008017df0 [ 75.695488][ C1] x29: ffff800008017df0 x28: ffff0000c8370000 x27: 1fffe000341d4a5c [ 75.696582][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 75.697681][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e28fb970 [ 75.698780][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.699828][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.700942][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 75.702036][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : ca04e80e70640500 [ 75.703152][ C1] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.704295][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.705373][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.706484][ C1] Call trace: [ 75.706941][ C1] invalidate_bh_lru+0x128/0x22c [ 75.707611][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.708507][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.709454][ C1] ipi_handler+0x10c/0x70c [ 75.710060][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.710871][ C1] handle_domain_irq+0x148/0x200 [ 75.711695][ C1] gic_handle_irq+0x78/0x1b8 [ 75.712344][ C1] call_on_irq_stack+0x30/0x48 [ 75.712969][ C1] do_interrupt_handler+0x6c/0x88 [ 75.713650][ C1] el1_interrupt+0x30/0x58 [ 75.714261][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.714876][ C1] el1h_64_irq+0x78/0x7c [ 75.715401][ C1] debug_lockdep_rcu_enabled+0x28/0x40 [ 75.716177][ C1] apparmor_file_alloc_security+0xe4/0x140 [ 75.717005][ C1] security_file_alloc+0xb4/0x11c [ 75.717735][ C1] __alloc_file+0xb4/0x244 [ 75.718347][ C1] alloc_empty_file+0xa0/0x184 [ 75.719068][ C1] path_openat+0xe0/0x2808 [ 75.719713][ C1] do_filp_open+0x188/0x370 [ 75.720298][ C1] do_sys_openat2+0x134/0x3fc [ 75.720964][ C1] __arm64_sys_openat+0x11c/0x150 [ 75.721730][ C1] invoke_syscall+0x98/0x28c [ 75.722335][ C1] el0_svc_common+0x13c/0x258 [ 75.722952][ C1] do_el0_svc+0x5c/0x140 [ 75.723529][ C1] el0_svc+0x78/0x1d0 [ 75.724137][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 75.724846][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.725461][ C1] irq event stamp: 419318 [ 75.725998][ C1] hardirqs last enabled at (419317): [] ___slab_alloc+0xc10/0xd84 [ 75.727313][ C1] hardirqs last disabled at (419318): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.728611][ C1] softirqs last enabled at (419294): [] local_bh_enable+0x10/0x34 [ 75.729947][ C1] softirqs last disabled at (419292): [] local_bh_disable+0x10/0x34 [ 75.731166][ C1] ---[ end trace a72683cc467bd4ea ]--- [ 75.773500][ T4885] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.774641][ T4885] Bad inode number on dev loop0: 2 is out of range [ 75.775574][ T4885] SysV FS: get root inode failed [ 75.776268][ T4885] oldfs: cannot read superblock [ 75.777975][ C0] ------------[ cut here ]------------ [ 75.778738][ C0] VFS: brelse: Trying to free free buffer [ 75.779651][ C0] WARNING: CPU: 0 PID: 4885 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.780970][ C0] Modules linked in: [ 75.781486][ C0] CPU: 0 PID: 4885 Comm: syz.0.98 Tainted: G W syzkaller #0 [ 75.782759][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.784450][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.785565][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.786302][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.787088][ C0] sp : ffff800008007df0 [ 75.787689][ C0] x29: ffff800008007df0 x28: ffff0000da27b680 x27: 1fffe000341d085c [ 75.788848][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 75.790084][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e6c91d10 [ 75.791233][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 75.792408][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 75.793609][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 75.794779][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 94ae65264a43f600 [ 75.796101][ C0] x8 : 94ae65264a43f600 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.797242][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.798420][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 75.799517][ C0] Call trace: [ 75.799941][ C0] invalidate_bh_lru+0x128/0x22c [ 75.800648][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.801503][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.802482][ C0] ipi_handler+0x10c/0x70c [ 75.803191][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.803992][ C0] handle_domain_irq+0x148/0x200 [ 75.804616][ C0] gic_handle_irq+0x78/0x1b8 [ 75.805273][ C0] call_on_irq_stack+0x30/0x48 [ 75.805962][ C0] do_interrupt_handler+0x6c/0x88 [ 75.806650][ C0] el1_interrupt+0x30/0x58 [ 75.807280][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.808000][ C0] el1h_64_irq+0x78/0x7c [ 75.808608][ C0] __kasan_check_write+0x14/0x54 [ 75.809304][ C0] unmap_page_range+0x760/0x180c [ 75.809994][ C0] unmap_single_vma+0x13c/0x1e4 [ 75.810677][ C0] unmap_vmas+0x110/0x218 [ 75.811301][ C0] exit_mmap+0x2c4/0x510 [ 75.811995][ C0] __mmput+0xe8/0x3a0 [ 75.812594][ C0] mmput+0x80/0xc0 [ 75.813101][ C0] exit_mm+0x5dc/0x704 [ 75.813610][ C0] do_exit+0x4bc/0x1f54 [ 75.814174][ C0] do_group_exit+0x104/0x274 [ 75.814849][ C0] get_signal+0x638/0x13b0 [ 75.815425][ C0] do_notify_resume+0x344/0x30a8 [ 75.816116][ C0] el0_svc+0xf0/0x1d0 [ 75.816831][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 75.817590][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.818227][ C0] irq event stamp: 1946 [ 75.818767][ C0] hardirqs last enabled at (1945): [] lock_page_memcg+0x110/0x22c [ 75.820031][ C0] hardirqs last disabled at (1946): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.821421][ C0] softirqs last enabled at (1150): [] local_bh_enable+0x10/0x34 [ 75.822731][ C0] softirqs last disabled at (1148): [] local_bh_disable+0x10/0x34 [ 75.824061][ C0] ---[ end trace a72683cc467bd4eb ]--- [ 75.946250][ T4887] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.947327][ T4887] Bad inode number on dev loop0: 2 is out of range [ 75.948245][ T4887] SysV FS: get root inode failed [ 75.948892][ T4887] oldfs: cannot read superblock [ 75.955930][ C1] ------------[ cut here ]------------ [ 75.956742][ C1] VFS: brelse: Trying to free free buffer [ 75.957613][ C1] WARNING: CPU: 1 PID: 4587 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.958803][ C1] Modules linked in: [ 75.959383][ C1] CPU: 1 PID: 4587 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.960524][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.961862][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.962861][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.963533][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.964265][ C1] sp : ffff800008017df0 [ 75.964825][ C1] x29: ffff800008017df0 x28: ffff0000c8370000 x27: 1fffe000341d4a5c [ 75.965921][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 75.967097][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e28fbd10 [ 75.968321][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.969459][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.970606][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 75.971651][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : ca04e80e70640500 [ 75.972749][ C1] x8 : ca04e80e70640500 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.973780][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.974947][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.976109][ C1] Call trace: [ 75.976542][ C1] invalidate_bh_lru+0x128/0x22c [ 75.977177][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.977992][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.978937][ C1] ipi_handler+0x10c/0x70c [ 75.979534][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.980396][ C1] handle_domain_irq+0x148/0x200 [ 75.981042][ C1] gic_handle_irq+0x78/0x1b8 [ 75.981655][ C1] call_on_irq_stack+0x30/0x48 [ 75.982253][ C1] do_interrupt_handler+0x6c/0x88 [ 75.983022][ C1] el1_interrupt+0x30/0x58 [ 75.983664][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.984349][ C1] el1h_64_irq+0x78/0x7c [ 75.984912][ C1] __fdget_pos+0x20/0x180 [ 75.985534][ C1] ksys_read+0x8c/0x228 [ 75.986144][ C1] __arm64_sys_read+0x7c/0x90 [ 75.986785][ C1] invoke_syscall+0x98/0x28c [ 75.987433][ C1] el0_svc_common+0x13c/0x258 [ 75.988087][ C1] do_el0_svc+0x5c/0x140 [ 75.988748][ C1] el0_svc+0x78/0x1d0 [ 75.989249][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 75.989884][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.990524][ C1] irq event stamp: 427676 [ 75.991116][ C1] hardirqs last enabled at (427675): [] el0_svc_common+0xa0/0x258 [ 75.992481][ C1] hardirqs last disabled at (427676): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.993869][ C1] softirqs last enabled at (427632): [] release_sock+0x1d0/0x258 [ 75.995151][ C1] softirqs last disabled at (427630): [] release_sock+0x34/0x258 [ 75.996338][ C1] ---[ end trace a72683cc467bd4ec ]--- [ 76.064763][ T4889] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.065922][ T4889] Bad inode number on dev loop0: 2 is out of range [ 76.066867][ T4889] SysV FS: get root inode failed [ 76.067579][ T4889] oldfs: cannot read superblock [ 76.068300][ C0] ------------[ cut here ]------------ [ 76.069214][ C0] VFS: brelse: Trying to free free buffer [ 76.070070][ C0] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.071427][ C0] Modules linked in: [ 76.072028][ C0] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 76.073169][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.074545][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.075760][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 76.076512][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 76.077280][ C0] sp : ffff800008007df0 [ 76.077851][ C0] x29: ffff800008007df0 x28: ffff0000cafc51c0 x27: 1fffe000341d085b [ 76.078960][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 76.080225][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e28df7a0 [ 76.081623][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 76.082801][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 76.083902][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 76.085041][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : c35095dc35abab00 [ 76.086212][ C0] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.087445][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.088748][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 76.089983][ C0] Call trace: [ 76.090472][ C0] invalidate_bh_lru+0x128/0x22c [ 76.091152][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 76.092008][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.093059][ C0] ipi_handler+0x10c/0x70c [ 76.093758][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 76.094643][ C0] handle_domain_irq+0x148/0x200 [ 76.095450][ C0] gic_handle_irq+0x78/0x1b8 [ 76.096128][ C0] call_on_irq_stack+0x30/0x48 [ 76.096770][ C0] do_interrupt_handler+0x6c/0x88 [ 76.097442][ C0] el1_interrupt+0x30/0x58 [ 76.098165][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.098930][ C0] el1h_64_irq+0x78/0x7c [ 76.099566][ C0] finish_lock_switch+0xb8/0x1c8 [ 76.100323][ C0] finish_task_switch+0x120/0x6f4 [ 76.101095][ C0] __schedule+0xe24/0x1c6c [ 76.101805][ C0] schedule+0x11c/0x1c8 [ 76.102421][ C0] schedule_preempt_disabled+0x18/0x2c [ 76.103201][ C0] __mutex_lock_common+0xae0/0x1ea4 [ 76.103957][ C0] mutex_lock_nested+0xac/0x11c [ 76.104713][ C0] blkdev_get_by_dev+0x120/0x86c [ 76.105484][ C0] blkdev_open+0x108/0x284 [ 76.106134][ C0] do_dentry_open+0x754/0xea4 [ 76.106822][ C0] vfs_open+0x7c/0x90 [ 76.107442][ C0] path_openat+0x1ff8/0x2808 [ 76.108121][ C0] do_filp_open+0x188/0x370 [ 76.108787][ C0] do_sys_openat2+0x134/0x3fc [ 76.109428][ C0] __arm64_sys_openat+0x11c/0x150 [ 76.110098][ C0] invoke_syscall+0x98/0x28c [ 76.110753][ C0] el0_svc_common+0x13c/0x258 [ 76.111470][ C0] do_el0_svc+0x5c/0x140 [ 76.112139][ C0] el0_svc+0x78/0x1d0 [ 76.112757][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 76.113453][ C0] el0t_64_sync+0x1a0/0x1a4 [ 76.114120][ C0] irq event stamp: 446254 [ 76.114824][ C0] hardirqs last enabled at (446253): [] finish_lock_switch+0xb0/0x1c8 [ 76.116400][ C0] hardirqs last disabled at (446254): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.117885][ C0] softirqs last enabled at (446224): [] local_bh_enable+0x10/0x34 [ 76.119268][ C0] softirqs last disabled at (446222): [] local_bh_disable+0x10/0x34 [ 76.120691][ C0] ---[ end trace a72683cc467bd4ed ]--- [ 76.265525][ T4891] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.266719][ T4891] Bad inode number on dev loop0: 2 is out of range [ 76.267559][ T4891] SysV FS: get root inode failed [ 76.268257][ T4891] oldfs: cannot read superblock [ 76.276640][ T4708] ------------[ cut here ]------------ [ 76.277428][ T4708] VFS: brelse: Trying to free free buffer [ 76.278257][ T4708] WARNING: CPU: 0 PID: 4708 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.279482][ T4708] Modules linked in: [ 76.280029][ T4708] CPU: 0 PID: 4708 Comm: udevd Tainted: G W syzkaller #0 [ 76.281079][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.282439][ T4708] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.283488][ T4708] pc : invalidate_bh_lru+0x128/0x22c [ 76.284265][ T4708] lr : invalidate_bh_lru+0x128/0x22c [ 76.285025][ T4708] sp : ffff80001fc177d0 [ 76.285606][ T4708] x29: ffff80001fc177d0 x28: ffff80001438d000 x27: 1fffe000341d085c [ 76.286755][ T4708] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 76.287969][ T4708] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52ea148 [ 76.289159][ T4708] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 76.290279][ T4708] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 76.291409][ T4708] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 76.292538][ T4708] x11: ff8080000830061c x10: 0000000000000000 x9 : c35095dc35abab00 [ 76.293670][ T4708] x8 : c35095dc35abab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.294816][ T4708] x5 : ffff80001fc170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.295868][ T4708] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 76.296959][ T4708] Call trace: [ 76.297361][ T4708] invalidate_bh_lru+0x128/0x22c [ 76.297956][ T4708] smp_call_function_many_cond+0xa5c/0xec0 [ 76.298730][ T4708] on_each_cpu_cond_mask+0x5c/0xc4 [ 76.299507][ T4708] invalidate_bh_lrus+0x34/0x40 [ 76.300165][ T4708] blkdev_flush_mapping+0x16c/0x334 [ 76.300807][ T4708] blkdev_put+0x444/0x6c4 [ 76.301436][ T4708] blkdev_close+0x74/0xb0 [ 76.302020][ T4708] __fput+0x1b8/0x7e8 [ 76.302540][ T4708] ____fput+0x20/0x30 [ 76.303056][ T4708] task_work_run+0x13c/0x1e8 [ 76.303695][ T4708] do_notify_resume+0x2488/0x30a8 [ 76.304423][ T4708] el0_svc+0xf0/0x1d0 [ 76.304952][ T4708] el0t_64_sync_handler+0xcc/0xe4 [ 76.305652][ T4708] el0t_64_sync+0x1a0/0x1a4 [ 76.306274][ T4708] irq event stamp: 449914 [ 76.306878][ T4708] hardirqs last enabled at (449913): [] kasan_quarantine_put+0xc4/0x200 [ 76.308106][ T4708] hardirqs last disabled at (449914): [] smp_call_function_many_cond+0xa50/0xec0 [ 76.309578][ T4708] softirqs last enabled at (449660): [] local_bh_enable+0x10/0x34 [ 76.310866][ T4708] softirqs last disabled at (449658): [] local_bh_disable+0x10/0x34 [ 76.312138][ T4708] ---[ end trace a72683cc467bd4ee ]--- [ 76.365478][ T4893] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.366673][ T4893] Bad inode number on dev loop0: 2 is out of range [ 76.367549][ T4893] SysV FS: get root inode failed [ 76.368238][ T4893] oldfs: cannot read superblock [ 76.368937][ T4893] ------------[ cut here ]------------ [ 76.369605][ T4893] VFS: brelse: Trying to free free buffer [ 76.370410][ T4893] WARNING: CPU: 0 PID: 4893 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.371595][ T4893] Modules linked in: [ 76.372112][ T4893] CPU: 0 PID: 4893 Comm: syz.0.102 Tainted: G W syzkaller #0 [ 76.373274][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.374731][ T4893] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.375828][ T4893] pc : invalidate_bh_lru+0x128/0x22c [ 76.376573][ T4893] lr : invalidate_bh_lru+0x128/0x22c [ 76.377260][ T4893] sp : ffff8000203e7710 [ 76.377809][ T4893] x29: ffff8000203e7710 x28: ffff80001438d000 x27: 1fffe000341d085b [ 76.378943][ T4893] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 76.380009][ T4893] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52ea4e8 [ 76.381058][ T4893] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 76.382110][ T4893] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 76.383119][ T4893] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 76.384215][ T4893] x11: ff8080000830061c x10: 0000000000000000 x9 : 1bbebde40feaf100 [ 76.385378][ T4893] x8 : 1bbebde40feaf100 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.386435][ T4893] x5 : ffff8000203e7018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.387419][ T4893] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 76.388457][ T4893] Call trace: [ 76.388961][ T4893] invalidate_bh_lru+0x128/0x22c [ 76.389550][ T4893] smp_call_function_many_cond+0xa5c/0xec0 [ 76.390235][ T4893] on_each_cpu_cond_mask+0x5c/0xc4 [ 76.390921][ T4893] invalidate_bh_lrus+0x34/0x40 [ 76.391608][ T4893] blkdev_flush_mapping+0x16c/0x334 [ 76.392260][ T4893] blkdev_put+0x444/0x6c4 [ 76.392828][ T4893] kill_block_super+0xa0/0xe0 [ 76.393470][ T4893] deactivate_locked_super+0xc0/0x13c [ 76.394227][ T4893] mount_bdev+0x284/0x35c [ 76.394808][ T4893] sysv_mount+0x44/0x58 [ 76.395398][ T4893] legacy_get_tree+0xd8/0x174 [ 76.396030][ T4893] vfs_get_tree+0x90/0x278 [ 76.396661][ T4893] do_new_mount+0x228/0x804 [ 76.397296][ T4893] path_mount+0x57c/0xfe8 [ 76.397869][ T4893] __arm64_sys_mount+0x488/0x5f8 [ 76.398487][ T4893] invoke_syscall+0x98/0x28c [ 76.399076][ T4893] el0_svc_common+0x13c/0x258 [ 76.399712][ T4893] do_el0_svc+0x5c/0x140 [ 76.400275][ T4893] el0_svc+0x78/0x1d0 [ 76.400822][ T4893] el0t_64_sync_handler+0xcc/0xe4 [ 76.401581][ T4893] el0t_64_sync+0x1a0/0x1a4 [ 76.402186][ T4893] irq event stamp: 1580 [ 76.402739][ T4893] hardirqs last enabled at (1579): [] kasan_quarantine_put+0xc4/0x200 [ 76.403929][ T4893] hardirqs last disabled at (1580): [] smp_call_function_many_cond+0xa50/0xec0 [ 76.405386][ T4893] softirqs last enabled at (878): [] local_bh_enable+0x10/0x34 [ 76.406542][ T4893] softirqs last disabled at (876): [] local_bh_disable+0x10/0x34 [ 76.407876][ T4893] ---[ end trace a72683cc467bd4ef ]--- [ 76.514930][ T4895] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.516434][ T4895] Bad inode number on dev loop0: 2 is out of range [ 76.517363][ T4895] SysV FS: get root inode failed [ 76.518076][ T4895] oldfs: cannot read superblock [ 76.524057][ C1] ------------[ cut here ]------------ [ 76.524889][ C1] VFS: brelse: Trying to free free buffer [ 76.525692][ C1] WARNING: CPU: 1 PID: 4895 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.526904][ C1] Modules linked in: [ 76.527491][ C1] CPU: 1 PID: 4895 Comm: syz.0.103 Tainted: G W syzkaller #0 [ 76.528631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.529937][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.530912][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 76.531474][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 76.532311][ C1] sp : ffff800008017df0 [ 76.532873][ C1] x29: ffff800008017df0 x28: ffff0000c7759b40 x27: 1fffe000341d4a5b [ 76.534014][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 76.535152][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000cfc0ad10 [ 76.536249][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 76.537388][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 76.538436][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 76.539598][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 3996b0c8a104bd00 [ 76.540694][ C1] x8 : 3996b0c8a104bd00 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.541697][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.542802][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 76.543975][ C1] Call trace: [ 76.544528][ C1] invalidate_bh_lru+0x128/0x22c [ 76.545329][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 76.546187][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.547194][ C1] ipi_handler+0x10c/0x70c [ 76.547834][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 76.548569][ C1] handle_domain_irq+0x148/0x200 [ 76.549254][ C1] gic_handle_irq+0x78/0x1b8 [ 76.549931][ C1] call_on_irq_stack+0x30/0x48 [ 76.550712][ C1] do_interrupt_handler+0x6c/0x88 [ 76.551369][ C1] el1_interrupt+0x30/0x58 [ 76.551901][ C1] el1h_64_irq_handler+0x18/0x24 [ 76.552611][ C1] el1h_64_irq+0x78/0x7c [ 76.553176][ C1] lock_page_memcg+0x120/0x22c [ 76.553893][ C1] page_remove_rmap+0x3c/0xfb4 [ 76.554622][ C1] unmap_page_range+0xa60/0x180c [ 76.555365][ C1] unmap_single_vma+0x13c/0x1e4 [ 76.556138][ C1] unmap_vmas+0x110/0x218 [ 76.556724][ C1] exit_mmap+0x2c4/0x510 [ 76.557342][ C1] __mmput+0xe8/0x3a0 [ 76.557935][ C1] mmput+0x80/0xc0 [ 76.558470][ C1] exit_mm+0x5dc/0x704 [ 76.559057][ C1] do_exit+0x4bc/0x1f54 [ 76.559665][ C1] do_group_exit+0x104/0x274 [ 76.560325][ C1] get_signal+0x638/0x13b0 [ 76.560946][ C1] do_notify_resume+0x344/0x30a8 [ 76.561567][ C1] el0_svc+0xf0/0x1d0 [ 76.562138][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 76.562827][ C1] el0t_64_sync+0x1a0/0x1a4 [ 76.563471][ C1] irq event stamp: 1706 [ 76.564032][ C1] hardirqs last enabled at (1705): [] lock_page_memcg+0x110/0x22c [ 76.565377][ C1] hardirqs last disabled at (1706): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.566752][ C1] softirqs last enabled at (1374): [] local_bh_enable+0x10/0x34 [ 76.568013][ C1] softirqs last disabled at (1372): [] local_bh_disable+0x10/0x34 [ 76.569354][ C1] ---[ end trace a72683cc467bd4f0 ]---