[ 52.277379][ T960] device hsr_slave_0 left promiscuous mode [ 52.333374][ T960] device hsr_slave_1 left promiscuous mode [ 52.422787][ T960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.424047][ T960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.425875][ T960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.427181][ T960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.428821][ T960] device bridge_slave_1 left promiscuous mode [ 52.430151][ T960] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.463736][ T960] device bridge_slave_0 left promiscuous mode [ 52.464910][ T960] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.592607][ T960] device veth1_macvtap left promiscuous mode [ 52.593737][ T960] device veth0_macvtap left promiscuous mode [ 52.594878][ T960] device veth1_vlan left promiscuous mode [ 52.595919][ T960] device veth0_vlan left promiscuous mode [ 52.685867][ T960] team0 (unregistering): Port device team_slave_1 removed [ 52.690445][ T960] team0 (unregistering): Port device team_slave_0 removed [ 52.696056][ T960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.725941][ T960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.855500][ T960] bond0 (unregistering): Released all slaves [ 55.607555][ T960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.645219][ T960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.685328][ T960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.735920][ T960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. 1970/01/01 00:00:56 parsed 1 programs [ 57.887596][ T960] device hsr_slave_0 left promiscuous mode [ 57.941154][ T4351] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 57.952929][ T960] device hsr_slave_1 left promiscuous mode [ 58.042592][ T960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.043810][ T960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.045277][ T960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.046649][ T960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.048262][ T960] device bridge_slave_1 left promiscuous mode [ 58.049437][ T960] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.083542][ T960] device bridge_slave_0 left promiscuous mode [ 58.084706][ T960] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.212581][ T960] device veth1_macvtap left promiscuous mode [ 58.213614][ T960] device veth0_macvtap left promiscuous mode [ 58.214643][ T960] device veth1_vlan left promiscuous mode [ 58.215672][ T960] device veth0_vlan left promiscuous mode [ 58.349237][ T960] team0 (unregistering): Port device team_slave_1 removed [ 58.354048][ T960] team0 (unregistering): Port device team_slave_0 removed [ 58.357917][ T960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.385825][ T960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.486144][ T960] bond0 (unregistering): Released all slaves [ 60.228859][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.230173][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.235921][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.240878][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.242255][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.244132][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.747740][ T4431] chnl_net:caif_netlink_parms(): no params data found [ 60.764308][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.765569][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.767170][ T4431] device bridge_slave_0 entered promiscuous mode [ 60.769215][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.770403][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.771887][ T4431] device bridge_slave_1 entered promiscuous mode [ 60.779492][ T4431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.782141][ T4431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.789557][ T4431] team0: Port device team_slave_0 added [ 60.791410][ T4431] team0: Port device team_slave_1 added [ 60.798428][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.799667][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.804190][ T4431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.809955][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.811021][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.815477][ T4431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.874053][ T4431] device hsr_slave_0 entered promiscuous mode [ 60.912595][ T4431] device hsr_slave_1 entered promiscuous mode [ 61.509184][ T4431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.526478][ T4431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.564022][ T4431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.604332][ T4431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.667228][ T4431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.670873][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.672440][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.675903][ T4431] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.682950][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.684747][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.686304][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.687492][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.688861][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.690456][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.692133][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.693452][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.696301][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.698062][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.699875][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.701560][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.709081][ T4431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.710876][ T4431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.713961][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.715511][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.717158][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.718814][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.720475][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.722163][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.724594][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.726161][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.729704][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.767481][ T4431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.778117][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.779521][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.780901][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.783220][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.821241][ T4431] device veth0_vlan entered promiscuous mode [ 61.825252][ T4431] device veth1_vlan entered promiscuous mode [ 61.826699][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.828364][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.830156][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.831857][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.834450][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.842273][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.844438][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.846077][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.848399][ T4431] device veth0_macvtap entered promiscuous mode [ 61.850723][ T4431] device veth1_macvtap entered promiscuous mode [ 61.878194][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.879504][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.881033][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.883846][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.885356][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.888896][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.890833][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.892795][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.895010][ T4431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.896552][ T4431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.898104][ T4431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.899659][ T4431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:02 executed programs: 0 [ 62.478992][ T4611] chnl_net:caif_netlink_parms(): no params data found [ 62.530207][ T4611] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.540289][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.542049][ T4611] device bridge_slave_0 entered promiscuous mode [ 62.544839][ T4611] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.546137][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.547727][ T4611] device bridge_slave_1 entered promiscuous mode [ 62.558442][ T4611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.561529][ T4611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.572909][ T4611] team0: Port device team_slave_0 added [ 62.575067][ T4611] team0: Port device team_slave_1 added [ 62.586441][ T4611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.587709][ T4611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.592107][ T4611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.596631][ T4611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.597779][ T4611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.602122][ T4611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.663945][ T4611] device hsr_slave_0 entered promiscuous mode [ 62.712770][ T4611] device hsr_slave_1 entered promiscuous mode [ 62.742677][ T4611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.744008][ T4611] Cannot create hsr debugfs directory [ 62.781789][ T4611] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.412574][ T4075] Bluetooth: hci0: command 0x0409 tx timeout [ 65.145934][ T4611] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.492479][ T4176] Bluetooth: hci0: command 0x041b tx timeout [ 67.375979][ T4611] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.426348][ T4611] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.574648][ T4611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.633753][ T4611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.673739][ T4611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.713790][ T4611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.793889][ T4611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.797489][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.799163][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.801786][ T4611] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.804547][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.806281][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.807973][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.809230][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.810705][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.813379][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.815053][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.816515][ T569] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.817672][ T569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.820164][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.824676][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.827440][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.829393][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.830998][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.835219][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.836983][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.839523][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.841134][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.844687][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.846263][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.848733][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.896832][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.898247][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.902667][ T4611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.908691][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.910339][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.916688][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.918232][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.919836][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.921452][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.923951][ T4611] device veth0_vlan entered promiscuous mode [ 67.927111][ T4611] device veth1_vlan entered promiscuous mode [ 67.935117][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.936781][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.938302][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.939911][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.942350][ T4611] device veth0_macvtap entered promiscuous mode [ 67.945482][ T4611] device veth1_macvtap entered promiscuous mode [ 67.950117][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.951890][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.954742][ T4611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.956075][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.957659][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.959132][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.960882][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.965379][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.967079][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.970029][ T4611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.971198][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.973078][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.975926][ T4611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.977482][ T4611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.979015][ T4611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.980509][ T4611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.998611][ T569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.000728][ T569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.007625][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.007775][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.008903][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.011428][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:08 executed programs: 2 [ 68.029986][ T4711] loop0: detected capacity change from 0 to 128 [ 68.058076][ T4711] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.059312][ T4711] Bad inode number on dev loop0: 2 is out of range [ 68.060386][ T4711] SysV FS: get root inode failed [ 68.061215][ T4711] oldfs: cannot read superblock [ 68.064086][ C0] ------------[ cut here ]------------ [ 68.065075][ C0] VFS: brelse: Trying to free free buffer [ 68.066062][ C0] WARNING: CPU: 0 PID: 4711 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.067527][ C0] Modules linked in: [ 68.068158][ C0] CPU: 0 PID: 4711 Comm: syz.0.16 Not tainted syzkaller #0 [ 68.069477][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.071317][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.072751][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.073709][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.074702][ C0] sp : ffff800008007df0 [ 68.075490][ C0] x29: ffff800008007df0 x28: ffff0000dba31b40 x27: 1fffe000341cc45b [ 68.077184][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 68.078889][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd300a58 [ 68.080561][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 68.082064][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.083586][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 68.085139][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 22ab28820c57c000 [ 68.086666][ C0] x8 : 22ab28820c57c000 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.088180][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.089731][ C0] x2 : 0000000000000001 x1 : 0000000000010002 x0 : 0000000000000027 [ 68.091298][ C0] Call trace: [ 68.091909][ C0] invalidate_bh_lru+0x128/0x22c [ 68.092804][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.093887][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.095151][ C0] ipi_handler+0x10c/0x70c [ 68.095952][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.096922][ C0] handle_domain_irq+0x148/0x200 [ 68.097821][ C0] gic_handle_irq+0x78/0x1b8 [ 68.098666][ C0] call_on_irq_stack+0x30/0x48 [ 68.099550][ C0] do_interrupt_handler+0x6c/0x88 [ 68.100467][ C0] el1_interrupt+0x30/0x58 [ 68.101301][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.102189][ C0] el1h_64_irq+0x78/0x7c [ 68.102972][ C0] _raw_write_unlock_irq+0xa0/0x128 [ 68.103936][ C0] release_task+0x1548/0x16b4 [ 68.104749][ C0] do_exit+0x11d0/0x1f54 [ 68.105460][ C0] do_group_exit+0x104/0x274 [ 68.106266][ C0] get_signal+0x638/0x13b0 [ 68.107052][ C0] do_notify_resume+0x344/0x30a8 [ 68.107942][ C0] el0_svc+0xf0/0x1d0 [ 68.108658][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 68.109567][ C0] el0t_64_sync+0x1a0/0x1a4 [ 68.110368][ C0] irq event stamp: 2602 [ 68.111120][ C0] hardirqs last enabled at (2601): [] _raw_write_unlock_irq+0x98/0x128 [ 68.112797][ C0] hardirqs last disabled at (2602): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.114507][ C0] softirqs last enabled at (1184): [] local_bh_enable+0x10/0x34 [ 68.116162][ C0] softirqs last disabled at (1182): [] local_bh_disable+0x10/0x34 [ 68.117849][ C0] ---[ end trace c845eca8195b1ed6 ]--- [ 68.188347][ T4713] loop0: detected capacity change from 0 to 128 [ 68.190363][ T4713] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.191680][ T4713] Bad inode number on dev loop0: 2 is out of range [ 68.194963][ T4713] SysV FS: get root inode failed [ 68.195825][ T4713] oldfs: cannot read superblock [ 68.219840][ T4705] ------------[ cut here ]------------ [ 68.220836][ T4705] VFS: brelse: Trying to free free buffer [ 68.221792][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.223274][ T4705] Modules linked in: [ 68.223987][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 68.225449][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.227277][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.228680][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 68.229605][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 68.230518][ T4705] sp : ffff80001e9377d0 [ 68.231224][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 68.232889][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 68.234421][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deadf5d0 [ 68.236004][ T4705] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 68.237505][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.239027][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 68.240529][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 68.241976][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.243428][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.244839][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.246272][ T4705] Call trace: [ 68.246860][ T4705] invalidate_bh_lru+0x128/0x22c [ 68.247752][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 68.248824][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.249707][ T4705] invalidate_bh_lrus+0x34/0x40 [ 68.250543][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 68.251423][ T4705] blkdev_put+0x444/0x6c4 [ 68.252160][ T4705] blkdev_close+0x74/0xb0 [ 68.252905][ T4705] __fput+0x1b8/0x7e8 [ 68.253580][ T4705] ____fput+0x20/0x30 [ 68.254259][ T4705] task_work_run+0x13c/0x1e8 [ 68.255052][ T4705] do_notify_resume+0x2488/0x30a8 [ 68.255956][ T4705] el0_svc+0xf0/0x1d0 [ 68.256710][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 68.257596][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 68.258406][ T4705] irq event stamp: 27236 [ 68.259157][ T4705] hardirqs last enabled at (27235): [] kasan_quarantine_put+0xc4/0x200 [ 68.260906][ T4705] hardirqs last disabled at (27236): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.262847][ T4705] softirqs last enabled at (27032): [] local_bh_enable+0x10/0x34 [ 68.264564][ T4705] softirqs last disabled at (27030): [] local_bh_disable+0x10/0x34 [ 68.266300][ T4705] ---[ end trace c845eca8195b1ed7 ]--- [ 68.294133][ T4717] loop0: detected capacity change from 0 to 128 [ 68.299067][ T4717] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.300525][ T4717] Bad inode number on dev loop0: 2 is out of range [ 68.301680][ T4717] SysV FS: get root inode failed [ 68.302797][ T4717] oldfs: cannot read superblock [ 68.307749][ C0] ------------[ cut here ]------------ [ 68.308766][ C0] VFS: brelse: Trying to free free buffer [ 68.309776][ C0] WARNING: CPU: 0 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.311332][ C0] Modules linked in: [ 68.311978][ C0] CPU: 0 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.313607][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.315411][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.316829][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.317783][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.318654][ C0] sp : ffff800008007df0 [ 68.319322][ C0] x29: ffff800008007df0 x28: ffff0000ceca8000 x27: 1fffe000341cc45c [ 68.320999][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 68.322533][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd300df8 [ 68.324051][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 68.325533][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.326982][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 68.328414][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 68.329839][ C0] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.331288][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.332944][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.334551][ C0] Call trace: [ 68.335177][ C0] invalidate_bh_lru+0x128/0x22c [ 68.336125][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.337230][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.338475][ C0] ipi_handler+0x10c/0x70c [ 68.339287][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.340266][ C0] handle_domain_irq+0x148/0x200 [ 68.341138][ C0] gic_handle_irq+0x78/0x1b8 [ 68.341980][ C0] call_on_irq_stack+0x30/0x48 [ 68.342849][ C0] do_interrupt_handler+0x6c/0x88 [ 68.343760][ C0] el1_interrupt+0x30/0x58 [ 68.344559][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.345421][ C0] el1h_64_irq+0x78/0x7c [ 68.346174][ C0] __sanitizer_cov_trace_const_cmp8+0xc/0xbc [ 68.347329][ C0] arch_stack_walk+0x204/0x2c0 [ 68.348232][ C0] stack_trace_save+0x9c/0xf0 [ 68.349108][ C0] kasan_set_track+0x4c/0x84 [ 68.349967][ C0] kasan_set_free_info+0x28/0x4c [ 68.350999][ C0] ____kasan_slab_free+0x118/0x164 [ 68.351983][ C0] __kasan_slab_free+0x18/0x28 [ 68.352882][ C0] slab_free_freelist_hook+0x128/0x1e4 [ 68.353911][ C0] kfree+0x16c/0x404 [ 68.354661][ C0] kvfree+0x40/0x50 [ 68.355430][ C0] __vunmap+0x914/0x9e4 [ 68.356247][ C0] vfree+0xbc/0x154 [ 68.356984][ C0] __do_replace+0x85c/0x9c0 [ 68.357859][ C0] do_ip6t_set_ctl+0xadc/0xe38 [ 68.358764][ C0] nf_setsockopt+0x260/0x280 [ 68.359601][ C0] ipv6_setsockopt+0x1b64/0x392c [ 68.360514][ C0] tcp_setsockopt+0x1f4/0x1b8c [ 68.361422][ C0] sock_common_setsockopt+0xb0/0xcc [ 68.362408][ C0] __sys_setsockopt+0x260/0x36c [ 68.363357][ C0] __arm64_sys_setsockopt+0xc0/0xdc [ 68.364328][ C0] invoke_syscall+0x98/0x28c [ 68.365136][ C0] el0_svc_common+0x13c/0x258 [ 68.366030][ C0] do_el0_svc+0x5c/0x140 [ 68.366851][ C0] el0_svc+0x78/0x1d0 [ 68.367597][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 68.368544][ C0] el0t_64_sync+0x1a0/0x1a4 [ 68.369335][ C0] irq event stamp: 136252 [ 68.370131][ C0] hardirqs last enabled at (136251): [] free_unref_page+0x148/0x1f8 [ 68.371816][ C0] hardirqs last disabled at (136252): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.373532][ C0] softirqs last enabled at (136236): [] local_bh_enable+0x10/0x34 [ 68.375255][ C0] softirqs last disabled at (136234): [] local_bh_disable+0x10/0x34 [ 68.376937][ C0] ---[ end trace c845eca8195b1ed8 ]--- [ 68.426732][ T4719] loop0: detected capacity change from 0 to 128 [ 68.429256][ T4719] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.430423][ T4719] Bad inode number on dev loop0: 2 is out of range [ 68.431678][ T4719] SysV FS: get root inode failed [ 68.433706][ T4719] oldfs: cannot read superblock [ 68.442328][ T4705] ------------[ cut here ]------------ [ 68.443384][ T4705] VFS: brelse: Trying to free free buffer [ 68.444573][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.446138][ T4705] Modules linked in: [ 68.446818][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 68.448268][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.450080][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.451452][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 68.452354][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 68.453295][ T4705] sp : ffff80001e9377d0 [ 68.454012][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 68.455456][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 68.456905][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000de8a94e8 [ 68.458379][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 68.459784][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.461354][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 68.462783][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 68.464272][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.465744][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.467207][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.468671][ T4705] Call trace: [ 68.469271][ T4705] invalidate_bh_lru+0x128/0x22c [ 68.470171][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 68.471230][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.472138][ T4705] invalidate_bh_lrus+0x34/0x40 [ 68.473021][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 68.473998][ T4705] blkdev_put+0x444/0x6c4 [ 68.474767][ T4705] blkdev_close+0x74/0xb0 [ 68.475571][ T4705] __fput+0x1b8/0x7e8 [ 68.476292][ T4705] ____fput+0x20/0x30 [ 68.477012][ T4705] task_work_run+0x13c/0x1e8 [ 68.477822][ T4705] do_notify_resume+0x2488/0x30a8 [ 68.478684][ T4705] el0_svc+0xf0/0x1d0 [ 68.479370][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 68.480239][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 68.481047][ T4705] irq event stamp: 34058 [ 68.481800][ T4705] hardirqs last enabled at (34057): [] kasan_quarantine_put+0xc4/0x200 [ 68.483611][ T4705] hardirqs last disabled at (34058): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.485543][ T4705] softirqs last enabled at (33852): [] local_bh_enable+0x10/0x34 [ 68.487241][ T4705] softirqs last disabled at (33850): [] local_bh_disable+0x10/0x34 [ 68.488977][ T4705] ---[ end trace c845eca8195b1ed9 ]--- [ 68.521321][ T4721] loop0: detected capacity change from 0 to 128 [ 68.528471][ T4721] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.529716][ T4721] Bad inode number on dev loop0: 2 is out of range [ 68.531028][ T4721] SysV FS: get root inode failed [ 68.531899][ T4721] oldfs: cannot read superblock [ 68.534658][ C1] ------------[ cut here ]------------ [ 68.535588][ C1] VFS: brelse: Trying to free free buffer [ 68.536553][ C1] WARNING: CPU: 1 PID: 960 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.538015][ C1] Modules linked in: [ 68.538697][ C1] CPU: 1 PID: 960 Comm: kworker/u4:5 Tainted: G W syzkaller #0 [ 68.540167][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.541889][ C1] Workqueue: netns cleanup_net [ 68.542718][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.544155][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 68.545152][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 68.546172][ C1] sp : ffff800008017df0 [ 68.546964][ C1] x29: ffff800008017df0 x28: ffff0000c8a951c0 x27: 1fffe000341d065b [ 68.548473][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 68.549982][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000de8a9888 [ 68.551485][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 68.553086][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.554665][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 68.556329][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : ffe94251ce7c2e00 [ 68.557929][ C1] x8 : ffe94251ce7c2e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.559505][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.561188][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.562819][ C1] Call trace: [ 68.563470][ C1] invalidate_bh_lru+0x128/0x22c [ 68.564454][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 68.565633][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.566981][ C1] ipi_handler+0x10c/0x70c [ 68.567922][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 68.569032][ C1] handle_domain_irq+0x148/0x200 [ 68.569984][ C1] gic_handle_irq+0x78/0x1b8 [ 68.570876][ C1] call_on_irq_stack+0x30/0x48 [ 68.571741][ C1] do_interrupt_handler+0x6c/0x88 [ 68.572629][ C1] el1_interrupt+0x30/0x58 [ 68.573414][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.574275][ C1] el1h_64_irq+0x78/0x7c [ 68.575026][ C1] __sanitizer_cov_trace_pc+0xa4/0xa8 [ 68.575979][ C1] kernfs_remove_by_name_ns+0x44/0x150 [ 68.577074][ C1] sysfs_remove_group+0xf4/0x278 [ 68.577995][ C1] sysfs_remove_groups+0x5c/0xb4 [ 68.578897][ C1] device_remove_attrs+0xcc/0x148 [ 68.579820][ C1] device_del+0x578/0x990 [ 68.580606][ C1] netdev_unregister_kobject+0x13c/0x204 [ 68.581646][ C1] unregister_netdevice_many+0x12a8/0x1870 [ 68.582737][ C1] vti6_exit_batch_net+0x3b4/0x420 [ 68.583733][ C1] cleanup_net+0x650/0xab8 [ 68.584499][ C1] process_one_work+0x7a4/0x1178 [ 68.585516][ C1] worker_thread+0x8fc/0x103c [ 68.586356][ C1] kthread+0x37c/0x460 [ 68.587092][ C1] ret_from_fork+0x10/0x20 [ 68.587901][ C1] irq event stamp: 1287036 [ 68.588661][ C1] hardirqs last enabled at (1287035): [] kasan_quarantine_put+0xc4/0x200 [ 68.590473][ C1] hardirqs last disabled at (1287036): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.592301][ C1] softirqs last enabled at (1286930): [] dev_mc_flush+0x1b8/0x200 [ 68.594031][ C1] softirqs last disabled at (1286928): [] local_bh_disable+0x10/0x34 [ 68.595922][ C1] ---[ end trace c845eca8195b1eda ]--- [ 68.598742][ T4176] Bluetooth: hci0: command 0x040f tx timeout [ 68.665539][ T4723] loop0: detected capacity change from 0 to 128 [ 68.668465][ T4723] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.670024][ T4723] Bad inode number on dev loop0: 2 is out of range [ 68.671249][ T4723] SysV FS: get root inode failed [ 68.672165][ T4723] oldfs: cannot read superblock [ 68.679709][ T4705] ------------[ cut here ]------------ [ 68.680697][ T4705] VFS: brelse: Trying to free free buffer [ 68.681712][ T4705] WARNING: CPU: 0 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.683323][ T4705] Modules linked in: [ 68.684012][ T4705] CPU: 0 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 68.685511][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.687331][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.688678][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 68.689625][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 68.690575][ T4705] sp : ffff80001e9377d0 [ 68.691348][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 68.692803][ T4705] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 68.694286][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52bba58 [ 68.695763][ T4705] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 68.697312][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.698998][ T4705] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 68.700578][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 68.702126][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.703644][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.705188][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.706706][ T4705] Call trace: [ 68.707300][ T4705] invalidate_bh_lru+0x128/0x22c [ 68.708230][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 68.709288][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.710316][ T4705] invalidate_bh_lrus+0x34/0x40 [ 68.711171][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 68.712102][ T4705] blkdev_put+0x444/0x6c4 [ 68.712869][ T4705] blkdev_close+0x74/0xb0 [ 68.713608][ T4705] __fput+0x1b8/0x7e8 [ 68.714304][ T4705] ____fput+0x20/0x30 [ 68.715008][ T4705] task_work_run+0x13c/0x1e8 [ 68.715825][ T4705] do_notify_resume+0x2488/0x30a8 [ 68.716741][ T4705] el0_svc+0xf0/0x1d0 [ 68.717448][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 68.718290][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 68.719033][ T4705] irq event stamp: 46670 [ 68.719826][ T4705] hardirqs last enabled at (46669): [] kasan_quarantine_put+0xc4/0x200 [ 68.721703][ T4705] hardirqs last disabled at (46670): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.723641][ T4705] softirqs last enabled at (46452): [] local_bh_enable+0x10/0x34 [ 68.725296][ T4705] softirqs last disabled at (46450): [] local_bh_disable+0x10/0x34 [ 68.726971][ T4705] ---[ end trace c845eca8195b1edb ]--- [ 68.772676][ T4725] loop0: detected capacity change from 0 to 128 [ 68.775064][ T4725] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.776377][ T4725] Bad inode number on dev loop0: 2 is out of range [ 68.777572][ T4725] SysV FS: get root inode failed [ 68.778445][ T4725] oldfs: cannot read superblock [ 68.787036][ C1] ------------[ cut here ]------------ [ 68.787914][ C1] VFS: brelse: Trying to free free buffer [ 68.788874][ C1] WARNING: CPU: 1 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.790297][ C1] Modules linked in: [ 68.790971][ C1] CPU: 1 PID: 4727 Comm: syz.0.24 Tainted: G W syzkaller #0 [ 68.792342][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.794085][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.795687][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 68.796739][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 68.797776][ C1] sp : ffff800008017df0 [ 68.798578][ C1] x29: ffff800008017df0 x28: ffff0000c22a0000 x27: 1fffe000341d065c [ 68.800198][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 68.801811][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000de8a9c28 [ 68.803516][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 68.805213][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.806844][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 68.808501][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 1debd88a96259800 [ 68.810044][ C1] x8 : 1debd88a96259800 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.811547][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.813046][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.814599][ C1] Call trace: [ 68.815231][ C1] invalidate_bh_lru+0x128/0x22c [ 68.816144][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 68.817253][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.818507][ C1] ipi_handler+0x10c/0x70c [ 68.819340][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 68.820353][ C1] handle_domain_irq+0x148/0x200 [ 68.821204][ C1] gic_handle_irq+0x78/0x1b8 [ 68.821977][ C1] call_on_irq_stack+0x30/0x48 [ 68.822813][ C1] do_interrupt_handler+0x6c/0x88 [ 68.823699][ C1] el1_interrupt+0x30/0x58 [ 68.824490][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.825387][ C1] el1h_64_irq+0x78/0x7c [ 68.826144][ C1] __sanitizer_cov_trace_const_cmp8+0xb8/0xbc [ 68.827241][ C1] stack_trace_save+0x9c/0xf0 [ 68.828068][ C1] __kasan_slab_alloc+0x8c/0xcc [ 68.828940][ C1] slab_post_alloc_hook+0x74/0x3f8 [ 68.829798][ C1] kmem_cache_alloc+0x1dc/0x3d8 [ 68.830627][ C1] __alloc_file+0x30/0x244 [ 68.831394][ C1] alloc_empty_file+0xa0/0x184 [ 68.832370][ C1] alloc_file+0x64/0x494 [ 68.833122][ C1] alloc_file_pseudo+0x16c/0x1f4 [ 68.834132][ C1] __shmem_file_setup+0x1a0/0x26c [ 68.835125][ C1] shmem_file_setup+0x40/0x54 [ 68.836052][ C1] __arm64_sys_memfd_create+0x368/0x50c [ 68.837162][ C1] invoke_syscall+0x98/0x28c [ 68.838040][ C1] el0_svc_common+0x13c/0x258 [ 68.838910][ C1] do_el0_svc+0x5c/0x140 [ 68.839701][ C1] el0_svc+0x78/0x1d0 [ 68.840421][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 68.841333][ C1] el0t_64_sync+0x1a0/0x1a4 [ 68.842142][ C1] irq event stamp: 70 [ 68.842831][ C1] hardirqs last enabled at (69): [] ___slab_alloc+0xc10/0xd84 [ 68.844417][ C1] hardirqs last disabled at (70): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.846172][ C1] softirqs last enabled at (54): [] local_bh_enable+0x10/0x34 [ 68.847844][ C1] softirqs last disabled at (52): [] local_bh_disable+0x10/0x34 [ 68.849505][ C1] ---[ end trace c845eca8195b1edc ]--- [ 68.896042][ T4727] loop0: detected capacity change from 0 to 128 [ 68.899534][ T4727] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.900789][ T4727] Bad inode number on dev loop0: 2 is out of range [ 68.901866][ T4727] SysV FS: get root inode failed [ 68.903515][ T4727] oldfs: cannot read superblock [ 68.911640][ T4705] ------------[ cut here ]------------ [ 68.912614][ T4705] VFS: brelse: Trying to free free buffer [ 68.913663][ T4705] WARNING: CPU: 0 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.915281][ T4705] Modules linked in: [ 68.915973][ T4705] CPU: 0 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 68.917521][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.919416][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.920904][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 68.921812][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 68.922698][ T4705] sp : ffff80001e9377d0 [ 68.923386][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 68.924797][ T4705] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 68.926174][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52bb6b8 [ 68.927550][ T4705] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 68.928952][ T4705] x17: 0000000000000000 x16: ffff8000082dc19c x15: 0000000000000012 [ 68.930311][ T4705] x14: 0000000000000001 x13: 1ffff00003d26e18 x12: 0000000000000000 [ 68.931711][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 68.933111][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.934478][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff8000083083a4 [ 68.935985][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.937437][ T4705] Call trace: [ 68.938055][ T4705] invalidate_bh_lru+0x128/0x22c [ 68.938971][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 68.940028][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.940979][ T4705] invalidate_bh_lrus+0x34/0x40 [ 68.941850][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 68.942783][ T4705] blkdev_put+0x444/0x6c4 [ 68.943587][ T4705] blkdev_close+0x74/0xb0 [ 68.944401][ T4705] __fput+0x1b8/0x7e8 [ 68.945153][ T4705] ____fput+0x20/0x30 [ 68.945874][ T4705] task_work_run+0x13c/0x1e8 [ 68.946695][ T4705] do_notify_resume+0x2488/0x30a8 [ 68.947603][ T4705] el0_svc+0xf0/0x1d0 [ 68.948310][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 68.949199][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 68.949997][ T4705] irq event stamp: 55348 [ 68.950747][ T4705] hardirqs last enabled at (55347): [] kasan_quarantine_put+0xc4/0x200 [ 68.952509][ T4705] hardirqs last disabled at (55348): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.954453][ T4705] softirqs last enabled at (55162): [] local_bh_enable+0x10/0x34 [ 68.956090][ T4705] softirqs last disabled at (55160): [] local_bh_disable+0x10/0x34 [ 68.957772][ T4705] ---[ end trace c845eca8195b1edd ]--- [ 68.994901][ T4729] loop0: detected capacity change from 0 to 128 [ 68.997603][ T4729] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.998805][ T4729] Bad inode number on dev loop0: 2 is out of range [ 68.999872][ T4729] SysV FS: get root inode failed [ 69.000690][ T4729] oldfs: cannot read superblock [ 69.008930][ C0] ------------[ cut here ]------------ [ 69.009795][ C0] VFS: brelse: Trying to free free buffer [ 69.010732][ C0] WARNING: CPU: 0 PID: 4730 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.012065][ C0] Modules linked in: [ 69.012692][ C0] CPU: 0 PID: 4730 Comm: syz-executor Tainted: G W syzkaller #0 [ 69.014281][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.015983][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.017348][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.018234][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.019033][ C0] sp : ffff800008007df0 [ 69.019737][ C0] x29: ffff800008007df0 x28: ffff0000cc518000 x27: 1fffe000341cc45c [ 69.021049][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 69.022450][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52bb318 [ 69.023818][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 69.025238][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.026567][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 69.027973][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : f36fd85c7127b200 [ 69.029390][ C0] x8 : f36fd85c7127b200 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.030748][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.032172][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 69.033547][ C0] Call trace: [ 69.034108][ C0] invalidate_bh_lru+0x128/0x22c [ 69.034992][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.036049][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.037205][ C0] ipi_handler+0x10c/0x70c [ 69.037981][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.038897][ C0] handle_domain_irq+0x148/0x200 [ 69.039746][ C0] gic_handle_irq+0x78/0x1b8 [ 69.040480][ C0] call_on_irq_stack+0x30/0x48 [ 69.041266][ C0] do_interrupt_handler+0x6c/0x88 [ 69.042118][ C0] el1_interrupt+0x30/0x58 [ 69.042865][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.043733][ C0] el1h_64_irq+0x78/0x7c [ 69.044453][ C0] lock_page_memcg+0x120/0x22c [ 69.045279][ C0] page_add_file_rmap+0x148/0x8c4 [ 69.046154][ C0] do_set_pte+0x390/0x4e4 [ 69.046861][ C0] filemap_map_pages+0x9c4/0xc44 [ 69.047707][ C0] handle_mm_fault+0x18b0/0x2aac [ 69.048577][ C0] do_page_fault+0x690/0xad0 [ 69.049394][ C0] do_translation_fault+0xe0/0x130 [ 69.050301][ C0] do_mem_abort+0x6c/0x1b0 [ 69.051074][ C0] el0_da+0x90/0x1ec [ 69.051760][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 69.052594][ C0] el0t_64_sync+0x1a0/0x1a4 [ 69.053332][ C0] irq event stamp: 314 [ 69.053987][ C0] hardirqs last enabled at (313): [] lock_page_memcg+0x110/0x22c [ 69.055605][ C0] hardirqs last disabled at (314): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.057280][ C0] softirqs last enabled at (60): [] local_bh_enable+0x10/0x34 [ 69.058806][ C0] softirqs last disabled at (58): [] local_bh_disable+0x10/0x34 [ 69.060292][ C0] ---[ end trace c845eca8195b1ede ]--- [ 69.085120][ T4731] loop0: detected capacity change from 0 to 128 [ 69.087395][ T4731] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.088907][ T4731] Bad inode number on dev loop0: 2 is out of range [ 69.090047][ T4731] SysV FS: get root inode failed [ 69.090856][ T4731] oldfs: cannot read superblock [ 69.095579][ T4705] ------------[ cut here ]------------ [ 69.096557][ T4705] VFS: brelse: Trying to free free buffer [ 69.097617][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.099171][ T4705] Modules linked in: [ 69.099894][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 69.101599][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.103670][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.105235][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 69.106229][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 69.107205][ T4705] sp : ffff80001e9377d0 [ 69.107959][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 69.109443][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 69.110924][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000debf8d10 [ 69.112435][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 69.113884][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.115397][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 69.116858][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 69.118329][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.119755][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.121183][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.122863][ T4705] Call trace: [ 69.123550][ T4705] invalidate_bh_lru+0x128/0x22c [ 69.124536][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 69.125683][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.126694][ T4705] invalidate_bh_lrus+0x34/0x40 [ 69.127668][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 69.128719][ T4705] blkdev_put+0x444/0x6c4 [ 69.129583][ T4705] blkdev_close+0x74/0xb0 [ 69.130438][ T4705] __fput+0x1b8/0x7e8 [ 69.131188][ T4705] ____fput+0x20/0x30 [ 69.131921][ T4705] task_work_run+0x13c/0x1e8 [ 69.132876][ T4705] do_notify_resume+0x2488/0x30a8 [ 69.133878][ T4705] el0_svc+0xf0/0x1d0 [ 69.134667][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 69.135649][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 69.136498][ T4705] irq event stamp: 62214 [ 69.137313][ T4705] hardirqs last enabled at (62213): [] kasan_quarantine_put+0xc4/0x200 [ 69.139082][ T4705] hardirqs last disabled at (62214): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.140999][ T4705] softirqs last enabled at (62012): [] local_bh_enable+0x10/0x34 [ 69.142713][ T4705] softirqs last disabled at (62010): [] local_bh_disable+0x10/0x34 [ 69.144452][ T4705] ---[ end trace c845eca8195b1edf ]--- [ 69.214923][ T4733] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.216155][ T4733] Bad inode number on dev loop0: 2 is out of range [ 69.217244][ T4733] SysV FS: get root inode failed [ 69.218045][ T4733] oldfs: cannot read superblock [ 69.226675][ C0] ------------[ cut here ]------------ [ 69.227609][ C0] VFS: brelse: Trying to free free buffer [ 69.228610][ C0] WARNING: CPU: 0 PID: 4734 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.229969][ C0] Modules linked in: [ 69.230545][ C0] CPU: 0 PID: 4734 Comm: syz-executor Tainted: G W syzkaller #0 [ 69.231900][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.233567][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.234990][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.235972][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.236960][ C0] sp : ffff800008007df0 [ 69.237699][ C0] x29: ffff800008007df0 x28: ffff0000cd2051c0 x27: 1fffe000341cc45c [ 69.239123][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 69.240530][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c05eb400 [ 69.241931][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010004 [ 69.243291][ C0] x17: 0000000000010004 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.244655][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 69.245996][ C0] x11: ff80800008300a7c x10: 0000000000010003 x9 : 4f278ca823fb8b00 [ 69.247369][ C0] x8 : 4f278ca823fb8b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.248744][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.250093][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000027 [ 69.251539][ C0] Call trace: [ 69.252090][ C0] invalidate_bh_lru+0x128/0x22c [ 69.252945][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.253980][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.255188][ C0] ipi_handler+0x10c/0x70c [ 69.255944][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.256894][ C0] handle_domain_irq+0x148/0x200 [ 69.257751][ C0] gic_handle_irq+0x78/0x1b8 [ 69.258540][ C0] call_on_irq_stack+0x30/0x48 [ 69.259395][ C0] do_interrupt_handler+0x6c/0x88 [ 69.260296][ C0] el1_interrupt+0x30/0x58 [ 69.261061][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.261898][ C0] el1h_64_irq+0x78/0x7c [ 69.262606][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 69.263568][ C0] get_partial_node+0x250/0x2c8 [ 69.264420][ C0] ___slab_alloc+0x3a0/0xd84 [ 69.265240][ C0] __slab_alloc+0x68/0xc0 [ 69.265995][ C0] kmem_cache_alloc+0x2a8/0x3d8 [ 69.266859][ C0] __d_alloc+0x3c/0x684 [ 69.267566][ C0] d_alloc_parallel+0x80/0x1184 [ 69.268419][ C0] path_openat+0x708/0x2808 [ 69.269186][ C0] do_filp_open+0x188/0x370 [ 69.269954][ C0] do_sys_openat2+0x134/0x3fc [ 69.270784][ C0] __arm64_sys_openat+0x11c/0x150 [ 69.271648][ C0] invoke_syscall+0x98/0x28c [ 69.272454][ C0] el0_svc_common+0x13c/0x258 [ 69.273268][ C0] do_el0_svc+0x5c/0x140 [ 69.273964][ C0] el0_svc+0x78/0x1d0 [ 69.274660][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 69.275532][ C0] el0t_64_sync+0x1a0/0x1a4 [ 69.276351][ C0] irq event stamp: 1132 [ 69.277048][ C0] hardirqs last enabled at (1131): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 69.278886][ C0] hardirqs last disabled at (1132): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.280612][ C0] softirqs last enabled at (1102): [] local_bh_enable+0x10/0x34 [ 69.282243][ C0] softirqs last disabled at (1100): [] local_bh_disable+0x10/0x34 [ 69.283932][ C0] ---[ end trace c845eca8195b1ee0 ]--- [ 69.305039][ T4735] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.306264][ T4735] Bad inode number on dev loop0: 2 is out of range [ 69.307320][ T4735] SysV FS: get root inode failed [ 69.308114][ T4735] oldfs: cannot read superblock [ 69.314035][ C1] ------------[ cut here ]------------ [ 69.314910][ C1] VFS: brelse: Trying to free free buffer [ 69.316084][ C1] WARNING: CPU: 1 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.317569][ C1] Modules linked in: [ 69.318290][ C1] CPU: 1 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 69.319831][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.321523][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.322949][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 69.323994][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 69.325009][ C1] sp : ffff800008017df0 [ 69.325750][ C1] x29: ffff800008017df0 x28: ffff0000ceca8000 x27: 1fffe000341d065c [ 69.327187][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 69.328672][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b1148 [ 69.330097][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 69.331470][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.332893][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 69.334349][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 69.335792][ C1] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.337182][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.338626][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.340018][ C1] Call trace: [ 69.340665][ C1] invalidate_bh_lru+0x128/0x22c [ 69.341602][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 69.342701][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.343928][ C1] ipi_handler+0x10c/0x70c [ 69.344702][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 69.345635][ C1] handle_domain_irq+0x148/0x200 [ 69.346509][ C1] gic_handle_irq+0x78/0x1b8 [ 69.347314][ C1] call_on_irq_stack+0x30/0x48 [ 69.348127][ C1] do_interrupt_handler+0x6c/0x88 [ 69.348958][ C1] el1_interrupt+0x30/0x58 [ 69.349719][ C1] el1h_64_irq_handler+0x18/0x24 [ 69.350584][ C1] el1h_64_irq+0x78/0x7c [ 69.351443][ C1] kasan_quarantine_put+0xd4/0x200 [ 69.352472][ C1] ____kasan_slab_free+0x124/0x164 [ 69.353540][ C1] __kasan_slab_free+0x18/0x28 [ 69.354536][ C1] slab_free_freelist_hook+0x128/0x1e4 [ 69.355587][ C1] kfree+0x16c/0x404 [ 69.356370][ C1] kvfree+0x40/0x50 [ 69.357091][ C1] xt_free_table_info+0x158/0x1b4 [ 69.357992][ C1] __do_replace+0x6ec/0x9c0 [ 69.358963][ C1] do_ip6t_set_ctl+0xadc/0xe38 [ 69.359894][ C1] nf_setsockopt+0x260/0x280 [ 69.360775][ C1] ipv6_setsockopt+0x1b64/0x392c [ 69.361715][ C1] tcp_setsockopt+0x1f4/0x1b8c [ 69.362620][ C1] sock_common_setsockopt+0xb0/0xcc [ 69.363532][ C1] __sys_setsockopt+0x260/0x36c [ 69.364399][ C1] __arm64_sys_setsockopt+0xc0/0xdc [ 69.365320][ C1] invoke_syscall+0x98/0x28c [ 69.366152][ C1] el0_svc_common+0x13c/0x258 [ 69.366991][ C1] do_el0_svc+0x5c/0x140 [ 69.367735][ C1] el0_svc+0x78/0x1d0 [ 69.368432][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 69.369341][ C1] el0t_64_sync+0x1a0/0x1a4 [ 69.370153][ C1] irq event stamp: 159718 [ 69.370916][ C1] hardirqs last enabled at (159717): [] kasan_quarantine_put+0xc4/0x200 [ 69.372685][ C1] hardirqs last disabled at (159718): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.374468][ C1] softirqs last enabled at (159706): [] local_bh_enable+0x10/0x34 [ 69.376174][ C1] softirqs last disabled at (159704): [] local_bh_disable+0x10/0x34 [ 69.377888][ C1] ---[ end trace c845eca8195b1ee1 ]--- [ 69.446590][ T4737] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.447835][ T4737] Bad inode number on dev loop0: 2 is out of range [ 69.448850][ T4737] SysV FS: get root inode failed [ 69.449675][ T4737] oldfs: cannot read superblock [ 69.454438][ C1] ------------[ cut here ]------------ [ 69.455325][ C1] VFS: brelse: Trying to free free buffer [ 69.456289][ C1] WARNING: CPU: 1 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.457726][ C1] Modules linked in: [ 69.458375][ C1] CPU: 1 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 69.459874][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.461446][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.462736][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 69.463673][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 69.464608][ C1] sp : ffff800008017df0 [ 69.465327][ C1] x29: ffff800008017df0 x28: ffff0000ceca8000 x27: 1fffe000341d065b [ 69.466785][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 69.468190][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b14e8 [ 69.469635][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 69.471077][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.472472][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 69.473873][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 69.475293][ C1] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.476744][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.478253][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.479758][ C1] Call trace: [ 69.480364][ C1] invalidate_bh_lru+0x128/0x22c [ 69.481259][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 69.482333][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.483526][ C1] ipi_handler+0x10c/0x70c [ 69.484325][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 69.485255][ C1] handle_domain_irq+0x148/0x200 [ 69.486146][ C1] gic_handle_irq+0x78/0x1b8 [ 69.486954][ C1] call_on_irq_stack+0x30/0x48 [ 69.487844][ C1] do_interrupt_handler+0x6c/0x88 [ 69.488754][ C1] el0_interrupt+0x94/0x248 [ 69.489614][ C1] __el0_irq_handler_common+0x18/0x24 [ 69.490617][ C1] el0t_64_irq_handler+0x10/0x1c [ 69.491519][ C1] el0t_64_irq+0x1a0/0x1a4 [ 69.492309][ C1] irq event stamp: 161748 [ 69.493062][ C1] hardirqs last enabled at (161747): [] el0t_64_sync_handler+0xcc/0xe4 [ 69.494914][ C1] hardirqs last disabled at (161748): [] __el0_irq_handler_common+0x18/0x24 [ 69.496746][ C1] softirqs last enabled at (161716): [] release_sock+0x1d0/0x258 [ 69.498386][ C1] softirqs last disabled at (161714): [] release_sock+0x34/0x258 [ 69.499971][ C1] ---[ end trace c845eca8195b1ee2 ]--- [ 69.546458][ T4739] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.547736][ T4739] Bad inode number on dev loop0: 2 is out of range [ 69.548847][ T4739] SysV FS: get root inode failed [ 69.549764][ T4739] oldfs: cannot read superblock [ 69.563970][ C0] ------------[ cut here ]------------ [ 69.564926][ C0] VFS: brelse: Trying to free free buffer [ 69.565882][ C0] WARNING: CPU: 0 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.567416][ C0] Modules linked in: [ 69.568074][ C0] CPU: 0 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 69.569579][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.571231][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.572687][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.573690][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.574695][ C0] sp : ffff800008007df0 [ 69.575480][ C0] x29: ffff800008007df0 x28: ffff0000d69e3680 x27: 1fffe000341cc45c [ 69.576987][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 69.578486][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c05eb7a0 [ 69.579974][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 69.581351][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.582724][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 69.584209][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : a8973625cead2500 [ 69.585609][ C0] x8 : a8973625cead2500 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.586940][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.588365][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 69.589826][ C0] Call trace: [ 69.590435][ C0] invalidate_bh_lru+0x128/0x22c [ 69.591328][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.592398][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.593615][ C0] ipi_handler+0x10c/0x70c [ 69.594392][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.595335][ C0] handle_domain_irq+0x148/0x200 [ 69.596242][ C0] gic_handle_irq+0x78/0x1b8 [ 69.597043][ C0] call_on_irq_stack+0x30/0x48 [ 69.597874][ C0] do_interrupt_handler+0x6c/0x88 [ 69.598811][ C0] el1_interrupt+0x30/0x58 [ 69.599546][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.600392][ C0] el1h_64_irq+0x78/0x7c [ 69.601123][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 69.602117][ C0] __wake_up+0x114/0x178 [ 69.602874][ C0] netlink_broadcast_filtered+0xd60/0xe4c [ 69.603873][ C0] netlink_broadcast+0x50/0x68 [ 69.604764][ C0] kobject_uevent_net_broadcast+0x330/0x534 [ 69.605859][ C0] kobject_uevent_env+0x544/0x86c [ 69.606786][ C0] kobject_synth_uevent+0x3d4/0x8a4 [ 69.607715][ C0] uevent_store+0x34/0x80 [ 69.608476][ C0] dev_attr_store+0x6c/0x90 [ 69.609269][ C0] sysfs_kf_write+0x1f8/0x274 [ 69.610093][ C0] kernfs_fop_write_iter+0x368/0x46c [ 69.611016][ C0] vfs_write+0x590/0xa64 [ 69.611758][ C0] ksys_write+0x12c/0x228 [ 69.612512][ C0] __arm64_sys_write+0x7c/0x90 [ 69.613315][ C0] invoke_syscall+0x98/0x28c [ 69.614105][ C0] el0_svc_common+0x13c/0x258 [ 69.614933][ C0] do_el0_svc+0x5c/0x140 [ 69.615652][ C0] el0_svc+0x78/0x1d0 [ 69.616363][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 69.617244][ C0] el0t_64_sync+0x1a0/0x1a4 [ 69.618103][ C0] irq event stamp: 868974 [ 69.618881][ C0] hardirqs last enabled at (868973): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 69.620776][ C0] hardirqs last disabled at (868974): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.622489][ C0] softirqs last enabled at (868856): [] local_bh_enable+0x10/0x34 [ 69.624147][ C0] softirqs last disabled at (868854): [] local_bh_disable+0x10/0x34 [ 69.625834][ C0] ---[ end trace c845eca8195b1ee3 ]--- [ 69.627236][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.628284][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.640301][ T1541] cfg80211: failed to load regulatory.db [ 69.799505][ T4741] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.800788][ T4741] Bad inode number on dev loop0: 2 is out of range [ 69.801857][ T4741] SysV FS: get root inode failed [ 69.804063][ T4741] oldfs: cannot read superblock [ 69.825800][ T4705] ------------[ cut here ]------------ [ 69.826737][ T4705] VFS: brelse: Trying to free free buffer [ 69.827684][ T4705] WARNING: CPU: 0 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.829114][ T4705] Modules linked in: [ 69.829737][ T4705] CPU: 0 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 69.831012][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.832624][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.834019][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 69.834940][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 69.835871][ T4705] sp : ffff80001e9377d0 [ 69.836658][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 69.838132][ T4705] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 69.839562][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd2ce230 [ 69.840990][ T4705] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 69.842382][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.843794][ T4705] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 69.845219][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 69.846676][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.848131][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.849571][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.850988][ T4705] Call trace: [ 69.851570][ T4705] invalidate_bh_lru+0x128/0x22c [ 69.852432][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 69.853459][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.854348][ T4705] invalidate_bh_lrus+0x34/0x40 [ 69.855187][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 69.856091][ T4705] blkdev_put+0x444/0x6c4 [ 69.856823][ T4705] blkdev_close+0x74/0xb0 [ 69.857587][ T4705] __fput+0x1b8/0x7e8 [ 69.858248][ T4705] ____fput+0x20/0x30 [ 69.858945][ T4705] task_work_run+0x13c/0x1e8 [ 69.859754][ T4705] do_notify_resume+0x2488/0x30a8 [ 69.860586][ T4705] el0_svc+0xf0/0x1d0 [ 69.861290][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 69.862179][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 69.862981][ T4705] irq event stamp: 79608 [ 69.863746][ T4705] hardirqs last enabled at (79607): [] kasan_quarantine_put+0xc4/0x200 [ 69.865480][ T4705] hardirqs last disabled at (79608): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.867236][ T4705] softirqs last enabled at (79366): [] local_bh_enable+0x10/0x34 [ 69.868891][ T4705] softirqs last disabled at (79364): [] local_bh_disable+0x10/0x34 [ 69.870511][ T4705] ---[ end trace c845eca8195b1ee4 ]--- [ 69.959182][ T4744] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.960602][ T4744] Bad inode number on dev loop0: 2 is out of range [ 69.961781][ T4744] SysV FS: get root inode failed [ 69.963054][ T4744] oldfs: cannot read superblock [ 69.977132][ T4705] ------------[ cut here ]------------ [ 69.978078][ T4705] VFS: brelse: Trying to free free buffer [ 69.979218][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.980553][ T4705] Modules linked in: [ 69.981150][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 69.982455][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.984169][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.985512][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 69.986362][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 69.987223][ T4705] sp : ffff80001e9377d0 [ 69.987918][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 69.989395][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 69.990816][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b1888 [ 69.992312][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 69.993780][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.995456][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 69.997057][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 69.998670][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.000356][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.001937][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.003545][ T4705] Call trace: [ 70.004166][ T4705] invalidate_bh_lru+0x128/0x22c [ 70.005073][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 70.006172][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.007117][ T4705] invalidate_bh_lrus+0x34/0x40 [ 70.008002][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 70.008922][ T4705] blkdev_put+0x444/0x6c4 [ 70.009716][ T4705] blkdev_close+0x74/0xb0 [ 70.010536][ T4705] __fput+0x1b8/0x7e8 [ 70.011234][ T4705] ____fput+0x20/0x30 [ 70.011917][ T4705] task_work_run+0x13c/0x1e8 [ 70.012715][ T4705] do_notify_resume+0x2488/0x30a8 [ 70.013582][ T4705] el0_svc+0xf0/0x1d0 [ 70.014263][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 70.015112][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 70.015893][ T4705] irq event stamp: 83316 [ 70.016634][ T4705] hardirqs last enabled at (83315): [] kasan_quarantine_put+0xc4/0x200 [ 70.018389][ T4705] hardirqs last disabled at (83316): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.020397][ T4705] softirqs last enabled at (83110): [] local_bh_enable+0x10/0x34 [ 70.022103][ T4705] softirqs last disabled at (83108): [] local_bh_disable+0x10/0x34 [ 70.023868][ T4705] ---[ end trace c845eca8195b1ee5 ]--- [ 70.116283][ T4746] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.117627][ T4746] Bad inode number on dev loop0: 2 is out of range [ 70.118688][ T4746] SysV FS: get root inode failed [ 70.119582][ T4746] oldfs: cannot read superblock [ 70.140249][ C0] ------------[ cut here ]------------ [ 70.141153][ C0] VFS: brelse: Trying to free free buffer [ 70.142081][ C0] WARNING: CPU: 0 PID: 4749 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.143554][ C0] Modules linked in: [ 70.144238][ C0] CPU: 0 PID: 4749 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.145711][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.147393][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.148662][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.149547][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.150638][ C0] sp : ffff800008007df0 [ 70.151504][ C0] x29: ffff800008007df0 x28: ffff0000d6589b40 x27: 1fffe000341cc45c [ 70.153207][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 70.154908][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd2ce5d0 [ 70.156427][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 70.158094][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.159823][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 70.161508][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : dad075c1f1ace100 [ 70.163215][ C0] x8 : dad075c1f1ace100 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.164879][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.166398][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.167964][ C0] Call trace: [ 70.168594][ C0] invalidate_bh_lru+0x128/0x22c [ 70.169642][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.170868][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.172261][ C0] ipi_handler+0x10c/0x70c [ 70.173173][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.174343][ C0] handle_domain_irq+0x148/0x200 [ 70.175382][ C0] gic_handle_irq+0x78/0x1b8 [ 70.176271][ C0] call_on_irq_stack+0x30/0x48 [ 70.177197][ C0] do_interrupt_handler+0x6c/0x88 [ 70.178084][ C0] el1_interrupt+0x30/0x58 [ 70.178890][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.179760][ C0] el1h_64_irq+0x78/0x7c [ 70.180507][ C0] cmpxchg_double_slab+0xf0/0x2a8 [ 70.181388][ C0] __slab_free+0x70/0x240 [ 70.182142][ C0] ___cache_free+0x178/0x1bc [ 70.182976][ C0] qlink_free+0x5c/0xa0 [ 70.183714][ C0] qlist_free_all+0x40/0xa8 [ 70.184509][ C0] kasan_quarantine_reduce+0x124/0x130 [ 70.185482][ C0] __kasan_slab_alloc+0x34/0xcc [ 70.186331][ C0] slab_post_alloc_hook+0x74/0x3f8 [ 70.187223][ C0] __kmalloc+0x204/0x440 [ 70.187963][ C0] tomoyo_encode+0x260/0x484 [ 70.188743][ C0] tomoyo_path_perm+0x264/0x49c [ 70.189576][ C0] tomoyo_path_symlink+0xac/0xf8 [ 70.190410][ C0] security_path_symlink+0xec/0x13c [ 70.191291][ C0] do_symlinkat+0x10c/0x5b4 [ 70.192055][ C0] __arm64_sys_symlinkat+0xa4/0xbc [ 70.192977][ C0] invoke_syscall+0x98/0x28c [ 70.193779][ C0] el0_svc_common+0x13c/0x258 [ 70.194590][ C0] do_el0_svc+0x5c/0x140 [ 70.195369][ C0] el0_svc+0x78/0x1d0 [ 70.196040][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 70.196870][ C0] el0t_64_sync+0x1a0/0x1a4 [ 70.197664][ C0] irq event stamp: 1170 [ 70.198395][ C0] hardirqs last enabled at (1169): [] put_cpu_partial+0x188/0x214 [ 70.200070][ C0] hardirqs last disabled at (1170): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.201752][ C0] softirqs last enabled at (836): [] local_bh_enable+0x10/0x34 [ 70.203305][ C0] softirqs last disabled at (834): [] local_bh_disable+0x10/0x34 [ 70.204970][ C0] ---[ end trace c845eca8195b1ee6 ]--- [ 70.224941][ T4750] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.226162][ T4750] Bad inode number on dev loop0: 2 is out of range [ 70.227627][ T4750] SysV FS: get root inode failed [ 70.228395][ T4750] oldfs: cannot read superblock [ 70.238228][ C1] ------------[ cut here ]------------ [ 70.239196][ C1] VFS: brelse: Trying to free free buffer [ 70.240164][ C1] WARNING: CPU: 1 PID: 4752 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.241600][ C1] Modules linked in: [ 70.242204][ C1] CPU: 1 PID: 4752 Comm: syz.0.36 Tainted: G W syzkaller #0 [ 70.243965][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.245761][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.247169][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.248161][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.249088][ C1] sp : ffff800008017df0 [ 70.249818][ C1] x29: ffff800008017df0 x28: ffff0000c65b9b40 x27: 1fffe000341d065c [ 70.251238][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 70.252717][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b1c28 [ 70.254433][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 70.256145][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.257750][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.259422][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 86fe26fc8d2a4f00 [ 70.260996][ C1] x8 : 86fe26fc8d2a4f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.262564][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.264021][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.265493][ C1] Call trace: [ 70.266177][ C1] invalidate_bh_lru+0x128/0x22c [ 70.267204][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.268325][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.269630][ C1] ipi_handler+0x10c/0x70c [ 70.270460][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.271450][ C1] handle_domain_irq+0x148/0x200 [ 70.272274][ C1] gic_handle_irq+0x78/0x1b8 [ 70.273098][ C1] call_on_irq_stack+0x30/0x48 [ 70.273964][ C1] do_interrupt_handler+0x6c/0x88 [ 70.274868][ C1] el1_interrupt+0x30/0x58 [ 70.275649][ C1] el1h_64_irq_handler+0x18/0x24 [ 70.276546][ C1] el1h_64_irq+0x78/0x7c [ 70.277262][ C1] call_rcu+0x5a8/0x8e4 [ 70.277991][ C1] tlb_finish_mmu+0x140/0x37c [ 70.278820][ C1] unmap_region+0x2cc/0x328 [ 70.279599][ C1] __do_munmap+0x894/0xc34 [ 70.280370][ C1] __vm_munmap+0x134/0x238 [ 70.281105][ C1] __arm64_sys_munmap+0x74/0x8c [ 70.281947][ C1] invoke_syscall+0x98/0x28c [ 70.282772][ C1] el0_svc_common+0x13c/0x258 [ 70.283624][ C1] do_el0_svc+0x5c/0x140 [ 70.284412][ C1] el0_svc+0x78/0x1d0 [ 70.285091][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 70.285992][ C1] el0t_64_sync+0x1a0/0x1a4 [ 70.286812][ C1] irq event stamp: 588 [ 70.287526][ C1] hardirqs last enabled at (587): [] call_rcu+0x598/0x8e4 [ 70.289041][ C1] hardirqs last disabled at (588): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.290823][ C1] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 70.292470][ C1] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 70.294168][ C1] ---[ end trace c845eca8195b1ee7 ]--- [ 70.363398][ T4752] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.364737][ T4752] Bad inode number on dev loop0: 2 is out of range [ 70.365874][ T4752] SysV FS: get root inode failed [ 70.366830][ T4752] oldfs: cannot read superblock [ 70.371162][ C0] ------------[ cut here ]------------ [ 70.372063][ C0] VFS: brelse: Trying to free free buffer [ 70.373096][ C0] WARNING: CPU: 0 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.374613][ C0] Modules linked in: [ 70.375302][ C0] CPU: 0 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 70.376749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.378544][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.379892][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.380818][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.381776][ C0] sp : ffff800008007df0 [ 70.382519][ C0] x29: ffff800008007df0 x28: ffff0000d69e3680 x27: 1fffe000341cc45b [ 70.383984][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 70.385449][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd2ce970 [ 70.386907][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 70.388314][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.389793][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 70.391439][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : a8973625cead2500 [ 70.392877][ C0] x8 : a8973625cead2500 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.394334][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.395828][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.397354][ C0] Call trace: [ 70.397983][ C0] invalidate_bh_lru+0x128/0x22c [ 70.398901][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.400023][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.401331][ C0] ipi_handler+0x10c/0x70c [ 70.402162][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.403181][ C0] handle_domain_irq+0x148/0x200 [ 70.404072][ C0] gic_handle_irq+0x78/0x1b8 [ 70.404896][ C0] call_on_irq_stack+0x30/0x48 [ 70.405701][ C0] do_interrupt_handler+0x6c/0x88 [ 70.406558][ C0] el1_interrupt+0x30/0x58 [ 70.407316][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.408204][ C0] el1h_64_irq+0x78/0x7c [ 70.408945][ C0] __local_bh_enable_ip+0x200/0x37c [ 70.409876][ C0] local_bh_enable+0x28/0x34 [ 70.410682][ C0] do_sve_acc+0x3a8/0x634 [ 70.411447][ C0] el0_sve_acc+0x84/0x1dc [ 70.412207][ C0] el0t_64_sync_handler+0x6c/0xe4 [ 70.413084][ C0] el0t_64_sync+0x1a0/0x1a4 [ 70.413852][ C0] irq event stamp: 885156 [ 70.414621][ C0] hardirqs last enabled at (885155): [] __local_bh_enable_ip+0x1f8/0x37c [ 70.416418][ C0] hardirqs last disabled at (885156): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.418223][ C0] softirqs last enabled at (885154): [] local_bh_enable+0x10/0x34 [ 70.419963][ C0] softirqs last disabled at (885152): [] local_bh_disable+0x10/0x34 [ 70.421702][ C0] ---[ end trace c845eca8195b1ee8 ]--- [ 70.484061][ T4754] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.485373][ T4754] Bad inode number on dev loop0: 2 is out of range [ 70.486633][ T4754] SysV FS: get root inode failed [ 70.487564][ T4754] oldfs: cannot read superblock [ 70.494895][ C1] ------------[ cut here ]------------ [ 70.495780][ C1] VFS: brelse: Trying to free free buffer [ 70.496711][ C1] WARNING: CPU: 1 PID: 4755 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.498100][ C1] Modules linked in: [ 70.498726][ C1] CPU: 1 PID: 4755 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.500112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.501662][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.502965][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.503893][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.504829][ C1] sp : ffff800008017df0 [ 70.505598][ C1] x29: ffff800008017df0 x28: ffff0000c87951c0 x27: 1fffe000341d065c [ 70.507078][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 70.508579][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b2060 [ 70.510273][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 70.511826][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.513497][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.515157][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 892b80d7814c3600 [ 70.516711][ C1] x8 : 892b80d7814c3600 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.518262][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.519800][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.521345][ C1] Call trace: [ 70.521948][ C1] invalidate_bh_lru+0x128/0x22c [ 70.522869][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.523863][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.524989][ C1] ipi_handler+0x10c/0x70c [ 70.525729][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.526700][ C1] handle_domain_irq+0x148/0x200 [ 70.527548][ C1] gic_handle_irq+0x78/0x1b8 [ 70.528343][ C1] call_on_irq_stack+0x30/0x48 [ 70.529188][ C1] do_interrupt_handler+0x6c/0x88 [ 70.530040][ C1] el1_interrupt+0x30/0x58 [ 70.530807][ C1] el1h_64_irq_handler+0x18/0x24 [ 70.531665][ C1] el1h_64_irq+0x78/0x7c [ 70.532427][ C1] el0_svc_common+0xac/0x258 [ 70.533232][ C1] do_el0_svc+0x5c/0x140 [ 70.533986][ C1] el0_svc+0x78/0x1d0 [ 70.534685][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 70.535591][ C1] el0t_64_sync+0x1a0/0x1a4 [ 70.536374][ C1] irq event stamp: 464 [ 70.537104][ C1] hardirqs last enabled at (463): [] el0_svc_common+0xa0/0x258 [ 70.538680][ C1] hardirqs last disabled at (464): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.540329][ C1] softirqs last enabled at (26): [] local_bh_enable+0x10/0x34 [ 70.541891][ C1] softirqs last disabled at (24): [] local_bh_disable+0x10/0x34 [ 70.543504][ C1] ---[ end trace c845eca8195b1ee9 ]--- [ 70.566470][ T4756] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.567873][ T4756] Bad inode number on dev loop0: 2 is out of range [ 70.569055][ T4756] SysV FS: get root inode failed [ 70.570017][ T4756] oldfs: cannot read superblock [ 70.573548][ C0] ------------[ cut here ]------------ [ 70.574444][ C0] VFS: brelse: Trying to free free buffer [ 70.575425][ C0] WARNING: CPU: 0 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.576800][ C0] Modules linked in: [ 70.577424][ C0] CPU: 0 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.578820][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.580672][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.582070][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.583051][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.584071][ C0] sp : ffff800008007df0 [ 70.584857][ C0] x29: ffff800008007df0 x28: ffff0000ceca8000 x27: 1fffe000341cc45c [ 70.586309][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 70.587792][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c5311148 [ 70.589288][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 70.590734][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.592202][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 70.593628][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 70.595017][ C0] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.596720][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.598283][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.599902][ C0] Call trace: [ 70.600531][ C0] invalidate_bh_lru+0x128/0x22c [ 70.601507][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.602686][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.603982][ C0] ipi_handler+0x10c/0x70c [ 70.604881][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.605999][ C0] handle_domain_irq+0x148/0x200 [ 70.607028][ C0] gic_handle_irq+0x78/0x1b8 [ 70.607940][ C0] call_on_irq_stack+0x30/0x48 [ 70.608892][ C0] do_interrupt_handler+0x6c/0x88 [ 70.609913][ C0] el1_interrupt+0x30/0x58 [ 70.610775][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.611709][ C0] el1h_64_irq+0x78/0x7c [ 70.612499][ C0] seqcount_lockdep_reader_access+0x214/0x2b8 [ 70.613621][ C0] prepend_path+0x274/0xab8 [ 70.614472][ C0] d_absolute_path+0xa0/0x148 [ 70.615348][ C0] tomoyo_realpath_from_path+0x2a4/0x540 [ 70.616448][ C0] tomoyo_path_perm+0x1e4/0x49c [ 70.617363][ C0] tomoyo_inode_getattr+0x28/0x38 [ 70.618304][ C0] security_inode_getattr+0xd8/0x124 [ 70.619245][ C0] __arm64_sys_newfstat+0x100/0x1fc [ 70.620182][ C0] invoke_syscall+0x98/0x28c [ 70.621000][ C0] el0_svc_common+0x13c/0x258 [ 70.621875][ C0] do_el0_svc+0x5c/0x140 [ 70.622647][ C0] el0_svc+0x78/0x1d0 [ 70.623374][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 70.624259][ C0] el0t_64_sync+0x1a0/0x1a4 [ 70.625042][ C0] irq event stamp: 182676 [ 70.625826][ C0] hardirqs last enabled at (182675): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 70.627873][ C0] hardirqs last disabled at (182676): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.629673][ C0] softirqs last enabled at (182626): [] local_bh_enable+0x10/0x34 [ 70.631400][ C0] softirqs last disabled at (182624): [] local_bh_disable+0x10/0x34 [ 70.633179][ C0] ---[ end trace c845eca8195b1eea ]--- [ 70.652867][ T4401] Bluetooth: hci0: command 0x0419 tx timeout [ 70.684350][ T4758] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.685558][ T4758] Bad inode number on dev loop0: 2 is out of range [ 70.686673][ T4758] SysV FS: get root inode failed [ 70.687527][ T4758] oldfs: cannot read superblock [ 70.694644][ C1] ------------[ cut here ]------------ [ 70.695668][ C1] VFS: brelse: Trying to free free buffer [ 70.696742][ C1] WARNING: CPU: 1 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.698245][ C1] Modules linked in: [ 70.698881][ C1] CPU: 1 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.700338][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.702194][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.703596][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.704620][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.705570][ C1] sp : ffff800008017df0 [ 70.706328][ C1] x29: ffff800008017df0 x28: ffff0000ceca8000 x27: 1fffe000341d065c [ 70.707802][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 70.709163][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b2400 [ 70.710582][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 70.712026][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.713517][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.715141][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 70.716642][ C1] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.718087][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.719570][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.721038][ C1] Call trace: [ 70.721629][ C1] invalidate_bh_lru+0x128/0x22c [ 70.722515][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.723553][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.724835][ C1] ipi_handler+0x10c/0x70c [ 70.725638][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.726613][ C1] handle_domain_irq+0x148/0x200 [ 70.727610][ C1] gic_handle_irq+0x78/0x1b8 [ 70.728395][ C1] call_on_irq_stack+0x30/0x48 [ 70.729260][ C1] do_interrupt_handler+0x6c/0x88 [ 70.730127][ C1] el1_interrupt+0x30/0x58 [ 70.730897][ C1] el1h_64_irq_handler+0x18/0x24 [ 70.731863][ C1] el1h_64_irq+0x78/0x7c [ 70.732673][ C1] el0_svc_common+0xac/0x258 [ 70.733566][ C1] do_el0_svc+0x5c/0x140 [ 70.734336][ C1] el0_svc+0x78/0x1d0 [ 70.735086][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 70.736013][ C1] el0t_64_sync+0x1a0/0x1a4 [ 70.736833][ C1] irq event stamp: 186966 [ 70.737598][ C1] hardirqs last enabled at (186965): [] el0_svc_common+0xa0/0x258 [ 70.739255][ C1] hardirqs last disabled at (186966): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.741005][ C1] softirqs last enabled at (186928): [] release_sock+0x1d0/0x258 [ 70.742691][ C1] softirqs last disabled at (186926): [] release_sock+0x34/0x258 [ 70.744390][ C1] ---[ end trace c845eca8195b1eeb ]--- [ 70.816472][ T4760] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.817804][ T4760] Bad inode number on dev loop0: 2 is out of range [ 70.818901][ T4760] SysV FS: get root inode failed [ 70.819748][ T4760] oldfs: cannot read superblock [ 70.828624][ T4705] ------------[ cut here ]------------ [ 70.829581][ T4705] VFS: brelse: Trying to free free buffer [ 70.830561][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.831951][ T4705] Modules linked in: [ 70.832589][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 70.834145][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.836034][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.837452][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 70.838397][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 70.839321][ T4705] sp : ffff80001e9377d0 [ 70.840061][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 70.841561][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 70.843027][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b27a0 [ 70.844446][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 70.845818][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.847222][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.848618][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 70.850073][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.851565][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.852975][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.854640][ T4705] Call trace: [ 70.855290][ T4705] invalidate_bh_lru+0x128/0x22c [ 70.856314][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 70.857530][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.858556][ T4705] invalidate_bh_lrus+0x34/0x40 [ 70.859529][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 70.860465][ T4705] blkdev_put+0x444/0x6c4 [ 70.861238][ T4705] blkdev_close+0x74/0xb0 [ 70.862007][ T4705] __fput+0x1b8/0x7e8 [ 70.862703][ T4705] ____fput+0x20/0x30 [ 70.863530][ T4705] task_work_run+0x13c/0x1e8 [ 70.864435][ T4705] do_notify_resume+0x2488/0x30a8 [ 70.865365][ T4705] el0_svc+0xf0/0x1d0 [ 70.866123][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 70.867036][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 70.867854][ T4705] irq event stamp: 114680 [ 70.868606][ T4705] hardirqs last enabled at (114679): [] kasan_quarantine_put+0xc4/0x200 [ 70.870399][ T4705] hardirqs last disabled at (114680): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.872316][ T4705] softirqs last enabled at (114468): [] local_bh_enable+0x10/0x34 [ 70.873994][ T4705] softirqs last disabled at (114466): [] local_bh_disable+0x10/0x34 [ 70.875677][ T4705] ---[ end trace c845eca8195b1eec ]--- [ 70.905529][ T4762] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.906977][ T4762] Bad inode number on dev loop0: 2 is out of range [ 70.908120][ T4762] SysV FS: get root inode failed [ 70.908884][ T4762] oldfs: cannot read superblock [ 70.916002][ C1] ------------[ cut here ]------------ [ 70.916913][ C1] VFS: brelse: Trying to free free buffer [ 70.917957][ C1] WARNING: CPU: 1 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.919422][ C1] Modules linked in: [ 70.920169][ C1] CPU: 1 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.921801][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.923700][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.925190][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.926195][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.927189][ C1] sp : ffff800008017df0 [ 70.927949][ C1] x29: ffff800008017df0 x28: ffff0000ceca8000 x27: 1fffe000341d065c [ 70.929339][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 70.930783][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b2b40 [ 70.932216][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010004 [ 70.933703][ C1] x17: 0000000000010004 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.935171][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.936598][ C1] x11: ff80800008300a7c x10: 0000000000010003 x9 : f5c1b96e42b08100 [ 70.938017][ C1] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.939448][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.940820][ C1] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000027 [ 70.942262][ C1] Call trace: [ 70.942825][ C1] invalidate_bh_lru+0x128/0x22c [ 70.943678][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.944730][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.945959][ C1] ipi_handler+0x10c/0x70c [ 70.946697][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.947660][ C1] handle_domain_irq+0x148/0x200 [ 70.948518][ C1] gic_handle_irq+0x78/0x1b8 [ 70.949302][ C1] call_on_irq_stack+0x30/0x48 [ 70.950088][ C1] do_interrupt_handler+0x6c/0x88 [ 70.950939][ C1] el1_interrupt+0x30/0x58 [ 70.951674][ C1] el1h_64_irq_handler+0x18/0x24 [ 70.952541][ C1] el1h_64_irq+0x78/0x7c [ 70.953275][ C1] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 70.954288][ C1] get_partial_node+0x250/0x2c8 [ 70.955146][ C1] ___slab_alloc+0x3a0/0xd84 [ 70.955959][ C1] __slab_alloc+0x68/0xc0 [ 70.956724][ C1] __kmalloc_node+0x304/0x50c [ 70.957541][ C1] kvmalloc_node+0x88/0x200 [ 70.958307][ C1] xt_replace_table+0x1a4/0x774 [ 70.959150][ C1] __do_replace+0x12c/0x9c0 [ 70.959951][ C1] do_ip6t_set_ctl+0xadc/0xe38 [ 70.960756][ C1] nf_setsockopt+0x260/0x280 [ 70.961567][ C1] ipv6_setsockopt+0x1b64/0x392c [ 70.962426][ C1] tcp_setsockopt+0x1f4/0x1b8c [ 70.963243][ C1] sock_common_setsockopt+0xb0/0xcc [ 70.964169][ C1] __sys_setsockopt+0x260/0x36c [ 70.965015][ C1] __arm64_sys_setsockopt+0xc0/0xdc [ 70.965908][ C1] invoke_syscall+0x98/0x28c [ 70.966671][ C1] el0_svc_common+0x13c/0x258 [ 70.967480][ C1] do_el0_svc+0x5c/0x140 [ 70.968208][ C1] el0_svc+0x78/0x1d0 [ 70.968885][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 70.969728][ C1] el0t_64_sync+0x1a0/0x1a4 [ 70.970515][ C1] irq event stamp: 192040 [ 70.971244][ C1] hardirqs last enabled at (192039): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 70.973041][ C1] hardirqs last disabled at (192040): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.974628][ C1] softirqs last enabled at (192020): [] release_sock+0x1d0/0x258 [ 70.976240][ C1] softirqs last disabled at (192018): [] release_sock+0x34/0x258 [ 70.977767][ C1] ---[ end trace c845eca8195b1eed ]--- [ 71.017592][ T4764] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.018872][ T4764] Bad inode number on dev loop0: 2 is out of range [ 71.020008][ T4764] SysV FS: get root inode failed [ 71.020879][ T4764] oldfs: cannot read superblock [ 71.024338][ T4705] ------------[ cut here ]------------ [ 71.025330][ T4705] VFS: brelse: Trying to free free buffer [ 71.026352][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.027840][ T4705] Modules linked in: [ 71.028492][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 71.029947][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.031632][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.033190][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 71.034326][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 71.035434][ T4705] sp : ffff80001e9377d0 [ 71.036249][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 71.037866][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 71.039423][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b2ee0 [ 71.040932][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 71.042428][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.044009][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 71.045510][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 71.047131][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.048653][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.050273][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.051838][ T4705] Call trace: [ 71.052493][ T4705] invalidate_bh_lru+0x128/0x22c [ 71.053456][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 71.054558][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.055492][ T4705] invalidate_bh_lrus+0x34/0x40 [ 71.056365][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 71.057318][ T4705] blkdev_put+0x444/0x6c4 [ 71.058116][ T4705] blkdev_close+0x74/0xb0 [ 71.059021][ T4705] __fput+0x1b8/0x7e8 [ 71.059811][ T4705] ____fput+0x20/0x30 [ 71.060616][ T4705] task_work_run+0x13c/0x1e8 [ 71.061518][ T4705] do_notify_resume+0x2488/0x30a8 [ 71.062375][ T4705] el0_svc+0xf0/0x1d0 [ 71.063180][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 71.064142][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 71.065027][ T4705] irq event stamp: 121118 [ 71.065812][ T4705] hardirqs last enabled at (121117): [] kasan_quarantine_put+0xc4/0x200 [ 71.067611][ T4705] hardirqs last disabled at (121118): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.069617][ T4705] softirqs last enabled at (120896): [] local_bh_enable+0x10/0x34 [ 71.071411][ T4705] softirqs last disabled at (120894): [] local_bh_disable+0x10/0x34 [ 71.073240][ T4705] ---[ end trace c845eca8195b1eee ]--- [ 71.154072][ T4766] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.155330][ T4766] Bad inode number on dev loop0: 2 is out of range [ 71.156611][ T4766] SysV FS: get root inode failed [ 71.157592][ T4766] oldfs: cannot read superblock [ 71.180713][ T4770] ------------[ cut here ]------------ [ 71.181639][ T4770] VFS: brelse: Trying to free free buffer [ 71.182647][ T4770] WARNING: CPU: 1 PID: 4770 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.184145][ T4770] Modules linked in: [ 71.184826][ T4770] CPU: 1 PID: 4770 Comm: syz.0.45 Tainted: G W syzkaller #0 [ 71.186357][ T4770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.188162][ T4770] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.189481][ T4770] pc : invalidate_bh_lru+0x128/0x22c [ 71.190439][ T4770] lr : invalidate_bh_lru+0x128/0x22c [ 71.191360][ T4770] sp : ffff80001fef77d0 [ 71.192082][ T4770] x29: ffff80001fef77d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 71.193517][ T4770] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 71.194959][ T4770] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b3318 [ 71.196345][ T4770] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 71.197776][ T4770] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.199200][ T4770] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 71.200671][ T4770] x11: ff80800008300a7c x10: 0000000000000000 x9 : 4ab70490333e6900 [ 71.202078][ T4770] x8 : 4ab70490333e6900 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.203464][ T4770] x5 : ffff80001fef70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.204892][ T4770] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.206300][ T4770] Call trace: [ 71.206853][ T4770] invalidate_bh_lru+0x128/0x22c [ 71.207774][ T4770] smp_call_function_many_cond+0xa5c/0xec0 [ 71.208852][ T4770] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.209822][ T4770] invalidate_bh_lrus+0x34/0x40 [ 71.210702][ T4770] blkdev_flush_mapping+0x16c/0x334 [ 71.211665][ T4770] blkdev_put+0x444/0x6c4 [ 71.212466][ T4770] blkdev_close+0x74/0xb0 [ 71.213224][ T4770] __fput+0x1b8/0x7e8 [ 71.213942][ T4770] ____fput+0x20/0x30 [ 71.214680][ T4770] task_work_run+0x13c/0x1e8 [ 71.215499][ T4770] do_notify_resume+0x2488/0x30a8 [ 71.216407][ T4770] el0_svc+0xf0/0x1d0 [ 71.217112][ T4770] el0t_64_sync_handler+0xcc/0xe4 [ 71.217985][ T4770] el0t_64_sync+0x1a0/0x1a4 [ 71.218749][ T4770] irq event stamp: 716 [ 71.219439][ T4770] hardirqs last enabled at (715): [] finish_lock_switch+0xb0/0x1c8 [ 71.221090][ T4770] hardirqs last disabled at (716): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.223001][ T4770] softirqs last enabled at (690): [] local_bh_enable+0x10/0x34 [ 71.224686][ T4770] softirqs last disabled at (688): [] local_bh_disable+0x10/0x34 [ 71.226376][ T4770] ---[ end trace c845eca8195b1eef ]--- [ 71.269760][ T4772] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.271085][ T4772] Bad inode number on dev loop0: 2 is out of range [ 71.272201][ T4772] SysV FS: get root inode failed [ 71.273229][ T4772] oldfs: cannot read superblock [ 71.276750][ C1] ------------[ cut here ]------------ [ 71.277631][ C1] VFS: brelse: Trying to free free buffer [ 71.278628][ C1] WARNING: CPU: 1 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.280021][ C1] Modules linked in: [ 71.280619][ C1] CPU: 1 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.281999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.283972][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.285534][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.286498][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.287490][ C1] sp : ffff800008017df0 [ 71.288232][ C1] x29: ffff800008017df0 x28: ffff0000ceca8000 x27: 1fffe000341d065c [ 71.289696][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 71.291159][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b36b8 [ 71.292593][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 71.294076][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.295598][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 71.297055][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 71.298551][ C1] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.299968][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.301373][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.302801][ C1] Call trace: [ 71.303381][ C1] invalidate_bh_lru+0x128/0x22c [ 71.304230][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.305276][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.306475][ C1] ipi_handler+0x10c/0x70c [ 71.307232][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.308196][ C1] handle_domain_irq+0x148/0x200 [ 71.309034][ C1] gic_handle_irq+0x78/0x1b8 [ 71.309827][ C1] call_on_irq_stack+0x30/0x48 [ 71.310664][ C1] do_interrupt_handler+0x6c/0x88 [ 71.311532][ C1] el1_interrupt+0x30/0x58 [ 71.312292][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.313160][ C1] el1h_64_irq+0x78/0x7c [ 71.313898][ C1] stack_depot_save+0x178/0x49c [ 71.314716][ C1] kasan_set_track+0x68/0x84 [ 71.315487][ C1] kasan_set_free_info+0x28/0x4c [ 71.316477][ C1] ____kasan_slab_free+0x118/0x164 [ 71.317405][ C1] __kasan_slab_free+0x18/0x28 [ 71.318381][ C1] slab_free_freelist_hook+0x128/0x1e4 [ 71.319419][ C1] kfree+0x16c/0x404 [ 71.320171][ C1] tomoyo_realpath_from_path+0x4f8/0x540 [ 71.321245][ C1] tomoyo_path_perm+0x1e4/0x49c [ 71.322185][ C1] tomoyo_inode_getattr+0x28/0x38 [ 71.323168][ C1] security_inode_getattr+0xd8/0x124 [ 71.324143][ C1] vfs_statx+0x11c/0x474 [ 71.324914][ C1] __arm64_sys_newfstatat+0x128/0x1c0 [ 71.325882][ C1] invoke_syscall+0x98/0x28c [ 71.326694][ C1] el0_svc_common+0x13c/0x258 [ 71.327517][ C1] do_el0_svc+0x5c/0x140 [ 71.328268][ C1] el0_svc+0x78/0x1d0 [ 71.329039][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.330009][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.330839][ C1] irq event stamp: 202642 [ 71.331620][ C1] hardirqs last enabled at (202641): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 71.333625][ C1] hardirqs last disabled at (202642): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.335556][ C1] softirqs last enabled at (202620): [] local_bh_enable+0x10/0x34 [ 71.337385][ C1] softirqs last disabled at (202618): [] local_bh_disable+0x10/0x34 [ 71.339213][ C1] ---[ end trace c845eca8195b1ef0 ]--- [ 71.377003][ T4774] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.378272][ T4774] Bad inode number on dev loop0: 2 is out of range [ 71.379340][ T4774] SysV FS: get root inode failed [ 71.380182][ T4774] oldfs: cannot read superblock [ 71.390358][ T4705] ------------[ cut here ]------------ [ 71.391351][ T4705] VFS: brelse: Trying to free free buffer [ 71.392366][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.393943][ T4705] Modules linked in: [ 71.394633][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 71.396088][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.397894][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.399327][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 71.400213][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 71.401131][ T4705] sp : ffff80001e9377d0 [ 71.401844][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 71.403224][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 71.404644][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b3a58 [ 71.406072][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 71.407462][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.408917][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 71.410323][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 71.411685][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.413045][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.414513][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.415855][ T4705] Call trace: [ 71.416439][ T4705] invalidate_bh_lru+0x128/0x22c [ 71.417256][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 71.418255][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.419206][ T4705] invalidate_bh_lrus+0x34/0x40 [ 71.420095][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 71.421055][ T4705] blkdev_put+0x444/0x6c4 [ 71.421849][ T4705] blkdev_close+0x74/0xb0 [ 71.422619][ T4705] __fput+0x1b8/0x7e8 [ 71.423307][ T4705] ____fput+0x20/0x30 [ 71.424050][ T4705] task_work_run+0x13c/0x1e8 [ 71.424860][ T4705] do_notify_resume+0x2488/0x30a8 [ 71.425741][ T4705] el0_svc+0xf0/0x1d0 [ 71.426450][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 71.427374][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 71.428139][ T4705] irq event stamp: 145588 [ 71.428875][ T4705] hardirqs last enabled at (145587): [] kasan_quarantine_put+0xc4/0x200 [ 71.430553][ T4705] hardirqs last disabled at (145588): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.432351][ T4705] softirqs last enabled at (145364): [] local_bh_enable+0x10/0x34 [ 71.433918][ T4705] softirqs last disabled at (145362): [] local_bh_disable+0x10/0x34 [ 71.435597][ T4705] ---[ end trace c845eca8195b1ef1 ]--- [ 71.503884][ T4776] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.505148][ T4776] Bad inode number on dev loop0: 2 is out of range [ 71.506472][ T4776] SysV FS: get root inode failed [ 71.507380][ T4776] oldfs: cannot read superblock [ 71.514510][ T4705] ------------[ cut here ]------------ [ 71.515492][ T4705] VFS: brelse: Trying to free free buffer [ 71.516576][ T4705] WARNING: CPU: 0 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.518010][ T4705] Modules linked in: [ 71.518739][ T4705] CPU: 0 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 71.520212][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.521866][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.523294][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 71.524211][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 71.525129][ T4705] sp : ffff80001e9377d0 [ 71.525868][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 71.527322][ T4705] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 71.528794][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c53114e8 [ 71.530196][ T4705] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 71.531642][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.533080][ T4705] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 71.534510][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 71.535896][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.537288][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.538653][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.540001][ T4705] Call trace: [ 71.540562][ T4705] invalidate_bh_lru+0x128/0x22c [ 71.541437][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 71.542431][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.543306][ T4705] invalidate_bh_lrus+0x34/0x40 [ 71.544109][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 71.544968][ T4705] blkdev_put+0x444/0x6c4 [ 71.545709][ T4705] blkdev_close+0x74/0xb0 [ 71.546439][ T4705] __fput+0x1b8/0x7e8 [ 71.547110][ T4705] ____fput+0x20/0x30 [ 71.547777][ T4705] task_work_run+0x13c/0x1e8 [ 71.548566][ T4705] do_notify_resume+0x2488/0x30a8 [ 71.549429][ T4705] el0_svc+0xf0/0x1d0 [ 71.550100][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 71.550944][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 71.551752][ T4705] irq event stamp: 149128 [ 71.552488][ T4705] hardirqs last enabled at (149127): [] kasan_quarantine_put+0xc4/0x200 [ 71.554277][ T4705] hardirqs last disabled at (149128): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.556115][ T4705] softirqs last enabled at (148474): [] local_bh_enable+0x10/0x34 [ 71.557769][ T4705] softirqs last disabled at (148472): [] local_bh_disable+0x10/0x34 [ 71.559475][ T4705] ---[ end trace c845eca8195b1ef2 ]--- [ 71.605958][ T4778] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.607303][ T4778] Bad inode number on dev loop0: 2 is out of range [ 71.608410][ T4778] SysV FS: get root inode failed [ 71.609287][ T4778] oldfs: cannot read superblock [ 71.611847][ C0] ------------[ cut here ]------------ [ 71.612870][ C0] VFS: brelse: Trying to free free buffer [ 71.614015][ C0] WARNING: CPU: 0 PID: 4778 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.615652][ C0] Modules linked in: [ 71.616425][ C0] CPU: 0 PID: 4778 Comm: syz.0.49 Tainted: G W syzkaller #0 [ 71.617982][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.619790][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.621437][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 71.622512][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 71.623504][ C0] sp : ffff800008007df0 [ 71.624267][ C0] x29: ffff800008007df0 x28: ffff0000d9ed0000 x27: 1fffe000341cc45c [ 71.625750][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 71.627208][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c5311888 [ 71.628641][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 71.630106][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.631566][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 71.632974][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : c4aec84196790400 [ 71.634436][ C0] x8 : c4aec84196790400 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.635903][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.637281][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 71.638661][ C0] Call trace: [ 71.639213][ C0] invalidate_bh_lru+0x128/0x22c [ 71.640080][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 71.641125][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.642343][ C0] ipi_handler+0x10c/0x70c [ 71.643142][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 71.644148][ C0] handle_domain_irq+0x148/0x200 [ 71.645070][ C0] gic_handle_irq+0x78/0x1b8 [ 71.645957][ C0] call_on_irq_stack+0x30/0x48 [ 71.646814][ C0] do_interrupt_handler+0x6c/0x88 [ 71.647703][ C0] el1_interrupt+0x30/0x58 [ 71.648510][ C0] el1h_64_irq_handler+0x18/0x24 [ 71.649391][ C0] el1h_64_irq+0x78/0x7c [ 71.650165][ C0] lock_page_memcg+0x120/0x22c [ 71.650982][ C0] page_remove_rmap+0x3c/0xfb4 [ 71.651940][ C0] unmap_page_range+0xa60/0x180c [ 71.652892][ C0] unmap_single_vma+0x13c/0x1e4 [ 71.653781][ C0] unmap_vmas+0x110/0x218 [ 71.654563][ C0] exit_mmap+0x2c4/0x510 [ 71.655341][ C0] __mmput+0xe8/0x3a0 [ 71.656025][ C0] mmput+0x80/0xc0 [ 71.656702][ C0] exit_mm+0x5dc/0x704 [ 71.657427][ C0] do_exit+0x4bc/0x1f54 [ 71.658165][ C0] do_group_exit+0x104/0x274 [ 71.658979][ C0] get_signal+0x638/0x13b0 [ 71.659775][ C0] do_notify_resume+0x344/0x30a8 [ 71.660625][ C0] el0_svc+0xf0/0x1d0 [ 71.661332][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 71.662255][ C0] el0t_64_sync+0x1a0/0x1a4 [ 71.663080][ C0] irq event stamp: 2148 [ 71.663841][ C0] hardirqs last enabled at (2147): [] lock_page_memcg+0x110/0x22c [ 71.665494][ C0] hardirqs last disabled at (2148): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.667133][ C0] softirqs last enabled at (810): [] local_bh_enable+0x10/0x34 [ 71.668688][ C0] softirqs last disabled at (808): [] local_bh_disable+0x10/0x34 [ 71.670254][ C0] ---[ end trace c845eca8195b1ef3 ]--- [ 71.773379][ T4780] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.774773][ T4780] Bad inode number on dev loop0: 2 is out of range [ 71.775927][ T4780] SysV FS: get root inode failed [ 71.776731][ T4780] oldfs: cannot read superblock [ 71.779501][ C1] ------------[ cut here ]------------ [ 71.780417][ C1] VFS: brelse: Trying to free free buffer [ 71.781474][ C1] WARNING: CPU: 1 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.782983][ C1] Modules linked in: [ 71.783667][ C1] CPU: 1 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.785238][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.787011][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.788381][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.789292][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.790189][ C1] sp : ffff800008017df0 [ 71.790884][ C1] x29: ffff800008017df0 x28: ffff0000ceca8000 x27: 1fffe000341d065c [ 71.792433][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 71.793858][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b3df8 [ 71.795408][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 71.796905][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.798400][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 71.799841][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 71.801293][ C1] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.802717][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.804152][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.805565][ C1] Call trace: [ 71.806126][ C1] invalidate_bh_lru+0x128/0x22c [ 71.806994][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.808031][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.809247][ C1] ipi_handler+0x10c/0x70c [ 71.809987][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.810949][ C1] handle_domain_irq+0x148/0x200 [ 71.811805][ C1] gic_handle_irq+0x78/0x1b8 [ 71.812604][ C1] call_on_irq_stack+0x30/0x48 [ 71.813449][ C1] do_interrupt_handler+0x6c/0x88 [ 71.814326][ C1] el1_interrupt+0x30/0x58 [ 71.815084][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.815940][ C1] el1h_64_irq+0x78/0x7c [ 71.816672][ C1] setup_sigframe_layout+0x82c/0x8d0 [ 71.817571][ C1] do_notify_resume+0x6d0/0x30a8 [ 71.818579][ C1] el0_svc+0xf0/0x1d0 [ 71.819319][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.820269][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.821115][ C1] irq event stamp: 211488 [ 71.821880][ C1] hardirqs last enabled at (211487): [] __local_bh_enable_ip+0x1f8/0x37c [ 71.823668][ C1] hardirqs last disabled at (211488): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.825456][ C1] softirqs last enabled at (211486): [] local_bh_enable+0x10/0x34 [ 71.827176][ C1] softirqs last disabled at (211484): [] local_bh_disable+0x10/0x34 [ 71.828933][ C1] ---[ end trace c845eca8195b1ef4 ]--- [ 71.874385][ T4782] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.875722][ T4782] Bad inode number on dev loop0: 2 is out of range [ 71.876796][ T4782] SysV FS: get root inode failed [ 71.877758][ T4782] oldfs: cannot read superblock [ 71.886461][ T4705] ------------[ cut here ]------------ [ 71.887394][ T4705] VFS: brelse: Trying to free free buffer [ 71.888327][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.889669][ T4705] Modules linked in: [ 71.890258][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 71.891744][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.893575][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.895120][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 71.896199][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 71.897247][ T4705] sp : ffff80001e9377d0 [ 71.898055][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 71.899645][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 71.901177][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b4970 [ 71.902869][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 71.904439][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.905800][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 71.907191][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 71.908830][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.910542][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.912192][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.913706][ T4705] Call trace: [ 71.914323][ T4705] invalidate_bh_lru+0x128/0x22c [ 71.915223][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 71.916278][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.917338][ T4705] invalidate_bh_lrus+0x34/0x40 [ 71.918313][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 71.919371][ T4705] blkdev_put+0x444/0x6c4 [ 71.920173][ T4705] blkdev_close+0x74/0xb0 [ 71.920962][ T4705] __fput+0x1b8/0x7e8 [ 71.921788][ T4705] ____fput+0x20/0x30 [ 71.922622][ T4705] task_work_run+0x13c/0x1e8 [ 71.923545][ T4705] do_notify_resume+0x2488/0x30a8 [ 71.924569][ T4705] el0_svc+0xf0/0x1d0 [ 71.925347][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 71.926316][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 71.927168][ T4705] irq event stamp: 166288 [ 71.927975][ T4705] hardirqs last enabled at (166287): [] kasan_quarantine_put+0xc4/0x200 [ 71.929852][ T4705] hardirqs last disabled at (166288): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.931664][ T4705] softirqs last enabled at (166078): [] local_bh_enable+0x10/0x34 [ 71.933414][ T4705] softirqs last disabled at (166076): [] local_bh_disable+0x10/0x34 [ 71.935064][ T4705] ---[ end trace c845eca8195b1ef5 ]--- [ 71.976771][ T4784] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.978101][ T4784] Bad inode number on dev loop0: 2 is out of range [ 71.979275][ T4784] SysV FS: get root inode failed [ 71.980133][ T4784] oldfs: cannot read superblock [ 71.988529][ C1] ------------[ cut here ]------------ [ 71.989508][ C1] VFS: brelse: Trying to free free buffer [ 71.990499][ C1] WARNING: CPU: 1 PID: 4785 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.991877][ C1] Modules linked in: [ 71.992490][ C1] CPU: 1 PID: 4785 Comm: syz.0.53 Tainted: G W syzkaller #0 [ 71.994031][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.995848][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.997213][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.998101][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.998974][ C1] sp : ffff800008017df0 [ 71.999701][ C1] x29: ffff800008017df0 x28: ffff0000cf191b40 x27: 1fffe000341d065b [ 72.001141][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 72.002494][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b4c28 [ 72.003907][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 72.005316][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.006717][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 72.008090][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 70d65cb829958100 [ 72.009456][ C1] x8 : 70d65cb829958100 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.010815][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.012163][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.013538][ C1] Call trace: [ 72.014114][ C1] invalidate_bh_lru+0x128/0x22c [ 72.015004][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.016062][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.017326][ C1] ipi_handler+0x10c/0x70c [ 72.018113][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.019078][ C1] handle_domain_irq+0x148/0x200 [ 72.019999][ C1] gic_handle_irq+0x78/0x1b8 [ 72.020725][ C1] call_on_irq_stack+0x30/0x48 [ 72.021562][ C1] do_interrupt_handler+0x6c/0x88 [ 72.022452][ C1] el1_interrupt+0x30/0x58 [ 72.023249][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.024090][ C1] el1h_64_irq+0x78/0x7c [ 72.024812][ C1] ext4_get_group_desc+0x244/0x46c [ 72.025703][ C1] __ext4_get_inode_loc+0x198/0xae8 [ 72.026624][ C1] ext4_reserve_inode_write+0x108/0x294 [ 72.027621][ C1] __ext4_mark_inode_dirty+0x1e4/0x820 [ 72.028619][ C1] ext4_dirty_inode+0xd4/0x110 [ 72.029477][ C1] __mark_inode_dirty+0x2b0/0xfac [ 72.030362][ C1] generic_update_time+0x208/0x230 [ 72.031242][ C1] file_update_time+0x31c/0x39c [ 72.032078][ C1] ext4_page_mkwrite+0x180/0x105c [ 72.032935][ C1] do_page_mkwrite+0x140/0x35c [ 72.033770][ C1] handle_mm_fault+0x1500/0x2aac [ 72.034643][ C1] do_page_fault+0x690/0xad0 [ 72.035466][ C1] do_translation_fault+0xe0/0x130 [ 72.036388][ C1] do_mem_abort+0x6c/0x1b0 [ 72.037170][ C1] el0_da+0x90/0x1ec [ 72.037862][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 72.038764][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.039609][ C1] irq event stamp: 1066 [ 72.040324][ C1] hardirqs last enabled at (1065): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 72.042199][ C1] hardirqs last disabled at (1066): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.043933][ C1] softirqs last enabled at (1026): [] local_bh_enable+0x10/0x34 [ 72.045618][ C1] softirqs last disabled at (1024): [] local_bh_disable+0x10/0x34 [ 72.047383][ C1] ---[ end trace c845eca8195b1ef6 ]--- [ 72.076862][ T4786] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.078146][ T4786] Bad inode number on dev loop0: 2 is out of range [ 72.079273][ T4786] SysV FS: get root inode failed [ 72.080175][ T4786] oldfs: cannot read superblock [ 72.082959][ C1] ------------[ cut here ]------------ [ 72.083916][ C1] VFS: brelse: Trying to free free buffer [ 72.084967][ C1] WARNING: CPU: 1 PID: 4351 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.086538][ C1] Modules linked in: [ 72.087215][ C1] CPU: 1 PID: 4351 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.088794][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.090486][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.091707][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.092603][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.093571][ C1] sp : ffff800008017df0 [ 72.094304][ C1] x29: ffff800008017df0 x28: ffff0000ce90b680 x27: 1fffe000341d065c [ 72.095659][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 72.097106][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b4318 [ 72.098570][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010403 [ 72.099981][ C1] x17: 0000000000010403 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.101402][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 72.102841][ C1] x11: ff80800008300a7c x10: 0000000000010402 x9 : 1ab3003e20be0c00 [ 72.104235][ C1] x8 : 1ab3003e20be0c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.105604][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.107003][ C1] x2 : 0000000000000001 x1 : 0000000100010402 x0 : 0000000000000027 [ 72.108647][ C1] Call trace: [ 72.109312][ C1] invalidate_bh_lru+0x128/0x22c [ 72.110300][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.111506][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.112870][ C1] ipi_handler+0x10c/0x70c [ 72.113656][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.114605][ C1] handle_domain_irq+0x148/0x200 [ 72.115457][ C1] gic_handle_irq+0x78/0x1b8 [ 72.116273][ C1] call_on_irq_stack+0x30/0x48 [ 72.117130][ C1] do_interrupt_handler+0x6c/0x88 [ 72.118174][ C1] el1_interrupt+0x30/0x58 [ 72.119027][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.119896][ C1] el1h_64_irq+0x78/0x7c [ 72.120649][ C1] rcu_is_watching+0x90/0x134 [ 72.121487][ C1] lock_acquire+0xc4/0x618 [ 72.122292][ C1] rcu_lock_acquire+0x44/0x54 [ 72.123131][ C1] __dev_queue_xmit+0x18c/0x27d4 [ 72.124010][ C1] dev_queue_xmit+0x24/0x34 [ 72.124770][ C1] ip_finish_output2+0xda0/0x121c [ 72.125630][ C1] ip_finish_output+0x1b0/0x448 [ 72.126459][ C1] ip_output+0x3bc/0x564 [ 72.127177][ C1] __ip_queue_xmit+0xdf0/0x18f0 [ 72.128011][ C1] ip_queue_xmit+0x5c/0x7c [ 72.128900][ C1] __tcp_transmit_skb+0x1784/0x2b80 [ 72.129921][ C1] tcp_write_xmit+0x1284/0x4ff8 [ 72.130804][ C1] __tcp_push_pending_frames+0x98/0x22c [ 72.131823][ C1] tcp_push+0x424/0x63c [ 72.132586][ C1] tcp_sendmsg_locked+0x251c/0x2c84 [ 72.133543][ C1] tcp_sendmsg+0x40/0x64 [ 72.134251][ C1] inet_sendmsg+0x154/0x27c [ 72.135004][ C1] sock_write_iter+0x250/0x348 [ 72.135811][ C1] vfs_write+0x590/0xa64 [ 72.136541][ C1] ksys_write+0x12c/0x228 [ 72.137276][ C1] __arm64_sys_write+0x7c/0x90 [ 72.138137][ C1] invoke_syscall+0x98/0x28c [ 72.138959][ C1] el0_svc_common+0x13c/0x258 [ 72.139769][ C1] do_el0_svc+0x5c/0x140 [ 72.140546][ C1] el0_svc+0x78/0x1d0 [ 72.141271][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 72.142178][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.142995][ C1] irq event stamp: 511863 [ 72.143727][ C1] hardirqs last enabled at (511862): [] ip_finish_output2+0xa64/0x121c [ 72.145479][ C1] hardirqs last disabled at (511863): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.147263][ C1] softirqs last enabled at (511858): [] nf_conntrack_tcp_packet+0x242c/0x4d64 [ 72.149180][ C1] softirqs last disabled at (511860): [] local_bh_disable+0x10/0x34 [ 72.150930][ C1] ---[ end trace c845eca8195b1ef7 ]--- [ 72.213730][ T4789] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.215054][ T4789] Bad inode number on dev loop0: 2 is out of range [ 72.216207][ T4789] SysV FS: get root inode failed [ 72.217301][ T4789] oldfs: cannot read superblock [ 72.225485][ C1] ------------[ cut here ]------------ [ 72.226404][ C1] VFS: brelse: Trying to free free buffer [ 72.227313][ C1] WARNING: CPU: 1 PID: 4790 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.228678][ C1] Modules linked in: [ 72.229313][ C1] CPU: 1 PID: 4790 Comm: syz.0.55 Tainted: G W syzkaller #0 [ 72.230597][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.232240][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.233521][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.234430][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.235369][ C1] sp : ffff800008017df0 [ 72.236109][ C1] x29: ffff800008017df0 x28: ffff0000cf190000 x27: 1fffe000341d065c [ 72.237501][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 72.238980][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25b46b8 [ 72.240339][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 72.241745][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.243059][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 72.244495][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 6ef89d4789b8a300 [ 72.245876][ C1] x8 : 6ef89d4789b8a300 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.247211][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.248616][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.249967][ C1] Call trace: [ 72.250511][ C1] invalidate_bh_lru+0x128/0x22c [ 72.251348][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.252368][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.253525][ C1] ipi_handler+0x10c/0x70c [ 72.254241][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.255149][ C1] handle_domain_irq+0x148/0x200 [ 72.255960][ C1] gic_handle_irq+0x78/0x1b8 [ 72.256716][ C1] call_on_irq_stack+0x30/0x48 [ 72.257570][ C1] do_interrupt_handler+0x6c/0x88 [ 72.258468][ C1] el0_interrupt+0x94/0x248 [ 72.259252][ C1] __el0_irq_handler_common+0x18/0x24 [ 72.260139][ C1] el0t_64_irq_handler+0x10/0x1c [ 72.260962][ C1] el0t_64_irq+0x1a0/0x1a4 [ 72.261670][ C1] irq event stamp: 1484 [ 72.262352][ C1] hardirqs last enabled at (1483): [] el0t_64_sync_handler+0xcc/0xe4 [ 72.263975][ C1] hardirqs last disabled at (1484): [] __el0_irq_handler_common+0x18/0x24 [ 72.265688][ C1] softirqs last enabled at (1424): [] local_bh_enable+0x10/0x34 [ 72.267330][ C1] softirqs last disabled at (1422): [] local_bh_disable+0x10/0x34 [ 72.268923][ C1] ---[ end trace c845eca8195b1ef8 ]--- [ 72.343465][ T4791] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.344834][ T4791] Bad inode number on dev loop0: 2 is out of range [ 72.346032][ T4791] SysV FS: get root inode failed [ 72.346938][ T4791] oldfs: cannot read superblock [ 72.361435][ C1] ------------[ cut here ]------------ [ 72.362380][ C1] VFS: brelse: Trying to free free buffer [ 72.363471][ C1] WARNING: CPU: 1 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.365051][ C1] Modules linked in: [ 72.365732][ C1] CPU: 1 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.367375][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.369171][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.370506][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.371425][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.372349][ C1] sp : ffff800008017df0 [ 72.373080][ C1] x29: ffff800008017df0 x28: ffff0000ceca8000 x27: 1fffe000341d065c [ 72.374554][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 72.376362][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000debd3230 [ 72.377837][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 72.379383][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.380875][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 72.382280][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 72.383734][ C1] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.385301][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.386779][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.388176][ C1] Call trace: [ 72.388731][ C1] invalidate_bh_lru+0x128/0x22c [ 72.389589][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.390619][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.391796][ C1] ipi_handler+0x10c/0x70c [ 72.392579][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.393520][ C1] handle_domain_irq+0x148/0x200 [ 72.394378][ C1] gic_handle_irq+0x78/0x1b8 [ 72.395162][ C1] call_on_irq_stack+0x30/0x48 [ 72.395956][ C1] do_interrupt_handler+0x6c/0x88 [ 72.396860][ C1] el1_interrupt+0x30/0x58 [ 72.397648][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.398495][ C1] el1h_64_irq+0x78/0x7c [ 72.399199][ C1] seqcount_lockdep_reader_access+0x15c/0x22c [ 72.400218][ C1] bad_range+0xa8/0x2a4 [ 72.400899][ C1] get_page_from_freelist+0x28dc/0x2a5c [ 72.401801][ C1] __alloc_pages+0x1a4/0x474 [ 72.402566][ C1] alloc_pages+0x34c/0x5c0 [ 72.403304][ C1] __vmalloc_node_range+0x50c/0x8c0 [ 72.404154][ C1] vzalloc+0x110/0x188 [ 72.404863][ C1] alloc_counters+0x80/0x790 [ 72.405611][ C1] do_ip6t_get_ctl+0xb58/0x1464 [ 72.406460][ C1] nf_getsockopt+0x254/0x274 [ 72.407305][ C1] ipv6_getsockopt+0x588/0x256c [ 72.408198][ C1] tcp_getsockopt+0x214/0x2d2c [ 72.409036][ C1] sock_common_getsockopt+0xa8/0xc4 [ 72.409896][ C1] __sys_getsockopt+0x1b8/0x250 [ 72.410753][ C1] __arm64_sys_getsockopt+0xc0/0xdc [ 72.411646][ C1] invoke_syscall+0x98/0x28c [ 72.412498][ C1] el0_svc_common+0x13c/0x258 [ 72.413449][ C1] do_el0_svc+0x5c/0x140 [ 72.414300][ C1] el0_svc+0x78/0x1d0 [ 72.415104][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 72.416099][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.416986][ C1] irq event stamp: 228138 [ 72.417805][ C1] hardirqs last enabled at (228137): [] seqcount_lockdep_reader_access+0x14c/0x22c [ 72.419942][ C1] hardirqs last disabled at (228138): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.421749][ C1] softirqs last enabled at (227916): [] release_sock+0x1d0/0x258 [ 72.423373][ C1] softirqs last disabled at (227914): [] release_sock+0x34/0x258 [ 72.424945][ C1] ---[ end trace c845eca8195b1ef9 ]--- [ 72.461093][ T4796] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.462395][ T4796] Bad inode number on dev loop0: 2 is out of range [ 72.463716][ T4796] SysV FS: get root inode failed [ 72.464656][ T4796] oldfs: cannot read superblock [ 72.471032][ C0] ------------[ cut here ]------------ [ 72.471985][ C0] VFS: brelse: Trying to free free buffer [ 72.473048][ C0] WARNING: CPU: 0 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.474652][ C0] Modules linked in: [ 72.475351][ C0] CPU: 0 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.476955][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.478752][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.480107][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.481045][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.482065][ C0] sp : ffff800008007df0 [ 72.483056][ C0] x29: ffff800008007df0 x28: ffff0000ceca8000 x27: 1fffe000341cc45c [ 72.484576][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 72.486135][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c5311c28 [ 72.487640][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 72.489159][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.490693][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 72.492077][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 72.493488][ C0] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.494923][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.496386][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.497833][ C0] Call trace: [ 72.498377][ C0] invalidate_bh_lru+0x128/0x22c [ 72.499249][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.500337][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.501562][ C0] ipi_handler+0x10c/0x70c [ 72.502340][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.503335][ C0] handle_domain_irq+0x148/0x200 [ 72.504220][ C0] gic_handle_irq+0x78/0x1b8 [ 72.504983][ C0] call_on_irq_stack+0x30/0x48 [ 72.505802][ C0] do_interrupt_handler+0x6c/0x88 [ 72.506635][ C0] el1_interrupt+0x30/0x58 [ 72.507388][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.508263][ C0] el1h_64_irq+0x78/0x7c [ 72.509009][ C0] qlist_free_all+0x3c/0xa8 [ 72.509790][ C0] kasan_quarantine_reduce+0x124/0x130 [ 72.510791][ C0] __kasan_slab_alloc+0x34/0xcc [ 72.511679][ C0] slab_post_alloc_hook+0x74/0x3f8 [ 72.512579][ C0] __kmalloc_node+0x220/0x50c [ 72.513411][ C0] kvmalloc_node+0x88/0x200 [ 72.514160][ C0] xt_alloc_entry_offsets+0x50/0x60 [ 72.515218][ C0] translate_table+0x158/0x1928 [ 72.516167][ C0] do_ip6t_set_ctl+0x9ec/0xe38 [ 72.517122][ C0] nf_setsockopt+0x260/0x280 [ 72.518023][ C0] ipv6_setsockopt+0x1b64/0x392c [ 72.518886][ C0] tcp_setsockopt+0x1f4/0x1b8c [ 72.519750][ C0] sock_common_setsockopt+0xb0/0xcc [ 72.520722][ C0] __sys_setsockopt+0x260/0x36c [ 72.521552][ C0] __arm64_sys_setsockopt+0xc0/0xdc [ 72.522470][ C0] invoke_syscall+0x98/0x28c [ 72.523260][ C0] el0_svc_common+0x13c/0x258 [ 72.524076][ C0] do_el0_svc+0x5c/0x140 [ 72.524817][ C0] el0_svc+0x78/0x1d0 [ 72.525525][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 72.526389][ C0] el0t_64_sync+0x1a0/0x1a4 [ 72.527153][ C0] irq event stamp: 230946 [ 72.527901][ C0] hardirqs last enabled at (230945): [] put_cpu_partial+0x188/0x214 [ 72.529582][ C0] hardirqs last disabled at (230946): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.531342][ C0] softirqs last enabled at (230648): [] release_sock+0x1d0/0x258 [ 72.533080][ C0] softirqs last disabled at (230646): [] release_sock+0x34/0x258 [ 72.534694][ C0] ---[ end trace c845eca8195b1efa ]--- [ 72.593975][ T4798] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.595214][ T4798] Bad inode number on dev loop0: 2 is out of range [ 72.596352][ T4798] SysV FS: get root inode failed [ 72.597314][ T4798] oldfs: cannot read superblock [ 72.604955][ T4705] ------------[ cut here ]------------ [ 72.605911][ T4705] VFS: brelse: Trying to free free buffer [ 72.606861][ T4705] WARNING: CPU: 0 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.608283][ T4705] Modules linked in: [ 72.608893][ T4705] CPU: 0 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 72.610167][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.611804][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.613156][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 72.614164][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 72.615078][ T4705] sp : ffff80001e9377d0 [ 72.615822][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 72.617247][ T4705] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 72.618635][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000de8a8060 [ 72.620054][ T4705] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 72.621564][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.623057][ T4705] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 72.624515][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 72.625950][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.627439][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.628915][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 72.630392][ T4705] Call trace: [ 72.630979][ T4705] invalidate_bh_lru+0x128/0x22c [ 72.631917][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 72.632959][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 72.633876][ T4705] invalidate_bh_lrus+0x34/0x40 [ 72.634755][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 72.635647][ T4705] blkdev_put+0x444/0x6c4 [ 72.636425][ T4705] blkdev_close+0x74/0xb0 [ 72.637184][ T4705] __fput+0x1b8/0x7e8 [ 72.637895][ T4705] ____fput+0x20/0x30 [ 72.638602][ T4705] task_work_run+0x13c/0x1e8 [ 72.639429][ T4705] do_notify_resume+0x2488/0x30a8 [ 72.640353][ T4705] el0_svc+0xf0/0x1d0 [ 72.641083][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 72.642022][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 72.642809][ T4705] irq event stamp: 191948 [ 72.643559][ T4705] hardirqs last enabled at (191947): [] kasan_quarantine_put+0xc4/0x200 [ 72.645370][ T4705] hardirqs last disabled at (191948): [] smp_call_function_many_cond+0xa50/0xec0 [ 72.647221][ T4705] softirqs last enabled at (191742): [] local_bh_enable+0x10/0x34 [ 72.648853][ T4705] softirqs last disabled at (191740): [] local_bh_disable+0x10/0x34 [ 72.650490][ T4705] ---[ end trace c845eca8195b1efb ]--- [ 72.688570][ T4801] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.690118][ T4801] Bad inode number on dev loop0: 2 is out of range [ 72.691188][ T4801] SysV FS: get root inode failed [ 72.692067][ T4801] oldfs: cannot read superblock [ 72.692788][ T960] device hsr_slave_0 left promiscuous mode [ 72.699270][ C0] ------------[ cut here ]------------ [ 72.700249][ C0] VFS: brelse: Trying to free free buffer [ 72.701180][ C0] WARNING: CPU: 0 PID: 4803 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.702641][ C0] Modules linked in: [ 72.703346][ C0] CPU: 0 PID: 4803 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.705011][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.706956][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.708474][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.709503][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.710563][ C0] sp : ffff800008007df0 [ 72.711366][ C0] x29: ffff800008007df0 x28: ffff0000cfb2b680 x27: 1fffe000341cc45c [ 72.712961][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 72.714553][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000de8a8400 [ 72.716102][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010004 [ 72.717592][ C0] x17: 0000000000010004 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.719088][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 72.720650][ C0] x11: ff80800008300a7c x10: 0000000000010003 x9 : c6a957833b003d00 [ 72.722138][ C0] x8 : c6a957833b003d00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.723559][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.725036][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000027 [ 72.726437][ C0] Call trace: [ 72.727055][ C0] invalidate_bh_lru+0x128/0x22c [ 72.727940][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.729018][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.730244][ C0] ipi_handler+0x10c/0x70c [ 72.731043][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.732036][ C0] handle_domain_irq+0x148/0x200 [ 72.732922][ C0] gic_handle_irq+0x78/0x1b8 [ 72.733723][ C0] call_on_irq_stack+0x30/0x48 [ 72.734601][ C0] do_interrupt_handler+0x6c/0x88 [ 72.735481][ C0] el1_interrupt+0x30/0x58 [ 72.736246][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.737103][ C0] el1h_64_irq+0x78/0x7c [ 72.737853][ C0] __percpu_read_32+0x14/0x58 [ 72.738688][ C0] lock_is_held_type+0x48/0x198 [ 72.739567][ C0] rcu_read_lock_held+0x34/0x50 [ 72.740442][ C0] xas_next_entry+0x1d0/0x390 [ 72.741258][ C0] filemap_map_pages+0x954/0xc44 [ 72.742137][ C0] handle_mm_fault+0x18b0/0x2aac [ 72.743015][ C0] do_page_fault+0x690/0xad0 [ 72.743968][ C0] do_translation_fault+0xe0/0x130 [ 72.745043][ C0] do_mem_abort+0x6c/0x1b0 [ 72.745937][ C0] el0_da+0x90/0x1ec [ 72.746715][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 72.747683][ C0] el0t_64_sync+0x1a0/0x1a4 [ 72.748574][ C0] irq event stamp: 308 [ 72.749298][ C0] hardirqs last enabled at (307): [] lock_page_memcg+0x110/0x22c [ 72.750920][ C0] hardirqs last disabled at (308): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.752635][ C0] softirqs last enabled at (60): [] local_bh_enable+0x10/0x34 [ 72.754279][ C0] softirqs last disabled at (58): [] local_bh_disable+0x10/0x34 [ 72.755896][ C0] ---[ end trace c845eca8195b1efc ]--- [ 72.782903][ T960] device hsr_slave_1 left promiscuous mode [ 72.863324][ T4804] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.864616][ T4804] Bad inode number on dev loop0: 2 is out of range [ 72.865776][ T4804] SysV FS: get root inode failed [ 72.866642][ T4804] oldfs: cannot read superblock [ 72.877839][ T4705] ------------[ cut here ]------------ [ 72.878793][ T4705] VFS: brelse: Trying to free free buffer [ 72.879901][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.881510][ T4705] Modules linked in: [ 72.882261][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 72.883877][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.885846][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.887293][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 72.888262][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 72.889241][ T4705] sp : ffff80001e9377d0 [ 72.889983][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065d [ 72.891394][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000002 [ 72.892809][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e24c24e8 [ 72.894189][ T4705] x20: ffff0001a0e832e8 x19: ffff80001157afa0 x18: 0000000000000003 [ 72.895587][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.897048][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 72.898501][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 72.899948][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.901388][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.902795][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 72.904127][ T4705] Call trace: [ 72.904676][ T4705] invalidate_bh_lru+0x128/0x22c [ 72.905587][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 72.906649][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 72.907680][ T4705] invalidate_bh_lrus+0x34/0x40 [ 72.908578][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 72.909541][ T4705] blkdev_put+0x444/0x6c4 [ 72.910339][ T4705] blkdev_close+0x74/0xb0 [ 72.911166][ T4705] __fput+0x1b8/0x7e8 [ 72.911916][ T4705] ____fput+0x20/0x30 [ 72.912634][ T4705] task_work_run+0x13c/0x1e8 [ 72.913518][ T4705] do_notify_resume+0x2488/0x30a8 [ 72.914398][ T4705] el0_svc+0xf0/0x1d0 [ 72.915102][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 72.916000][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 72.916805][ T4705] irq event stamp: 198692 [ 72.917607][ T4705] hardirqs last enabled at (198691): [] kasan_quarantine_put+0xc4/0x200 [ 72.919391][ T4705] hardirqs last disabled at (198692): [] smp_call_function_many_cond+0xa50/0xec0 [ 72.921300][ T4705] softirqs last enabled at (198492): [] local_bh_enable+0x10/0x34 [ 72.922921][ T4705] softirqs last disabled at (198490): [] local_bh_disable+0x10/0x34 [ 72.924572][ T4705] ---[ end trace c845eca8195b1efd ]--- [ 72.926262][ T960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.927408][ T960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.928821][ T960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.930148][ T960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.931517][ T960] device bridge_slave_1 left promiscuous mode [ 72.932548][ T960] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.972497][ T4806] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.973760][ T4806] Bad inode number on dev loop0: 2 is out of range [ 72.974861][ T4806] SysV FS: get root inode failed [ 72.975664][ T4806] oldfs: cannot read superblock [ 72.984450][ T960] device bridge_slave_0 left promiscuous mode [ 72.985543][ T960] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.986847][ C1] ------------[ cut here ]------------ [ 72.986853][ C1] VFS: brelse: Trying to free free buffer [ 72.986892][ C1] WARNING: CPU: 1 PID: 960 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.986905][ C1] Modules linked in: [ 72.986910][ C1] CPU: 1 PID: 960 Comm: kworker/u4:5 Tainted: G W syzkaller #0 [ 72.986915][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.986920][ C1] Workqueue: netns cleanup_net [ 72.986928][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.986935][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.986940][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.986944][ C1] sp : ffff800008017df0 [ 72.986947][ C1] x29: ffff800008017df0 x28: ffff0000c8a951c0 x27: 1fffe000341d065b [ 72.986957][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 72.986966][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e252e7a0 [ 72.986974][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010203 [ 72.986982][ C1] x17: 0000000000010203 x16: ffff8000113710a0 x15: 0000000000000063 [ 72.986990][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 72.986997][ C1] x11: ff80800008300a7c x10: 0000000000010203 x9 : ffe94251ce7c2e00 [ 72.987005][ C1] x8 : ffe94251ce7c2e00 x7 : ffff8000082fcf8c x6 : 0000000000000000 [ 72.987013][ C1] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff800008510b80 [ 72.987020][ C1] x2 : 0000000000000001 x1 : 0000000100010203 x0 : 0000000000000027 [ 72.987028][ C1] Call trace: [ 72.987030][ C1] invalidate_bh_lru+0x128/0x22c [ 72.987035][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.987041][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.987046][ C1] ipi_handler+0x10c/0x70c [ 72.987051][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.987057][ C1] handle_domain_irq+0x148/0x200 [ 72.987061][ C1] gic_handle_irq+0x78/0x1b8 [ 72.987065][ C1] call_on_irq_stack+0x30/0x48 [ 72.987070][ C1] do_interrupt_handler+0x6c/0x88 [ 72.987074][ C1] el1_interrupt+0x30/0x58 [ 72.987079][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.987083][ C1] el1h_64_irq+0x78/0x7c [ 72.987087][ C1] console_unlock+0xb44/0x1200 [ 72.987092][ C1] vprintk_emit+0x150/0x22c [ 72.987097][ C1] vprintk_default+0x54/0x80 [ 72.987102][ C1] vprintk+0x200/0x2a0 [ 72.987106][ C1] _printk+0xe0/0x130 [ 72.987110][ C1] br_set_state+0x28c/0x400 [ 72.987116][ C1] br_stp_disable_port+0x78/0x1a0 [ 72.987121][ C1] del_nbp+0x128/0x944 [ 72.987126][ C1] br_dev_delete+0x70/0x12c [ 72.987130][ C1] default_device_exit_batch+0x288/0x4c8 [ 72.987136][ C1] cleanup_net+0x650/0xab8 [ 72.987140][ C1] process_one_work+0x7a4/0x1178 [ 72.987146][ C1] worker_thread+0x8fc/0x103c [ 72.987150][ C1] kthread+0x37c/0x460 [ 72.987154][ C1] ret_from_fork+0x10/0x20 [ 72.987159][ C1] irq event stamp: 1355895 [ 72.987161][ C1] hardirqs last enabled at (1355894): [] console_unlock+0xb24/0x1200 [ 72.987168][ C1] hardirqs last disabled at (1355895): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.987174][ C1] softirqs last enabled at (1355882): [] dev_set_rx_mode+0x1c0/0x268 [ 72.987180][ C1] softirqs last disabled at (1355884): [] del_nbp+0x120/0x944 [ 72.987186][ C1] ---[ end trace c845eca8195b1efe ]--- [ 73.048618][ T4808] set_capacity_and_notify: 31 callbacks suppressed [ 73.048630][ T4808] loop0: detected capacity change from 0 to 128 [ 73.052143][ T4808] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.054758][ T4808] Bad inode number on dev loop0: 2 is out of range [ 73.055954][ T4808] SysV FS: get root inode failed [ 73.056741][ T4808] oldfs: cannot read superblock [ 73.065488][ T4705] ------------[ cut here ]------------ [ 73.066431][ T4705] VFS: brelse: Trying to free free buffer [ 73.067339][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.068688][ T4705] Modules linked in: [ 73.069316][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 73.070584][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.072170][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.073532][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 73.074510][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 73.075494][ T4705] sp : ffff80001e9377d0 [ 73.076272][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 73.077714][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 73.079176][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e252eb40 [ 73.080633][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 73.081993][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.083348][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 73.084719][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 73.086089][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.087448][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.088804][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.090284][ T4705] Call trace: [ 73.090893][ T4705] invalidate_bh_lru+0x128/0x22c [ 73.091747][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 73.092767][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.093674][ T4705] invalidate_bh_lrus+0x34/0x40 [ 73.094509][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 73.095446][ T4705] blkdev_put+0x444/0x6c4 [ 73.096215][ T4705] blkdev_close+0x74/0xb0 [ 73.096980][ T4705] __fput+0x1b8/0x7e8 [ 73.097681][ T4705] ____fput+0x20/0x30 [ 73.098409][ T4705] task_work_run+0x13c/0x1e8 [ 73.099217][ T4705] do_notify_resume+0x2488/0x30a8 [ 73.100122][ T4705] el0_svc+0xf0/0x1d0 [ 73.100853][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 73.101752][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 73.102557][ T4705] irq event stamp: 208410 [ 73.103342][ T4705] hardirqs last enabled at (208409): [] kasan_quarantine_put+0xc4/0x200 [ 73.105199][ T4705] hardirqs last disabled at (208410): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.107128][ T4705] softirqs last enabled at (208202): [] local_bh_enable+0x10/0x34 [ 73.108750][ T4705] softirqs last disabled at (208200): [] local_bh_disable+0x10/0x34 [ 73.110433][ T4705] ---[ end trace c845eca8195b1eff ]--- 1970/01/01 00:01:13 executed programs: 49 [ 73.148631][ T4811] loop0: detected capacity change from 0 to 128 [ 73.150663][ T4811] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.151870][ T4811] Bad inode number on dev loop0: 2 is out of range [ 73.153322][ T4811] SysV FS: get root inode failed [ 73.154248][ T4811] oldfs: cannot read superblock [ 73.165045][ C1] ------------[ cut here ]------------ [ 73.165974][ C1] VFS: brelse: Trying to free free buffer [ 73.166945][ C1] WARNING: CPU: 1 PID: 4813 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.168308][ C1] Modules linked in: [ 73.168900][ C1] CPU: 1 PID: 4813 Comm: syz.0.64 Tainted: G W syzkaller #0 [ 73.170316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.172049][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.173488][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.174483][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.175433][ C1] sp : ffff800008017df0 [ 73.176156][ C1] x29: ffff800008017df0 x28: ffff0000cc631b40 x27: 1fffe000341d065c [ 73.177597][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 73.179018][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e252eee0 [ 73.180405][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 73.181766][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.183169][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 73.184545][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : dd267dc247d1ce00 [ 73.185949][ C1] x8 : dd267dc247d1ce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.187357][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.188780][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 73.190178][ C1] Call trace: [ 73.190724][ C1] invalidate_bh_lru+0x128/0x22c [ 73.191581][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.192627][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.193899][ C1] ipi_handler+0x10c/0x70c [ 73.194693][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.195660][ C1] handle_domain_irq+0x148/0x200 [ 73.196540][ C1] gic_handle_irq+0x78/0x1b8 [ 73.197370][ C1] call_on_irq_stack+0x30/0x48 [ 73.198233][ C1] do_interrupt_handler+0x6c/0x88 [ 73.199135][ C1] el1_interrupt+0x30/0x58 [ 73.199890][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.200739][ C1] el1h_64_irq+0x78/0x7c [ 73.201481][ C1] lock_page_memcg+0x120/0x22c [ 73.202330][ C1] page_remove_rmap+0x3c/0xfb4 [ 73.203160][ C1] unmap_page_range+0xa60/0x180c [ 73.204019][ C1] unmap_single_vma+0x13c/0x1e4 [ 73.204879][ C1] unmap_vmas+0x110/0x218 [ 73.205658][ C1] exit_mmap+0x2c4/0x510 [ 73.206375][ C1] __mmput+0xe8/0x3a0 [ 73.207054][ C1] mmput+0x80/0xc0 [ 73.207704][ C1] exit_mm+0x5dc/0x704 [ 73.208385][ C1] do_exit+0x4bc/0x1f54 [ 73.209106][ C1] do_group_exit+0x104/0x274 [ 73.209866][ C1] get_signal+0x638/0x13b0 [ 73.210628][ C1] do_notify_resume+0x344/0x30a8 [ 73.211502][ C1] el0_svc+0xf0/0x1d0 [ 73.212212][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 73.213074][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.213850][ C1] irq event stamp: 1116 [ 73.214545][ C1] hardirqs last enabled at (1115): [] lock_page_memcg+0x110/0x22c [ 73.216204][ C1] hardirqs last disabled at (1116): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.217927][ C1] softirqs last enabled at (310): [] local_bh_enable+0x10/0x34 [ 73.219555][ C1] softirqs last disabled at (308): [] local_bh_disable+0x10/0x34 [ 73.221203][ C1] ---[ end trace c845eca8195b1f00 ]--- [ 73.232588][ T960] device veth1_macvtap left promiscuous mode [ 73.233596][ T960] device veth0_macvtap left promiscuous mode [ 73.234582][ T960] device veth1_vlan left promiscuous mode [ 73.235547][ T960] device veth0_vlan left promiscuous mode [ 73.262958][ T4815] loop0: detected capacity change from 0 to 128 [ 73.303485][ T4815] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.306893][ T4815] Bad inode number on dev loop0: 2 is out of range [ 73.307971][ T4815] SysV FS: get root inode failed [ 73.311773][ T4815] oldfs: cannot read superblock [ 73.317493][ T4705] ------------[ cut here ]------------ [ 73.318421][ T4705] VFS: brelse: Trying to free free buffer [ 73.319381][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.320805][ T4705] Modules linked in: [ 73.321391][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 73.322801][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.324535][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.325881][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 73.326812][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 73.327749][ T4705] sp : ffff80001e9377d0 [ 73.328458][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 73.329872][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 73.331296][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e252f230 [ 73.332724][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 73.334159][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.335618][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 73.337086][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 73.338527][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.340046][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.341523][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.342990][ T4705] Call trace: [ 73.343617][ T4705] invalidate_bh_lru+0x128/0x22c [ 73.344587][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 73.345669][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.346593][ T4705] invalidate_bh_lrus+0x34/0x40 [ 73.347491][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 73.348433][ T4705] blkdev_put+0x444/0x6c4 [ 73.349218][ T4705] blkdev_close+0x74/0xb0 [ 73.349950][ T4705] __fput+0x1b8/0x7e8 [ 73.350627][ T4705] ____fput+0x20/0x30 [ 73.351311][ T4705] task_work_run+0x13c/0x1e8 [ 73.352111][ T4705] do_notify_resume+0x2488/0x30a8 [ 73.352989][ T4705] el0_svc+0xf0/0x1d0 [ 73.353671][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 73.354594][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 73.355372][ T4705] irq event stamp: 217294 [ 73.356079][ T4705] hardirqs last enabled at (217293): [] kasan_quarantine_put+0xc4/0x200 [ 73.357823][ T4705] hardirqs last disabled at (217294): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.359664][ T4705] softirqs last enabled at (216742): [] local_bh_enable+0x10/0x34 [ 73.361271][ T4705] softirqs last disabled at (216740): [] local_bh_disable+0x10/0x34 [ 73.362886][ T4705] ---[ end trace c845eca8195b1f01 ]--- [ 73.385822][ T960] team0 (unregistering): Port device team_slave_1 removed [ 73.390461][ T960] team0 (unregistering): Port device team_slave_0 removed [ 73.396106][ T960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.409426][ T4817] loop0: detected capacity change from 0 to 128 [ 73.434426][ T4817] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.435651][ T4817] Bad inode number on dev loop0: 2 is out of range [ 73.436912][ T4817] SysV FS: get root inode failed [ 73.437904][ T4817] oldfs: cannot read superblock [ 73.439741][ T960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.457389][ C1] ------------[ cut here ]------------ [ 73.458384][ C1] VFS: brelse: Trying to free free buffer [ 73.459431][ C1] WARNING: CPU: 1 PID: 4820 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.460818][ C1] Modules linked in: [ 73.461400][ C1] CPU: 1 PID: 4820 Comm: syz.0.68 Tainted: G W syzkaller #0 [ 73.462729][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.464833][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.466449][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.467560][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.468652][ C1] sp : ffff800008017df0 [ 73.469472][ C1] x29: ffff800008017df0 x28: ffff0000cd228000 x27: 1fffe000341d065c [ 73.471125][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 73.472689][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e252f5d0 [ 73.474090][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 73.475551][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.476979][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 73.478473][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 7b97604b16cb9b00 [ 73.479962][ C1] x8 : 7b97604b16cb9b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.481415][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.482892][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 73.484313][ C1] Call trace: [ 73.484923][ C1] invalidate_bh_lru+0x128/0x22c [ 73.485811][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.486888][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.488113][ C1] ipi_handler+0x10c/0x70c [ 73.488875][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.489805][ C1] handle_domain_irq+0x148/0x200 [ 73.490667][ C1] gic_handle_irq+0x78/0x1b8 [ 73.491446][ C1] call_on_irq_stack+0x30/0x48 [ 73.492230][ C1] do_interrupt_handler+0x6c/0x88 [ 73.493103][ C1] el1_interrupt+0x30/0x58 [ 73.493851][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.494676][ C1] el1h_64_irq+0x78/0x7c [ 73.495398][ C1] preempt_count+0x4/0x68 [ 73.496144][ C1] debug_smp_processor_id+0x20/0x2c [ 73.497084][ C1] rcu_lockdep_current_cpu_online+0x7c/0x1e4 [ 73.498081][ C1] rcu_read_lock_held+0x20/0x50 [ 73.498903][ C1] mem_cgroup_from_task+0x98/0x120 [ 73.499841][ C1] __memcg_kmem_charge_page+0x284/0x59c [ 73.500837][ C1] __alloc_pages+0x1d0/0x474 [ 73.501650][ C1] alloc_pages+0x34c/0x5c0 [ 73.502458][ C1] get_zeroed_page+0x20/0x8c [ 73.503268][ C1] __pud_alloc+0x48/0x1c4 [ 73.503980][ C1] handle_mm_fault+0x1c80/0x2aac [ 73.504813][ C1] do_page_fault+0x690/0xad0 [ 73.505588][ C1] do_translation_fault+0xe0/0x130 [ 73.506488][ C1] do_mem_abort+0x6c/0x1b0 [ 73.507245][ C1] el0_da+0x90/0x1ec [ 73.507892][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 73.508758][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.509533][ C1] irq event stamp: 1350 [ 73.510208][ C1] hardirqs last enabled at (1349): [] seqcount_lockdep_reader_access+0x14c/0x22c [ 73.512023][ C1] hardirqs last disabled at (1350): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.513618][ C1] softirqs last enabled at (1330): [] local_bh_enable+0x10/0x34 [ 73.515186][ C1] softirqs last disabled at (1328): [] local_bh_disable+0x10/0x34 [ 73.516822][ C1] ---[ end trace c845eca8195b1f02 ]--- [ 73.536032][ T4821] loop0: detected capacity change from 0 to 128 [ 73.539074][ T4821] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.540367][ T4821] Bad inode number on dev loop0: 2 is out of range [ 73.542036][ T4821] SysV FS: get root inode failed [ 73.543259][ T4821] oldfs: cannot read superblock [ 73.554691][ T4705] ------------[ cut here ]------------ [ 73.555633][ T4705] VFS: brelse: Trying to free free buffer [ 73.556624][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.558150][ T4705] Modules linked in: [ 73.558855][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 73.560293][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.562000][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.563441][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 73.564440][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 73.565398][ T4705] sp : ffff80001e9377d0 [ 73.566153][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 73.567612][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 73.569031][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e252f970 [ 73.570733][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 73.572423][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.574137][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 73.575710][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 73.577305][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.578846][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.580244][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.581667][ T4705] Call trace: [ 73.582238][ T4705] invalidate_bh_lru+0x128/0x22c [ 73.583111][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 73.584134][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.585082][ T4705] invalidate_bh_lrus+0x34/0x40 [ 73.585935][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 73.587003][ T4705] blkdev_put+0x444/0x6c4 [ 73.587865][ T4705] blkdev_close+0x74/0xb0 [ 73.588765][ T4705] __fput+0x1b8/0x7e8 [ 73.589500][ T4705] ____fput+0x20/0x30 [ 73.590180][ T4705] task_work_run+0x13c/0x1e8 [ 73.590965][ T4705] do_notify_resume+0x2488/0x30a8 [ 73.591824][ T4705] el0_svc+0xf0/0x1d0 [ 73.592509][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 73.593430][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 73.594213][ T4705] irq event stamp: 228806 [ 73.594958][ T4705] hardirqs last enabled at (228805): [] kasan_quarantine_put+0xc4/0x200 [ 73.596649][ T4705] hardirqs last disabled at (228806): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.598468][ T4705] softirqs last enabled at (228612): [] local_bh_enable+0x10/0x34 [ 73.600159][ T4705] softirqs last disabled at (228610): [] local_bh_disable+0x10/0x34 [ 73.601820][ T4705] ---[ end trace c845eca8195b1f03 ]--- [ 73.626093][ T960] bond0 (unregistering): Released all slaves [ 73.627671][ T4823] loop0: detected capacity change from 0 to 128 [ 73.683450][ T4823] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.684634][ T4823] Bad inode number on dev loop0: 2 is out of range [ 73.685858][ T4823] SysV FS: get root inode failed [ 73.686824][ T4823] oldfs: cannot read superblock [ 73.696588][ C0] ------------[ cut here ]------------ [ 73.697598][ C0] VFS: brelse: Trying to free free buffer [ 73.698583][ C0] WARNING: CPU: 0 PID: 4826 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.700143][ C0] Modules linked in: [ 73.700780][ C0] CPU: 0 PID: 4826 Comm: syz.0.70 Tainted: G W syzkaller #0 [ 73.702374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.704271][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.705772][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.706775][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.707738][ C0] sp : ffff800008007df0 [ 73.708612][ C0] x29: ffff800008007df0 x28: ffff0000f0510000 x27: 1fffe000341cc45c [ 73.710208][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 73.711765][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000de8a87a0 [ 73.713350][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 73.714868][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.716349][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 73.717728][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 1c6082799ca0cd00 [ 73.719165][ C0] x8 : 1c6082799ca0cd00 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.720526][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.722103][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.723611][ C0] Call trace: [ 73.724146][ C0] invalidate_bh_lru+0x128/0x22c [ 73.725017][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.726075][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.727256][ C0] ipi_handler+0x10c/0x70c [ 73.727991][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.728955][ C0] handle_domain_irq+0x148/0x200 [ 73.729834][ C0] gic_handle_irq+0x78/0x1b8 [ 73.730596][ C0] call_on_irq_stack+0x30/0x48 [ 73.731459][ C0] do_interrupt_handler+0x6c/0x88 [ 73.732334][ C0] el1_interrupt+0x30/0x58 [ 73.733160][ C0] el1h_64_irq_handler+0x18/0x24 [ 73.734195][ C0] el1h_64_irq+0x78/0x7c [ 73.735033][ C0] generic_write_checks+0x0/0x3c4 [ 73.735915][ C0] vfs_write+0x590/0xa64 [ 73.736685][ C0] ksys_write+0x12c/0x228 [ 73.737470][ C0] __arm64_sys_write+0x7c/0x90 [ 73.738348][ C0] invoke_syscall+0x98/0x28c [ 73.739300][ C0] el0_svc_common+0x13c/0x258 [ 73.740226][ C0] do_el0_svc+0x5c/0x140 [ 73.741050][ C0] el0_svc+0x78/0x1d0 [ 73.741819][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 73.742712][ C0] el0t_64_sync+0x1a0/0x1a4 [ 73.743513][ C0] irq event stamp: 346 [ 73.744212][ C0] hardirqs last enabled at (345): [] el0_svc_common+0xa0/0x258 [ 73.745838][ C0] hardirqs last disabled at (346): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.747591][ C0] softirqs last enabled at (54): [] local_bh_enable+0x10/0x34 [ 73.749232][ C0] softirqs last disabled at (52): [] local_bh_disable+0x10/0x34 [ 73.751140][ C0] ---[ end trace c845eca8195b1f04 ]--- [ 73.794785][ T4826] loop0: detected capacity change from 0 to 128 [ 73.797323][ T4826] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.798806][ T4826] Bad inode number on dev loop0: 2 is out of range [ 73.799990][ T4826] SysV FS: get root inode failed [ 73.800818][ T4826] oldfs: cannot read superblock [ 73.813606][ T4705] ------------[ cut here ]------------ [ 73.814551][ T4705] VFS: brelse: Trying to free free buffer [ 73.815562][ T4705] WARNING: CPU: 0 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.817069][ T4705] Modules linked in: [ 73.817740][ T4705] CPU: 0 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 73.819139][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.820784][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.822084][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 73.823018][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 73.823981][ T4705] sp : ffff80001e9377d0 [ 73.824731][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 73.826460][ T4705] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 73.828062][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000de8a8b40 [ 73.829587][ T4705] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 73.831141][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.832664][ T4705] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 73.834371][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 73.836073][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.837745][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.839470][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.841191][ T4705] Call trace: [ 73.841904][ T4705] invalidate_bh_lru+0x128/0x22c [ 73.842917][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 73.844019][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.844952][ T4705] invalidate_bh_lrus+0x34/0x40 [ 73.845816][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 73.846756][ T4705] blkdev_put+0x444/0x6c4 [ 73.847534][ T4705] blkdev_close+0x74/0xb0 [ 73.848349][ T4705] __fput+0x1b8/0x7e8 [ 73.849086][ T4705] ____fput+0x20/0x30 [ 73.849800][ T4705] task_work_run+0x13c/0x1e8 [ 73.850653][ T4705] do_notify_resume+0x2488/0x30a8 [ 73.851589][ T4705] el0_svc+0xf0/0x1d0 [ 73.852300][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 73.853189][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 73.853952][ T4705] irq event stamp: 235968 [ 73.854716][ T4705] hardirqs last enabled at (235967): [] kasan_quarantine_put+0xc4/0x200 [ 73.856496][ T4705] hardirqs last disabled at (235968): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.858413][ T4705] softirqs last enabled at (235884): [] local_bh_enable+0x10/0x34 [ 73.860164][ T4705] softirqs last disabled at (235882): [] local_bh_disable+0x10/0x34 [ 73.861827][ T4705] ---[ end trace c845eca8195b1f05 ]--- [ 73.902664][ T4830] loop0: detected capacity change from 0 to 128 [ 73.904670][ T4830] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.905991][ T4830] Bad inode number on dev loop0: 2 is out of range [ 73.907064][ T4830] SysV FS: get root inode failed [ 73.908007][ T4830] oldfs: cannot read superblock [ 73.915458][ T4705] ------------[ cut here ]------------ [ 73.916417][ T4705] VFS: brelse: Trying to free free buffer [ 73.917503][ T4705] WARNING: CPU: 0 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.918964][ T4705] Modules linked in: [ 73.919701][ T4705] CPU: 0 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 73.921284][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.923124][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.924657][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 73.925695][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 73.926793][ T4705] sp : ffff80001e9377d0 [ 73.927591][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 73.929123][ T4705] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 73.930578][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000de8a8ee0 [ 73.932014][ T4705] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 73.933484][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.934970][ T4705] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 73.936446][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 73.937910][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.939371][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.940842][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.942262][ T4705] Call trace: [ 73.942880][ T4705] invalidate_bh_lru+0x128/0x22c [ 73.943938][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 73.945167][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.946252][ T4705] invalidate_bh_lrus+0x34/0x40 [ 73.947280][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 73.948358][ T4705] blkdev_put+0x444/0x6c4 [ 73.949236][ T4705] blkdev_close+0x74/0xb0 [ 73.950128][ T4705] __fput+0x1b8/0x7e8 [ 73.950953][ T4705] ____fput+0x20/0x30 [ 73.951762][ T4705] task_work_run+0x13c/0x1e8 [ 73.952669][ T4705] do_notify_resume+0x2488/0x30a8 [ 73.953635][ T4705] el0_svc+0xf0/0x1d0 [ 73.954368][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 73.955247][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 73.956084][ T4705] irq event stamp: 242544 [ 73.956888][ T4705] hardirqs last enabled at (242543): [] kasan_quarantine_put+0xc4/0x200 [ 73.958653][ T4705] hardirqs last disabled at (242544): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.960484][ T4705] softirqs last enabled at (242338): [] local_bh_enable+0x10/0x34 [ 73.962176][ T4705] softirqs last disabled at (242336): [] local_bh_disable+0x10/0x34 [ 73.963857][ T4705] ---[ end trace c845eca8195b1f06 ]--- [ 73.994938][ T4832] loop0: detected capacity change from 0 to 128 [ 73.996984][ T4832] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.998217][ T4832] Bad inode number on dev loop0: 2 is out of range [ 73.999356][ T4832] SysV FS: get root inode failed [ 74.000258][ T4832] oldfs: cannot read superblock [ 74.004527][ T4611] ------------[ cut here ]------------ [ 74.005372][ T4611] VFS: brelse: Trying to free free buffer [ 74.006337][ T4611] WARNING: CPU: 0 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.007673][ T4611] Modules linked in: [ 74.008239][ T4611] CPU: 0 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.009644][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.011221][ T4611] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.012526][ T4611] pc : invalidate_bh_lru+0x128/0x22c [ 74.013448][ T4611] lr : invalidate_bh_lru+0x128/0x22c [ 74.014356][ T4611] sp : ffff80001bc977d0 [ 74.015122][ T4611] x29: ffff80001bc977d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 74.016534][ T4611] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 74.017929][ T4611] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd336318 [ 74.019410][ T4611] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 74.020817][ T4611] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.022227][ T4611] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 74.023670][ T4611] x11: ff80800008300a7c x10: 0000000000000000 x9 : f5c1b96e42b08100 [ 74.025102][ T4611] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.026546][ T4611] x5 : ffff80001bc970d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.027980][ T4611] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.029427][ T4611] Call trace: [ 74.030006][ T4611] invalidate_bh_lru+0x128/0x22c [ 74.030898][ T4611] smp_call_function_many_cond+0xa5c/0xec0 [ 74.031875][ T4611] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.032807][ T4611] invalidate_bh_lrus+0x34/0x40 [ 74.033711][ T4611] blkdev_flush_mapping+0x16c/0x334 [ 74.034663][ T4611] blkdev_put+0x444/0x6c4 [ 74.035459][ T4611] blkdev_close+0x74/0xb0 [ 74.036270][ T4611] __fput+0x1b8/0x7e8 [ 74.037021][ T4611] ____fput+0x20/0x30 [ 74.037753][ T4611] task_work_run+0x13c/0x1e8 [ 74.038600][ T4611] do_notify_resume+0x2488/0x30a8 [ 74.039520][ T4611] el0_svc+0xf0/0x1d0 [ 74.040227][ T4611] el0t_64_sync_handler+0xcc/0xe4 [ 74.041090][ T4611] el0t_64_sync+0x1a0/0x1a4 [ 74.041859][ T4611] irq event stamp: 268682 [ 74.042593][ T4611] hardirqs last enabled at (268681): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 74.044420][ T4611] hardirqs last disabled at (268682): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.046312][ T4611] softirqs last enabled at (268620): [] local_bh_enable+0x10/0x34 [ 74.047966][ T4611] softirqs last disabled at (268618): [] local_bh_disable+0x10/0x34 [ 74.049611][ T4611] ---[ end trace c845eca8195b1f07 ]--- [ 74.069738][ T4834] loop0: detected capacity change from 0 to 128 [ 74.104191][ T4834] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.105768][ T4834] Bad inode number on dev loop0: 2 is out of range [ 74.106885][ T4834] SysV FS: get root inode failed [ 74.107733][ T4834] oldfs: cannot read superblock [ 74.115077][ T4705] ------------[ cut here ]------------ [ 74.116015][ T4705] VFS: brelse: Trying to free free buffer [ 74.116923][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.118343][ T4705] Modules linked in: [ 74.119011][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 74.120432][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.122139][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.123550][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 74.124467][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 74.125409][ T4705] sp : ffff80001e9377d0 [ 74.126135][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 74.127575][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 74.129030][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e252fd10 [ 74.130438][ T4705] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 74.131903][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.133391][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 74.134850][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 74.136259][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.137704][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.139130][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.140581][ T4705] Call trace: [ 74.141173][ T4705] invalidate_bh_lru+0x128/0x22c [ 74.142093][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 74.143125][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.144067][ T4705] invalidate_bh_lrus+0x34/0x40 [ 74.144937][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 74.145891][ T4705] blkdev_put+0x444/0x6c4 [ 74.146675][ T4705] blkdev_close+0x74/0xb0 [ 74.147463][ T4705] __fput+0x1b8/0x7e8 [ 74.148171][ T4705] ____fput+0x20/0x30 [ 74.148852][ T4705] task_work_run+0x13c/0x1e8 [ 74.149675][ T4705] do_notify_resume+0x2488/0x30a8 [ 74.150535][ T4705] el0_svc+0xf0/0x1d0 [ 74.151231][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 74.152131][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 74.152890][ T4705] irq event stamp: 250626 [ 74.153641][ T4705] hardirqs last enabled at (250625): [] kasan_quarantine_put+0xc4/0x200 [ 74.155371][ T4705] hardirqs last disabled at (250626): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.157192][ T4705] softirqs last enabled at (250402): [] local_bh_enable+0x10/0x34 [ 74.158849][ T4705] softirqs last disabled at (250400): [] local_bh_disable+0x10/0x34 [ 74.160617][ T4705] ---[ end trace c845eca8195b1f08 ]--- [ 74.263461][ T4836] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.264841][ T4836] Bad inode number on dev loop0: 2 is out of range [ 74.266047][ T4836] SysV FS: get root inode failed [ 74.266875][ T4836] oldfs: cannot read superblock [ 74.275338][ C1] ------------[ cut here ]------------ [ 74.276245][ C1] VFS: brelse: Trying to free free buffer [ 74.277234][ C1] WARNING: CPU: 1 PID: 1967 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.278761][ C1] Modules linked in: [ 74.279496][ C1] CPU: 1 PID: 1967 Comm: kworker/1:2 Tainted: G W syzkaller #0 [ 74.281332][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.283244][ C1] Workqueue: rcu_gp process_srcu [ 74.284127][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.285462][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.286385][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.287305][ C1] sp : ffff800008017df0 [ 74.288019][ C1] x29: ffff800008017df0 x28: ffff0000cd8e3680 x27: 1fffe000341d065b [ 74.289423][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 74.290815][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea56318 [ 74.292244][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 74.293674][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.295122][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 74.296559][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 601074c8f9bfbc00 [ 74.298294][ C1] x8 : 601074c8f9bfbc00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.299991][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.301585][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 74.303201][ C1] Call trace: [ 74.303798][ C1] invalidate_bh_lru+0x128/0x22c [ 74.304834][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 74.305926][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.307192][ C1] ipi_handler+0x10c/0x70c [ 74.307983][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 74.309009][ C1] handle_domain_irq+0x148/0x200 [ 74.310064][ C1] gic_handle_irq+0x78/0x1b8 [ 74.311039][ C1] call_on_irq_stack+0x30/0x48 [ 74.311989][ C1] do_interrupt_handler+0x6c/0x88 [ 74.313033][ C1] el1_interrupt+0x30/0x58 [ 74.313917][ C1] el1h_64_irq_handler+0x18/0x24 [ 74.314843][ C1] el1h_64_irq+0x78/0x7c [ 74.315654][ C1] _raw_spin_unlock_irq+0xa0/0x128 [ 74.316652][ C1] process_srcu+0xa14/0xc08 [ 74.317565][ C1] process_one_work+0x7a4/0x1178 [ 74.318552][ C1] worker_thread+0x8fc/0x103c [ 74.319461][ C1] kthread+0x37c/0x460 [ 74.320242][ C1] ret_from_fork+0x10/0x20 [ 74.321092][ C1] irq event stamp: 22998 [ 74.321886][ C1] hardirqs last enabled at (22997): [] _raw_spin_unlock_irq+0x98/0x128 [ 74.323794][ C1] hardirqs last disabled at (22998): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.325612][ C1] softirqs last enabled at (21898): [] handle_softirqs+0xa70/0xc14 [ 74.327343][ C1] softirqs last disabled at (21887): [] __irq_exit_rcu+0x240/0x434 [ 74.329028][ C1] ---[ end trace c845eca8195b1f09 ]--- [ 74.402584][ T4838] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.403882][ T4838] Bad inode number on dev loop0: 2 is out of range [ 74.404984][ T4838] SysV FS: get root inode failed [ 74.405895][ T4838] oldfs: cannot read superblock [ 74.413939][ C0] ------------[ cut here ]------------ [ 74.414822][ C0] VFS: brelse: Trying to free free buffer [ 74.415823][ C0] WARNING: CPU: 0 PID: 4841 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.417179][ C0] Modules linked in: [ 74.417804][ C0] CPU: 0 PID: 4841 Comm: syz.0.77 Tainted: G W syzkaller #0 [ 74.419137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.420670][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.421963][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 74.422904][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 74.423838][ C0] sp : ffff800008007df0 [ 74.424570][ C0] x29: ffff800008007df0 x28: ffff0000c2288000 x27: 1fffe000341cc45c [ 74.426049][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 74.427527][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd3366b8 [ 74.428931][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 74.430407][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.431897][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 74.433360][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 0d5cc64145aa0d00 [ 74.434841][ C0] x8 : 0d5cc64145aa0d00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.436367][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.437834][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 74.439225][ C0] Call trace: [ 74.439781][ C0] invalidate_bh_lru+0x128/0x22c [ 74.440655][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 74.441674][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.442836][ C0] ipi_handler+0x10c/0x70c [ 74.443596][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 74.444512][ C0] handle_domain_irq+0x148/0x200 [ 74.445325][ C0] gic_handle_irq+0x78/0x1b8 [ 74.446131][ C0] call_on_irq_stack+0x30/0x48 [ 74.446969][ C0] do_interrupt_handler+0x6c/0x88 [ 74.447825][ C0] el1_interrupt+0x30/0x58 [ 74.448572][ C0] el1h_64_irq_handler+0x18/0x24 [ 74.449436][ C0] el1h_64_irq+0x78/0x7c [ 74.450171][ C0] rcu_is_watching+0x4/0x134 [ 74.450960][ C0] _raw_spin_unlock+0x8c/0x11c [ 74.451778][ C0] validate_mm+0x46c/0x864 [ 74.452521][ C0] mmap_region+0xcd8/0x13d4 [ 74.453298][ C0] do_mmap+0x6d0/0xe24 [ 74.454003][ C0] vm_mmap_pgoff+0x194/0x298 [ 74.454842][ C0] ksys_mmap_pgoff+0x11c/0x638 [ 74.455676][ C0] __arm64_sys_mmap+0x108/0x120 [ 74.456528][ C0] invoke_syscall+0x98/0x28c [ 74.457289][ C0] el0_svc_common+0x13c/0x258 [ 74.458127][ C0] do_el0_svc+0x5c/0x140 [ 74.458861][ C0] el0_svc+0x78/0x1d0 [ 74.459539][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 74.460404][ C0] el0t_64_sync+0x1a0/0x1a4 [ 74.461203][ C0] irq event stamp: 64 [ 74.461924][ C0] hardirqs last enabled at (63): [] el0_svc_common+0xa0/0x258 [ 74.463570][ C0] hardirqs last disabled at (64): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.465311][ C0] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 74.466989][ C0] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 74.468597][ C0] ---[ end trace c845eca8195b1f0a ]--- [ 74.553961][ T4841] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.555148][ T4841] Bad inode number on dev loop0: 2 is out of range [ 74.556178][ T4841] SysV FS: get root inode failed [ 74.557145][ T4841] oldfs: cannot read superblock [ 74.564433][ T4705] ------------[ cut here ]------------ [ 74.565429][ T4705] VFS: brelse: Trying to free free buffer [ 74.566484][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.568024][ T4705] Modules linked in: [ 74.568687][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 74.570176][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.571942][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.573367][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 74.574378][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 74.575364][ T4705] sp : ffff80001e9377d0 [ 74.576227][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 74.577920][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 74.579486][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea566b8 [ 74.581034][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 74.582499][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.584004][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 74.585467][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 74.586918][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.588408][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.589870][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.591276][ T4705] Call trace: [ 74.591861][ T4705] invalidate_bh_lru+0x128/0x22c [ 74.592742][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 74.593802][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.594738][ T4705] invalidate_bh_lrus+0x34/0x40 [ 74.595621][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 74.596707][ T4705] blkdev_put+0x444/0x6c4 [ 74.597520][ T4705] blkdev_close+0x74/0xb0 [ 74.598311][ T4705] __fput+0x1b8/0x7e8 [ 74.599027][ T4705] ____fput+0x20/0x30 [ 74.599734][ T4705] task_work_run+0x13c/0x1e8 [ 74.600547][ T4705] do_notify_resume+0x2488/0x30a8 [ 74.601466][ T4705] el0_svc+0xf0/0x1d0 [ 74.602192][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 74.603041][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 74.603785][ T4705] irq event stamp: 263180 [ 74.604521][ T4705] hardirqs last enabled at (263179): [] kasan_quarantine_put+0xc4/0x200 [ 74.606255][ T4705] hardirqs last disabled at (263180): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.608128][ T4705] softirqs last enabled at (262950): [] local_bh_enable+0x10/0x34 [ 74.609765][ T4705] softirqs last disabled at (262948): [] local_bh_disable+0x10/0x34 [ 74.611477][ T4705] ---[ end trace c845eca8195b1f0b ]--- [ 74.733500][ T4843] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.734718][ T4843] Bad inode number on dev loop0: 2 is out of range [ 74.735968][ T4843] SysV FS: get root inode failed [ 74.736755][ T4843] oldfs: cannot read superblock [ 74.737554][ T4843] ------------[ cut here ]------------ [ 74.738575][ T4843] VFS: brelse: Trying to free free buffer [ 74.739587][ T4843] WARNING: CPU: 1 PID: 4843 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.741062][ T4843] Modules linked in: [ 74.741642][ T4843] CPU: 1 PID: 4843 Comm: syz.0.78 Tainted: G W syzkaller #0 [ 74.743057][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.744828][ T4843] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.746165][ T4843] pc : invalidate_bh_lru+0x128/0x22c [ 74.747076][ T4843] lr : invalidate_bh_lru+0x128/0x22c [ 74.748012][ T4843] sp : ffff800020077710 [ 74.748764][ T4843] x29: ffff800020077710 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 74.750229][ T4843] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 74.751686][ T4843] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea56a58 [ 74.753130][ T4843] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 74.754676][ T4843] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.756230][ T4843] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 74.757737][ T4843] x11: ff80800008300a7c x10: 0000000000000000 x9 : bce7241809b4cc00 [ 74.759245][ T4843] x8 : bce7241809b4cc00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.760723][ T4843] x5 : ffff800020077018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.762160][ T4843] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.763579][ T4843] Call trace: [ 74.764142][ T4843] invalidate_bh_lru+0x128/0x22c [ 74.765021][ T4843] smp_call_function_many_cond+0xa5c/0xec0 [ 74.766044][ T4843] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.766945][ T4843] invalidate_bh_lrus+0x34/0x40 [ 74.767781][ T4843] blkdev_flush_mapping+0x16c/0x334 [ 74.768732][ T4843] blkdev_put+0x444/0x6c4 [ 74.769514][ T4843] kill_block_super+0xa0/0xe0 [ 74.770349][ T4843] deactivate_locked_super+0xc0/0x13c [ 74.771318][ T4843] mount_bdev+0x284/0x35c [ 74.772045][ T4843] sysv_mount+0x44/0x58 [ 74.772769][ T4843] legacy_get_tree+0xd8/0x174 [ 74.773584][ T4843] vfs_get_tree+0x90/0x278 [ 74.774376][ T4843] do_new_mount+0x228/0x804 [ 74.775176][ T4843] path_mount+0x57c/0xfe8 [ 74.775896][ T4843] __arm64_sys_mount+0x488/0x5f8 [ 74.776741][ T4843] invoke_syscall+0x98/0x28c [ 74.777557][ T4843] el0_svc_common+0x13c/0x258 [ 74.778407][ T4843] do_el0_svc+0x5c/0x140 [ 74.779176][ T4843] el0_svc+0x78/0x1d0 [ 74.779856][ T4843] el0t_64_sync_handler+0xcc/0xe4 [ 74.780748][ T4843] el0t_64_sync+0x1a0/0x1a4 [ 74.781517][ T4843] irq event stamp: 1090 [ 74.782224][ T4843] hardirqs last enabled at (1089): [] kasan_quarantine_put+0xc4/0x200 [ 74.783986][ T4843] hardirqs last disabled at (1090): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.785849][ T4843] softirqs last enabled at (892): [] local_bh_enable+0x10/0x34 [ 74.787507][ T4843] softirqs last disabled at (890): [] local_bh_disable+0x10/0x34 [ 74.789154][ T4843] ---[ end trace c845eca8195b1f0c ]--- [ 74.924785][ T4845] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.926327][ T4845] Bad inode number on dev loop0: 2 is out of range [ 74.927483][ T4845] SysV FS: get root inode failed [ 74.928281][ T4845] oldfs: cannot read superblock [ 74.939734][ C1] ------------[ cut here ]------------ [ 74.940737][ C1] VFS: brelse: Trying to free free buffer [ 74.941735][ C1] WARNING: CPU: 1 PID: 4846 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.943232][ C1] Modules linked in: [ 74.943978][ C1] CPU: 1 PID: 4846 Comm: syz.0.80 Tainted: G W syzkaller #0 [ 74.945545][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.947435][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.948829][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.949773][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.950705][ C1] sp : ffff800008017df0 [ 74.951430][ C1] x29: ffff800008017df0 x28: ffff0000ceca9b40 x27: 1fffe000341d065b [ 74.953080][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 74.954620][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea56df8 [ 74.956077][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 74.957520][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.958954][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 74.960349][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : c21e49ab75250700 [ 74.961732][ C1] x8 : c21e49ab75250700 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.963148][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.964599][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 74.966016][ C1] Call trace: [ 74.966565][ C1] invalidate_bh_lru+0x128/0x22c [ 74.967431][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 74.968468][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.969959][ C1] ipi_handler+0x10c/0x70c [ 74.970842][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 74.971846][ C1] handle_domain_irq+0x148/0x200 [ 74.972779][ C1] gic_handle_irq+0x78/0x1b8 [ 74.973592][ C1] call_on_irq_stack+0x30/0x48 [ 74.974423][ C1] do_interrupt_handler+0x6c/0x88 [ 74.975262][ C1] el1_interrupt+0x30/0x58 [ 74.976039][ C1] el1h_64_irq_handler+0x18/0x24 [ 74.976925][ C1] el1h_64_irq+0x78/0x7c [ 74.977676][ C1] el0_svc_common+0xac/0x258 [ 74.978500][ C1] do_el0_svc+0x5c/0x140 [ 74.979279][ C1] el0_svc+0x78/0x1d0 [ 74.979969][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 74.980802][ C1] el0t_64_sync+0x1a0/0x1a4 [ 74.981553][ C1] irq event stamp: 1342 [ 74.982253][ C1] hardirqs last enabled at (1341): [] el0_svc_common+0xa0/0x258 [ 74.983848][ C1] hardirqs last disabled at (1342): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.985589][ C1] softirqs last enabled at (1116): [] local_bh_enable+0x10/0x34 [ 74.987261][ C1] softirqs last disabled at (1114): [] local_bh_disable+0x10/0x34 [ 74.988939][ C1] ---[ end trace c845eca8195b1f0d ]--- [ 75.045016][ T4847] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.046304][ T4847] Bad inode number on dev loop0: 2 is out of range [ 75.047408][ T4847] SysV FS: get root inode failed [ 75.048277][ T4847] oldfs: cannot read superblock [ 75.060923][ T4849] ------------[ cut here ]------------ [ 75.061902][ T4849] VFS: brelse: Trying to free free buffer [ 75.062947][ T4849] WARNING: CPU: 0 PID: 4849 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.064623][ T4849] Modules linked in: [ 75.065352][ T4849] CPU: 0 PID: 4849 Comm: syz.0.81 Tainted: G W syzkaller #0 [ 75.066993][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.068848][ T4849] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.070318][ T4849] pc : invalidate_bh_lru+0x128/0x22c [ 75.071349][ T4849] lr : invalidate_bh_lru+0x128/0x22c [ 75.072405][ T4849] sp : ffff80001ff277d0 [ 75.073212][ T4849] x29: ffff80001ff277d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 75.074785][ T4849] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 75.076355][ T4849] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd336a58 [ 75.077957][ T4849] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 75.079468][ T4849] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.080944][ T4849] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 75.082374][ T4849] x11: ff80800008300a7c x10: 0000000000000000 x9 : 45c6ee0d0ccbfb00 [ 75.083784][ T4849] x8 : 45c6ee0d0ccbfb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.085167][ T4849] x5 : ffff80001ff270d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.086586][ T4849] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 75.088004][ T4849] Call trace: [ 75.088573][ T4849] invalidate_bh_lru+0x128/0x22c [ 75.089467][ T4849] smp_call_function_many_cond+0xa5c/0xec0 [ 75.090539][ T4849] on_each_cpu_cond_mask+0x5c/0xc4 [ 75.091409][ T4849] invalidate_bh_lrus+0x34/0x40 [ 75.092280][ T4849] blkdev_flush_mapping+0x16c/0x334 [ 75.093168][ T4849] blkdev_put+0x444/0x6c4 [ 75.093920][ T4849] blkdev_close+0x74/0xb0 [ 75.094687][ T4849] __fput+0x1b8/0x7e8 [ 75.095445][ T4849] ____fput+0x20/0x30 [ 75.096141][ T4849] task_work_run+0x13c/0x1e8 [ 75.096948][ T4849] do_notify_resume+0x2488/0x30a8 [ 75.097816][ T4849] el0_svc+0xf0/0x1d0 [ 75.098517][ T4849] el0t_64_sync_handler+0xcc/0xe4 [ 75.099432][ T4849] el0t_64_sync+0x1a0/0x1a4 [ 75.100263][ T4849] irq event stamp: 730 [ 75.101006][ T4849] hardirqs last enabled at (729): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 75.102851][ T4849] hardirqs last disabled at (730): [] smp_call_function_many_cond+0xa50/0xec0 [ 75.104677][ T4849] softirqs last enabled at (54): [] local_bh_enable+0x10/0x34 [ 75.106292][ T4849] softirqs last disabled at (52): [] local_bh_disable+0x10/0x34 [ 75.107988][ T4849] ---[ end trace c845eca8195b1f0e ]--- [ 75.146044][ T4851] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.147325][ T4851] Bad inode number on dev loop0: 2 is out of range [ 75.148471][ T4851] SysV FS: get root inode failed [ 75.149343][ T4851] oldfs: cannot read superblock [ 75.155558][ C1] ------------[ cut here ]------------ [ 75.156392][ C1] VFS: brelse: Trying to free free buffer [ 75.157303][ C1] WARNING: CPU: 1 PID: 4852 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.158673][ C1] Modules linked in: [ 75.159242][ C1] CPU: 1 PID: 4852 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.160615][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.162061][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.163354][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.164228][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.165119][ C1] sp : ffff800008017df0 [ 75.165817][ C1] x29: ffff800008017df0 x28: ffff0000d1591b40 x27: 1fffe000341d065b [ 75.167201][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 75.168623][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea52230 [ 75.170042][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 75.171469][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.172927][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 75.174313][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 64ffa64c84771400 [ 75.175974][ C1] x8 : 64ffa64c84771400 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.177587][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.179150][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.180632][ C1] Call trace: [ 75.181249][ C1] invalidate_bh_lru+0x128/0x22c [ 75.182123][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.183170][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.184387][ C1] ipi_handler+0x10c/0x70c [ 75.185209][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.186149][ C1] handle_domain_irq+0x148/0x200 [ 75.187003][ C1] gic_handle_irq+0x78/0x1b8 [ 75.187767][ C1] call_on_irq_stack+0x30/0x48 [ 75.188595][ C1] do_interrupt_handler+0x6c/0x88 [ 75.189484][ C1] el1_interrupt+0x30/0x58 [ 75.190267][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.191156][ C1] el1h_64_irq+0x78/0x7c [ 75.191918][ C1] __sanitizer_cov_trace_const_cmp4+0x0/0xc4 [ 75.192966][ C1] __filename_parentat+0x208/0x558 [ 75.193868][ C1] filename_create+0xd4/0x3a8 [ 75.194678][ C1] do_symlinkat+0xc8/0x5b4 [ 75.195416][ C1] __arm64_sys_symlinkat+0xa4/0xbc [ 75.196271][ C1] invoke_syscall+0x98/0x28c [ 75.197051][ C1] el0_svc_common+0x13c/0x258 [ 75.197851][ C1] do_el0_svc+0x5c/0x140 [ 75.198585][ C1] el0_svc+0x78/0x1d0 [ 75.199305][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 75.200192][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.200979][ C1] irq event stamp: 812 [ 75.201656][ C1] hardirqs last enabled at (811): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 75.203489][ C1] hardirqs last disabled at (812): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.205320][ C1] softirqs last enabled at (804): [] local_bh_enable+0x10/0x34 [ 75.207103][ C1] softirqs last disabled at (802): [] local_bh_disable+0x10/0x34 [ 75.208890][ C1] ---[ end trace c845eca8195b1f0f ]--- [ 75.236968][ T4853] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.238237][ T4853] Bad inode number on dev loop0: 2 is out of range [ 75.239359][ T4853] SysV FS: get root inode failed [ 75.240211][ T4853] oldfs: cannot read superblock [ 75.244171][ C1] ------------[ cut here ]------------ [ 75.245070][ C1] VFS: brelse: Trying to free free buffer [ 75.246016][ C1] WARNING: CPU: 1 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.247410][ C1] Modules linked in: [ 75.248012][ C1] CPU: 1 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.249440][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.250992][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.252269][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.253236][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.254191][ C1] sp : ffff800008017df0 [ 75.254946][ C1] x29: ffff800008017df0 x28: ffff0000ceca8000 x27: 1fffe000341d065c [ 75.256312][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 75.257661][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea525d0 [ 75.259066][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 75.260492][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.262012][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 75.263436][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 75.264861][ C1] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.266219][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.267609][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.269004][ C1] Call trace: [ 75.269571][ C1] invalidate_bh_lru+0x128/0x22c [ 75.270451][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.271516][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.272759][ C1] ipi_handler+0x10c/0x70c [ 75.273565][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.274522][ C1] handle_domain_irq+0x148/0x200 [ 75.275397][ C1] gic_handle_irq+0x78/0x1b8 [ 75.276255][ C1] call_on_irq_stack+0x30/0x48 [ 75.277103][ C1] do_interrupt_handler+0x6c/0x88 [ 75.278014][ C1] el1_interrupt+0x30/0x58 [ 75.278788][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.279565][ C1] el1h_64_irq+0x78/0x7c [ 75.280290][ C1] seqcount_lockdep_reader_access+0x214/0x2b8 [ 75.281438][ C1] path_init+0x6e8/0xec0 [ 75.282175][ C1] path_lookupat+0x40/0x3f0 [ 75.283016][ C1] filename_lookup+0x1c8/0x478 [ 75.283933][ C1] user_path_at_empty+0x5c/0x1a0 [ 75.284905][ C1] __arm64_sys_umount+0xf8/0x184 [ 75.285867][ C1] invoke_syscall+0x98/0x28c [ 75.286671][ C1] el0_svc_common+0x13c/0x258 [ 75.287504][ C1] do_el0_svc+0x5c/0x140 [ 75.288258][ C1] el0_svc+0x78/0x1d0 [ 75.288992][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 75.289870][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.290704][ C1] irq event stamp: 291616 [ 75.291412][ C1] hardirqs last enabled at (291615): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 75.293232][ C1] hardirqs last disabled at (291616): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.294936][ C1] softirqs last enabled at (291608): [] local_bh_enable+0x10/0x34 [ 75.296687][ C1] softirqs last disabled at (291606): [] local_bh_disable+0x10/0x34 [ 75.298364][ C1] ---[ end trace c845eca8195b1f10 ]--- [ 75.373576][ T4855] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.375115][ T4855] Bad inode number on dev loop0: 2 is out of range [ 75.376225][ T4855] SysV FS: get root inode failed [ 75.377122][ T4855] oldfs: cannot read superblock [ 75.384187][ C0] ------------[ cut here ]------------ [ 75.385090][ C0] VFS: brelse: Trying to free free buffer [ 75.386094][ C0] WARNING: CPU: 0 PID: 4856 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.387512][ C0] Modules linked in: [ 75.388175][ C0] CPU: 0 PID: 4856 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.389585][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.391175][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.392379][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.393270][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.394192][ C0] sp : ffff800008007df0 [ 75.394893][ C0] x29: ffff800008007df0 x28: ffff0000cf603680 x27: 1fffe000341cc45c [ 75.396231][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 75.397632][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd336df8 [ 75.398990][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 75.400362][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.401756][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 75.403155][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 1cb007e14383fc00 [ 75.404526][ C0] x8 : 1cb007e14383fc00 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.405912][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.407264][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.408708][ C0] Call trace: [ 75.409304][ C0] invalidate_bh_lru+0x128/0x22c [ 75.410177][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.411218][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.412486][ C0] ipi_handler+0x10c/0x70c [ 75.413292][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.414219][ C0] handle_domain_irq+0x148/0x200 [ 75.415040][ C0] gic_handle_irq+0x78/0x1b8 [ 75.415963][ C0] call_on_irq_stack+0x30/0x48 [ 75.416851][ C0] do_interrupt_handler+0x6c/0x88 [ 75.417774][ C0] el1_interrupt+0x30/0x58 [ 75.418570][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.419488][ C0] el1h_64_irq+0x78/0x7c [ 75.420276][ C0] xas_find+0x170/0x92c [ 75.421016][ C0] filemap_map_pages+0x1c8/0xc44 [ 75.421946][ C0] handle_mm_fault+0x18b0/0x2aac [ 75.422900][ C0] do_page_fault+0x690/0xad0 [ 75.423778][ C0] do_translation_fault+0xe0/0x130 [ 75.424720][ C0] do_mem_abort+0x6c/0x1b0 [ 75.425519][ C0] el0_ia+0xe0/0x2b8 [ 75.426182][ C0] el0t_64_sync_handler+0xc0/0xe4 [ 75.427067][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.427860][ C0] irq event stamp: 450 [ 75.428571][ C0] hardirqs last enabled at (449): [] count_memcg_event_mm+0x1b0/0x300 [ 75.430245][ C0] hardirqs last disabled at (450): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.431972][ C0] softirqs last enabled at (60): [] local_bh_enable+0x10/0x34 [ 75.433657][ C0] softirqs last disabled at (58): [] local_bh_disable+0x10/0x34 [ 75.435294][ C0] ---[ end trace c845eca8195b1f11 ]--- [ 75.523274][ T4857] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.524957][ T4857] Bad inode number on dev loop0: 2 is out of range [ 75.526089][ T4857] SysV FS: get root inode failed [ 75.526932][ T4857] oldfs: cannot read superblock [ 75.534949][ C1] ------------[ cut here ]------------ [ 75.535970][ C1] VFS: brelse: Trying to free free buffer [ 75.537066][ C1] WARNING: CPU: 1 PID: 4858 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.538601][ C1] Modules linked in: [ 75.539238][ C1] CPU: 1 PID: 4858 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.540730][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.542386][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.543806][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.544727][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.545663][ C1] sp : ffff800008017df0 [ 75.546382][ C1] x29: ffff800008017df0 x28: ffff0000d1580000 x27: 1fffe000341d065b [ 75.547787][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 75.549233][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea52970 [ 75.550624][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 75.552019][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.553466][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 75.554922][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : dee930ed21e01500 [ 75.556313][ C1] x8 : dee930ed21e01500 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.557758][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.559173][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 75.560626][ C1] Call trace: [ 75.561206][ C1] invalidate_bh_lru+0x128/0x22c [ 75.562041][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.563079][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.564268][ C1] ipi_handler+0x10c/0x70c [ 75.565018][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.565939][ C1] handle_domain_irq+0x148/0x200 [ 75.566782][ C1] gic_handle_irq+0x78/0x1b8 [ 75.567518][ C1] call_on_irq_stack+0x30/0x48 [ 75.568310][ C1] do_interrupt_handler+0x6c/0x88 [ 75.569177][ C1] el1_interrupt+0x30/0x58 [ 75.569927][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.570788][ C1] el1h_64_irq+0x78/0x7c [ 75.571512][ C1] unwind_frame+0xc0/0x684 [ 75.572268][ C1] walk_stackframe+0x6c/0xa8 [ 75.573035][ C1] return_address+0xd8/0x15c [ 75.573831][ C1] preempt_count_add+0x14c/0x41c [ 75.574685][ C1] _raw_spin_lock+0x24/0x10c [ 75.575518][ C1] proc_pid_instantiate+0x88/0x27c [ 75.576429][ C1] proc_pid_lookup+0x2e0/0x454 [ 75.577274][ C1] proc_root_lookup+0x30/0x68 [ 75.578088][ C1] __lookup_slow+0x25c/0x39c [ 75.578932][ C1] lookup_slow+0x60/0x84 [ 75.579689][ C1] walk_component+0x2b8/0x3b8 [ 75.580499][ C1] link_path_walk+0x5a0/0xbd4 [ 75.581306][ C1] path_openat+0x1c0/0x2808 [ 75.582127][ C1] do_filp_open+0x188/0x370 [ 75.582914][ C1] do_sys_openat2+0x134/0x3fc [ 75.583711][ C1] __arm64_sys_openat+0x11c/0x150 [ 75.584607][ C1] invoke_syscall+0x98/0x28c [ 75.585424][ C1] el0_svc_common+0x13c/0x258 [ 75.586258][ C1] do_el0_svc+0x5c/0x140 [ 75.587062][ C1] el0_svc+0x78/0x1d0 [ 75.587698][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 75.588689][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.589500][ C1] irq event stamp: 1222 [ 75.590352][ C1] hardirqs last enabled at (1221): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 75.592518][ C1] hardirqs last disabled at (1222): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.594397][ C1] softirqs last enabled at (1192): [] local_bh_enable+0x10/0x34 [ 75.596199][ C1] softirqs last disabled at (1190): [] local_bh_disable+0x10/0x34 [ 75.598162][ C1] ---[ end trace c845eca8195b1f12 ]--- [ 75.713696][ T4859] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.715108][ T4859] Bad inode number on dev loop0: 2 is out of range [ 75.716486][ T4859] SysV FS: get root inode failed [ 75.722574][ T4859] oldfs: cannot read superblock [ 75.724475][ C0] ------------[ cut here ]------------ [ 75.725473][ C0] VFS: brelse: Trying to free free buffer [ 75.726497][ C0] WARNING: CPU: 0 PID: 4859 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.728073][ C0] Modules linked in: [ 75.728765][ C0] CPU: 0 PID: 4859 Comm: syz.0.86 Tainted: G W syzkaller #0 [ 75.730249][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.732019][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.733431][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.734406][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.735411][ C0] sp : ffff800008007df0 [ 75.736163][ C0] x29: ffff800008007df0 x28: ffff0000c2280000 x27: 1fffe000341cc45c [ 75.737587][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 75.738986][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea6c230 [ 75.740488][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 75.741985][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.743443][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 75.744903][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 8fd33f3ccd956700 [ 75.746368][ C0] x8 : 8fd33f3ccd956700 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.747818][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.749271][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 75.750683][ C0] Call trace: [ 75.751252][ C0] invalidate_bh_lru+0x128/0x22c [ 75.752119][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.753181][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.754362][ C0] ipi_handler+0x10c/0x70c [ 75.755142][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.756039][ C0] handle_domain_irq+0x148/0x200 [ 75.756891][ C0] gic_handle_irq+0x78/0x1b8 [ 75.757770][ C0] call_on_irq_stack+0x30/0x48 [ 75.758652][ C0] do_interrupt_handler+0x6c/0x88 [ 75.759557][ C0] el1_interrupt+0x30/0x58 [ 75.760299][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.761139][ C0] el1h_64_irq+0x78/0x7c [ 75.761883][ C0] lock_page_memcg+0x120/0x22c [ 75.762668][ C0] page_remove_rmap+0x3c/0xfb4 [ 75.763504][ C0] unmap_page_range+0xa60/0x180c [ 75.764358][ C0] unmap_single_vma+0x13c/0x1e4 [ 75.765183][ C0] unmap_vmas+0x110/0x218 [ 75.765922][ C0] exit_mmap+0x2c4/0x510 [ 75.766636][ C0] __mmput+0xe8/0x3a0 [ 75.767331][ C0] mmput+0x80/0xc0 [ 75.767969][ C0] exit_mm+0x5dc/0x704 [ 75.768683][ C0] do_exit+0x4bc/0x1f54 [ 75.769402][ C0] do_group_exit+0x104/0x274 [ 75.770195][ C0] get_signal+0x638/0x13b0 [ 75.770958][ C0] do_notify_resume+0x344/0x30a8 [ 75.771808][ C0] el0_svc+0xf0/0x1d0 [ 75.772506][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 75.773387][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.774192][ C0] irq event stamp: 1826 [ 75.774907][ C0] hardirqs last enabled at (1825): [] lock_page_memcg+0x110/0x22c [ 75.776552][ C0] hardirqs last disabled at (1826): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.778254][ C0] softirqs last enabled at (1108): [] local_bh_enable+0x10/0x34 [ 75.779882][ C0] softirqs last disabled at (1106): [] local_bh_disable+0x10/0x34 [ 75.781526][ C0] ---[ end trace c845eca8195b1f13 ]--- [ 75.893998][ T4861] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.895333][ T4861] Bad inode number on dev loop0: 2 is out of range [ 75.896439][ T4861] SysV FS: get root inode failed [ 75.897253][ T4861] oldfs: cannot read superblock [ 75.898150][ T4861] ------------[ cut here ]------------ [ 75.899029][ T4861] VFS: brelse: Trying to free free buffer [ 75.899966][ T4861] WARNING: CPU: 1 PID: 4861 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.901350][ T4861] Modules linked in: [ 75.902025][ T4861] CPU: 1 PID: 4861 Comm: syz.0.87 Tainted: G W syzkaller #0 [ 75.903547][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.905328][ T4861] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.906707][ T4861] pc : invalidate_bh_lru+0x128/0x22c [ 75.907699][ T4861] lr : invalidate_bh_lru+0x128/0x22c [ 75.908714][ T4861] sp : ffff80001ff97710 [ 75.909459][ T4861] x29: ffff80001ff97710 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 75.910925][ T4861] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 75.912362][ T4861] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea52d10 [ 75.913876][ T4861] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 75.915412][ T4861] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.916949][ T4861] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 75.918424][ T4861] x11: ff80800008300a7c x10: 0000000000000000 x9 : 3b6f43fa34915500 [ 75.919868][ T4861] x8 : 3b6f43fa34915500 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.921277][ T4861] x5 : ffff80001ff97018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.922756][ T4861] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 75.924184][ T4861] Call trace: [ 75.924783][ T4861] invalidate_bh_lru+0x128/0x22c [ 75.925626][ T4861] smp_call_function_many_cond+0xa5c/0xec0 [ 75.926653][ T4861] on_each_cpu_cond_mask+0x5c/0xc4 [ 75.927556][ T4861] invalidate_bh_lrus+0x34/0x40 [ 75.928357][ T4861] blkdev_flush_mapping+0x16c/0x334 [ 75.929250][ T4861] blkdev_put+0x444/0x6c4 [ 75.929995][ T4861] kill_block_super+0xa0/0xe0 [ 75.930936][ T4861] deactivate_locked_super+0xc0/0x13c [ 75.931914][ T4861] mount_bdev+0x284/0x35c [ 75.932777][ T4861] sysv_mount+0x44/0x58 [ 75.933533][ T4861] legacy_get_tree+0xd8/0x174 [ 75.934407][ T4861] vfs_get_tree+0x90/0x278 [ 75.935172][ T4861] do_new_mount+0x228/0x804 [ 75.935961][ T4861] path_mount+0x57c/0xfe8 [ 75.936753][ T4861] __arm64_sys_mount+0x488/0x5f8 [ 75.937635][ T4861] invoke_syscall+0x98/0x28c [ 75.938452][ T4861] el0_svc_common+0x13c/0x258 [ 75.939310][ T4861] do_el0_svc+0x5c/0x140 [ 75.940063][ T4861] el0_svc+0x78/0x1d0 [ 75.940754][ T4861] el0t_64_sync_handler+0xcc/0xe4 [ 75.941598][ T4861] el0t_64_sync+0x1a0/0x1a4 [ 75.942379][ T4861] irq event stamp: 1036 [ 75.943072][ T4861] hardirqs last enabled at (1035): [] kasan_quarantine_put+0xc4/0x200 [ 75.944754][ T4861] hardirqs last disabled at (1036): [] smp_call_function_many_cond+0xa50/0xec0 [ 75.946490][ T4861] softirqs last enabled at (848): [] local_bh_enable+0x10/0x34 [ 75.947967][ T4861] softirqs last disabled at (846): [] local_bh_disable+0x10/0x34 [ 75.949607][ T4861] ---[ end trace c845eca8195b1f14 ]--- [ 76.164699][ T4863] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.165926][ T4863] Bad inode number on dev loop0: 2 is out of range [ 76.166969][ T4863] SysV FS: get root inode failed [ 76.167802][ T4863] oldfs: cannot read superblock [ 76.175002][ C1] ------------[ cut here ]------------ [ 76.175902][ C1] VFS: brelse: Trying to free free buffer [ 76.176870][ C1] WARNING: CPU: 1 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.178289][ C1] Modules linked in: [ 76.179018][ C1] CPU: 1 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 76.180721][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.182478][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.183974][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 76.184957][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 76.185924][ C1] sp : ffff800008017df0 [ 76.186687][ C1] x29: ffff800008017df0 x28: ffff0000ceca8000 x27: 1fffe000341d065c [ 76.188186][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 76.189686][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deab9148 [ 76.191141][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 76.192734][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.194415][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 76.195987][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 76.197687][ C1] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.199198][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.200677][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 76.202225][ C1] Call trace: [ 76.202846][ C1] invalidate_bh_lru+0x128/0x22c [ 76.203794][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 76.204847][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.206133][ C1] ipi_handler+0x10c/0x70c [ 76.206895][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 76.207826][ C1] handle_domain_irq+0x148/0x200 [ 76.208783][ C1] gic_handle_irq+0x78/0x1b8 [ 76.209630][ C1] call_on_irq_stack+0x30/0x48 [ 76.210529][ C1] do_interrupt_handler+0x6c/0x88 [ 76.211456][ C1] el1_interrupt+0x30/0x58 [ 76.212222][ C1] el1h_64_irq_handler+0x18/0x24 [ 76.213071][ C1] el1h_64_irq+0x78/0x7c [ 76.213814][ C1] __local_bh_enable_ip+0x200/0x37c [ 76.214757][ C1] _raw_write_unlock_bh+0xec/0x174 [ 76.215730][ C1] __tcp_close+0x778/0x1058 [ 76.216555][ C1] tcp_close+0x38/0x150 [ 76.217292][ C1] inet_release+0x120/0x16c [ 76.218075][ C1] sock_close+0xac/0x1ec [ 76.218839][ C1] __fput+0x1b8/0x7e8 [ 76.219562][ C1] ____fput+0x20/0x30 [ 76.220255][ C1] task_work_run+0x13c/0x1e8 [ 76.221065][ C1] do_notify_resume+0x2488/0x30a8 [ 76.221898][ C1] el0_svc+0xf0/0x1d0 [ 76.222589][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 76.223501][ C1] el0t_64_sync+0x1a0/0x1a4 [ 76.224324][ C1] irq event stamp: 304450 [ 76.225154][ C1] hardirqs last enabled at (304449): [] __local_bh_enable_ip+0x1f8/0x37c [ 76.227021][ C1] hardirqs last disabled at (304450): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.228794][ C1] softirqs last enabled at (304448): [] __tcp_close+0x778/0x1058 [ 76.230483][ C1] softirqs last disabled at (304446): [] __tcp_close+0x714/0x1058 [ 76.232060][ C1] ---[ end trace c845eca8195b1f15 ]--- [ 76.357780][ T4865] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.359054][ T4865] Bad inode number on dev loop0: 2 is out of range [ 76.360099][ T4865] SysV FS: get root inode failed [ 76.361048][ T4865] oldfs: cannot read superblock [ 76.380543][ T4867] ------------[ cut here ]------------ [ 76.381429][ T4867] VFS: brelse: Trying to free free buffer [ 76.382435][ T4867] WARNING: CPU: 0 PID: 4867 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.383959][ T4867] Modules linked in: [ 76.384643][ T4867] CPU: 0 PID: 4867 Comm: syz.0.90 Tainted: G W syzkaller #0 [ 76.386172][ T4867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.387946][ T4867] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.389296][ T4867] pc : invalidate_bh_lru+0x128/0x22c [ 76.390224][ T4867] lr : invalidate_bh_lru+0x128/0x22c [ 76.391131][ T4867] sp : ffff8000201877d0 [ 76.391871][ T4867] x29: ffff8000201877d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 76.393316][ T4867] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 76.394722][ T4867] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea6c5d0 [ 76.396133][ T4867] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 76.397579][ T4867] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.398988][ T4867] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 76.400462][ T4867] x11: ff80800008300a7c x10: 0000000000000000 x9 : 1348493559eb3100 [ 76.401864][ T4867] x8 : 1348493559eb3100 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.403309][ T4867] x5 : ffff8000201870d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.404681][ T4867] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 76.406076][ T4867] Call trace: [ 76.406647][ T4867] invalidate_bh_lru+0x128/0x22c [ 76.407486][ T4867] smp_call_function_many_cond+0xa5c/0xec0 [ 76.408485][ T4867] on_each_cpu_cond_mask+0x5c/0xc4 [ 76.409384][ T4867] invalidate_bh_lrus+0x34/0x40 [ 76.410196][ T4867] blkdev_flush_mapping+0x16c/0x334 [ 76.411102][ T4867] blkdev_put+0x444/0x6c4 [ 76.411878][ T4867] blkdev_close+0x74/0xb0 [ 76.412649][ T4867] __fput+0x1b8/0x7e8 [ 76.413378][ T4867] ____fput+0x20/0x30 [ 76.414088][ T4867] task_work_run+0x13c/0x1e8 [ 76.414880][ T4867] do_notify_resume+0x2488/0x30a8 [ 76.415785][ T4867] el0_svc+0xf0/0x1d0 [ 76.416472][ T4867] el0t_64_sync_handler+0xcc/0xe4 [ 76.417372][ T4867] el0t_64_sync+0x1a0/0x1a4 [ 76.418147][ T4867] irq event stamp: 754 [ 76.418825][ T4867] hardirqs last enabled at (753): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 76.420505][ T4867] hardirqs last disabled at (754): [] smp_call_function_many_cond+0xa50/0xec0 [ 76.422402][ T4867] softirqs last enabled at (714): [] local_bh_enable+0x10/0x34 [ 76.423958][ T4867] softirqs last disabled at (712): [] local_bh_disable+0x10/0x34 [ 76.425524][ T4867] ---[ end trace c845eca8195b1f16 ]--- [ 76.507173][ T4869] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.508400][ T4869] Bad inode number on dev loop0: 2 is out of range [ 76.509401][ T4869] SysV FS: get root inode failed [ 76.510177][ T4869] oldfs: cannot read superblock [ 76.514892][ C0] ------------[ cut here ]------------ [ 76.515787][ C0] VFS: brelse: Trying to free free buffer [ 76.516790][ C0] WARNING: CPU: 0 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.518155][ C0] Modules linked in: [ 76.518773][ C0] CPU: 0 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 76.520140][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.521766][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.523051][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 76.523987][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 76.524967][ C0] sp : ffff800008007df0 [ 76.525698][ C0] x29: ffff800008007df0 x28: ffff0000ceca8000 x27: 1fffe000341cc45b [ 76.527378][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 76.529086][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea6c970 [ 76.530804][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 76.532430][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.534063][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 76.535676][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 76.537268][ C0] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.538755][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.540296][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 76.541839][ C0] Call trace: [ 76.542465][ C0] invalidate_bh_lru+0x128/0x22c [ 76.543398][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 76.544484][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.545699][ C0] ipi_handler+0x10c/0x70c [ 76.546496][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 76.547485][ C0] handle_domain_irq+0x148/0x200 [ 76.548337][ C0] gic_handle_irq+0x78/0x1b8 [ 76.549153][ C0] call_on_irq_stack+0x30/0x48 [ 76.550021][ C0] do_interrupt_handler+0x6c/0x88 [ 76.551060][ C0] el1_interrupt+0x30/0x58 [ 76.551941][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.552926][ C0] el1h_64_irq+0x78/0x7c [ 76.553757][ C0] alloc_counters+0x3e8/0x790 [ 76.554687][ C0] do_ipt_get_ctl+0xb58/0x1464 [ 76.555600][ C0] nf_getsockopt+0x254/0x274 [ 76.556461][ C0] ip_getsockopt+0x1218/0x1664 [ 76.557332][ C0] tcp_getsockopt+0x214/0x2d2c [ 76.558176][ C0] sock_common_getsockopt+0xa8/0xc4 [ 76.559131][ C0] __sys_getsockopt+0x1b8/0x250 [ 76.560017][ C0] __arm64_sys_getsockopt+0xc0/0xdc [ 76.560932][ C0] invoke_syscall+0x98/0x28c [ 76.561727][ C0] el0_svc_common+0x13c/0x258 [ 76.562682][ C0] do_el0_svc+0x5c/0x140 [ 76.563578][ C0] el0_svc+0x78/0x1d0 [ 76.564418][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 76.565473][ C0] el0t_64_sync+0x1a0/0x1a4 [ 76.566400][ C0] irq event stamp: 311270 [ 76.567260][ C0] hardirqs last enabled at (311269): [] alloc_counters+0x3c4/0x790 [ 76.569115][ C0] hardirqs last disabled at (311270): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.570823][ C0] softirqs last enabled at (311256): [] release_sock+0x1d0/0x258 [ 76.572463][ C0] softirqs last disabled at (311254): [] release_sock+0x34/0x258 [ 76.574119][ C0] ---[ end trace c845eca8195b1f17 ]--- [ 76.653364][ T4871] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.654689][ T4871] Bad inode number on dev loop0: 2 is out of range [ 76.655725][ T4871] SysV FS: get root inode failed [ 76.656534][ T4871] oldfs: cannot read superblock [ 76.665523][ C1] ------------[ cut here ]------------ [ 76.666513][ C1] VFS: brelse: Trying to free free buffer [ 76.667550][ C1] WARNING: CPU: 1 PID: 4873 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.669097][ C1] Modules linked in: [ 76.669786][ C1] CPU: 1 PID: 4873 Comm: syz.0.93 Tainted: G W syzkaller #0 [ 76.671398][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.673343][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.674962][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 76.675992][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 76.676991][ C1] sp : ffff800008017df0 [ 76.677771][ C1] x29: ffff800008017df0 x28: ffff0000c22a3680 x27: 1fffe000341d065c [ 76.679294][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 76.680875][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deab94e8 [ 76.682468][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 76.684092][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.685610][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 76.687113][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : e8e4ce879d7b5100 [ 76.688781][ C1] x8 : e8e4ce879d7b5100 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.690250][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.691756][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 76.693232][ C1] Call trace: [ 76.693827][ C1] invalidate_bh_lru+0x128/0x22c [ 76.694754][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 76.695841][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.697117][ C1] ipi_handler+0x10c/0x70c [ 76.697928][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 76.698907][ C1] handle_domain_irq+0x148/0x200 [ 76.699806][ C1] gic_handle_irq+0x78/0x1b8 [ 76.700681][ C1] call_on_irq_stack+0x30/0x48 [ 76.701602][ C1] do_interrupt_handler+0x6c/0x88 [ 76.702586][ C1] el0_interrupt+0x94/0x248 [ 76.703440][ C1] __el0_irq_handler_common+0x18/0x24 [ 76.704424][ C1] el0t_64_irq_handler+0x10/0x1c [ 76.705302][ C1] el0t_64_irq+0x1a0/0x1a4 [ 76.706086][ C1] irq event stamp: 198 [ 76.706807][ C1] hardirqs last enabled at (197): [] el0t_64_sync_handler+0xd8/0xe4 [ 76.708523][ C1] hardirqs last disabled at (198): [] __el0_irq_handler_common+0x18/0x24 [ 76.710288][ C1] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 76.711943][ C1] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 76.713588][ C1] ---[ end trace c845eca8195b1f18 ]--- [ 76.745761][ T4873] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.747206][ T4873] Bad inode number on dev loop0: 2 is out of range [ 76.748322][ T4873] SysV FS: get root inode failed [ 76.749137][ T4873] oldfs: cannot read superblock [ 76.754401][ C0] ------------[ cut here ]------------ [ 76.755383][ C0] VFS: brelse: Trying to free free buffer [ 76.756362][ C0] WARNING: CPU: 0 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.757758][ C0] Modules linked in: [ 76.758392][ C0] CPU: 0 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 76.759864][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.761486][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.762788][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 76.763742][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 76.764652][ C0] sp : ffff800008007df0 [ 76.765337][ C0] x29: ffff800008007df0 x28: ffff0000ceca8000 x27: 1fffe000341cc45c [ 76.766757][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 76.768216][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea6cd10 [ 76.769656][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010203 [ 76.771124][ C0] x17: 0000000000010203 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.772591][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 76.774044][ C0] x11: ff80800008300a7c x10: 0000000000010202 x9 : f5c1b96e42b08100 [ 76.775452][ C0] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.776796][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.778153][ C0] x2 : 0000000000000001 x1 : 0000000100010202 x0 : 0000000000000027 [ 76.779508][ C0] Call trace: [ 76.780080][ C0] invalidate_bh_lru+0x128/0x22c [ 76.780937][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 76.782007][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.783263][ C0] ipi_handler+0x10c/0x70c [ 76.784052][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 76.785031][ C0] handle_domain_irq+0x148/0x200 [ 76.785923][ C0] gic_handle_irq+0x78/0x1b8 [ 76.786718][ C0] call_on_irq_stack+0x30/0x48 [ 76.787522][ C0] do_interrupt_handler+0x6c/0x88 [ 76.788404][ C0] el1_interrupt+0x30/0x58 [ 76.789172][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.790004][ C0] el1h_64_irq+0x78/0x7c [ 76.790715][ C0] __local_bh_disable_ip+0x148/0x274 [ 76.791621][ C0] _raw_write_lock_bh+0xcc/0x1b4 [ 76.792487][ C0] __tcp_close+0x714/0x1058 [ 76.793251][ C0] tcp_close+0x38/0x150 [ 76.793995][ C0] inet_release+0x120/0x16c [ 76.794780][ C0] inet6_release+0x5c/0x78 [ 76.795537][ C0] sock_close+0xac/0x1ec [ 76.796262][ C0] __fput+0x1b8/0x7e8 [ 76.796936][ C0] ____fput+0x20/0x30 [ 76.797628][ C0] task_work_run+0x13c/0x1e8 [ 76.798467][ C0] do_notify_resume+0x2488/0x30a8 [ 76.799350][ C0] el0_svc+0xf0/0x1d0 [ 76.800059][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 76.800954][ C0] el0t_64_sync+0x1a0/0x1a4 [ 76.801762][ C0] irq event stamp: 316125 [ 76.802494][ C0] hardirqs last enabled at (316123): [] __local_bh_enable_ip+0x1f8/0x37c [ 76.804182][ C0] hardirqs last disabled at (316125): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.805808][ C0] softirqs last enabled at (316122): [] lock_sock_nested+0x14c/0x1d4 [ 76.807453][ C0] softirqs last disabled at (316124): [] __tcp_close+0x714/0x1058 [ 76.809112][ C0] ---[ end trace c845eca8195b1f19 ]--- [ 76.852268][ T4875] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.853790][ T4875] Bad inode number on dev loop0: 2 is out of range [ 76.855013][ T4875] SysV FS: get root inode failed [ 76.855821][ T4875] oldfs: cannot read superblock [ 76.869719][ C1] ------------[ cut here ]------------ [ 76.870699][ C1] VFS: brelse: Trying to free free buffer [ 76.871681][ C1] WARNING: CPU: 1 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.873139][ C1] Modules linked in: [ 76.873811][ C1] CPU: 1 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 76.875688][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.877787][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.879256][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 76.880192][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 76.881134][ C1] sp : ffff800008017df0 [ 76.881876][ C1] x29: ffff800008017df0 x28: ffff0000ceca8000 x27: 1fffe000341d065c [ 76.883536][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 76.885140][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deab9888 [ 76.886832][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 76.888508][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.890162][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 76.891713][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 76.893309][ C1] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.894954][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.896553][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 76.898037][ C1] Call trace: [ 76.898623][ C1] invalidate_bh_lru+0x128/0x22c [ 76.899540][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 76.900633][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.901902][ C1] ipi_handler+0x10c/0x70c [ 76.902725][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 76.903750][ C1] handle_domain_irq+0x148/0x200 [ 76.904817][ C1] gic_handle_irq+0x78/0x1b8 [ 76.905645][ C1] call_on_irq_stack+0x30/0x48 [ 76.906524][ C1] do_interrupt_handler+0x6c/0x88 [ 76.907446][ C1] el1_interrupt+0x30/0x58 [ 76.908254][ C1] el1h_64_irq_handler+0x18/0x24 [ 76.909177][ C1] el1h_64_irq+0x78/0x7c [ 76.909971][ C1] alloc_counters+0x3e8/0x790 [ 76.910833][ C1] do_ipt_get_ctl+0xb58/0x1464 [ 76.911813][ C1] nf_getsockopt+0x254/0x274 [ 76.912746][ C1] ip_getsockopt+0x1218/0x1664 [ 76.913675][ C1] tcp_getsockopt+0x214/0x2d2c [ 76.914533][ C1] sock_common_getsockopt+0xa8/0xc4 [ 76.915503][ C1] __sys_getsockopt+0x1b8/0x250 [ 76.916411][ C1] __arm64_sys_getsockopt+0xc0/0xdc [ 76.917407][ C1] invoke_syscall+0x98/0x28c [ 76.918279][ C1] el0_svc_common+0x13c/0x258 [ 76.919181][ C1] do_el0_svc+0x5c/0x140 [ 76.919967][ C1] el0_svc+0x78/0x1d0 [ 76.920725][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 76.921671][ C1] el0t_64_sync+0x1a0/0x1a4 [ 76.922511][ C1] irq event stamp: 320200 [ 76.923299][ C1] hardirqs last enabled at (320199): [] alloc_counters+0x3c4/0x790 [ 76.925021][ C1] hardirqs last disabled at (320200): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.926828][ C1] softirqs last enabled at (320180): [] release_sock+0x1d0/0x258 [ 76.928629][ C1] softirqs last disabled at (320178): [] release_sock+0x34/0x258 [ 76.930370][ C1] ---[ end trace c845eca8195b1f1a ]--- [ 77.074367][ T4879] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.075657][ T4879] Bad inode number on dev loop0: 2 is out of range [ 77.076765][ T4879] SysV FS: get root inode failed [ 77.077610][ T4879] oldfs: cannot read superblock [ 77.084494][ T4705] ------------[ cut here ]------------ [ 77.085413][ T4705] VFS: brelse: Trying to free free buffer [ 77.086409][ T4705] WARNING: CPU: 0 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.087860][ T4705] Modules linked in: [ 77.088495][ T4705] CPU: 0 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 77.089879][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.091553][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.092880][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 77.093845][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 77.094815][ T4705] sp : ffff80001e9377d0 [ 77.095572][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 77.097040][ T4705] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 77.098519][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deadc888 [ 77.099993][ T4705] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 77.101488][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.102973][ T4705] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 77.104425][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 77.105875][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.107233][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.108736][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 77.110308][ T4705] Call trace: [ 77.110925][ T4705] invalidate_bh_lru+0x128/0x22c [ 77.111871][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 77.112954][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 77.113942][ T4705] invalidate_bh_lrus+0x34/0x40 [ 77.114857][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 77.115832][ T4705] blkdev_put+0x444/0x6c4 [ 77.116622][ T4705] blkdev_close+0x74/0xb0 [ 77.117447][ T4705] __fput+0x1b8/0x7e8 [ 77.118123][ T4705] ____fput+0x20/0x30 [ 77.118798][ T4705] task_work_run+0x13c/0x1e8 [ 77.119629][ T4705] do_notify_resume+0x2488/0x30a8 [ 77.120549][ T4705] el0_svc+0xf0/0x1d0 [ 77.121295][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 77.122198][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 77.123001][ T4705] irq event stamp: 334152 [ 77.123730][ T4705] hardirqs last enabled at (334151): [] kasan_quarantine_put+0xc4/0x200 [ 77.125413][ T4705] hardirqs last disabled at (334152): [] smp_call_function_many_cond+0xa50/0xec0 [ 77.127236][ T4705] softirqs last enabled at (333934): [] local_bh_enable+0x10/0x34 [ 77.128825][ T4705] softirqs last disabled at (333932): [] local_bh_disable+0x10/0x34 [ 77.130733][ T4705] ---[ end trace c845eca8195b1f1b ]--- [ 77.233289][ T4881] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.234633][ T4881] Bad inode number on dev loop0: 2 is out of range [ 77.235776][ T4881] SysV FS: get root inode failed [ 77.236819][ T4881] oldfs: cannot read superblock [ 77.245150][ C0] ------------[ cut here ]------------ [ 77.246064][ C0] VFS: brelse: Trying to free free buffer [ 77.247092][ C0] WARNING: CPU: 0 PID: 4882 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.248532][ C0] Modules linked in: [ 77.249185][ C0] CPU: 0 PID: 4882 Comm: syz.0.98 Tainted: G W syzkaller #0 [ 77.250543][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.252110][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.253457][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 77.254376][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 77.255321][ C0] sp : ffff800008007df0 [ 77.256051][ C0] x29: ffff800008007df0 x28: ffff0000d03a9b40 x27: 1fffe000341cc45c [ 77.257454][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 77.258844][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deadcc28 [ 77.260285][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 77.261692][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.263109][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 77.264503][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 50ad6fa385aac700 [ 77.265897][ C0] x8 : 50ad6fa385aac700 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.267372][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.269022][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 77.270549][ C0] Call trace: [ 77.271150][ C0] invalidate_bh_lru+0x128/0x22c [ 77.272050][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 77.273131][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 77.274467][ C0] ipi_handler+0x10c/0x70c [ 77.275276][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 77.276264][ C0] handle_domain_irq+0x148/0x200 [ 77.277151][ C0] gic_handle_irq+0x78/0x1b8 [ 77.278000][ C0] call_on_irq_stack+0x30/0x48 [ 77.278782][ C0] do_interrupt_handler+0x6c/0x88 [ 77.279646][ C0] el1_interrupt+0x30/0x58 [ 77.280439][ C0] el1h_64_irq_handler+0x18/0x24 [ 77.281322][ C0] el1h_64_irq+0x78/0x7c [ 77.282092][ C0] handle_mm_fault+0xa20/0x2aac [ 77.282942][ C0] do_page_fault+0x690/0xad0 [ 77.283742][ C0] do_mem_abort+0x6c/0x1b0 [ 77.284535][ C0] el0_da+0x90/0x1ec [ 77.285231][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 77.286062][ C0] el0t_64_sync+0x1a0/0x1a4 [ 77.286839][ C0] irq event stamp: 1396 [ 77.287550][ C0] hardirqs last enabled at (1395): [] count_memcg_event_mm+0x1b0/0x300 [ 77.289298][ C0] hardirqs last disabled at (1396): [] enter_el1_irq_or_nmi+0x10/0x1c [ 77.291019][ C0] softirqs last enabled at (1142): [] local_bh_enable+0x10/0x34 [ 77.292926][ C0] softirqs last disabled at (1140): [] local_bh_disable+0x10/0x34 [ 77.294652][ C0] ---[ end trace c845eca8195b1f1c ]--- [ 77.333583][ T4883] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.334768][ T4883] Bad inode number on dev loop0: 2 is out of range [ 77.335849][ T4883] SysV FS: get root inode failed [ 77.336614][ T4883] oldfs: cannot read superblock [ 77.343079][ C1] ------------[ cut here ]------------ [ 77.344070][ C1] VFS: brelse: Trying to free free buffer [ 77.345025][ C1] WARNING: CPU: 1 PID: 0 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.346455][ C1] Modules linked in: [ 77.347091][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 77.348442][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.349988][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.351180][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 77.352026][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 77.352924][ C1] sp : ffff800008017df0 [ 77.353651][ C1] x29: ffff800008017df0 x28: ffff0000c0a68000 x27: 1fffe000341d065b [ 77.355054][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 77.356476][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deab9c28 [ 77.357905][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 77.359327][ C1] x17: 0000000000010003 x16: ffff8000082dc19c x15: 0000000000000012 [ 77.360730][ C1] x14: 0000000000000001 x13: 1ffff00001002edc x12: 0000000000000000 [ 77.362062][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 01cf57a986d05700 [ 77.363406][ C1] x8 : 01cf57a986d05700 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.364771][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff8000083083a4 [ 77.366157][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 77.367595][ C1] Call trace: [ 77.368123][ C1] invalidate_bh_lru+0x128/0x22c [ 77.368994][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 77.369998][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 77.371195][ C1] ipi_handler+0x10c/0x70c [ 77.371970][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 77.372918][ C1] handle_domain_irq+0x148/0x200 [ 77.373796][ C1] gic_handle_irq+0x78/0x1b8 [ 77.374597][ C1] call_on_irq_stack+0x30/0x48 [ 77.375439][ C1] do_interrupt_handler+0x6c/0x88 [ 77.376354][ C1] el1_interrupt+0x30/0x58 [ 77.377126][ C1] el1h_64_irq_handler+0x18/0x24 [ 77.378017][ C1] el1h_64_irq+0x78/0x7c [ 77.378750][ C1] arch_local_irq_enable+0xc/0x18 [ 77.379624][ C1] default_idle_call+0xcc/0x40c [ 77.380441][ C1] do_idle+0x304/0x574 [ 77.381120][ C1] cpu_startup_entry+0x24/0x28 [ 77.381964][ C1] secondary_start_kernel+0x234/0x284 [ 77.382909][ C1] __secondary_switched+0x94/0x98 [ 77.383768][ C1] irq event stamp: 488358 [ 77.384593][ C1] hardirqs last enabled at (488357): [] default_idle_call+0xb8/0x40c [ 77.386315][ C1] hardirqs last disabled at (488358): [] enter_el1_irq_or_nmi+0x10/0x1c [ 77.387993][ C1] softirqs last enabled at (488346): [] handle_softirqs+0xa70/0xc14 [ 77.389625][ C1] softirqs last disabled at (488309): [] __irq_exit_rcu+0x240/0x434 [ 77.391232][ C1] ---[ end trace c845eca8195b1f1d ]--- [ 77.507412][ T4885] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.508761][ T4885] Bad inode number on dev loop0: 2 is out of range [ 77.509892][ T4885] SysV FS: get root inode failed [ 77.510862][ T4885] oldfs: cannot read superblock [ 77.523503][ C0] ------------[ cut here ]------------ [ 77.524455][ C0] VFS: brelse: Trying to free free buffer [ 77.525523][ C0] WARNING: CPU: 0 PID: 4887 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.526980][ C0] Modules linked in: [ 77.527633][ C0] CPU: 0 PID: 4887 Comm: syz.0.100 Tainted: G W syzkaller #0 [ 77.529215][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.530952][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.532296][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 77.533230][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 77.534137][ C0] sp : ffff800008007df0 [ 77.534882][ C0] x29: ffff800008007df0 x28: ffff0000c856d1c0 x27: 1fffe000341cc45c [ 77.536288][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 77.537700][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd300888 [ 77.539136][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 77.540570][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.542016][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 77.543479][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 6a0c63ff3816a200 [ 77.544918][ C0] x8 : 6a0c63ff3816a200 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.546343][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.547792][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 77.549227][ C0] Call trace: [ 77.549897][ C0] invalidate_bh_lru+0x128/0x22c [ 77.550941][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 77.552102][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 77.553345][ C0] ipi_handler+0x10c/0x70c [ 77.554140][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 77.555133][ C0] handle_domain_irq+0x148/0x200 [ 77.556047][ C0] gic_handle_irq+0x78/0x1b8 [ 77.556881][ C0] call_on_irq_stack+0x30/0x48 [ 77.557796][ C0] do_interrupt_handler+0x6c/0x88 [ 77.558725][ C0] el1_interrupt+0x30/0x58 [ 77.559514][ C0] el1h_64_irq_handler+0x18/0x24 [ 77.560402][ C0] el1h_64_irq+0x78/0x7c [ 77.561142][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 77.562174][ C0] release_pages+0x1374/0x16c0 [ 77.563031][ C0] free_pages_and_swap_cache+0x9c/0xb4 [ 77.563969][ C0] tlb_flush_mmu+0xe0/0x190 [ 77.564767][ C0] unmap_page_range+0x1528/0x180c [ 77.565656][ C0] unmap_single_vma+0x13c/0x1e4 [ 77.566510][ C0] unmap_vmas+0x110/0x218 [ 77.567263][ C0] exit_mmap+0x2c4/0x510 [ 77.568007][ C0] __mmput+0xe8/0x3a0 [ 77.568717][ C0] mmput+0x80/0xc0 [ 77.569379][ C0] exit_mm+0x5dc/0x704 [ 77.570109][ C0] do_exit+0x4bc/0x1f54 [ 77.570821][ C0] do_group_exit+0x104/0x274 [ 77.571610][ C0] get_signal+0x638/0x13b0 [ 77.572399][ C0] do_notify_resume+0x344/0x30a8 [ 77.573290][ C0] el0_svc+0xf0/0x1d0 [ 77.573973][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 77.574861][ C0] el0t_64_sync+0x1a0/0x1a4 [ 77.575686][ C0] irq event stamp: 900 [ 77.576403][ C0] hardirqs last enabled at (899): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 77.578231][ C0] hardirqs last disabled at (900): [] enter_el1_irq_or_nmi+0x10/0x1c [ 77.579891][ C0] softirqs last enabled at (774): [] handle_softirqs+0xa70/0xc14 [ 77.581444][ C0] softirqs last disabled at (759): [] __irq_exit_rcu+0x240/0x434 [ 77.583159][ C0] ---[ end trace c845eca8195b1f1e ]--- [ 77.644364][ T4889] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.645642][ T4889] Bad inode number on dev loop0: 2 is out of range [ 77.647277][ T4889] SysV FS: get root inode failed [ 77.648125][ T4889] oldfs: cannot read superblock [ 77.653985][ T4705] ------------[ cut here ]------------ [ 77.654974][ T4705] VFS: brelse: Trying to free free buffer [ 77.656037][ T4705] WARNING: CPU: 0 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.657585][ T4705] Modules linked in: [ 77.658255][ T4705] CPU: 0 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 77.659584][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.661179][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.662457][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 77.663419][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 77.664388][ T4705] sp : ffff80001e9377d0 [ 77.665145][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 77.666554][ T4705] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 77.668161][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000debd2148 [ 77.669749][ T4705] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 77.671161][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.672589][ T4705] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 77.673967][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 77.675306][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.676699][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.678072][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 77.679516][ T4705] Call trace: [ 77.680159][ T4705] invalidate_bh_lru+0x128/0x22c [ 77.681011][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 77.682030][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 77.683004][ T4705] invalidate_bh_lrus+0x34/0x40 [ 77.683826][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 77.684766][ T4705] blkdev_put+0x444/0x6c4 [ 77.685516][ T4705] blkdev_close+0x74/0xb0 [ 77.686289][ T4705] __fput+0x1b8/0x7e8 [ 77.686976][ T4705] ____fput+0x20/0x30 [ 77.687678][ T4705] task_work_run+0x13c/0x1e8 [ 77.688476][ T4705] do_notify_resume+0x2488/0x30a8 [ 77.689334][ T4705] el0_svc+0xf0/0x1d0 [ 77.690006][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 77.690881][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 77.691653][ T4705] irq event stamp: 354008 [ 77.692410][ T4705] hardirqs last enabled at (354007): [] kasan_quarantine_put+0xc4/0x200 [ 77.694131][ T4705] hardirqs last disabled at (354008): [] smp_call_function_many_cond+0xa50/0xec0 [ 77.695929][ T4705] softirqs last enabled at (353808): [] local_bh_enable+0x10/0x34 [ 77.697583][ T4705] softirqs last disabled at (353806): [] local_bh_disable+0x10/0x34 [ 77.699195][ T4705] ---[ end trace c845eca8195b1f1f ]--- [ 77.774267][ T4891] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.775697][ T4891] Bad inode number on dev loop0: 2 is out of range [ 77.776859][ T4891] SysV FS: get root inode failed [ 77.777840][ T4891] oldfs: cannot read superblock [ 77.783617][ T4705] ------------[ cut here ]------------ [ 77.784556][ T4705] VFS: brelse: Trying to free free buffer [ 77.785597][ T4705] WARNING: CPU: 1 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.787060][ T4705] Modules linked in: [ 77.787723][ T4705] CPU: 1 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 77.789068][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.790768][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.792101][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 77.793053][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 77.794050][ T4705] sp : ffff80001e9377d0 [ 77.794811][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 77.796362][ T4705] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 77.797846][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deaa7060 [ 77.799263][ T4705] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 77.800696][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.802125][ T4705] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 77.803548][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 77.804992][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.806384][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.807775][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 77.809155][ T4705] Call trace: [ 77.809712][ T4705] invalidate_bh_lru+0x128/0x22c [ 77.810610][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 77.811574][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 77.812447][ T4705] invalidate_bh_lrus+0x34/0x40 [ 77.813307][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 77.814219][ T4705] blkdev_put+0x444/0x6c4 [ 77.814940][ T4705] blkdev_close+0x74/0xb0 [ 77.815658][ T4705] __fput+0x1b8/0x7e8 [ 77.816309][ T4705] ____fput+0x20/0x30 [ 77.817021][ T4705] task_work_run+0x13c/0x1e8 [ 77.817823][ T4705] do_notify_resume+0x2488/0x30a8 [ 77.818702][ T4705] el0_svc+0xf0/0x1d0 [ 77.819344][ T4705] el0t_64_sync_handler+0xcc/0xe4 [ 77.820226][ T4705] el0t_64_sync+0x1a0/0x1a4 [ 77.821007][ T4705] irq event stamp: 356866 [ 77.821749][ T4705] hardirqs last enabled at (356865): [] kasan_quarantine_put+0xc4/0x200 [ 77.823481][ T4705] hardirqs last disabled at (356866): [] smp_call_function_many_cond+0xa50/0xec0 [ 77.825253][ T4705] softirqs last enabled at (356680): [] local_bh_enable+0x10/0x34 [ 77.826854][ T4705] softirqs last disabled at (356678): [] local_bh_disable+0x10/0x34 [ 77.828485][ T4705] ---[ end trace c845eca8195b1f20 ]--- [ 77.924708][ T4893] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.926125][ T4893] Bad inode number on dev loop0: 2 is out of range [ 77.927149][ T4893] SysV FS: get root inode failed [ 77.927945][ T4893] oldfs: cannot read superblock [ 77.935462][ C1] ------------[ cut here ]------------ [ 77.936425][ C1] VFS: brelse: Trying to free free buffer [ 77.937393][ C1] WARNING: CPU: 1 PID: 4611 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.938858][ C1] Modules linked in: [ 77.939465][ C1] CPU: 1 PID: 4611 Comm: syz-executor Tainted: G W syzkaller #0 [ 77.941291][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.943264][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.944780][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 77.945772][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 77.946772][ C1] sp : ffff800008017df0 [ 77.947622][ C1] x29: ffff800008017df0 x28: ffff0000ceca8000 x27: 1fffe000341d065b [ 77.949294][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 77.950781][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deaa7400 [ 77.952198][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 77.953855][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.955255][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 77.956725][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : f5c1b96e42b08100 [ 77.958291][ C1] x8 : f5c1b96e42b08100 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.959804][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.961316][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 77.962818][ C1] Call trace: [ 77.963515][ C1] invalidate_bh_lru+0x128/0x22c [ 77.964538][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 77.965802][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 77.967189][ C1] ipi_handler+0x10c/0x70c [ 77.968105][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 77.969139][ C1] handle_domain_irq+0x148/0x200 [ 77.970038][ C1] gic_handle_irq+0x78/0x1b8 [ 77.970884][ C1] call_on_irq_stack+0x30/0x48 [ 77.971743][ C1] do_interrupt_handler+0x6c/0x88 [ 77.972654][ C1] el1_interrupt+0x30/0x58 [ 77.973414][ C1] el1h_64_irq_handler+0x18/0x24 [ 77.974276][ C1] el1h_64_irq+0x78/0x7c [ 77.975008][ C1] lock_release+0x158/0x8ec [ 77.975813][ C1] __might_fault+0xf4/0x128 [ 77.976605][ C1] strncpy_from_user+0x44/0x5f8 [ 77.977430][ C1] getname_flags+0xec/0x44c [ 77.978361][ C1] user_path_at_empty+0x40/0x1a0 [ 77.979360][ C1] vfs_statx+0xf8/0x474 [ 77.980142][ C1] __arm64_sys_newfstatat+0x128/0x1c0 [ 77.981153][ C1] invoke_syscall+0x98/0x28c [ 77.982018][ C1] el0_svc_common+0x13c/0x258 [ 77.982909][ C1] do_el0_svc+0x5c/0x140 [ 77.983697][ C1] el0_svc+0x78/0x1d0 [ 77.984441][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 77.985364][ C1] el0t_64_sync+0x1a0/0x1a4 [ 77.986195][ C1] irq event stamp: 337854 [ 77.986979][ C1] hardirqs last enabled at (337853): [] el0_svc_common+0xa0/0x258 [ 77.988659][ C1] hardirqs last disabled at (337854): [] enter_el1_irq_or_nmi+0x10/0x1c [ 77.990482][ C1] softirqs last enabled at (337840): [] local_bh_enable+0x10/0x34 [ 77.992145][ C1] softirqs last disabled at (337838): [] local_bh_disable+0x10/0x34 [ 77.994049][ C1] ---[ end trace c845eca8195b1f21 ]--- [ 78.034972][ T4895] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 78.036441][ T4895] Bad inode number on dev loop0: 2 is out of range [ 78.037838][ T4895] SysV FS: get root inode failed [ 78.038654][ T4895] oldfs: cannot read superblock [ 78.044233][ T4705] ------------[ cut here ]------------ [ 78.045200][ T4705] VFS: brelse: Trying to free free buffer [ 78.046234][ T4705] WARNING: CPU: 0 PID: 4705 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 78.047738][ T4705] Modules linked in: [ 78.048453][ T4705] CPU: 0 PID: 4705 Comm: udevd Tainted: G W syzkaller #0 [ 78.049858][ T4705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.051465][ T4705] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.052779][ T4705] pc : invalidate_bh_lru+0x128/0x22c [ 78.053708][ T4705] lr : invalidate_bh_lru+0x128/0x22c [ 78.054620][ T4705] sp : ffff80001e9377d0 [ 78.055314][ T4705] x29: ffff80001e9377d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 78.056711][ T4705] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 78.058121][ T4705] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000debd26b8 [ 78.059516][ T4705] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 78.061006][ T4705] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 78.062534][ T4705] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 78.064089][ T4705] x11: ff80800008300a7c x10: 0000000000000000 x9 : 8aa0e7815c546500 [ 78.065727][ T4705] x8 : 8aa0e7815c546500 x7 : 0000000000000001 x6 : 0000000000000001 [ 78.067287][ T4705] x5 : ffff80001e9370d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 78.068842][ T4705] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 78.070252][ T4705] Call trace: [ 78.070878][ T4705] invalidate_bh_lru+0x128/0x22c [ 78.071828][ T4705] smp_call_function_many_cond+0xa5c/0xec0 [ 78.073059][ T4705] on_each_cpu_cond_mask+0x5c/0xc4 [ 78.074067][ T4705] invalidate_bh_lrus+0x34/0x40 [ 78.075080][ T4705] blkdev_flush_mapping+0x16c/0x334 [ 78.076171][ T4705] blkdev_put+0x444/0x6c4 [ 78.077003][ T4705] blkdev_close+0x74/0xb0 [ 78.077871][ T4705] __fput+0x1b8/0x7e8