[ 45.873959][ T1856] device hsr_slave_0 left promiscuous mode [ 45.918554][ T1856] device hsr_slave_1 left promiscuous mode [ 46.018081][ T1856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.019413][ T1856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.021337][ T1856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.022607][ T1856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.024389][ T1856] device bridge_slave_1 left promiscuous mode [ 46.025745][ T1856] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.069424][ T1856] device bridge_slave_0 left promiscuous mode [ 46.070630][ T1856] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.198213][ T1856] device veth1_macvtap left promiscuous mode [ 46.199339][ T1856] device veth0_macvtap left promiscuous mode [ 46.200308][ T1856] device veth1_vlan left promiscuous mode [ 46.201391][ T1856] device veth0_vlan left promiscuous mode [ 46.301857][ T1856] team0 (unregistering): Port device team_slave_1 removed [ 46.305933][ T1856] team0 (unregistering): Port device team_slave_0 removed [ 46.310841][ T1856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.342324][ T1856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.471679][ T1856] bond0 (unregistering): Released all slaves [ 49.111401][ T1856] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.171133][ T1856] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.211144][ T1856] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.251466][ T1856] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. 1970/01/01 00:00:50 parsed 1 programs [ 50.673337][ T1856] device hsr_slave_0 left promiscuous mode [ 50.708276][ T1856] device hsr_slave_1 left promiscuous mode [ 50.808024][ T1856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.809395][ T1856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.810936][ T1856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.812236][ T1856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.813796][ T1856] device bridge_slave_1 left promiscuous mode [ 50.814940][ T1856] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.848889][ T1856] device bridge_slave_0 left promiscuous mode [ 50.850087][ T1856] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.988077][ T1856] device veth1_macvtap left promiscuous mode [ 50.989181][ T1856] device veth0_macvtap left promiscuous mode [ 50.990285][ T1856] device veth1_vlan left promiscuous mode [ 50.991317][ T1856] device veth0_vlan left promiscuous mode [ 51.085577][ T1856] team0 (unregistering): Port device team_slave_1 removed [ 51.090231][ T1856] team0 (unregistering): Port device team_slave_0 removed [ 51.093979][ T1856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.122216][ T1856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.251180][ T1856] bond0 (unregistering): Released all slaves [ 51.869656][ T4399] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 53.530001][ T4439] chnl_net:caif_netlink_parms(): no params data found [ 53.546889][ T4439] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.548311][ T4439] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.549905][ T4439] device bridge_slave_0 entered promiscuous mode [ 53.551902][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.553069][ T4439] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.554559][ T4439] device bridge_slave_1 entered promiscuous mode [ 53.563928][ T4439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.566439][ T4439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.574627][ T4439] team0: Port device team_slave_0 added [ 53.576474][ T4439] team0: Port device team_slave_1 added [ 53.582861][ T4439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.584131][ T4439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.588604][ T4439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.591063][ T4439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.592246][ T4439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.596494][ T4439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.639038][ T4439] device hsr_slave_0 entered promiscuous mode [ 53.678136][ T4439] device hsr_slave_1 entered promiscuous mode [ 54.284642][ T4439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.329155][ T4439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.369210][ T4439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.419448][ T4439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.465512][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.466915][ T4439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.468186][ T4439] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.469387][ T4439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.503779][ T4439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.517270][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.519629][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.521294][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.523898][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 54.530366][ T4439] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.545841][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.547493][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.549512][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.550737][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.552424][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.554117][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.555936][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.557126][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.560466][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.562296][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.564042][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.565783][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.567327][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.574580][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.580246][ T4439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.581964][ T4439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.586512][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.589168][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.590848][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.592621][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.594305][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.596073][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.640162][ T4439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.649130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.650650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.651835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.655053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.658859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.660452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.662162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.663696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.667113][ T4439] device veth0_vlan entered promiscuous mode [ 54.680183][ T4439] device veth1_vlan entered promiscuous mode [ 54.686433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.688100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.690087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.691615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.699565][ T4439] device veth0_macvtap entered promiscuous mode [ 54.703007][ T4439] device veth1_macvtap entered promiscuous mode [ 54.716513][ T4439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.718026][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.719628][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.721119][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.722708][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.729689][ T4439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.732008][ T4439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.733477][ T4439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.734880][ T4439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.736324][ T4439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.741814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.743547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.134062][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.135517][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.137067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.145664][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.146945][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.148773][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:55 executed programs: 0 [ 55.346895][ T4652] chnl_net:caif_netlink_parms(): no params data found [ 55.364991][ T4652] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.366275][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.367818][ T4652] device bridge_slave_0 entered promiscuous mode [ 55.369988][ T4652] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.371157][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.372815][ T4652] device bridge_slave_1 entered promiscuous mode [ 55.380424][ T4652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.382938][ T4652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.392022][ T4652] team0: Port device team_slave_0 added [ 55.393910][ T4652] team0: Port device team_slave_1 added [ 55.400255][ T4652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.401548][ T4652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.405660][ T4652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.408392][ T4652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.409548][ T4652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.413698][ T4652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.449217][ T4652] device hsr_slave_0 entered promiscuous mode [ 55.498328][ T4652] device hsr_slave_1 entered promiscuous mode [ 55.528188][ T4652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.529493][ T4652] Cannot create hsr debugfs directory [ 55.566795][ T4652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.358005][ T4175] Bluetooth: hci0: command 0x0409 tx timeout [ 57.821326][ T4652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.438035][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 60.161570][ T4652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.233053][ T4652] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.391472][ T4652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.429628][ T4652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.479521][ T4652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.519824][ T4652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.598870][ T4652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.602471][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.604057][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.606530][ T4652] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.610241][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.611821][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.613467][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.614611][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.615960][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.618732][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.620444][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.621943][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.623209][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.625791][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.641106][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.643804][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.645733][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.647328][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.650796][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.652539][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.655220][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.656797][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.660569][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.662322][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.664820][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.703100][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.704579][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.707598][ T4652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.715243][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.717022][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.723477][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.725052][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.726681][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.728665][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.737847][ T4652] device veth0_vlan entered promiscuous mode [ 60.741746][ T4652] device veth1_vlan entered promiscuous mode [ 60.749605][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.751247][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.753457][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.755036][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.757636][ T4652] device veth0_macvtap entered promiscuous mode [ 60.760442][ T4652] device veth1_macvtap entered promiscuous mode [ 60.764993][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.766782][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.770410][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.771642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.773224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.774857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.776585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.780100][ T4652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.781940][ T4652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.784145][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.785420][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.787109][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.790136][ T4652] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.791643][ T4652] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.793095][ T4652] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.794550][ T4652] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.812853][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.814237][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.815571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.822133][ T405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.823498][ T405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.824872][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:00 executed programs: 2 [ 60.842623][ T4726] loop0: detected capacity change from 0 to 128 [ 60.846200][ T4726] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 60.847406][ T4726] Bad inode number on dev loop0: 2 is out of range [ 60.849179][ T4726] SysV FS: get root inode failed [ 60.849942][ T4726] oldfs: cannot read superblock [ 60.855876][ T4720] ------------[ cut here ]------------ [ 60.856832][ T4720] VFS: brelse: Trying to free free buffer [ 60.857775][ T4720] WARNING: CPU: 0 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 60.859241][ T4720] Modules linked in: [ 60.859929][ T4720] CPU: 0 PID: 4720 Comm: udevd Not tainted syzkaller #0 [ 60.861169][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 60.862841][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 60.864199][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 60.865093][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 60.865948][ T4720] sp : ffff80001f9d77d0 [ 60.866623][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 60.868202][ T4720] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 60.869541][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dec72318 [ 60.870903][ T4720] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 60.872252][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 60.873624][ T4720] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 60.874995][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 60.876363][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 60.877725][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 60.879119][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 60.880539][ T4720] Call trace: [ 60.881074][ T4720] invalidate_bh_lru+0x128/0x22c [ 60.881923][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 60.882897][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 60.883822][ T4720] invalidate_bh_lrus+0x34/0x40 [ 60.884680][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 60.885593][ T4720] blkdev_put+0x444/0x6c4 [ 60.886340][ T4720] blkdev_close+0x74/0xb0 [ 60.887095][ T4720] __fput+0x1b8/0x7e8 [ 60.887797][ T4720] ____fput+0x20/0x30 [ 60.888477][ T4720] task_work_run+0x13c/0x1e8 [ 60.889261][ T4720] do_notify_resume+0x2488/0x30a8 [ 60.890094][ T4720] el0_svc+0xf0/0x1d0 [ 60.890743][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 60.891600][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 60.892345][ T4720] irq event stamp: 7724 [ 60.893062][ T4720] hardirqs last enabled at (7723): [] kasan_quarantine_put+0xc4/0x200 [ 60.894741][ T4720] hardirqs last disabled at (7724): [] smp_call_function_many_cond+0xa50/0xec0 [ 60.896531][ T4720] softirqs last enabled at (7486): [] local_bh_enable+0x10/0x34 [ 60.898154][ T4720] softirqs last disabled at (7484): [] local_bh_disable+0x10/0x34 [ 60.899806][ T4720] ---[ end trace 5fb5e4773a4d54b0 ]--- [ 60.952263][ T4728] loop0: detected capacity change from 0 to 128 [ 60.955079][ T4728] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 60.956381][ T4728] Bad inode number on dev loop0: 2 is out of range [ 60.957432][ T4728] SysV FS: get root inode failed [ 60.958681][ T4728] oldfs: cannot read superblock [ 60.966593][ C0] ------------[ cut here ]------------ [ 60.967599][ C0] VFS: brelse: Trying to free free buffer [ 60.968613][ C0] WARNING: CPU: 0 PID: 4730 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 60.970157][ C0] Modules linked in: [ 60.970824][ C0] CPU: 0 PID: 4730 Comm: syz.0.17 Tainted: G W syzkaller #0 [ 60.972404][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 60.974135][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 60.975482][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 60.976338][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 60.977244][ C0] sp : ffff800008007df0 [ 60.977929][ C0] x29: ffff800008007df0 x28: ffff0000cc37b680 x27: 1fffe000341cc45c [ 60.979332][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 60.980710][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dec726b8 [ 60.982138][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 60.983579][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 60.985041][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 60.986468][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 8db619431b671200 [ 60.987881][ C0] x8 : 8db619431b671200 x7 : 0000000000000001 x6 : 0000000000000001 [ 60.989288][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 60.990725][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 60.992337][ C0] Call trace: [ 60.993004][ C0] invalidate_bh_lru+0x128/0x22c [ 60.993902][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 60.994964][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 60.996354][ C0] ipi_handler+0x10c/0x70c [ 60.997203][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 60.998165][ C0] handle_domain_irq+0x148/0x200 [ 60.999061][ C0] gic_handle_irq+0x78/0x1b8 [ 60.999870][ C0] call_on_irq_stack+0x30/0x48 [ 61.000654][ C0] do_interrupt_handler+0x6c/0x88 [ 61.001507][ C0] el0_interrupt+0x94/0x248 [ 61.002264][ C0] __el0_irq_handler_common+0x18/0x24 [ 61.003172][ C0] el0t_64_irq_handler+0x10/0x1c [ 61.004021][ C0] el0t_64_irq+0x1a0/0x1a4 [ 61.004787][ C0] irq event stamp: 190 [ 61.005463][ C0] hardirqs last enabled at (189): [] el0t_64_sync_handler+0xd8/0xe4 [ 61.007174][ C0] hardirqs last disabled at (190): [] __el0_irq_handler_common+0x18/0x24 [ 61.008917][ C0] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 61.010453][ C0] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 61.012084][ C0] ---[ end trace 5fb5e4773a4d54b1 ]--- [ 61.061038][ T4730] loop0: detected capacity change from 0 to 128 [ 61.099113][ T4730] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 61.100135][ T4730] Bad inode number on dev loop0: 2 is out of range [ 61.101060][ T4730] SysV FS: get root inode failed [ 61.101787][ T4730] oldfs: cannot read superblock [ 61.112005][ T4720] ------------[ cut here ]------------ [ 61.112993][ T4720] VFS: brelse: Trying to free free buffer [ 61.113969][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 61.115469][ T4720] Modules linked in: [ 61.116070][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 61.117372][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.119019][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.120395][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 61.121349][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 61.122300][ T4720] sp : ffff80001f9d77d0 [ 61.122991][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 61.124447][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 61.125958][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deece5d0 [ 61.127435][ T4720] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 61.128824][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 61.130254][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 61.131664][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 61.133173][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 61.134625][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 61.136158][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 61.137594][ T4720] Call trace: [ 61.138203][ T4720] invalidate_bh_lru+0x128/0x22c [ 61.139177][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 61.140234][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 61.141139][ T4720] invalidate_bh_lrus+0x34/0x40 [ 61.141971][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 61.142874][ T4720] blkdev_put+0x444/0x6c4 [ 61.143636][ T4720] blkdev_close+0x74/0xb0 [ 61.144401][ T4720] __fput+0x1b8/0x7e8 [ 61.145125][ T4720] ____fput+0x20/0x30 [ 61.145811][ T4720] task_work_run+0x13c/0x1e8 [ 61.146653][ T4720] do_notify_resume+0x2488/0x30a8 [ 61.147524][ T4720] el0_svc+0xf0/0x1d0 [ 61.148247][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 61.149139][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 61.149942][ T4720] irq event stamp: 14100 [ 61.150694][ T4720] hardirqs last enabled at (14099): [] kasan_quarantine_put+0xc4/0x200 [ 61.152658][ T4720] hardirqs last disabled at (14100): [] smp_call_function_many_cond+0xa50/0xec0 [ 61.154646][ T4720] softirqs last enabled at (13890): [] local_bh_enable+0x10/0x34 [ 61.156358][ T4720] softirqs last disabled at (13888): [] local_bh_disable+0x10/0x34 [ 61.158010][ T4720] ---[ end trace 5fb5e4773a4d54b2 ]--- [ 61.191728][ T4732] loop0: detected capacity change from 0 to 128 [ 61.199580][ T4732] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 61.200895][ T4732] Bad inode number on dev loop0: 2 is out of range [ 61.201959][ T4732] SysV FS: get root inode failed [ 61.202791][ T4732] oldfs: cannot read superblock [ 61.204980][ C0] ------------[ cut here ]------------ [ 61.205854][ C0] VFS: brelse: Trying to free free buffer [ 61.206754][ C0] WARNING: CPU: 0 PID: 4732 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 61.208209][ C0] Modules linked in: [ 61.208898][ C0] CPU: 0 PID: 4732 Comm: syz.0.18 Tainted: G W syzkaller #0 [ 61.210401][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.212097][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.213382][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 61.214297][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 61.215180][ C0] sp : ffff800008007df0 [ 61.215924][ C0] x29: ffff800008007df0 x28: ffff0000c2558000 x27: 1fffe000341cc45c [ 61.217222][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 61.218515][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dec72a58 [ 61.219945][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 61.221345][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 61.222697][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 61.224070][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : f77a563673c1a100 [ 61.225396][ C0] x8 : f77a563673c1a100 x7 : 0000000000000001 x6 : 0000000000000001 [ 61.226812][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 61.228187][ C0] x2 : 0000000000000001 x1 : 0000000000010002 x0 : 0000000000000027 [ 61.229628][ C0] Call trace: [ 61.230164][ C0] invalidate_bh_lru+0x128/0x22c [ 61.231007][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 61.232005][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 61.233126][ C0] ipi_handler+0x10c/0x70c [ 61.233921][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 61.234863][ C0] handle_domain_irq+0x148/0x200 [ 61.235730][ C0] gic_handle_irq+0x78/0x1b8 [ 61.236512][ C0] call_on_irq_stack+0x30/0x48 [ 61.237338][ C0] do_interrupt_handler+0x6c/0x88 [ 61.238212][ C0] el1_interrupt+0x30/0x58 [ 61.238983][ C0] el1h_64_irq_handler+0x18/0x24 [ 61.239845][ C0] el1h_64_irq+0x78/0x7c [ 61.240572][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 61.241538][ C0] sched_move_task+0x204/0x260 [ 61.242324][ C0] sched_autogroup_exit_task+0x10/0x1c [ 61.243244][ C0] do_exit+0x668/0x1f54 [ 61.243945][ C0] do_group_exit+0x104/0x274 [ 61.244803][ C0] get_signal+0x638/0x13b0 [ 61.245562][ C0] do_notify_resume+0x344/0x30a8 [ 61.246402][ C0] el0_svc+0xf0/0x1d0 [ 61.247113][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 61.248009][ C0] el0t_64_sync+0x1a0/0x1a4 [ 61.248826][ C0] irq event stamp: 2388 [ 61.249488][ C0] hardirqs last enabled at (2387): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 61.251234][ C0] hardirqs last disabled at (2388): [] enter_el1_irq_or_nmi+0x10/0x1c [ 61.252925][ C0] softirqs last enabled at (1008): [] local_bh_enable+0x10/0x34 [ 61.254603][ C0] softirqs last disabled at (1006): [] local_bh_disable+0x10/0x34 [ 61.256355][ C0] ---[ end trace 5fb5e4773a4d54b3 ]--- [ 61.291084][ T4734] loop0: detected capacity change from 0 to 128 [ 61.293453][ T4734] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 61.294635][ T4734] Bad inode number on dev loop0: 2 is out of range [ 61.295721][ T4734] SysV FS: get root inode failed [ 61.296576][ T4734] oldfs: cannot read superblock [ 61.299462][ C1] ------------[ cut here ]------------ [ 61.300395][ C1] VFS: brelse: Trying to free free buffer [ 61.301345][ C1] WARNING: CPU: 1 PID: 4734 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 61.302753][ C1] Modules linked in: [ 61.303332][ C1] CPU: 1 PID: 4734 Comm: syz.0.19 Tainted: G W syzkaller #0 [ 61.304841][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.306591][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.307971][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 61.308849][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 61.309804][ C1] sp : ffff800008017df0 [ 61.310633][ C1] x29: ffff800008017df0 x28: ffff0000c23c0000 x27: 1fffe000341d065b [ 61.312133][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 61.313572][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deece970 [ 61.314965][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 61.316342][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 61.317771][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 61.319188][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 74f16a5354ef7a00 [ 61.320603][ C1] x8 : 74f16a5354ef7a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 61.321996][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 61.323470][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 61.324884][ C1] Call trace: [ 61.325440][ C1] invalidate_bh_lru+0x128/0x22c [ 61.326374][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 61.327393][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 61.328620][ C1] ipi_handler+0x10c/0x70c [ 61.329398][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 61.330321][ C1] handle_domain_irq+0x148/0x200 [ 61.331130][ C1] gic_handle_irq+0x78/0x1b8 [ 61.331860][ C1] call_on_irq_stack+0x30/0x48 [ 61.332667][ C1] do_interrupt_handler+0x6c/0x88 [ 61.333585][ C1] el1_interrupt+0x30/0x58 [ 61.334385][ C1] el1h_64_irq_handler+0x18/0x24 [ 61.335280][ C1] el1h_64_irq+0x78/0x7c [ 61.336046][ C1] __sanitizer_cov_trace_const_cmp8+0xb8/0xbc [ 61.337141][ C1] page_remove_rmap+0x1d0/0xfb4 [ 61.337923][ C1] unmap_page_range+0xa60/0x180c [ 61.338790][ C1] unmap_single_vma+0x13c/0x1e4 [ 61.339663][ C1] unmap_vmas+0x110/0x218 [ 61.340472][ C1] exit_mmap+0x2c4/0x510 [ 61.341231][ C1] __mmput+0xe8/0x3a0 [ 61.341960][ C1] mmput+0x80/0xc0 [ 61.342633][ C1] exit_mm+0x5dc/0x704 [ 61.343350][ C1] do_exit+0x4bc/0x1f54 [ 61.344122][ C1] do_group_exit+0x104/0x274 [ 61.344943][ C1] get_signal+0x638/0x13b0 [ 61.345758][ C1] do_notify_resume+0x344/0x30a8 [ 61.346719][ C1] el0_svc+0xf0/0x1d0 [ 61.347462][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 61.348349][ C1] el0t_64_sync+0x1a0/0x1a4 [ 61.349139][ C1] irq event stamp: 1192 [ 61.349831][ C1] hardirqs last enabled at (1191): [] lock_page_memcg+0x110/0x22c [ 61.351559][ C1] hardirqs last disabled at (1192): [] enter_el1_irq_or_nmi+0x10/0x1c [ 61.353305][ C1] softirqs last enabled at (1142): [] handle_softirqs+0xa70/0xc14 [ 61.354991][ C1] softirqs last disabled at (1107): [] __irq_exit_rcu+0x240/0x434 [ 61.356755][ C1] ---[ end trace 5fb5e4773a4d54b4 ]--- [ 61.413631][ T4736] loop0: detected capacity change from 0 to 128 [ 61.440638][ T4736] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 61.442050][ T4736] Bad inode number on dev loop0: 2 is out of range [ 61.443214][ T4736] SysV FS: get root inode failed [ 61.444060][ T4736] oldfs: cannot read superblock [ 61.457578][ T4720] ------------[ cut here ]------------ [ 61.458745][ T4720] VFS: brelse: Trying to free free buffer [ 61.459810][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 61.461413][ T4720] Modules linked in: [ 61.462130][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 61.463613][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.465441][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.466799][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 61.467706][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 61.468620][ T4720] sp : ffff80001f9d77d0 [ 61.469368][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 61.470802][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 61.472245][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeced10 [ 61.473730][ T4720] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 61.475224][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 61.476608][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 61.478039][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 61.479490][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 61.480811][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 61.482244][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 61.483702][ T4720] Call trace: [ 61.484309][ T4720] invalidate_bh_lru+0x128/0x22c [ 61.485177][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 61.486228][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 61.487155][ T4720] invalidate_bh_lrus+0x34/0x40 [ 61.488027][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 61.488986][ T4720] blkdev_put+0x444/0x6c4 [ 61.489898][ T4720] blkdev_close+0x74/0xb0 [ 61.490798][ T4720] __fput+0x1b8/0x7e8 [ 61.491591][ T4720] ____fput+0x20/0x30 [ 61.492341][ T4720] task_work_run+0x13c/0x1e8 [ 61.493179][ T4720] do_notify_resume+0x2488/0x30a8 [ 61.494098][ T4720] el0_svc+0xf0/0x1d0 [ 61.494859][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 61.495778][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 61.496725][ T4720] irq event stamp: 42290 [ 61.497541][ T4720] hardirqs last enabled at (42289): [] kasan_quarantine_put+0xc4/0x200 [ 61.499389][ T4720] hardirqs last disabled at (42290): [] smp_call_function_many_cond+0xa50/0xec0 [ 61.501291][ T4720] softirqs last enabled at (42082): [] local_bh_enable+0x10/0x34 [ 61.502997][ T4720] softirqs last disabled at (42080): [] local_bh_disable+0x10/0x34 [ 61.504695][ T4720] ---[ end trace 5fb5e4773a4d54b5 ]--- [ 61.518304][ T4077] Bluetooth: hci0: command 0x040f tx timeout [ 61.541698][ T4738] loop0: detected capacity change from 0 to 128 [ 61.543935][ T4738] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 61.545142][ T4738] Bad inode number on dev loop0: 2 is out of range [ 61.546180][ T4738] SysV FS: get root inode failed [ 61.546944][ T4738] oldfs: cannot read superblock [ 61.555297][ C0] ------------[ cut here ]------------ [ 61.556202][ C0] VFS: brelse: Trying to free free buffer [ 61.557117][ C0] WARNING: CPU: 0 PID: 4739 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 61.558525][ C0] Modules linked in: [ 61.559215][ C0] CPU: 0 PID: 4739 Comm: syz.0.22 Tainted: G W syzkaller #0 [ 61.560850][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.562672][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.564020][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 61.564897][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 61.565965][ C0] sp : ffff800008007df0 [ 61.566611][ C0] x29: ffff800008007df0 x28: ffff0000ce3b9b40 x27: 1fffe000341cc45c [ 61.567993][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 61.569436][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dec72df8 [ 61.570908][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 61.572406][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 61.573965][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 61.575579][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 0eb9da862d3cce00 [ 61.577036][ C0] x8 : 0eb9da862d3cce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 61.578461][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 61.579838][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 61.581202][ C0] Call trace: [ 61.581766][ C0] invalidate_bh_lru+0x128/0x22c [ 61.582668][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 61.583861][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 61.585181][ C0] ipi_handler+0x10c/0x70c [ 61.585989][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 61.586971][ C0] handle_domain_irq+0x148/0x200 [ 61.587852][ C0] gic_handle_irq+0x78/0x1b8 [ 61.588768][ C0] call_on_irq_stack+0x30/0x48 [ 61.589689][ C0] do_interrupt_handler+0x6c/0x88 [ 61.590575][ C0] el1_interrupt+0x30/0x58 [ 61.591309][ C0] el1h_64_irq_handler+0x18/0x24 [ 61.592110][ C0] el1h_64_irq+0x78/0x7c [ 61.592809][ C0] get_page_from_freelist+0x20c0/0x2a5c [ 61.593845][ C0] __alloc_pages+0x1a4/0x474 [ 61.594697][ C0] alloc_pages_vma+0x284/0x790 [ 61.595662][ C0] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 61.596858][ C0] handle_mm_fault+0x17f4/0x2aac [ 61.597785][ C0] do_page_fault+0x690/0xad0 [ 61.598590][ C0] do_translation_fault+0xe0/0x130 [ 61.599478][ C0] do_mem_abort+0x6c/0x1b0 [ 61.600210][ C0] el0_da+0x90/0x1ec [ 61.601003][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 61.601923][ C0] el0t_64_sync+0x1a0/0x1a4 [ 61.602726][ C0] irq event stamp: 1248 [ 61.603549][ C0] hardirqs last enabled at (1247): [] get_page_from_freelist+0x20ac/0x2a5c [ 61.605383][ C0] hardirqs last disabled at (1248): [] enter_el1_irq_or_nmi+0x10/0x1c [ 61.607067][ C0] softirqs last enabled at (1004): [] local_bh_enable+0x10/0x34 [ 61.608605][ C0] softirqs last disabled at (1002): [] local_bh_disable+0x10/0x34 [ 61.610232][ C0] ---[ end trace 5fb5e4773a4d54b6 ]--- [ 61.641391][ T4740] loop0: detected capacity change from 0 to 128 [ 61.644398][ T4740] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 61.645688][ T4740] Bad inode number on dev loop0: 2 is out of range [ 61.646827][ T4740] SysV FS: get root inode failed [ 61.647675][ T4740] oldfs: cannot read superblock [ 61.655058][ C0] ------------[ cut here ]------------ [ 61.656034][ C0] VFS: brelse: Trying to free free buffer [ 61.657007][ C0] WARNING: CPU: 0 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 61.658433][ C0] Modules linked in: [ 61.659234][ C0] CPU: 0 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 61.660750][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.662440][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.663703][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 61.664600][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 61.665510][ C0] sp : ffff800008007df0 [ 61.666224][ C0] x29: ffff800008007df0 x28: ffff0000c92bd1c0 x27: 1fffe000341cc45c [ 61.667625][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 61.669010][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd5ec7a0 [ 61.670410][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 61.671752][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 61.673164][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 61.674559][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 19df2bd9a1324800 [ 61.675991][ C0] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 61.677389][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 61.678838][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 61.680262][ C0] Call trace: [ 61.680788][ C0] invalidate_bh_lru+0x128/0x22c [ 61.681674][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 61.682711][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 61.683898][ C0] ipi_handler+0x10c/0x70c [ 61.684616][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 61.685562][ C0] handle_domain_irq+0x148/0x200 [ 61.686468][ C0] gic_handle_irq+0x78/0x1b8 [ 61.687265][ C0] call_on_irq_stack+0x30/0x48 [ 61.688101][ C0] do_interrupt_handler+0x6c/0x88 [ 61.689046][ C0] el1_interrupt+0x30/0x58 [ 61.689817][ C0] el1h_64_irq_handler+0x18/0x24 [ 61.690621][ C0] el1h_64_irq+0x78/0x7c [ 61.691357][ C0] alloc_counters+0x3e8/0x790 [ 61.692142][ C0] do_ip6t_get_ctl+0xb58/0x1464 [ 61.692979][ C0] nf_getsockopt+0x254/0x274 [ 61.693792][ C0] ipv6_getsockopt+0x588/0x256c [ 61.694632][ C0] tcp_getsockopt+0x214/0x2d2c [ 61.695435][ C0] sock_common_getsockopt+0xa8/0xc4 [ 61.696334][ C0] __sys_getsockopt+0x1b8/0x250 [ 61.697307][ C0] __arm64_sys_getsockopt+0xc0/0xdc [ 61.698326][ C0] invoke_syscall+0x98/0x28c [ 61.699272][ C0] el0_svc_common+0x13c/0x258 [ 61.700235][ C0] do_el0_svc+0x5c/0x140 [ 61.701099][ C0] el0_svc+0x78/0x1d0 [ 61.701828][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 61.702665][ C0] el0t_64_sync+0x1a0/0x1a4 [ 61.703426][ C0] irq event stamp: 144460 [ 61.704178][ C0] hardirqs last enabled at (144459): [] alloc_counters+0x3c4/0x790 [ 61.705789][ C0] hardirqs last disabled at (144460): [] enter_el1_irq_or_nmi+0x10/0x1c [ 61.707520][ C0] softirqs last enabled at (144410): [] local_bh_enable+0x10/0x34 [ 61.709161][ C0] softirqs last disabled at (144408): [] local_bh_disable+0x10/0x34 [ 61.710964][ C0] ---[ end trace 5fb5e4773a4d54b7 ]--- [ 61.751687][ T4742] loop0: detected capacity change from 0 to 128 [ 61.761094][ T4742] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 61.762341][ T4742] Bad inode number on dev loop0: 2 is out of range [ 61.763507][ T4742] SysV FS: get root inode failed [ 61.764410][ T4742] oldfs: cannot read superblock [ 61.766909][ C1] ------------[ cut here ]------------ [ 61.767878][ C1] VFS: brelse: Trying to free free buffer [ 61.768992][ C1] WARNING: CPU: 1 PID: 0 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 61.770502][ C1] Modules linked in: [ 61.771219][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 61.772753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.774585][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.775974][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 61.776902][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 61.777863][ C1] sp : ffff800008017df0 [ 61.778588][ C1] x29: ffff800008017df0 x28: ffff0000c0a68000 x27: 1fffe000341d065c [ 61.779995][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 61.781410][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeca060 [ 61.782853][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 61.784335][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 61.785773][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 61.787177][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : f95ab0bad3326400 [ 61.788549][ C1] x8 : f95ab0bad3326400 x7 : 0000000000000001 x6 : 0000000000000001 [ 61.789950][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 61.791348][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 61.792799][ C1] Call trace: [ 61.793372][ C1] invalidate_bh_lru+0x128/0x22c [ 61.794246][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 61.795259][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 61.796545][ C1] ipi_handler+0x10c/0x70c [ 61.797363][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 61.798328][ C1] handle_domain_irq+0x148/0x200 [ 61.799221][ C1] gic_handle_irq+0x78/0x1b8 [ 61.800099][ C1] call_on_irq_stack+0x30/0x48 [ 61.800958][ C1] do_interrupt_handler+0x6c/0x88 [ 61.801883][ C1] el1_interrupt+0x30/0x58 [ 61.802728][ C1] el1h_64_irq_handler+0x18/0x24 [ 61.803587][ C1] el1h_64_irq+0x78/0x7c [ 61.804332][ C1] arch_local_irq_enable+0xc/0x18 [ 61.805219][ C1] default_idle_call+0xcc/0x40c [ 61.806120][ C1] do_idle+0x304/0x574 [ 61.806898][ C1] cpu_startup_entry+0x24/0x28 [ 61.807729][ C1] secondary_start_kernel+0x234/0x284 [ 61.808719][ C1] __secondary_switched+0x94/0x98 [ 61.809613][ C1] irq event stamp: 356586 [ 61.810373][ C1] hardirqs last enabled at (356585): [] default_idle_call+0xb8/0x40c [ 61.812162][ C1] hardirqs last disabled at (356586): [] enter_el1_irq_or_nmi+0x10/0x1c [ 61.813962][ C1] softirqs last enabled at (356510): [] handle_softirqs+0xa70/0xc14 [ 61.815668][ C1] softirqs last disabled at (356491): [] __irq_exit_rcu+0x240/0x434 [ 61.817363][ C1] ---[ end trace 5fb5e4773a4d54b8 ]--- [ 61.854784][ T4744] loop0: detected capacity change from 0 to 128 [ 61.857935][ T4744] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 61.859394][ T4744] Bad inode number on dev loop0: 2 is out of range [ 61.860417][ T4744] SysV FS: get root inode failed [ 61.861187][ T4744] oldfs: cannot read superblock [ 61.874793][ T4720] ------------[ cut here ]------------ [ 61.875839][ T4720] VFS: brelse: Trying to free free buffer [ 61.876857][ T4720] WARNING: CPU: 0 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 61.878335][ T4720] Modules linked in: [ 61.879031][ T4720] CPU: 0 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 61.880452][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.882132][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.883540][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 61.884434][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 61.885395][ T4720] sp : ffff80001f9d77d0 [ 61.886117][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 61.887553][ T4720] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 61.888977][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd5ecb40 [ 61.890389][ T4720] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 61.891796][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 61.893135][ T4720] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 61.894534][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 61.895918][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 61.897314][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 61.898682][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 61.900049][ T4720] Call trace: [ 61.900689][ T4720] invalidate_bh_lru+0x128/0x22c [ 61.901549][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 61.902571][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 61.903426][ T4720] invalidate_bh_lrus+0x34/0x40 [ 61.904244][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 61.905175][ T4720] blkdev_put+0x444/0x6c4 [ 61.905924][ T4720] blkdev_close+0x74/0xb0 [ 61.906720][ T4720] __fput+0x1b8/0x7e8 [ 61.907426][ T4720] ____fput+0x20/0x30 [ 61.908135][ T4720] task_work_run+0x13c/0x1e8 [ 61.908998][ T4720] do_notify_resume+0x2488/0x30a8 [ 61.909926][ T4720] el0_svc+0xf0/0x1d0 [ 61.910638][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 61.911503][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 61.912273][ T4720] irq event stamp: 55176 [ 61.913002][ T4720] hardirqs last enabled at (55175): [] kasan_quarantine_put+0xc4/0x200 [ 61.914739][ T4720] hardirqs last disabled at (55176): [] smp_call_function_many_cond+0xa50/0xec0 [ 61.916544][ T4720] softirqs last enabled at (54988): [] local_bh_enable+0x10/0x34 [ 61.918121][ T4720] softirqs last disabled at (54986): [] local_bh_disable+0x10/0x34 [ 61.919534][ T4720] ---[ end trace 5fb5e4773a4d54b9 ]--- [ 61.968091][ T4748] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 61.969472][ T4748] Bad inode number on dev loop0: 2 is out of range [ 61.970585][ T4748] SysV FS: get root inode failed [ 61.971398][ T4748] oldfs: cannot read superblock [ 61.983607][ T4720] ------------[ cut here ]------------ [ 61.984534][ T4720] VFS: brelse: Trying to free free buffer [ 61.985530][ T4720] WARNING: CPU: 0 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 61.986935][ T4720] Modules linked in: [ 61.987600][ T4720] CPU: 0 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 61.988984][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.990658][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 61.991996][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 61.992924][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 61.993847][ T4720] sp : ffff80001f9d77d0 [ 61.994527][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 61.995879][ T4720] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 61.997245][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000defcb888 [ 61.998634][ T4720] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 61.999957][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 62.001338][ T4720] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 62.002642][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 62.003931][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.005276][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 62.006708][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 62.008085][ T4720] Call trace: [ 62.008633][ T4720] invalidate_bh_lru+0x128/0x22c [ 62.009394][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 62.010405][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 62.011267][ T4720] invalidate_bh_lrus+0x34/0x40 [ 62.012117][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 62.013015][ T4720] blkdev_put+0x444/0x6c4 [ 62.013735][ T4720] blkdev_close+0x74/0xb0 [ 62.014483][ T4720] __fput+0x1b8/0x7e8 [ 62.015133][ T4720] ____fput+0x20/0x30 [ 62.015814][ T4720] task_work_run+0x13c/0x1e8 [ 62.016623][ T4720] do_notify_resume+0x2488/0x30a8 [ 62.017493][ T4720] el0_svc+0xf0/0x1d0 [ 62.018237][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 62.019108][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 62.019890][ T4720] irq event stamp: 65468 [ 62.020616][ T4720] hardirqs last enabled at (65467): [] kasan_quarantine_put+0xc4/0x200 [ 62.022368][ T4720] hardirqs last disabled at (65468): [] smp_call_function_many_cond+0xa50/0xec0 [ 62.024165][ T4720] softirqs last enabled at (65226): [] local_bh_enable+0x10/0x34 [ 62.025779][ T4720] softirqs last disabled at (65224): [] local_bh_disable+0x10/0x34 [ 62.027354][ T4720] ---[ end trace 5fb5e4773a4d54ba ]--- [ 62.069449][ T4750] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 62.070727][ T4750] Bad inode number on dev loop0: 2 is out of range [ 62.071703][ T4750] SysV FS: get root inode failed [ 62.072492][ T4750] oldfs: cannot read superblock [ 62.086949][ C0] ------------[ cut here ]------------ [ 62.087816][ C0] VFS: brelse: Trying to free free buffer [ 62.088866][ C0] WARNING: CPU: 0 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 62.090452][ C0] Modules linked in: [ 62.091127][ C0] CPU: 0 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 62.092677][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.094371][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 62.095777][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 62.096820][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 62.097755][ C0] sp : ffff800008007df0 [ 62.098498][ C0] x29: ffff800008007df0 x28: ffff0000c92bd1c0 x27: 1fffe000341cc45c [ 62.099833][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 62.101215][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000defcbc28 [ 62.102662][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 62.104088][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 62.105439][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 62.106872][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 19df2bd9a1324800 [ 62.108289][ C0] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.109690][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 62.111121][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 62.112570][ C0] Call trace: [ 62.113137][ C0] invalidate_bh_lru+0x128/0x22c [ 62.114010][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 62.115032][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 62.116263][ C0] ipi_handler+0x10c/0x70c [ 62.117027][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 62.117930][ C0] handle_domain_irq+0x148/0x200 [ 62.118773][ C0] gic_handle_irq+0x78/0x1b8 [ 62.119518][ C0] call_on_irq_stack+0x30/0x48 [ 62.120313][ C0] do_interrupt_handler+0x6c/0x88 [ 62.121144][ C0] el1_interrupt+0x30/0x58 [ 62.121908][ C0] el1h_64_irq_handler+0x18/0x24 [ 62.122754][ C0] el1h_64_irq+0x78/0x7c [ 62.123505][ C0] new_inode_pseudo+0x0/0x200 [ 62.124306][ C0] shmem_get_inode+0x2cc/0x97c [ 62.125089][ C0] shmem_mknod+0x68/0x1c0 [ 62.125816][ C0] shmem_mkdir+0x38/0x78 [ 62.126538][ C0] vfs_mkdir+0x314/0x4d8 [ 62.127159][ C0] do_mkdirat+0x1c0/0x514 [ 62.127880][ C0] __arm64_sys_mkdirat+0x90/0xa8 [ 62.128776][ C0] invoke_syscall+0x98/0x28c [ 62.129532][ C0] el0_svc_common+0x13c/0x258 [ 62.130323][ C0] do_el0_svc+0x5c/0x140 [ 62.131090][ C0] el0_svc+0x78/0x1d0 [ 62.131763][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 62.132584][ C0] el0t_64_sync+0x1a0/0x1a4 [ 62.133303][ C0] irq event stamp: 157862 [ 62.134015][ C0] hardirqs last enabled at (157861): [] kasan_quarantine_put+0xc4/0x200 [ 62.135673][ C0] hardirqs last disabled at (157862): [] enter_el1_irq_or_nmi+0x10/0x1c [ 62.137275][ C0] softirqs last enabled at (157826): [] local_bh_enable+0x10/0x34 [ 62.138867][ C0] softirqs last disabled at (157824): [] local_bh_disable+0x10/0x34 [ 62.140574][ C0] ---[ end trace 5fb5e4773a4d54bb ]--- [ 62.178218][ T4754] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 62.179472][ T4754] Bad inode number on dev loop0: 2 is out of range [ 62.180535][ T4754] SysV FS: get root inode failed [ 62.181469][ T4754] oldfs: cannot read superblock [ 62.187905][ C1] ------------[ cut here ]------------ [ 62.188883][ C1] VFS: brelse: Trying to free free buffer [ 62.189962][ C1] WARNING: CPU: 1 PID: 4755 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 62.191511][ C1] Modules linked in: [ 62.192350][ C1] CPU: 1 PID: 4755 Comm: syz-executor Tainted: G W syzkaller #0 [ 62.194262][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.196289][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 62.197643][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 62.198617][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 62.199705][ C1] sp : ffff800008017df0 [ 62.200453][ C1] x29: ffff800008017df0 x28: ffff0000cc803680 x27: 1fffe000341d065c [ 62.201879][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 62.203551][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeca400 [ 62.205122][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 62.206843][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 62.208396][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 62.209863][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : b245bf223782e800 [ 62.211272][ C1] x8 : b245bf223782e800 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.212710][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 62.214188][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 62.215611][ C1] Call trace: [ 62.216201][ C1] invalidate_bh_lru+0x128/0x22c [ 62.217095][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 62.218126][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 62.219333][ C1] ipi_handler+0x10c/0x70c [ 62.220112][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 62.221119][ C1] handle_domain_irq+0x148/0x200 [ 62.222037][ C1] gic_handle_irq+0x78/0x1b8 [ 62.222906][ C1] call_on_irq_stack+0x30/0x48 [ 62.223724][ C1] do_interrupt_handler+0x6c/0x88 [ 62.224617][ C1] el1_interrupt+0x30/0x58 [ 62.225537][ C1] el1h_64_irq_handler+0x18/0x24 [ 62.226457][ C1] el1h_64_irq+0x78/0x7c [ 62.227252][ C1] seqcount_lockdep_reader_access+0x21c/0x2c0 [ 62.228366][ C1] ktime_get_coarse_real_ts64+0x4c/0x138 [ 62.229417][ C1] current_time+0x94/0x2a4 [ 62.230229][ C1] proc_pid_make_inode+0x80/0x1a8 [ 62.231122][ C1] proc_pid_instantiate+0x5c/0x27c [ 62.232034][ C1] proc_pid_lookup+0x2e0/0x454 [ 62.232926][ C1] proc_root_lookup+0x30/0x68 [ 62.233750][ C1] __lookup_slow+0x25c/0x39c [ 62.234587][ C1] lookup_slow+0x60/0x84 [ 62.235368][ C1] walk_component+0x2b8/0x3b8 [ 62.236193][ C1] link_path_walk+0x5a0/0xbd4 [ 62.237039][ C1] path_openat+0x1c0/0x2808 [ 62.237863][ C1] do_filp_open+0x188/0x370 [ 62.238673][ C1] do_sys_openat2+0x134/0x3fc [ 62.239524][ C1] __arm64_sys_openat+0x11c/0x150 [ 62.240400][ C1] invoke_syscall+0x98/0x28c [ 62.241253][ C1] el0_svc_common+0x13c/0x258 [ 62.242129][ C1] do_el0_svc+0x5c/0x140 [ 62.242878][ C1] el0_svc+0x78/0x1d0 [ 62.243602][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 62.244509][ C1] el0t_64_sync+0x1a0/0x1a4 [ 62.245297][ C1] irq event stamp: 790 [ 62.246019][ C1] hardirqs last enabled at (789): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 62.247907][ C1] hardirqs last disabled at (790): [] enter_el1_irq_or_nmi+0x10/0x1c [ 62.249690][ C1] softirqs last enabled at (766): [] local_bh_enable+0x10/0x34 [ 62.251383][ C1] softirqs last disabled at (764): [] local_bh_disable+0x10/0x34 [ 62.253020][ C1] ---[ end trace 5fb5e4773a4d54bc ]--- [ 62.282395][ T4756] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 62.283590][ T4756] Bad inode number on dev loop0: 2 is out of range [ 62.284858][ T4756] SysV FS: get root inode failed [ 62.285692][ T4756] oldfs: cannot read superblock [ 62.295908][ C0] ------------[ cut here ]------------ [ 62.296856][ C0] VFS: brelse: Trying to free free buffer [ 62.297849][ C0] WARNING: CPU: 0 PID: 0 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 62.299336][ C0] Modules linked in: [ 62.300014][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 [ 62.301459][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.303112][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 62.304431][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 62.305298][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 62.306141][ C0] sp : ffff800008007df0 [ 62.306834][ C0] x29: ffff800008007df0 x28: ffff8000143d38c0 x27: 1fffe000341cc45b [ 62.308175][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 62.309549][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000defd0060 [ 62.310956][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 62.312293][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 62.313693][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 62.315316][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 5238ef69e727e100 [ 62.316724][ C0] x8 : 5238ef69e727e100 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.318115][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 62.319669][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 62.321223][ C0] Call trace: [ 62.321817][ C0] invalidate_bh_lru+0x128/0x22c [ 62.322703][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 62.323733][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 62.324860][ C0] ipi_handler+0x10c/0x70c [ 62.325611][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 62.326553][ C0] handle_domain_irq+0x148/0x200 [ 62.327402][ C0] gic_handle_irq+0x78/0x1b8 [ 62.328197][ C0] call_on_irq_stack+0x30/0x48 [ 62.328988][ C0] do_interrupt_handler+0x6c/0x88 [ 62.329834][ C0] el1_interrupt+0x30/0x58 [ 62.330611][ C0] el1h_64_irq_handler+0x18/0x24 [ 62.331460][ C0] el1h_64_irq+0x78/0x7c [ 62.332193][ C0] arch_local_irq_enable+0xc/0x18 [ 62.333004][ C0] default_idle_call+0xcc/0x40c [ 62.333811][ C0] do_idle+0x304/0x574 [ 62.334455][ C0] cpu_startup_entry+0x24/0x28 [ 62.335219][ C0] rest_init+0x360/0x390 [ 62.335919][ C0] arch_call_rest_init+0x14/0x20 [ 62.336775][ C0] start_kernel+0x484/0x530 [ 62.337499][ C0] __primary_switched+0xa8/0xb0 [ 62.338358][ C0] irq event stamp: 389042 [ 62.339052][ C0] hardirqs last enabled at (389041): [] default_idle_call+0xb8/0x40c [ 62.340746][ C0] hardirqs last disabled at (389042): [] enter_el1_irq_or_nmi+0x10/0x1c [ 62.342473][ C0] softirqs last enabled at (388910): [] handle_softirqs+0xa70/0xc14 [ 62.343997][ C0] softirqs last disabled at (388871): [] __irq_exit_rcu+0x240/0x434 [ 62.345553][ C0] ---[ end trace 5fb5e4773a4d54bd ]--- [ 62.407630][ T4758] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 62.409108][ T4758] Bad inode number on dev loop0: 2 is out of range [ 62.410082][ T4758] SysV FS: get root inode failed [ 62.411230][ T4758] oldfs: cannot read superblock [ 62.421036][ C1] ------------[ cut here ]------------ [ 62.421960][ C1] VFS: brelse: Trying to free free buffer [ 62.422929][ C1] WARNING: CPU: 1 PID: 4760 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 62.424328][ C1] Modules linked in: [ 62.424902][ C1] CPU: 1 PID: 4760 Comm: syz.0.32 Tainted: G W syzkaller #0 [ 62.426236][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.427943][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 62.429383][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 62.430319][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 62.431337][ C1] sp : ffff800008017df0 [ 62.432127][ C1] x29: ffff800008017df0 x28: ffff0000c6979b40 x27: 1fffe000341d065c [ 62.433619][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 62.435134][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeca7a0 [ 62.436585][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 62.438033][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 62.439418][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 62.440994][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 3fad4a36cb112900 [ 62.442434][ C1] x8 : 3fad4a36cb112900 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.443854][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 62.445282][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 62.446841][ C1] Call trace: [ 62.447424][ C1] invalidate_bh_lru+0x128/0x22c [ 62.448316][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 62.449393][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 62.450622][ C1] ipi_handler+0x10c/0x70c [ 62.451439][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 62.452430][ C1] handle_domain_irq+0x148/0x200 [ 62.453288][ C1] gic_handle_irq+0x78/0x1b8 [ 62.454120][ C1] call_on_irq_stack+0x30/0x48 [ 62.455003][ C1] do_interrupt_handler+0x6c/0x88 [ 62.455932][ C1] el1_interrupt+0x30/0x58 [ 62.456756][ C1] el1h_64_irq_handler+0x18/0x24 [ 62.457693][ C1] el1h_64_irq+0x78/0x7c [ 62.458473][ C1] lock_release+0x4a8/0x8ec [ 62.459303][ C1] rcu_lock_release+0x24/0x30 [ 62.460164][ C1] get_mem_cgroup_from_mm+0x1a0/0x330 [ 62.461139][ C1] __mem_cgroup_charge+0x24/0xa8 [ 62.461993][ C1] shmem_add_to_page_cache+0x7d0/0x1328 [ 62.463114][ C1] shmem_getpage_gfp+0x12c0/0x1f8c [ 62.464157][ C1] shmem_write_begin+0xe0/0x294 [ 62.465042][ C1] generic_perform_write+0x20c/0x490 [ 62.466026][ C1] __generic_file_write_iter+0x23c/0x44c [ 62.467068][ C1] generic_file_write_iter+0xb0/0x1b4 [ 62.468080][ C1] vfs_write+0x590/0xa64 [ 62.468909][ C1] ksys_write+0x12c/0x228 [ 62.469700][ C1] __arm64_sys_write+0x7c/0x90 [ 62.470560][ C1] invoke_syscall+0x98/0x28c [ 62.471375][ C1] el0_svc_common+0x13c/0x258 [ 62.472186][ C1] do_el0_svc+0x5c/0x140 [ 62.472996][ C1] el0_svc+0x78/0x1d0 [ 62.473671][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 62.474522][ C1] el0t_64_sync+0x1a0/0x1a4 [ 62.475306][ C1] irq event stamp: 498 [ 62.476013][ C1] hardirqs last enabled at (497): [] seqcount_lockdep_reader_access+0x14c/0x22c [ 62.477949][ C1] hardirqs last disabled at (498): [] enter_el1_irq_or_nmi+0x10/0x1c [ 62.479673][ C1] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 62.481277][ C1] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 62.482886][ C1] ---[ end trace 5fb5e4773a4d54be ]--- [ 62.521805][ T4760] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 62.523063][ T4760] Bad inode number on dev loop0: 2 is out of range [ 62.524149][ T4760] SysV FS: get root inode failed [ 62.524945][ T4760] oldfs: cannot read superblock [ 62.534045][ C0] ------------[ cut here ]------------ [ 62.535053][ C0] VFS: brelse: Trying to free free buffer [ 62.536045][ C0] WARNING: CPU: 0 PID: 4762 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 62.537454][ C0] Modules linked in: [ 62.538114][ C0] CPU: 0 PID: 4762 Comm: syz.0.33 Tainted: G W syzkaller #0 [ 62.539555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.541389][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 62.542702][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 62.543606][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 62.544456][ C0] sp : ffff800008007df0 [ 62.545165][ C0] x29: ffff800008007df0 x28: ffff0000d1a0d1c0 x27: 1fffe000341cc45c [ 62.546508][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 62.547940][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000defd0400 [ 62.549327][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 62.550687][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 62.552026][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 62.553356][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 3c4c226221ae9a00 [ 62.554788][ C0] x8 : 3c4c226221ae9a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.556090][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 62.557522][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 62.558929][ C0] Call trace: [ 62.559506][ C0] invalidate_bh_lru+0x128/0x22c [ 62.560405][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 62.561522][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 62.562688][ C0] ipi_handler+0x10c/0x70c [ 62.563429][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 62.564321][ C0] handle_domain_irq+0x148/0x200 [ 62.565114][ C0] gic_handle_irq+0x78/0x1b8 [ 62.565868][ C0] call_on_irq_stack+0x30/0x48 [ 62.566656][ C0] do_interrupt_handler+0x6c/0x88 [ 62.567623][ C0] el0_interrupt+0x94/0x248 [ 62.568433][ C0] __el0_irq_handler_common+0x18/0x24 [ 62.569339][ C0] el0t_64_irq_handler+0x10/0x1c [ 62.570178][ C0] el0t_64_irq+0x1a0/0x1a4 [ 62.570932][ C0] irq event stamp: 308 [ 62.571623][ C0] hardirqs last enabled at (307): [] el0t_64_sync_handler+0xd8/0xe4 [ 62.573356][ C0] hardirqs last disabled at (308): [] __el0_irq_handler_common+0x18/0x24 [ 62.575027][ C0] softirqs last enabled at (54): [] local_bh_enable+0x10/0x34 [ 62.576575][ C0] softirqs last disabled at (52): [] local_bh_disable+0x10/0x34 [ 62.578153][ C0] ---[ end trace 5fb5e4773a4d54bf ]--- [ 62.611487][ T4762] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 62.612821][ T4762] Bad inode number on dev loop0: 2 is out of range [ 62.613850][ T4762] SysV FS: get root inode failed [ 62.614644][ T4762] oldfs: cannot read superblock [ 62.622462][ C1] ------------[ cut here ]------------ [ 62.623344][ C1] VFS: brelse: Trying to free free buffer [ 62.624257][ C1] WARNING: CPU: 1 PID: 4763 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 62.625654][ C1] Modules linked in: [ 62.626299][ C1] CPU: 1 PID: 4763 Comm: syz-executor Tainted: G W syzkaller #0 [ 62.627806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.629607][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 62.630999][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 62.631935][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 62.632890][ C1] sp : ffff800008017df0 [ 62.633660][ C1] x29: ffff800008017df0 x28: ffff0000c6978000 x27: 1fffe000341d065c [ 62.635101][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 62.636556][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deecab40 [ 62.638017][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 62.639484][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 62.640945][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 62.642416][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 865e4e78b5774c00 [ 62.643874][ C1] x8 : 865e4e78b5774c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.645312][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 62.646734][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 62.648170][ C1] Call trace: [ 62.648728][ C1] invalidate_bh_lru+0x128/0x22c [ 62.649608][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 62.650632][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 62.651898][ C1] ipi_handler+0x10c/0x70c [ 62.652691][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 62.653694][ C1] handle_domain_irq+0x148/0x200 [ 62.654590][ C1] gic_handle_irq+0x78/0x1b8 [ 62.655425][ C1] call_on_irq_stack+0x30/0x48 [ 62.656294][ C1] do_interrupt_handler+0x6c/0x88 [ 62.657174][ C1] el1_interrupt+0x30/0x58 [ 62.657917][ C1] el1h_64_irq_handler+0x18/0x24 [ 62.658806][ C1] el1h_64_irq+0x78/0x7c [ 62.659536][ C1] __sanitizer_cov_trace_pc+0x28/0xa8 [ 62.660514][ C1] shmem_get_inode+0x390/0x97c [ 62.661341][ C1] shmem_symlink+0xa8/0x4ac [ 62.662127][ C1] vfs_symlink+0x238/0x3b0 [ 62.662923][ C1] do_symlinkat+0x188/0x5b4 [ 62.663725][ C1] __arm64_sys_symlinkat+0xa4/0xbc [ 62.664644][ C1] invoke_syscall+0x98/0x28c [ 62.665467][ C1] el0_svc_common+0x13c/0x258 [ 62.666321][ C1] do_el0_svc+0x5c/0x140 [ 62.667148][ C1] el0_svc+0x78/0x1d0 [ 62.667855][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 62.668817][ C1] el0t_64_sync+0x1a0/0x1a4 [ 62.669662][ C1] irq event stamp: 684 [ 62.670419][ C1] hardirqs last enabled at (683): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 62.672257][ C1] hardirqs last disabled at (684): [] enter_el1_irq_or_nmi+0x10/0x1c [ 62.673890][ C1] softirqs last enabled at (656): [] local_bh_enable+0x10/0x34 [ 62.675491][ C1] softirqs last disabled at (654): [] local_bh_disable+0x10/0x34 [ 62.677150][ C1] ---[ end trace 5fb5e4773a4d54c0 ]--- [ 62.770393][ T4764] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 62.771653][ T4764] Bad inode number on dev loop0: 2 is out of range [ 62.772938][ T4764] SysV FS: get root inode failed [ 62.773824][ T4764] oldfs: cannot read superblock [ 62.781004][ C0] ------------[ cut here ]------------ [ 62.781889][ C0] VFS: brelse: Trying to free free buffer [ 62.782934][ C0] WARNING: CPU: 0 PID: 4765 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 62.784349][ C0] Modules linked in: [ 62.784976][ C0] CPU: 0 PID: 4765 Comm: syz-executor Tainted: G W syzkaller #0 [ 62.786386][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.787963][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 62.789338][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 62.790269][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 62.791163][ C0] sp : ffff800008007df0 [ 62.791857][ C0] x29: ffff800008007df0 x28: ffff0000d3a38000 x27: 1fffe000341cc45c [ 62.793229][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 62.794549][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6a230 [ 62.795992][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 62.797375][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 62.798784][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 62.800242][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : d588f2a7962ac600 [ 62.801675][ C0] x8 : d588f2a7962ac600 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.803095][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 62.804522][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 62.805909][ C0] Call trace: [ 62.806469][ C0] invalidate_bh_lru+0x128/0x22c [ 62.807344][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 62.808569][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 62.809744][ C0] ipi_handler+0x10c/0x70c [ 62.810509][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 62.811416][ C0] handle_domain_irq+0x148/0x200 [ 62.812403][ C0] gic_handle_irq+0x78/0x1b8 [ 62.813230][ C0] call_on_irq_stack+0x30/0x48 [ 62.814038][ C0] do_interrupt_handler+0x6c/0x88 [ 62.814924][ C0] el1_interrupt+0x30/0x58 [ 62.815676][ C0] el1h_64_irq_handler+0x18/0x24 [ 62.816516][ C0] el1h_64_irq+0x78/0x7c [ 62.817249][ C0] finish_lock_switch+0xb8/0x1c8 [ 62.818084][ C0] finish_task_switch+0x120/0x6f4 [ 62.818921][ C0] schedule_tail+0x20/0x140 [ 62.819675][ C0] ret_from_fork+0x4/0x20 [ 62.820458][ C0] irq event stamp: 2 [ 62.821115][ C0] hardirqs last enabled at (1): [] finish_lock_switch+0xb0/0x1c8 [ 62.822772][ C0] hardirqs last disabled at (2): [] enter_el1_irq_or_nmi+0x10/0x1c [ 62.824369][ C0] softirqs last enabled at (0): [] copy_process+0x1244/0x36f4 [ 62.825921][ C0] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 62.827151][ C0] ---[ end trace 5fb5e4773a4d54c1 ]--- [ 62.919215][ T4766] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 62.920719][ T4766] Bad inode number on dev loop0: 2 is out of range [ 62.921749][ T4766] SysV FS: get root inode failed [ 62.922704][ T4766] oldfs: cannot read superblock [ 62.939195][ T4720] ------------[ cut here ]------------ [ 62.940307][ T4720] VFS: brelse: Trying to free free buffer [ 62.941390][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 62.942981][ T4720] Modules linked in: [ 62.943689][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 62.945245][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.947231][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 62.948640][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 62.949545][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 62.950465][ T4720] sp : ffff80001f9d77d0 [ 62.951174][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 62.952706][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 62.954146][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deec2060 [ 62.955595][ T4720] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 62.957003][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 62.958402][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 62.959862][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 62.961340][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 62.962714][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 62.964101][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 62.965507][ T4720] Call trace: [ 62.966087][ T4720] invalidate_bh_lru+0x128/0x22c [ 62.966977][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 62.968017][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 62.969006][ T4720] invalidate_bh_lrus+0x34/0x40 [ 62.969892][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 62.970831][ T4720] blkdev_put+0x444/0x6c4 [ 62.971718][ T4720] blkdev_close+0x74/0xb0 [ 62.972486][ T4720] __fput+0x1b8/0x7e8 [ 62.973168][ T4720] ____fput+0x20/0x30 [ 62.973860][ T4720] task_work_run+0x13c/0x1e8 [ 62.974668][ T4720] do_notify_resume+0x2488/0x30a8 [ 62.975578][ T4720] el0_svc+0xf0/0x1d0 [ 62.976280][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 62.977185][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 62.978017][ T4720] irq event stamp: 95396 [ 62.978774][ T4720] hardirqs last enabled at (95395): [] kasan_quarantine_put+0xc4/0x200 [ 62.980603][ T4720] hardirqs last disabled at (95396): [] smp_call_function_many_cond+0xa50/0xec0 [ 62.982505][ T4720] softirqs last enabled at (95198): [] local_bh_enable+0x10/0x34 [ 62.984299][ T4720] softirqs last disabled at (95196): [] local_bh_disable+0x10/0x34 [ 62.986074][ T4720] ---[ end trace 5fb5e4773a4d54c2 ]--- [ 63.040959][ T4770] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 63.042357][ T4770] Bad inode number on dev loop0: 2 is out of range [ 63.043482][ T4770] SysV FS: get root inode failed [ 63.044220][ T4770] oldfs: cannot read superblock [ 63.051383][ C0] ------------[ cut here ]------------ [ 63.052337][ C0] VFS: brelse: Trying to free free buffer [ 63.053301][ C0] WARNING: CPU: 0 PID: 4771 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 63.054638][ C0] Modules linked in: [ 63.055310][ C0] CPU: 0 PID: 4771 Comm: syz-executor Tainted: G W syzkaller #0 [ 63.056657][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.058186][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 63.059492][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 63.060395][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 63.061314][ C0] sp : ffff800008007df0 [ 63.062005][ C0] x29: ffff800008007df0 x28: ffff0000c8173680 x27: 1fffe000341cc45c [ 63.063319][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 63.064693][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6a5d0 [ 63.066134][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 63.067484][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 63.068881][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 63.070319][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 41170414b7957700 [ 63.071746][ C0] x8 : 41170414b7957700 x7 : 0000000000000001 x6 : 0000000000000001 [ 63.073114][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 63.074521][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 63.075959][ C0] Call trace: [ 63.076514][ C0] invalidate_bh_lru+0x128/0x22c [ 63.077364][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 63.078369][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 63.079529][ C0] ipi_handler+0x10c/0x70c [ 63.080283][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 63.081215][ C0] handle_domain_irq+0x148/0x200 [ 63.082098][ C0] gic_handle_irq+0x78/0x1b8 [ 63.082882][ C0] call_on_irq_stack+0x30/0x48 [ 63.083656][ C0] do_interrupt_handler+0x6c/0x88 [ 63.084503][ C0] el1_interrupt+0x30/0x58 [ 63.085232][ C0] el1h_64_irq_handler+0x18/0x24 [ 63.086057][ C0] el1h_64_irq+0x78/0x7c [ 63.086784][ C0] __sanitizer_cov_trace_const_cmp8+0xb0/0xbc [ 63.087781][ C0] arch_stack_walk+0x204/0x2c0 [ 63.088565][ C0] stack_trace_save+0x9c/0xf0 [ 63.089369][ C0] __kasan_slab_alloc+0x8c/0xcc [ 63.090186][ C0] slab_post_alloc_hook+0x74/0x3f8 [ 63.091075][ C0] kmem_cache_alloc+0x1dc/0x3d8 [ 63.091939][ C0] getname_flags+0xb8/0x44c [ 63.092759][ C0] __arm64_sys_symlinkat+0x94/0xbc [ 63.093643][ C0] invoke_syscall+0x98/0x28c [ 63.094384][ C0] el0_svc_common+0x13c/0x258 [ 63.095145][ C0] do_el0_svc+0x5c/0x140 [ 63.095885][ C0] el0_svc+0x78/0x1d0 [ 63.096575][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 63.097454][ C0] el0t_64_sync+0x1a0/0x1a4 [ 63.098289][ C0] irq event stamp: 698 [ 63.098965][ C0] hardirqs last enabled at (697): [] ___slab_alloc+0xc10/0xd84 [ 63.100593][ C0] hardirqs last disabled at (698): [] enter_el1_irq_or_nmi+0x10/0x1c [ 63.102328][ C0] softirqs last enabled at (682): [] local_bh_enable+0x10/0x34 [ 63.104015][ C0] softirqs last disabled at (680): [] local_bh_disable+0x10/0x34 [ 63.105602][ C0] ---[ end trace 5fb5e4773a4d54c3 ]--- [ 63.169070][ T4772] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 63.170444][ T4772] Bad inode number on dev loop0: 2 is out of range [ 63.171594][ T4772] SysV FS: get root inode failed [ 63.172372][ T4772] oldfs: cannot read superblock [ 63.173173][ T4772] ------------[ cut here ]------------ [ 63.174064][ T4772] VFS: brelse: Trying to free free buffer [ 63.175039][ T4772] WARNING: CPU: 1 PID: 4772 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 63.176518][ T4772] Modules linked in: [ 63.177236][ T4772] CPU: 1 PID: 4772 Comm: syz.0.38 Tainted: G W syzkaller #0 [ 63.178654][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.180485][ T4772] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 63.181892][ T4772] pc : invalidate_bh_lru+0x128/0x22c [ 63.182868][ T4772] lr : invalidate_bh_lru+0x128/0x22c [ 63.183842][ T4772] sp : ffff80001f897710 [ 63.184582][ T4772] x29: ffff80001f897710 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 63.185975][ T4772] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 63.187509][ T4772] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deec2400 [ 63.188896][ T4772] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 63.190352][ T4772] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 63.191822][ T4772] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 63.193231][ T4772] x11: ff80800008300a7c x10: 0000000000000000 x9 : ed934c57c34b4200 [ 63.194686][ T4772] x8 : ed934c57c34b4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 63.196141][ T4772] x5 : ffff80001f897018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 63.197675][ T4772] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 63.199086][ T4772] Call trace: [ 63.199671][ T4772] invalidate_bh_lru+0x128/0x22c [ 63.200535][ T4772] smp_call_function_many_cond+0xa5c/0xec0 [ 63.201565][ T4772] on_each_cpu_cond_mask+0x5c/0xc4 [ 63.202475][ T4772] invalidate_bh_lrus+0x34/0x40 [ 63.203329][ T4772] blkdev_flush_mapping+0x16c/0x334 [ 63.204227][ T4772] blkdev_put+0x444/0x6c4 [ 63.205007][ T4772] kill_block_super+0xa0/0xe0 [ 63.205855][ T4772] deactivate_locked_super+0xc0/0x13c [ 63.206847][ T4772] mount_bdev+0x284/0x35c [ 63.207683][ T4772] sysv_mount+0x44/0x58 [ 63.208446][ T4772] legacy_get_tree+0xd8/0x174 [ 63.209346][ T4772] vfs_get_tree+0x90/0x278 [ 63.210143][ T4772] do_new_mount+0x228/0x804 [ 63.210945][ T4772] path_mount+0x57c/0xfe8 [ 63.211815][ T4772] __arm64_sys_mount+0x488/0x5f8 [ 63.212674][ T4772] invoke_syscall+0x98/0x28c [ 63.213476][ T4772] el0_svc_common+0x13c/0x258 [ 63.214308][ T4772] do_el0_svc+0x5c/0x140 [ 63.215116][ T4772] el0_svc+0x78/0x1d0 [ 63.215875][ T4772] el0t_64_sync_handler+0xcc/0xe4 [ 63.216782][ T4772] el0t_64_sync+0x1a0/0x1a4 [ 63.217641][ T4772] irq event stamp: 986 [ 63.218383][ T4772] hardirqs last enabled at (985): [] kasan_quarantine_put+0xc4/0x200 [ 63.220161][ T4772] hardirqs last disabled at (986): [] smp_call_function_many_cond+0xa50/0xec0 [ 63.222056][ T4772] softirqs last enabled at (806): [] local_bh_enable+0x10/0x34 [ 63.223717][ T4772] softirqs last disabled at (804): [] local_bh_disable+0x10/0x34 [ 63.225441][ T4772] ---[ end trace 5fb5e4773a4d54c4 ]--- [ 63.342755][ T1856] device hsr_slave_0 left promiscuous mode [ 63.378746][ T1856] device hsr_slave_1 left promiscuous mode [ 63.384536][ T4777] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 63.385660][ T4777] Bad inode number on dev loop0: 2 is out of range [ 63.386643][ T4777] SysV FS: get root inode failed [ 63.387296][ T4777] oldfs: cannot read superblock [ 63.396857][ T4720] ------------[ cut here ]------------ [ 63.397715][ T4720] VFS: brelse: Trying to free free buffer [ 63.398746][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 63.400139][ T4720] Modules linked in: [ 63.400858][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 63.402397][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.404093][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 63.405531][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 63.406527][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 63.407520][ T4720] sp : ffff80001f9d77d0 [ 63.408356][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 63.409810][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 63.411333][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deec27a0 [ 63.412872][ T4720] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 63.414581][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 63.416184][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 63.417683][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 63.419227][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 63.420766][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 63.422269][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 63.423822][ T4720] Call trace: [ 63.424417][ T4720] invalidate_bh_lru+0x128/0x22c [ 63.425297][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 63.426435][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 63.427382][ T4720] invalidate_bh_lrus+0x34/0x40 [ 63.428243][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 63.429157][ T4720] blkdev_put+0x444/0x6c4 [ 63.429918][ T4720] blkdev_close+0x74/0xb0 [ 63.430731][ T4720] __fput+0x1b8/0x7e8 [ 63.431507][ T4720] ____fput+0x20/0x30 [ 63.432259][ T4720] task_work_run+0x13c/0x1e8 [ 63.433103][ T4720] do_notify_resume+0x2488/0x30a8 [ 63.434043][ T4720] el0_svc+0xf0/0x1d0 [ 63.434780][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 63.435706][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 63.436534][ T4720] irq event stamp: 109746 [ 63.437311][ T4720] hardirqs last enabled at (109745): [] kasan_quarantine_put+0xc4/0x200 [ 63.439098][ T4720] hardirqs last disabled at (109746): [] smp_call_function_many_cond+0xa50/0xec0 [ 63.441125][ T4720] softirqs last enabled at (109554): [] local_bh_enable+0x10/0x34 [ 63.442846][ T4720] softirqs last disabled at (109552): [] local_bh_disable+0x10/0x34 [ 63.444560][ T4720] ---[ end trace 5fb5e4773a4d54c5 ]--- [ 63.468229][ T1856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.469515][ T1856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.473377][ T1856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.474689][ T1856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.476173][ T4779] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 63.477696][ T4779] Bad inode number on dev loop0: 2 is out of range [ 63.479171][ T1856] device bridge_slave_1 left promiscuous mode [ 63.480274][ T1856] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.481634][ T4779] SysV FS: get root inode failed [ 63.482517][ T4779] oldfs: cannot read superblock [ 63.489330][ T4720] ------------[ cut here ]------------ [ 63.490309][ T4720] VFS: brelse: Trying to free free buffer [ 63.491222][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 63.492784][ T4720] Modules linked in: [ 63.493404][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 63.494661][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.496152][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 63.497370][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 63.498257][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 63.499296][ T4720] sp : ffff80001f9d77d0 [ 63.500068][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 63.501627][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 63.503241][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deec2b40 [ 63.504781][ T4720] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 63.506293][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 63.507717][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 63.509011][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 63.510426][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 63.511907][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 63.513413][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 63.514804][ T4720] Call trace: [ 63.515336][ T4720] invalidate_bh_lru+0x128/0x22c [ 63.516238][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 63.517274][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 63.518214][ T4720] invalidate_bh_lrus+0x34/0x40 [ 63.519087][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 63.520034][ T4720] blkdev_put+0x444/0x6c4 [ 63.520794][ T4720] blkdev_close+0x74/0xb0 [ 63.521555][ T4720] __fput+0x1b8/0x7e8 [ 63.522226][ T4720] ____fput+0x20/0x30 [ 63.522940][ T4720] task_work_run+0x13c/0x1e8 [ 63.523730][ T4720] do_notify_resume+0x2488/0x30a8 [ 63.524666][ T4720] el0_svc+0xf0/0x1d0 [ 63.525372][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 63.526214][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 63.527057][ T4720] irq event stamp: 112796 [ 63.527832][ T4720] hardirqs last enabled at (112795): [] kasan_quarantine_put+0xc4/0x200 [ 63.529655][ T4720] hardirqs last disabled at (112796): [] smp_call_function_many_cond+0xa50/0xec0 [ 63.531537][ T4720] softirqs last enabled at (112570): [] local_bh_enable+0x10/0x34 [ 63.533269][ T4720] softirqs last disabled at (112568): [] local_bh_disable+0x10/0x34 [ 63.535063][ T4720] ---[ end trace 5fb5e4773a4d54c6 ]--- [ 63.548684][ T1856] device bridge_slave_0 left promiscuous mode [ 63.549830][ T1856] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.580590][ T4781] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 63.581936][ T4781] Bad inode number on dev loop0: 2 is out of range [ 63.583044][ T4781] SysV FS: get root inode failed [ 63.583849][ T4781] oldfs: cannot read superblock [ 63.595494][ C1] ------------[ cut here ]------------ [ 63.596404][ C1] VFS: brelse: Trying to free free buffer [ 63.597319][ C1] WARNING: CPU: 1 PID: 4783 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 63.598927][ C1] Modules linked in: [ 63.599644][ C1] CPU: 1 PID: 4783 Comm: syz.0.43 Tainted: G W syzkaller #0 [ 63.601157][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.602990][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 63.604361][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 63.605365][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 63.606356][ C1] sp : ffff800008017df0 [ 63.607157][ C1] x29: ffff800008017df0 x28: ffff0000cd1251c0 x27: 1fffe000341d065c [ 63.608704][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 63.610145][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deec2ee0 [ 63.611619][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 63.613125][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 63.614554][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 63.615984][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 5aca470408015500 [ 63.617442][ C1] x8 : 5aca470408015500 x7 : 0000000000000001 x6 : 0000000000000001 [ 63.618884][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 63.620329][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 63.621789][ C1] Call trace: [ 63.622427][ C1] invalidate_bh_lru+0x128/0x22c [ 63.623302][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 63.624374][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 63.625573][ C1] ipi_handler+0x10c/0x70c [ 63.626320][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 63.627245][ C1] handle_domain_irq+0x148/0x200 [ 63.628093][ C1] gic_handle_irq+0x78/0x1b8 [ 63.628917][ C1] call_on_irq_stack+0x30/0x48 [ 63.629808][ C1] do_interrupt_handler+0x6c/0x88 [ 63.630761][ C1] el1_interrupt+0x30/0x58 [ 63.631589][ C1] el1h_64_irq_handler+0x18/0x24 [ 63.632491][ C1] el1h_64_irq+0x78/0x7c [ 63.633280][ C1] unmap_page_range+0x65c/0x180c [ 63.634099][ C1] unmap_single_vma+0x13c/0x1e4 [ 63.634943][ C1] unmap_vmas+0x110/0x218 [ 63.635696][ C1] unmap_region+0x1d4/0x328 [ 63.636494][ C1] __do_munmap+0x894/0xc34 [ 63.637260][ C1] __vm_munmap+0x134/0x238 [ 63.638003][ C1] __arm64_sys_munmap+0x74/0x8c [ 63.638834][ C1] invoke_syscall+0x98/0x28c [ 63.639663][ C1] el0_svc_common+0x13c/0x258 [ 63.640496][ C1] do_el0_svc+0x5c/0x140 [ 63.641227][ C1] el0_svc+0x78/0x1d0 [ 63.641965][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 63.642883][ C1] el0t_64_sync+0x1a0/0x1a4 [ 63.643722][ C1] irq event stamp: 580 [ 63.644449][ C1] hardirqs last enabled at (579): [] lock_page_memcg+0x110/0x22c [ 63.646119][ C1] hardirqs last disabled at (580): [] enter_el1_irq_or_nmi+0x10/0x1c [ 63.647813][ C1] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 63.649480][ C1] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 63.651141][ C1] ---[ end trace 5fb5e4773a4d54c7 ]--- [ 63.652373][ T4169] Bluetooth: hci0: command 0x0419 tx timeout [ 63.692560][ T4783] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 63.693811][ T4783] Bad inode number on dev loop0: 2 is out of range [ 63.694834][ T4783] SysV FS: get root inode failed [ 63.695585][ T4783] oldfs: cannot read superblock [ 63.699592][ C0] ------------[ cut here ]------------ [ 63.700448][ C0] VFS: brelse: Trying to free free buffer [ 63.701397][ C0] WARNING: CPU: 0 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 63.702836][ C0] Modules linked in: [ 63.703492][ C0] CPU: 0 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 63.704981][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.706698][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 63.708030][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 63.708942][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 63.709925][ C0] sp : ffff800008007df0 [ 63.710597][ C0] x29: ffff800008007df0 x28: ffff0000c92bd1c0 x27: 1fffe000341cc45c [ 63.712016][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 63.713339][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6a970 [ 63.714705][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 63.715986][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 63.717330][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 63.718684][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 19df2bd9a1324800 [ 63.720074][ C0] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 63.721459][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 63.722876][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 63.724271][ C0] Call trace: [ 63.724831][ C0] invalidate_bh_lru+0x128/0x22c [ 63.725670][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 63.726683][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 63.727908][ C0] ipi_handler+0x10c/0x70c [ 63.728673][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 63.729656][ C0] handle_domain_irq+0x148/0x200 [ 63.730483][ C0] gic_handle_irq+0x78/0x1b8 [ 63.731230][ C0] call_on_irq_stack+0x30/0x48 [ 63.732033][ C0] do_interrupt_handler+0x6c/0x88 [ 63.732841][ C0] el1_interrupt+0x30/0x58 [ 63.733591][ C0] el1h_64_irq_handler+0x18/0x24 [ 63.734594][ C0] el1h_64_irq+0x78/0x7c [ 63.735366][ C0] __sanitizer_cov_trace_pc+0xa4/0xa8 [ 63.736332][ C0] tomoyo_path_number_perm+0x2f4/0x56c [ 63.737314][ C0] tomoyo_path_mkdir+0xac/0xf8 [ 63.738098][ C0] security_path_mkdir+0xec/0x13c [ 63.738948][ C0] do_mkdirat+0x158/0x514 [ 63.739668][ C0] __arm64_sys_mkdirat+0x90/0xa8 [ 63.740503][ C0] invoke_syscall+0x98/0x28c [ 63.741332][ C0] el0_svc_common+0x13c/0x258 [ 63.742149][ C0] do_el0_svc+0x5c/0x140 [ 63.742912][ C0] el0_svc+0x78/0x1d0 [ 63.743725][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 63.744655][ C0] el0t_64_sync+0x1a0/0x1a4 [ 63.745475][ C0] irq event stamp: 193578 [ 63.746283][ C0] hardirqs last enabled at (193577): [] kasan_quarantine_put+0xc4/0x200 [ 63.748119][ C0] hardirqs last disabled at (193578): [] enter_el1_irq_or_nmi+0x10/0x1c [ 63.749972][ C0] softirqs last enabled at (193562): [] local_bh_enable+0x10/0x34 [ 63.751715][ C0] softirqs last disabled at (193560): [] local_bh_disable+0x10/0x34 [ 63.753442][ C0] ---[ end trace 5fb5e4773a4d54c8 ]--- [ 63.778240][ T1856] device veth1_macvtap left promiscuous mode [ 63.779272][ T1856] device veth0_macvtap left promiscuous mode [ 63.780202][ T1856] device veth1_vlan left promiscuous mode [ 63.781160][ T1856] device veth0_vlan left promiscuous mode [ 63.842060][ T4785] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 63.843602][ T4785] Bad inode number on dev loop0: 2 is out of range [ 63.844881][ T4785] SysV FS: get root inode failed [ 63.845686][ T4785] oldfs: cannot read superblock [ 63.846535][ T4785] ------------[ cut here ]------------ [ 63.847410][ T4785] VFS: brelse: Trying to free free buffer [ 63.848414][ T4785] WARNING: CPU: 1 PID: 4785 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 63.849983][ T4785] Modules linked in: [ 63.850698][ T4785] CPU: 1 PID: 4785 Comm: syz.0.44 Tainted: G W syzkaller #0 [ 63.852214][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.853996][ T4785] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 63.855438][ T4785] pc : invalidate_bh_lru+0x128/0x22c [ 63.856380][ T4785] lr : invalidate_bh_lru+0x128/0x22c [ 63.857368][ T4785] sp : ffff80001fbd7710 [ 63.858096][ T4785] x29: ffff80001fbd7710 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 63.859613][ T4785] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 63.861078][ T4785] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deebf318 [ 63.862527][ T4785] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 63.863909][ T4785] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 63.865309][ T4785] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 63.867001][ T4785] x11: ff80800008300a7c x10: 0000000000000000 x9 : 3314c0aedcff4f00 [ 63.868662][ T4785] x8 : 3314c0aedcff4f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 63.870378][ T4785] x5 : ffff80001fbd7018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 63.871914][ T4785] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 63.873349][ T4785] Call trace: [ 63.874001][ T4785] invalidate_bh_lru+0x128/0x22c [ 63.874958][ T4785] smp_call_function_many_cond+0xa5c/0xec0 [ 63.876044][ T4785] on_each_cpu_cond_mask+0x5c/0xc4 [ 63.876967][ T4785] invalidate_bh_lrus+0x34/0x40 [ 63.877867][ T4785] blkdev_flush_mapping+0x16c/0x334 [ 63.878854][ T4785] blkdev_put+0x444/0x6c4 [ 63.879669][ T4785] kill_block_super+0xa0/0xe0 [ 63.880534][ T4785] deactivate_locked_super+0xc0/0x13c [ 63.881513][ T4785] mount_bdev+0x284/0x35c [ 63.882299][ T4785] sysv_mount+0x44/0x58 [ 63.883060][ T4785] legacy_get_tree+0xd8/0x174 [ 63.883945][ T4785] vfs_get_tree+0x90/0x278 [ 63.884733][ T4785] do_new_mount+0x228/0x804 [ 63.885584][ T4785] path_mount+0x57c/0xfe8 [ 63.886379][ T4785] __arm64_sys_mount+0x488/0x5f8 [ 63.887309][ T4785] invoke_syscall+0x98/0x28c [ 63.888154][ T4785] el0_svc_common+0x13c/0x258 [ 63.889045][ T4785] do_el0_svc+0x5c/0x140 [ 63.889813][ T4785] el0_svc+0x78/0x1d0 [ 63.890617][ T4785] el0t_64_sync_handler+0xcc/0xe4 [ 63.891519][ T4785] el0t_64_sync+0x1a0/0x1a4 [ 63.892303][ T4785] irq event stamp: 1002 [ 63.893022][ T4785] hardirqs last enabled at (1001): [] kasan_quarantine_put+0xc4/0x200 [ 63.894774][ T4785] hardirqs last disabled at (1002): [] smp_call_function_many_cond+0xa50/0xec0 [ 63.896658][ T4785] softirqs last enabled at (836): [] local_bh_enable+0x10/0x34 [ 63.898373][ T4785] softirqs last disabled at (834): [] local_bh_disable+0x10/0x34 [ 63.900012][ T4785] ---[ end trace 5fb5e4773a4d54c9 ]--- [ 63.946722][ T1856] team0 (unregistering): Port device team_slave_1 removed [ 63.952799][ T1856] team0 (unregistering): Port device team_slave_0 removed [ 63.956677][ T1856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.983750][ T4789] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 63.985179][ T4789] Bad inode number on dev loop0: 2 is out of range [ 63.986323][ T4789] SysV FS: get root inode failed [ 63.987129][ T4789] oldfs: cannot read superblock [ 63.989044][ T1856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.995793][ C1] ------------[ cut here ]------------ [ 63.996702][ C1] VFS: brelse: Trying to free free buffer [ 63.997651][ C1] WARNING: CPU: 1 PID: 4790 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 63.999308][ C1] Modules linked in: [ 64.000020][ C1] CPU: 1 PID: 4790 Comm: syz-executor Tainted: G W syzkaller #0 [ 64.001723][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.003580][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 64.005200][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 64.006224][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 64.007197][ C1] sp : ffff800008017df0 [ 64.007986][ C1] x29: ffff800008017df0 x28: ffff0000cd3f0000 x27: 1fffe000341d065c [ 64.009420][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 64.010902][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deebf6b8 [ 64.012352][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 64.013837][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 64.015384][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 64.016843][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : eace537f13d49e00 [ 64.018355][ C1] x8 : eace537f13d49e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 64.019910][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 64.021394][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 64.022832][ C1] Call trace: [ 64.023425][ C1] invalidate_bh_lru+0x128/0x22c [ 64.024350][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 64.025381][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 64.026574][ C1] ipi_handler+0x10c/0x70c [ 64.027317][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 64.028238][ C1] handle_domain_irq+0x148/0x200 [ 64.029107][ C1] gic_handle_irq+0x78/0x1b8 [ 64.029916][ C1] call_on_irq_stack+0x30/0x48 [ 64.030909][ C1] do_interrupt_handler+0x6c/0x88 [ 64.031945][ C1] el1_interrupt+0x30/0x58 [ 64.032802][ C1] el1h_64_irq_handler+0x18/0x24 [ 64.033715][ C1] el1h_64_irq+0x78/0x7c [ 64.034482][ C1] __sanitizer_cov_trace_pc+0x70/0xa8 [ 64.035472][ C1] filemap_map_pages+0x964/0xc44 [ 64.036315][ C1] handle_mm_fault+0x18b0/0x2aac [ 64.037196][ C1] do_page_fault+0x690/0xad0 [ 64.037978][ C1] do_translation_fault+0xe0/0x130 [ 64.038868][ C1] do_mem_abort+0x6c/0x1b0 [ 64.039655][ C1] el0_da+0x90/0x1ec [ 64.040349][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 64.041233][ C1] el0t_64_sync+0x1a0/0x1a4 [ 64.042040][ C1] irq event stamp: 554 [ 64.042714][ C1] hardirqs last enabled at (553): [] lock_page_memcg+0x110/0x22c [ 64.044421][ C1] hardirqs last disabled at (554): [] enter_el1_irq_or_nmi+0x10/0x1c [ 64.046159][ C1] softirqs last enabled at (540): [] local_bh_enable+0x10/0x34 [ 64.047770][ C1] softirqs last disabled at (538): [] local_bh_disable+0x10/0x34 [ 64.049767][ C1] ---[ end trace 5fb5e4773a4d54ca ]--- [ 64.106606][ T4791] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 64.107890][ T4791] Bad inode number on dev loop0: 2 is out of range [ 64.110927][ T4791] SysV FS: get root inode failed [ 64.118739][ T4791] oldfs: cannot read superblock [ 64.119626][ C0] ------------[ cut here ]------------ [ 64.120588][ C0] VFS: brelse: Trying to free free buffer [ 64.121553][ C0] WARNING: CPU: 0 PID: 0 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 64.122914][ C0] Modules linked in: [ 64.123483][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 [ 64.124953][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.126667][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 64.127967][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 64.128975][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 64.129980][ C0] sp : ffff800008007df0 [ 64.130755][ C0] x29: ffff800008007df0 x28: ffff8000143d38c0 x27: 1fffe000341cc45b [ 64.132232][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 64.133711][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6ad10 [ 64.135208][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 64.136626][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 64.138060][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 64.139386][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 5238ef69e727e100 [ 64.140790][ C0] x8 : 5238ef69e727e100 x7 : 0000000000000001 x6 : 0000000000000001 [ 64.142192][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 64.143646][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 64.145111][ C0] Call trace: [ 64.145682][ C0] invalidate_bh_lru+0x128/0x22c [ 64.146553][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 64.147595][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 64.148794][ C0] ipi_handler+0x10c/0x70c [ 64.149525][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 64.150466][ C0] handle_domain_irq+0x148/0x200 [ 64.151308][ C0] gic_handle_irq+0x78/0x1b8 [ 64.152120][ C0] call_on_irq_stack+0x30/0x48 [ 64.152971][ C0] do_interrupt_handler+0x6c/0x88 [ 64.153813][ C0] el1_interrupt+0x30/0x58 [ 64.154568][ C0] el1h_64_irq_handler+0x18/0x24 [ 64.155396][ C0] el1h_64_irq+0x78/0x7c [ 64.156136][ C0] arch_local_irq_enable+0xc/0x18 [ 64.157163][ C0] default_idle_call+0xcc/0x40c [ 64.158123][ C0] do_idle+0x304/0x574 [ 64.158894][ C0] cpu_startup_entry+0x24/0x28 [ 64.159779][ C0] rest_init+0x360/0x390 [ 64.160643][ C0] arch_call_rest_init+0x14/0x20 [ 64.161606][ C0] start_kernel+0x484/0x530 [ 64.162484][ C0] __primary_switched+0xa8/0xb0 [ 64.163367][ C0] irq event stamp: 397952 [ 64.164135][ C0] hardirqs last enabled at (397951): [] default_idle_call+0xb8/0x40c [ 64.165914][ C0] hardirqs last disabled at (397952): [] enter_el1_irq_or_nmi+0x10/0x1c [ 64.167772][ C0] softirqs last enabled at (397920): [] handle_softirqs+0xa70/0xc14 [ 64.169524][ C0] softirqs last disabled at (397873): [] __irq_exit_rcu+0x240/0x434 [ 64.171156][ C0] ---[ end trace 5fb5e4773a4d54cb ]--- [ 64.191794][ T1856] bond0 (unregistering): Released all slaves [ 64.267452][ T4793] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 64.268857][ T4793] Bad inode number on dev loop0: 2 is out of range [ 64.269949][ T4793] SysV FS: get root inode failed [ 64.270786][ T4793] oldfs: cannot read superblock [ 64.279159][ C0] ------------[ cut here ]------------ [ 64.280087][ C0] VFS: brelse: Trying to free free buffer [ 64.281033][ C0] WARNING: CPU: 0 PID: 4794 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 64.282431][ C0] Modules linked in: [ 64.283227][ C0] CPU: 0 PID: 4794 Comm: syz.0.49 Tainted: G W syzkaller #0 [ 64.284726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.286321][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 64.287575][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 64.288513][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 64.289445][ C0] sp : ffff800008007df0 [ 64.290176][ C0] x29: ffff800008007df0 x28: ffff0000c92b8000 x27: 1fffe000341cc45c [ 64.291572][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 64.293000][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6b148 [ 64.294348][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 64.295734][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 64.297122][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 64.298522][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 1ac69a31131afa00 [ 64.299888][ C0] x8 : 1ac69a31131afa00 x7 : 0000000000000001 x6 : 0000000000000001 [ 64.301363][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 64.302812][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 64.304275][ C0] Call trace: [ 64.304867][ C0] invalidate_bh_lru+0x128/0x22c [ 64.305904][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 64.307180][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 64.308477][ C0] ipi_handler+0x10c/0x70c [ 64.309225][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 64.310131][ C0] handle_domain_irq+0x148/0x200 [ 64.310989][ C0] gic_handle_irq+0x78/0x1b8 [ 64.311786][ C0] call_on_irq_stack+0x30/0x48 [ 64.312616][ C0] do_interrupt_handler+0x6c/0x88 [ 64.313505][ C0] el1_interrupt+0x30/0x58 [ 64.314284][ C0] el1h_64_irq_handler+0x18/0x24 [ 64.315155][ C0] el1h_64_irq+0x78/0x7c [ 64.315965][ C0] __sanitizer_cov_trace_switch+0x74/0x114 [ 64.316941][ C0] filemap_map_pages+0x1c8/0xc44 [ 64.317731][ C0] handle_mm_fault+0x18b0/0x2aac [ 64.318557][ C0] do_page_fault+0x690/0xad0 [ 64.319398][ C0] do_translation_fault+0xe0/0x130 [ 64.320291][ C0] do_mem_abort+0x6c/0x1b0 [ 64.321063][ C0] el0_da+0x90/0x1ec [ 64.321741][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 64.322591][ C0] el0t_64_sync+0x1a0/0x1a4 [ 64.323369][ C0] irq event stamp: 1010 [ 64.324125][ C0] hardirqs last enabled at (1009): [] count_memcg_event_mm+0x1b0/0x300 [ 64.325742][ C0] hardirqs last disabled at (1010): [] enter_el1_irq_or_nmi+0x10/0x1c [ 64.327424][ C0] softirqs last enabled at (944): [] local_bh_enable+0x10/0x34 [ 64.329191][ C0] softirqs last disabled at (942): [] local_bh_disable+0x10/0x34 [ 64.330839][ C0] ---[ end trace 5fb5e4773a4d54cc ]--- [ 64.450336][ T4795] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 64.451595][ T4795] Bad inode number on dev loop0: 2 is out of range [ 64.452794][ T4795] SysV FS: get root inode failed [ 64.453893][ T4795] oldfs: cannot read superblock [ 64.461328][ C0] ------------[ cut here ]------------ [ 64.462243][ C0] VFS: brelse: Trying to free free buffer [ 64.463137][ C0] WARNING: CPU: 0 PID: 4796 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 64.464553][ C0] Modules linked in: [ 64.465150][ C0] CPU: 0 PID: 4796 Comm: syz-executor Tainted: G W syzkaller #0 [ 64.466539][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.468091][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 64.469455][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 64.470354][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 64.471162][ C0] sp : ffff800008007df0 [ 64.471896][ C0] x29: ffff800008007df0 x28: ffff0000c0c68000 x27: 1fffe000341cc45c [ 64.473307][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 64.474787][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6b4e8 [ 64.476284][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 64.477693][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 64.479051][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 64.480406][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : ead7ab329fc7e900 [ 64.481798][ C0] x8 : ead7ab329fc7e900 x7 : 0000000000000001 x6 : 0000000000000001 [ 64.483269][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 64.484676][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 64.486070][ C0] Call trace: [ 64.486633][ C0] invalidate_bh_lru+0x128/0x22c [ 64.487479][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 64.488520][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 64.489690][ C0] ipi_handler+0x10c/0x70c [ 64.490445][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 64.491429][ C0] handle_domain_irq+0x148/0x200 [ 64.492309][ C0] gic_handle_irq+0x78/0x1b8 [ 64.493120][ C0] call_on_irq_stack+0x30/0x48 [ 64.493943][ C0] do_interrupt_handler+0x6c/0x88 [ 64.494787][ C0] el1_interrupt+0x30/0x58 [ 64.495541][ C0] el1h_64_irq_handler+0x18/0x24 [ 64.496391][ C0] el1h_64_irq+0x78/0x7c [ 64.497164][ C0] wp_page_copy+0x2c4/0x13dc [ 64.497969][ C0] do_wp_page+0x6d0/0x994 [ 64.498731][ C0] handle_mm_fault+0x1668/0x2aac [ 64.499590][ C0] do_page_fault+0x690/0xad0 [ 64.500401][ C0] do_mem_abort+0x6c/0x1b0 [ 64.501177][ C0] el0_da+0x90/0x1ec [ 64.501848][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 64.502721][ C0] el0t_64_sync+0x1a0/0x1a4 [ 64.503494][ C0] irq event stamp: 920 [ 64.504210][ C0] hardirqs last enabled at (919): [] charge_memcg+0x190/0x21c [ 64.505858][ C0] hardirqs last disabled at (920): [] enter_el1_irq_or_nmi+0x10/0x1c [ 64.507456][ C0] softirqs last enabled at (742): [] local_bh_enable+0x10/0x34 [ 64.509166][ C0] softirqs last disabled at (740): [] local_bh_disable+0x10/0x34 [ 64.510746][ C0] ---[ end trace 5fb5e4773a4d54cd ]--- [ 64.616560][ T4797] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 64.617776][ T4797] Bad inode number on dev loop0: 2 is out of range [ 64.618992][ T4797] SysV FS: get root inode failed [ 64.619931][ T4797] oldfs: cannot read superblock [ 64.625088][ C0] ------------[ cut here ]------------ [ 64.626012][ C0] VFS: brelse: Trying to free free buffer [ 64.627027][ C0] WARNING: CPU: 0 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 64.628499][ C0] Modules linked in: [ 64.629176][ C0] CPU: 0 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 64.630830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.632581][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 64.633940][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 64.634815][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 64.635785][ C0] sp : ffff800008007df0 [ 64.636466][ C0] x29: ffff800008007df0 x28: ffff0000c92bd1c0 x27: 1fffe000341cc45c [ 64.637970][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 64.639432][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6b888 [ 64.640824][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 64.642316][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 64.643694][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 64.645218][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 19df2bd9a1324800 [ 64.646648][ C0] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 64.648085][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 64.649426][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 64.650791][ C0] Call trace: [ 64.651334][ C0] invalidate_bh_lru+0x128/0x22c [ 64.652186][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 64.653211][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 64.654395][ C0] ipi_handler+0x10c/0x70c [ 64.655148][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 64.656085][ C0] handle_domain_irq+0x148/0x200 [ 64.656954][ C0] gic_handle_irq+0x78/0x1b8 [ 64.657759][ C0] call_on_irq_stack+0x30/0x48 [ 64.658592][ C0] do_interrupt_handler+0x6c/0x88 [ 64.659434][ C0] el1_interrupt+0x30/0x58 [ 64.660183][ C0] el1h_64_irq_handler+0x18/0x24 [ 64.661036][ C0] el1h_64_irq+0x78/0x7c [ 64.661786][ C0] __sanitizer_cov_trace_pc+0xa4/0xa8 [ 64.662736][ C0] arch_stack_walk+0x204/0x2c0 [ 64.663556][ C0] stack_trace_save+0x9c/0xf0 [ 64.664357][ C0] kasan_set_track+0x4c/0x84 [ 64.665151][ C0] kasan_set_free_info+0x28/0x4c [ 64.666029][ C0] ____kasan_slab_free+0x118/0x164 [ 64.666911][ C0] __kasan_slab_free+0x18/0x28 [ 64.667759][ C0] slab_free_freelist_hook+0x128/0x1e4 [ 64.668671][ C0] kfree+0x16c/0x404 [ 64.669361][ C0] __free_slab+0x120/0x38c [ 64.670150][ C0] discard_slab+0x64/0xd8 [ 64.670923][ C0] __unfreeze_partials+0x150/0x190 [ 64.671794][ C0] put_cpu_partial+0x1a8/0x214 [ 64.672622][ C0] __slab_free+0x178/0x240 [ 64.673375][ C0] ___cache_free+0x178/0x1bc [ 64.674177][ C0] qlink_free+0x5c/0xa0 [ 64.674885][ C0] qlist_free_all+0x40/0xa8 [ 64.675674][ C0] kasan_quarantine_reduce+0x124/0x130 [ 64.676672][ C0] __kasan_slab_alloc+0x34/0xcc [ 64.677509][ C0] slab_post_alloc_hook+0x74/0x3f8 [ 64.678442][ C0] kmem_cache_alloc+0x1dc/0x3d8 [ 64.679329][ C0] sock_alloc_inode+0x24/0xc4 [ 64.680132][ C0] new_inode_pseudo+0x68/0x200 [ 64.680922][ C0] __sock_create+0x138/0x8a8 [ 64.681715][ C0] __sys_socket+0xf0/0x18c [ 64.682446][ C0] __arm64_sys_socket+0x7c/0x94 [ 64.683283][ C0] invoke_syscall+0x98/0x28c [ 64.684084][ C0] el0_svc_common+0x13c/0x258 [ 64.684911][ C0] do_el0_svc+0x5c/0x140 [ 64.685610][ C0] el0_svc+0x78/0x1d0 [ 64.686246][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 64.687093][ C0] el0t_64_sync+0x1a0/0x1a4 [ 64.687893][ C0] irq event stamp: 210626 [ 64.688595][ C0] hardirqs last enabled at (210625): [] free_unref_page+0x148/0x1f8 [ 64.690254][ C0] hardirqs last disabled at (210626): [] enter_el1_irq_or_nmi+0x10/0x1c [ 64.691978][ C0] softirqs last enabled at (210478): [] release_sock+0x1d0/0x258 [ 64.693619][ C0] softirqs last disabled at (210476): [] release_sock+0x34/0x258 [ 64.695223][ C0] ---[ end trace 5fb5e4773a4d54ce ]--- [ 64.769822][ T4799] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 64.771116][ T4799] Bad inode number on dev loop0: 2 is out of range [ 64.772395][ T4799] SysV FS: get root inode failed [ 64.773311][ T4799] oldfs: cannot read superblock [ 64.794537][ C1] ------------[ cut here ]------------ [ 64.795520][ C1] VFS: brelse: Trying to free free buffer [ 64.796489][ C1] WARNING: CPU: 1 PID: 4802 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 64.797980][ C1] Modules linked in: [ 64.798680][ C1] CPU: 1 PID: 4802 Comm: syz-executor Tainted: G W syzkaller #0 [ 64.800256][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.802035][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 64.803433][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 64.804393][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 64.805353][ C1] sp : ffff800008017df0 [ 64.806096][ C1] x29: ffff800008017df0 x28: ffff0000d686d1c0 x27: 1fffe000341d065c [ 64.807578][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 64.809053][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deebfa58 [ 64.810440][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 64.811914][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 64.813383][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 64.814858][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : ee9e235bef389b00 [ 64.816259][ C1] x8 : ee9e235bef389b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 64.817686][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 64.819217][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 64.820641][ C1] Call trace: [ 64.821212][ C1] invalidate_bh_lru+0x128/0x22c [ 64.822089][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 64.823166][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 64.824461][ C1] ipi_handler+0x10c/0x70c [ 64.825422][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 64.826614][ C1] handle_domain_irq+0x148/0x200 [ 64.827696][ C1] gic_handle_irq+0x78/0x1b8 [ 64.828673][ C1] call_on_irq_stack+0x30/0x48 [ 64.829673][ C1] do_interrupt_handler+0x6c/0x88 [ 64.830647][ C1] el1_interrupt+0x30/0x58 [ 64.831431][ C1] el1h_64_irq_handler+0x18/0x24 [ 64.832377][ C1] el1h_64_irq+0x78/0x7c [ 64.833110][ C1] do_raw_spin_lock+0x1d4/0x2fc [ 64.834000][ C1] lockref_put_or_lock+0x30/0xd0 [ 64.834923][ C1] dput+0x1fc/0x448 [ 64.835648][ C1] do_symlinkat+0x1cc/0x5b4 [ 64.836537][ C1] __arm64_sys_symlinkat+0xa4/0xbc [ 64.837493][ C1] invoke_syscall+0x98/0x28c [ 64.838299][ C1] el0_svc_common+0x13c/0x258 [ 64.839139][ C1] do_el0_svc+0x5c/0x140 [ 64.839910][ C1] el0_svc+0x78/0x1d0 [ 64.840620][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 64.841506][ C1] el0t_64_sync+0x1a0/0x1a4 [ 64.842312][ C1] irq event stamp: 880 [ 64.843054][ C1] hardirqs last enabled at (879): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 64.844961][ C1] hardirqs last disabled at (880): [] enter_el1_irq_or_nmi+0x10/0x1c [ 64.846714][ C1] softirqs last enabled at (734): [] local_bh_enable+0x10/0x34 [ 64.848369][ C1] softirqs last disabled at (732): [] local_bh_disable+0x10/0x34 [ 64.849950][ C1] ---[ end trace 5fb5e4773a4d54cf ]--- [ 64.991214][ T4803] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 64.992476][ T4803] Bad inode number on dev loop0: 2 is out of range [ 64.993550][ T4803] SysV FS: get root inode failed [ 64.994400][ T4803] oldfs: cannot read superblock [ 65.009166][ T4805] ------------[ cut here ]------------ [ 65.010133][ T4805] VFS: brelse: Trying to free free buffer [ 65.011083][ T4805] WARNING: CPU: 0 PID: 4805 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.012434][ T4805] Modules linked in: [ 65.013072][ T4805] CPU: 0 PID: 4805 Comm: syz.0.54 Tainted: G W syzkaller #0 [ 65.014518][ T4805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.016136][ T4805] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.017689][ T4805] pc : invalidate_bh_lru+0x128/0x22c [ 65.018619][ T4805] lr : invalidate_bh_lru+0x128/0x22c [ 65.019554][ T4805] sp : ffff80001f4177d0 [ 65.020254][ T4805] x29: ffff80001f4177d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 65.021626][ T4805] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 65.023100][ T4805] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6bc28 [ 65.024547][ T4805] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 65.025932][ T4805] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 65.027348][ T4805] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 65.028748][ T4805] x11: ff80800008300a7c x10: 0000000000000000 x9 : 3e5cbbdc53b49200 [ 65.030095][ T4805] x8 : 3e5cbbdc53b49200 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.031518][ T4805] x5 : ffff80001f4170d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 65.032899][ T4805] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 65.034313][ T4805] Call trace: [ 65.034986][ T4805] invalidate_bh_lru+0x128/0x22c [ 65.035871][ T4805] smp_call_function_many_cond+0xa5c/0xec0 [ 65.036892][ T4805] on_each_cpu_cond_mask+0x5c/0xc4 [ 65.037868][ T4805] invalidate_bh_lrus+0x34/0x40 [ 65.038748][ T4805] blkdev_flush_mapping+0x16c/0x334 [ 65.039748][ T4805] blkdev_put+0x444/0x6c4 [ 65.040502][ T4805] blkdev_close+0x74/0xb0 [ 65.041360][ T4805] __fput+0x1b8/0x7e8 [ 65.042111][ T4805] ____fput+0x20/0x30 [ 65.042787][ T4805] task_work_run+0x13c/0x1e8 [ 65.043595][ T4805] do_notify_resume+0x2488/0x30a8 [ 65.044484][ T4805] el0_svc+0xf0/0x1d0 [ 65.045191][ T4805] el0t_64_sync_handler+0xcc/0xe4 [ 65.046022][ T4805] el0t_64_sync+0x1a0/0x1a4 [ 65.046811][ T4805] irq event stamp: 736 [ 65.047511][ T4805] hardirqs last enabled at (735): [] finish_lock_switch+0xb0/0x1c8 [ 65.049184][ T4805] hardirqs last disabled at (736): [] smp_call_function_many_cond+0xa50/0xec0 [ 65.050983][ T4805] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 65.052600][ T4805] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 65.054251][ T4805] ---[ end trace 5fb5e4773a4d54d0 ]--- [ 65.082874][ T4807] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.084141][ T4807] Bad inode number on dev loop0: 2 is out of range [ 65.085224][ T4807] SysV FS: get root inode failed [ 65.085942][ T4807] oldfs: cannot read superblock [ 65.091637][ C1] ------------[ cut here ]------------ [ 65.092659][ C1] VFS: brelse: Trying to free free buffer [ 65.093627][ C1] WARNING: CPU: 1 PID: 4808 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.095035][ C1] Modules linked in: [ 65.095664][ C1] CPU: 1 PID: 4808 Comm: syz-executor Tainted: G W syzkaller #0 [ 65.096977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.098388][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.099883][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 65.100906][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 65.101918][ C1] sp : ffff800008017df0 [ 65.102705][ C1] x29: ffff800008017df0 x28: ffff0000d8ee51c0 x27: 1fffe000341d065b [ 65.104159][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 65.105610][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deebfdf8 [ 65.107080][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 65.108540][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 65.109991][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 65.111407][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : de83b8ed015b9000 [ 65.112849][ C1] x8 : de83b8ed015b9000 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.114325][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 65.116023][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 65.117643][ C1] Call trace: [ 65.118233][ C1] invalidate_bh_lru+0x128/0x22c [ 65.119171][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 65.120305][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 65.121531][ C1] ipi_handler+0x10c/0x70c [ 65.122352][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 65.123364][ C1] handle_domain_irq+0x148/0x200 [ 65.124239][ C1] gic_handle_irq+0x78/0x1b8 [ 65.125026][ C1] call_on_irq_stack+0x30/0x48 [ 65.125855][ C1] do_interrupt_handler+0x6c/0x88 [ 65.126740][ C1] el1_interrupt+0x30/0x58 [ 65.127583][ C1] el1h_64_irq_handler+0x18/0x24 [ 65.128423][ C1] el1h_64_irq+0x78/0x7c [ 65.129177][ C1] lock_page_memcg+0x120/0x22c [ 65.129988][ C1] page_add_file_rmap+0x148/0x8c4 [ 65.130904][ C1] do_set_pte+0x390/0x4e4 [ 65.131680][ C1] filemap_map_pages+0x9c4/0xc44 [ 65.132614][ C1] handle_mm_fault+0x18b0/0x2aac [ 65.133510][ C1] do_page_fault+0x690/0xad0 [ 65.134348][ C1] do_translation_fault+0xe0/0x130 [ 65.135270][ C1] do_mem_abort+0x6c/0x1b0 [ 65.136057][ C1] el0_ia+0xe0/0x2b8 [ 65.136781][ C1] el0t_64_sync_handler+0xc0/0xe4 [ 65.137717][ C1] el0t_64_sync+0x1a0/0x1a4 [ 65.138539][ C1] irq event stamp: 408 [ 65.139364][ C1] hardirqs last enabled at (407): [] lock_page_memcg+0x110/0x22c [ 65.141228][ C1] hardirqs last disabled at (408): [] enter_el1_irq_or_nmi+0x10/0x1c [ 65.143132][ C1] softirqs last enabled at (60): [] local_bh_enable+0x10/0x34 [ 65.144796][ C1] softirqs last disabled at (58): [] local_bh_disable+0x10/0x34 [ 65.146469][ C1] ---[ end trace 5fb5e4773a4d54d1 ]--- [ 65.181768][ T4809] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.183134][ T4809] Bad inode number on dev loop0: 2 is out of range [ 65.184870][ T4809] SysV FS: get root inode failed [ 65.185647][ T4809] oldfs: cannot read superblock [ 65.190491][ C0] ------------[ cut here ]------------ [ 65.191338][ C0] VFS: brelse: Trying to free free buffer [ 65.192221][ C0] WARNING: CPU: 0 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.193586][ C0] Modules linked in: [ 65.194199][ C0] CPU: 0 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 65.195590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.197088][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.198289][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 65.199235][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 65.200136][ C0] sp : ffff800008007df0 [ 65.200843][ C0] x29: ffff800008007df0 x28: ffff0000c92bd1c0 x27: 1fffe000341cc45c [ 65.202237][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 65.203536][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6c060 [ 65.204927][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 65.206340][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 65.207741][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 65.209126][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 19df2bd9a1324800 [ 65.210529][ C0] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.211911][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 65.213341][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 65.214759][ C0] Call trace: [ 65.215339][ C0] invalidate_bh_lru+0x128/0x22c [ 65.216160][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 65.217258][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 65.218444][ C0] ipi_handler+0x10c/0x70c [ 65.219224][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 65.220167][ C0] handle_domain_irq+0x148/0x200 [ 65.221000][ C0] gic_handle_irq+0x78/0x1b8 [ 65.221692][ C0] call_on_irq_stack+0x30/0x48 [ 65.222527][ C0] do_interrupt_handler+0x6c/0x88 [ 65.223329][ C0] el1_interrupt+0x30/0x58 [ 65.224054][ C0] el1h_64_irq_handler+0x18/0x24 [ 65.224882][ C0] el1h_64_irq+0x78/0x7c [ 65.225694][ C0] alloc_counters+0x3e8/0x790 [ 65.226453][ C0] do_ip6t_get_ctl+0xb58/0x1464 [ 65.227247][ C0] nf_getsockopt+0x254/0x274 [ 65.227997][ C0] ipv6_getsockopt+0x588/0x256c [ 65.228911][ C0] tcp_getsockopt+0x214/0x2d2c [ 65.229726][ C0] sock_common_getsockopt+0xa8/0xc4 [ 65.230628][ C0] __sys_getsockopt+0x1b8/0x250 [ 65.231440][ C0] __arm64_sys_getsockopt+0xc0/0xdc [ 65.232291][ C0] invoke_syscall+0x98/0x28c [ 65.233107][ C0] el0_svc_common+0x13c/0x258 [ 65.233847][ C0] do_el0_svc+0x5c/0x140 [ 65.234556][ C0] el0_svc+0x78/0x1d0 [ 65.235224][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 65.236104][ C0] el0t_64_sync+0x1a0/0x1a4 [ 65.236861][ C0] irq event stamp: 225134 [ 65.237614][ C0] hardirqs last enabled at (225133): [] alloc_counters+0x3c4/0x790 [ 65.239312][ C0] hardirqs last disabled at (225134): [] enter_el1_irq_or_nmi+0x10/0x1c [ 65.241027][ C0] softirqs last enabled at (225004): [] release_sock+0x1d0/0x258 [ 65.242615][ C0] softirqs last disabled at (225002): [] release_sock+0x34/0x258 [ 65.244246][ C0] ---[ end trace 5fb5e4773a4d54d2 ]--- [ 65.272774][ T4811] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.274144][ T4811] Bad inode number on dev loop0: 2 is out of range [ 65.275270][ T4811] SysV FS: get root inode failed [ 65.276059][ T4811] oldfs: cannot read superblock [ 65.282620][ C1] ------------[ cut here ]------------ [ 65.283579][ C1] VFS: brelse: Trying to free free buffer [ 65.284537][ C1] WARNING: CPU: 1 PID: 4812 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.286038][ C1] Modules linked in: [ 65.286621][ C1] CPU: 1 PID: 4812 Comm: syz-executor Tainted: G W syzkaller #0 [ 65.288116][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.289854][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.291225][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 65.292153][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 65.293104][ C1] sp : ffff800008017df0 [ 65.293847][ C1] x29: ffff800008017df0 x28: ffff0000cd359b40 x27: 1fffe000341d065c [ 65.295304][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 65.296739][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deebb230 [ 65.298117][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 65.299579][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 65.301029][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 65.302517][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : f6f3dad2266fc400 [ 65.304003][ C1] x8 : f6f3dad2266fc400 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.305491][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 65.306946][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 65.308416][ C1] Call trace: [ 65.309020][ C1] invalidate_bh_lru+0x128/0x22c [ 65.309897][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 65.310957][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 65.312161][ C1] ipi_handler+0x10c/0x70c [ 65.312964][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 65.313925][ C1] handle_domain_irq+0x148/0x200 [ 65.314774][ C1] gic_handle_irq+0x78/0x1b8 [ 65.315572][ C1] call_on_irq_stack+0x30/0x48 [ 65.316426][ C1] do_interrupt_handler+0x6c/0x88 [ 65.317249][ C1] el1_interrupt+0x30/0x58 [ 65.318031][ C1] el1h_64_irq_handler+0x18/0x24 [ 65.318953][ C1] el1h_64_irq+0x78/0x7c [ 65.319757][ C1] lock_acquire+0x234/0x618 [ 65.320574][ C1] rcu_lock_acquire+0x38/0x44 [ 65.321352][ C1] percpu_ref_put+0x24/0x230 [ 65.322070][ C1] __mem_cgroup_charge+0x74/0xa8 [ 65.322863][ C1] wp_page_copy+0x274/0x13dc [ 65.323735][ C1] do_wp_page+0x6d0/0x994 [ 65.324645][ C1] handle_mm_fault+0x1668/0x2aac [ 65.325541][ C1] do_page_fault+0x690/0xad0 [ 65.326368][ C1] do_mem_abort+0x6c/0x1b0 [ 65.327160][ C1] el0_da+0x90/0x1ec [ 65.327829][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 65.328711][ C1] el0t_64_sync+0x1a0/0x1a4 [ 65.329498][ C1] irq event stamp: 348 [ 65.330177][ C1] hardirqs last enabled at (347): [] charge_memcg+0x190/0x21c [ 65.331799][ C1] hardirqs last disabled at (348): [] enter_el1_irq_or_nmi+0x10/0x1c [ 65.333541][ C1] softirqs last enabled at (24): [] local_bh_enable+0x10/0x34 [ 65.335139][ C1] softirqs last disabled at (22): [] local_bh_disable+0x10/0x34 [ 65.336749][ C1] ---[ end trace 5fb5e4773a4d54d3 ]--- [ 65.371030][ T4813] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.372388][ T4813] Bad inode number on dev loop0: 2 is out of range [ 65.373581][ T4813] SysV FS: get root inode failed [ 65.374472][ T4813] oldfs: cannot read superblock [ 65.377401][ C0] ------------[ cut here ]------------ [ 65.378395][ C0] VFS: brelse: Trying to free free buffer [ 65.379398][ C0] WARNING: CPU: 0 PID: 4372 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.380839][ C0] Modules linked in: [ 65.381519][ C0] CPU: 0 PID: 4372 Comm: syz-execprog Tainted: G W syzkaller #0 [ 65.383167][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.384931][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.386325][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 65.387360][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 65.388355][ C0] sp : ffff800008007df0 [ 65.389085][ C0] x29: ffff800008007df0 x28: ffff0000c7341b40 x27: 1fffe000341cc45c [ 65.390435][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 65.391844][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6c400 [ 65.393254][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 65.394664][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 65.396151][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 65.397650][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 9b6535c3c8003c00 [ 65.399302][ C0] x8 : 9b6535c3c8003c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.400935][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 65.402532][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 65.404120][ C0] Call trace: [ 65.404786][ C0] invalidate_bh_lru+0x128/0x22c [ 65.405753][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 65.406845][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 65.408069][ C0] ipi_handler+0x10c/0x70c [ 65.408854][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 65.409852][ C0] handle_domain_irq+0x148/0x200 [ 65.410737][ C0] gic_handle_irq+0x78/0x1b8 [ 65.411477][ C0] call_on_irq_stack+0x30/0x48 [ 65.412295][ C0] do_interrupt_handler+0x6c/0x88 [ 65.413152][ C0] el1_interrupt+0x30/0x58 [ 65.413899][ C0] el1h_64_irq_handler+0x18/0x24 [ 65.414767][ C0] el1h_64_irq+0x78/0x7c [ 65.415535][ C0] finish_lock_switch+0xb8/0x1c8 [ 65.416456][ C0] finish_task_switch+0x120/0x6f4 [ 65.417433][ C0] __schedule+0xe24/0x1c6c [ 65.418263][ C0] schedule+0x11c/0x1c8 [ 65.418998][ C0] do_nanosleep+0x1ac/0x64c [ 65.419818][ C0] __arm64_sys_nanosleep+0x378/0x4a0 [ 65.420776][ C0] invoke_syscall+0x98/0x28c [ 65.421666][ C0] el0_svc_common+0x13c/0x258 [ 65.422510][ C0] do_el0_svc+0x5c/0x140 [ 65.423290][ C0] el0_svc+0x78/0x1d0 [ 65.424014][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 65.424923][ C0] el0t_64_sync+0x1a0/0x1a4 [ 65.425805][ C0] irq event stamp: 14218 [ 65.426571][ C0] hardirqs last enabled at (14217): [] finish_lock_switch+0xb0/0x1c8 [ 65.428232][ C0] hardirqs last disabled at (14218): [] enter_el1_irq_or_nmi+0x10/0x1c [ 65.429924][ C0] softirqs last enabled at (14208): [] local_bh_enable+0x10/0x34 [ 65.431588][ C0] softirqs last disabled at (14206): [] local_bh_disable+0x10/0x34 [ 65.433262][ C0] ---[ end trace 5fb5e4773a4d54d4 ]--- [ 65.468860][ T4815] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.470110][ T4815] Bad inode number on dev loop0: 2 is out of range [ 65.471205][ T4815] SysV FS: get root inode failed [ 65.472032][ T4815] oldfs: cannot read superblock [ 65.483585][ T4817] ------------[ cut here ]------------ [ 65.484620][ T4817] VFS: brelse: Trying to free free buffer [ 65.485617][ T4817] WARNING: CPU: 1 PID: 4817 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.486995][ T4817] Modules linked in: [ 65.487572][ T4817] CPU: 1 PID: 4817 Comm: syz.0.60 Tainted: G W syzkaller #0 [ 65.489009][ T4817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.490779][ T4817] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.492248][ T4817] pc : invalidate_bh_lru+0x128/0x22c [ 65.493216][ T4817] lr : invalidate_bh_lru+0x128/0x22c [ 65.494160][ T4817] sp : ffff80001fe877d0 [ 65.494888][ T4817] x29: ffff80001fe877d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 65.496265][ T4817] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 65.497627][ T4817] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deebb5d0 [ 65.499088][ T4817] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 65.500543][ T4817] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 65.502090][ T4817] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 65.503525][ T4817] x11: ff80800008300a7c x10: 0000000000000000 x9 : b17839dd68504100 [ 65.504993][ T4817] x8 : b17839dd68504100 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.506432][ T4817] x5 : ffff80001fe870d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 65.507877][ T4817] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 65.509330][ T4817] Call trace: [ 65.509970][ T4817] invalidate_bh_lru+0x128/0x22c [ 65.510872][ T4817] smp_call_function_many_cond+0xa5c/0xec0 [ 65.511892][ T4817] on_each_cpu_cond_mask+0x5c/0xc4 [ 65.512831][ T4817] invalidate_bh_lrus+0x34/0x40 [ 65.513717][ T4817] blkdev_flush_mapping+0x16c/0x334 [ 65.514559][ T4817] blkdev_put+0x444/0x6c4 [ 65.515324][ T4817] blkdev_close+0x74/0xb0 [ 65.516042][ T4817] __fput+0x1b8/0x7e8 [ 65.516776][ T4817] ____fput+0x20/0x30 [ 65.517417][ T4817] task_work_run+0x13c/0x1e8 [ 65.518245][ T4817] do_notify_resume+0x2488/0x30a8 [ 65.519160][ T4817] el0_svc+0xf0/0x1d0 [ 65.519929][ T4817] el0t_64_sync_handler+0xcc/0xe4 [ 65.520791][ T4817] el0t_64_sync+0x1a0/0x1a4 [ 65.521614][ T4817] irq event stamp: 756 [ 65.522305][ T4817] hardirqs last enabled at (755): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 65.524082][ T4817] hardirqs last disabled at (756): [] smp_call_function_many_cond+0xa50/0xec0 [ 65.525995][ T4817] softirqs last enabled at (726): [] local_bh_enable+0x10/0x34 [ 65.527660][ T4817] softirqs last disabled at (724): [] local_bh_disable+0x10/0x34 [ 65.529596][ T4817] ---[ end trace 5fb5e4773a4d54d5 ]--- [ 65.580846][ T4819] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.582141][ T4819] Bad inode number on dev loop0: 2 is out of range [ 65.583321][ T4819] SysV FS: get root inode failed [ 65.584215][ T4819] oldfs: cannot read superblock [ 65.590108][ T4720] ------------[ cut here ]------------ [ 65.591103][ T4720] VFS: brelse: Trying to free free buffer [ 65.592056][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.593510][ T4720] Modules linked in: [ 65.594136][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 65.595383][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.597005][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.598253][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 65.599192][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 65.600129][ T4720] sp : ffff80001f9d77d0 [ 65.600867][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 65.602401][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 65.603819][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deebb970 [ 65.605327][ T4720] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 65.606748][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 65.608158][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 65.609623][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 65.611058][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.612547][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 65.613980][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 65.615455][ T4720] Call trace: [ 65.616059][ T4720] invalidate_bh_lru+0x128/0x22c [ 65.616946][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 65.618004][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 65.618912][ T4720] invalidate_bh_lrus+0x34/0x40 [ 65.619747][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 65.620648][ T4720] blkdev_put+0x444/0x6c4 [ 65.621492][ T4720] blkdev_close+0x74/0xb0 [ 65.622280][ T4720] __fput+0x1b8/0x7e8 [ 65.622996][ T4720] ____fput+0x20/0x30 [ 65.623747][ T4720] task_work_run+0x13c/0x1e8 [ 65.624589][ T4720] do_notify_resume+0x2488/0x30a8 [ 65.625517][ T4720] el0_svc+0xf0/0x1d0 [ 65.626288][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 65.627175][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 65.627886][ T4720] irq event stamp: 185110 [ 65.628556][ T4720] hardirqs last enabled at (185109): [] kasan_quarantine_put+0xc4/0x200 [ 65.630093][ T4720] hardirqs last disabled at (185110): [] smp_call_function_many_cond+0xa50/0xec0 [ 65.631827][ T4720] softirqs last enabled at (184862): [] local_bh_enable+0x10/0x34 [ 65.633545][ T4720] softirqs last disabled at (184860): [] local_bh_disable+0x10/0x34 [ 65.635249][ T4720] ---[ end trace 5fb5e4773a4d54d6 ]--- [ 65.667751][ T4821] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.669898][ T4821] Bad inode number on dev loop0: 2 is out of range [ 65.671042][ T4821] SysV FS: get root inode failed [ 65.671812][ T4821] oldfs: cannot read superblock [ 65.677513][ C1] ------------[ cut here ]------------ [ 65.678556][ C1] VFS: brelse: Trying to free free buffer [ 65.679699][ C1] WARNING: CPU: 1 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.681235][ C1] Modules linked in: [ 65.681908][ C1] CPU: 1 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 65.683448][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.685187][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.686597][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 65.687605][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 65.688549][ C1] sp : ffff800008017df0 [ 65.689289][ C1] x29: ffff800008017df0 x28: ffff0000c92bd1c0 x27: 1fffe000341d065c [ 65.690744][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 65.692368][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deebbd10 [ 65.693833][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 65.695507][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 65.697015][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 65.698598][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 19df2bd9a1324800 [ 65.700151][ C1] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.701649][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 65.703100][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 65.704591][ C1] Call trace: [ 65.705157][ C1] invalidate_bh_lru+0x128/0x22c [ 65.706010][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 65.707218][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 65.708503][ C1] ipi_handler+0x10c/0x70c [ 65.709279][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 65.710215][ C1] handle_domain_irq+0x148/0x200 [ 65.711101][ C1] gic_handle_irq+0x78/0x1b8 [ 65.711961][ C1] call_on_irq_stack+0x30/0x48 [ 65.712833][ C1] do_interrupt_handler+0x6c/0x88 [ 65.713742][ C1] el1_interrupt+0x30/0x58 [ 65.714518][ C1] el1h_64_irq_handler+0x18/0x24 [ 65.715372][ C1] el1h_64_irq+0x78/0x7c [ 65.716112][ C1] crng_make_state+0x3b0/0x5f4 [ 65.716951][ C1] _get_random_bytes+0xf4/0x22c [ 65.717797][ C1] get_random_bytes+0x28/0x38 [ 65.718617][ C1] copy_thread+0x380/0x384 [ 65.719442][ C1] copy_process+0x16c4/0x36f4 [ 65.720282][ C1] kernel_clone+0x1ec/0xa10 [ 65.721612][ C1] __arm64_sys_clone+0x154/0x1c0 [ 65.722473][ C1] invoke_syscall+0x98/0x28c [ 65.723372][ C1] el0_svc_common+0x13c/0x258 [ 65.724246][ C1] do_el0_svc+0x5c/0x140 [ 65.725048][ C1] el0_svc+0x78/0x1d0 [ 65.725781][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 65.726721][ C1] el0t_64_sync+0x1a0/0x1a4 [ 65.727610][ C1] irq event stamp: 239452 [ 65.728484][ C1] hardirqs last enabled at (239451): [] crng_make_state+0x390/0x5f4 [ 65.730149][ C1] hardirqs last disabled at (239452): [] enter_el1_irq_or_nmi+0x10/0x1c [ 65.731913][ C1] softirqs last enabled at (239308): [] local_bh_enable+0x10/0x34 [ 65.733635][ C1] softirqs last disabled at (239306): [] local_bh_disable+0x10/0x34 [ 65.735324][ C1] ---[ end trace 5fb5e4773a4d54d7 ]--- [ 65.851464][ T4823] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.852717][ T4823] Bad inode number on dev loop0: 2 is out of range [ 65.853734][ T4823] SysV FS: get root inode failed [ 65.854526][ T4823] oldfs: cannot read superblock [ 65.862324][ T4720] ------------[ cut here ]------------ [ 65.863237][ T4720] VFS: brelse: Trying to free free buffer [ 65.864228][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.865750][ T4720] Modules linked in: [ 65.866396][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 65.867819][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.869682][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.871100][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 65.872017][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 65.872939][ T4720] sp : ffff80001f9d77d0 [ 65.873659][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 65.875357][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 65.876870][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeb7148 [ 65.878356][ T4720] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 65.879812][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 65.881280][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 65.882684][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 65.884124][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.885644][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 65.887122][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 65.888501][ T4720] Call trace: [ 65.889089][ T4720] invalidate_bh_lru+0x128/0x22c [ 65.890017][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 65.891094][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 65.892067][ T4720] invalidate_bh_lrus+0x34/0x40 [ 65.892966][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 65.893932][ T4720] blkdev_put+0x444/0x6c4 [ 65.894714][ T4720] blkdev_close+0x74/0xb0 [ 65.895504][ T4720] __fput+0x1b8/0x7e8 [ 65.896226][ T4720] ____fput+0x20/0x30 [ 65.896958][ T4720] task_work_run+0x13c/0x1e8 [ 65.897787][ T4720] do_notify_resume+0x2488/0x30a8 [ 65.898750][ T4720] el0_svc+0xf0/0x1d0 [ 65.899572][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 65.900496][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 65.901320][ T4720] irq event stamp: 193592 [ 65.902099][ T4720] hardirqs last enabled at (193591): [] kasan_quarantine_put+0xc4/0x200 [ 65.903887][ T4720] hardirqs last disabled at (193592): [] smp_call_function_many_cond+0xa50/0xec0 [ 65.905799][ T4720] softirqs last enabled at (193382): [] local_bh_enable+0x10/0x34 [ 65.907571][ T4720] softirqs last disabled at (193380): [] local_bh_disable+0x10/0x34 [ 65.909379][ T4720] ---[ end trace 5fb5e4773a4d54d8 ]--- 1970/01/01 00:01:05 executed programs: 51 [ 65.954638][ T4825] set_capacity_and_notify: 31 callbacks suppressed [ 65.954647][ T4825] loop0: detected capacity change from 0 to 128 [ 65.958694][ T4825] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.960042][ T4825] Bad inode number on dev loop0: 2 is out of range [ 65.961169][ T4825] SysV FS: get root inode failed [ 65.962173][ T4825] oldfs: cannot read superblock [ 65.972480][ T4720] ------------[ cut here ]------------ [ 65.973326][ T4720] VFS: brelse: Trying to free free buffer [ 65.974313][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.975714][ T4720] Modules linked in: [ 65.976363][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 65.977663][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.979471][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.980894][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 65.981850][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 65.982805][ T4720] sp : ffff80001f9d77d0 [ 65.983562][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 65.985050][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 65.986544][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeb74e8 [ 65.988048][ T4720] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 65.989538][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 65.991012][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 65.992475][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 65.993959][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.995497][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 65.997002][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 65.998688][ T4720] Call trace: [ 65.999376][ T4720] invalidate_bh_lru+0x128/0x22c [ 66.000389][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 66.001565][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 66.002590][ T4720] invalidate_bh_lrus+0x34/0x40 [ 66.003380][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 66.004283][ T4720] blkdev_put+0x444/0x6c4 [ 66.005028][ T4720] blkdev_close+0x74/0xb0 [ 66.005810][ T4720] __fput+0x1b8/0x7e8 [ 66.006516][ T4720] ____fput+0x20/0x30 [ 66.007263][ T4720] task_work_run+0x13c/0x1e8 [ 66.008049][ T4720] do_notify_resume+0x2488/0x30a8 [ 66.008915][ T4720] el0_svc+0xf0/0x1d0 [ 66.009650][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 66.010486][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 66.011254][ T4720] irq event stamp: 198690 [ 66.012004][ T4720] hardirqs last enabled at (198689): [] kasan_quarantine_put+0xc4/0x200 [ 66.013806][ T4720] hardirqs last disabled at (198690): [] smp_call_function_many_cond+0xa50/0xec0 [ 66.015624][ T4720] softirqs last enabled at (198450): [] local_bh_enable+0x10/0x34 [ 66.017288][ T4720] softirqs last disabled at (198448): [] local_bh_disable+0x10/0x34 [ 66.019257][ T4720] ---[ end trace 5fb5e4773a4d54d9 ]--- [ 66.046927][ T4827] loop0: detected capacity change from 0 to 128 [ 66.099891][ T4827] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.101518][ T4827] Bad inode number on dev loop0: 2 is out of range [ 66.102709][ T4827] SysV FS: get root inode failed [ 66.103485][ T4827] oldfs: cannot read superblock [ 66.113653][ C0] ------------[ cut here ]------------ [ 66.114540][ C0] VFS: brelse: Trying to free free buffer [ 66.115562][ C0] WARNING: CPU: 0 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.116936][ C0] Modules linked in: [ 66.117658][ C0] CPU: 0 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 66.119302][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.121215][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.122677][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 66.123744][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 66.124729][ C0] sp : ffff800008007df0 [ 66.125483][ C0] x29: ffff800008007df0 x28: ffff0000d7338000 x27: 1fffe000341cc45c [ 66.126843][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 66.128209][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6c7a0 [ 66.129552][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 66.130941][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 66.132313][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 66.133632][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 148fc7e429cfbf00 [ 66.134960][ C0] x8 : 148fc7e429cfbf00 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.136272][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 66.137646][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 66.139051][ C0] Call trace: [ 66.139600][ C0] invalidate_bh_lru+0x128/0x22c [ 66.140427][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 66.141414][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 66.142607][ C0] ipi_handler+0x10c/0x70c [ 66.143366][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 66.144309][ C0] handle_domain_irq+0x148/0x200 [ 66.145128][ C0] gic_handle_irq+0x78/0x1b8 [ 66.145942][ C0] call_on_irq_stack+0x30/0x48 [ 66.146782][ C0] do_interrupt_handler+0x6c/0x88 [ 66.147656][ C0] el1_interrupt+0x30/0x58 [ 66.148413][ C0] el1h_64_irq_handler+0x18/0x24 [ 66.149268][ C0] el1h_64_irq+0x78/0x7c [ 66.150018][ C0] __sanitizer_cov_trace_pc+0x70/0xa8 [ 66.150949][ C0] __check_object_size+0x13c/0x4f0 [ 66.151818][ C0] strncpy_from_user+0xb8/0x5f8 [ 66.152661][ C0] getname_flags+0xec/0x44c [ 66.153429][ C0] getname+0x28/0x38 [ 66.154059][ C0] do_sys_openat2+0xdc/0x3fc [ 66.154837][ C0] __arm64_sys_openat+0x11c/0x150 [ 66.155734][ C0] invoke_syscall+0x98/0x28c [ 66.156528][ C0] el0_svc_common+0x13c/0x258 [ 66.157345][ C0] do_el0_svc+0x5c/0x140 [ 66.158072][ C0] el0_svc+0x78/0x1d0 [ 66.158760][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 66.159633][ C0] el0t_64_sync+0x1a0/0x1a4 [ 66.160456][ C0] irq event stamp: 967878 [ 66.161204][ C0] hardirqs last enabled at (967877): [] el0_svc_common+0xa0/0x258 [ 66.162804][ C0] hardirqs last disabled at (967878): [] enter_el1_irq_or_nmi+0x10/0x1c [ 66.164512][ C0] softirqs last enabled at (967872): [] local_bh_enable+0x10/0x34 [ 66.166141][ C0] softirqs last disabled at (967870): [] local_bh_disable+0x10/0x34 [ 66.167689][ C0] ---[ end trace 5fb5e4773a4d54da ]--- [ 66.240473][ T4829] loop0: detected capacity change from 0 to 128 [ 66.279226][ T4829] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.280477][ T4829] Bad inode number on dev loop0: 2 is out of range [ 66.281619][ T4829] SysV FS: get root inode failed [ 66.282452][ T4829] oldfs: cannot read superblock [ 66.283274][ T4829] ------------[ cut here ]------------ [ 66.284197][ T4829] VFS: brelse: Trying to free free buffer [ 66.285114][ T4829] WARNING: CPU: 0 PID: 4829 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.286693][ T4829] Modules linked in: [ 66.287389][ T4829] CPU: 0 PID: 4829 Comm: syz.0.66 Tainted: G W syzkaller #0 [ 66.288841][ T4829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.290561][ T4829] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.291836][ T4829] pc : invalidate_bh_lru+0x128/0x22c [ 66.292694][ T4829] lr : invalidate_bh_lru+0x128/0x22c [ 66.293589][ T4829] sp : ffff80001f5f7710 [ 66.294278][ T4829] x29: ffff80001f5f7710 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 66.295624][ T4829] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 66.296920][ T4829] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6cb40 [ 66.298251][ T4829] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 66.299666][ T4829] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 66.301031][ T4829] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 66.302423][ T4829] x11: ff80800008300a7c x10: 0000000000000000 x9 : f4a7d8bfa8325900 [ 66.303809][ T4829] x8 : f4a7d8bfa8325900 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.305152][ T4829] x5 : ffff80001f5f7018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 66.306481][ T4829] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 66.307848][ T4829] Call trace: [ 66.308397][ T4829] invalidate_bh_lru+0x128/0x22c [ 66.309277][ T4829] smp_call_function_many_cond+0xa5c/0xec0 [ 66.310264][ T4829] on_each_cpu_cond_mask+0x5c/0xc4 [ 66.311119][ T4829] invalidate_bh_lrus+0x34/0x40 [ 66.312004][ T4829] blkdev_flush_mapping+0x16c/0x334 [ 66.312902][ T4829] blkdev_put+0x444/0x6c4 [ 66.313635][ T4829] kill_block_super+0xa0/0xe0 [ 66.314418][ T4829] deactivate_locked_super+0xc0/0x13c [ 66.315322][ T4829] mount_bdev+0x284/0x35c [ 66.316061][ T4829] sysv_mount+0x44/0x58 [ 66.316792][ T4829] legacy_get_tree+0xd8/0x174 [ 66.317568][ T4829] vfs_get_tree+0x90/0x278 [ 66.318335][ T4829] do_new_mount+0x228/0x804 [ 66.319090][ T4829] path_mount+0x57c/0xfe8 [ 66.329838][ T4829] __arm64_sys_mount+0x488/0x5f8 [ 66.330696][ T4829] invoke_syscall+0x98/0x28c [ 66.341550][ T4829] el0_svc_common+0x13c/0x258 [ 66.342321][ T4829] do_el0_svc+0x5c/0x140 [ 66.343047][ T4829] el0_svc+0x78/0x1d0 [ 66.343763][ T4829] el0t_64_sync_handler+0xcc/0xe4 [ 66.344626][ T4829] el0t_64_sync+0x1a0/0x1a4 [ 66.345441][ T4829] irq event stamp: 996 [ 66.346116][ T4829] hardirqs last enabled at (995): [] kasan_quarantine_put+0xc4/0x200 [ 66.347775][ T4829] hardirqs last disabled at (996): [] smp_call_function_many_cond+0xa50/0xec0 [ 66.349586][ T4829] softirqs last enabled at (830): [] local_bh_enable+0x10/0x34 [ 66.351143][ T4829] softirqs last disabled at (828): [] local_bh_disable+0x10/0x34 [ 66.352692][ T4829] ---[ end trace 5fb5e4773a4d54db ]--- [ 66.491430][ T4831] loop0: detected capacity change from 0 to 128 [ 66.493767][ T4831] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.495129][ T4831] Bad inode number on dev loop0: 2 is out of range [ 66.496242][ T4831] SysV FS: get root inode failed [ 66.497093][ T4831] oldfs: cannot read superblock [ 66.500688][ C1] ------------[ cut here ]------------ [ 66.501657][ C1] VFS: brelse: Trying to free free buffer [ 66.502654][ C1] WARNING: CPU: 1 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.503995][ C1] Modules linked in: [ 66.504663][ C1] CPU: 1 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 66.506238][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.507927][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.509311][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 66.510281][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 66.511249][ C1] sp : ffff800008017df0 [ 66.511989][ C1] x29: ffff800008017df0 x28: ffff0000c92bd1c0 x27: 1fffe000341d065c [ 66.513400][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 66.514893][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeb7888 [ 66.516340][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 66.517841][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 66.519306][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 66.520695][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 19df2bd9a1324800 [ 66.521980][ C1] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.523320][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 66.524973][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 66.526438][ C1] Call trace: [ 66.527001][ C1] invalidate_bh_lru+0x128/0x22c [ 66.527900][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 66.528997][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 66.530340][ C1] ipi_handler+0x10c/0x70c [ 66.531247][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 66.532311][ C1] handle_domain_irq+0x148/0x200 [ 66.533254][ C1] gic_handle_irq+0x78/0x1b8 [ 66.534106][ C1] call_on_irq_stack+0x30/0x48 [ 66.534967][ C1] do_interrupt_handler+0x6c/0x88 [ 66.535823][ C1] el1_interrupt+0x30/0x58 [ 66.536608][ C1] el1h_64_irq_handler+0x18/0x24 [ 66.537449][ C1] el1h_64_irq+0x78/0x7c [ 66.538190][ C1] kasan_check_range+0x74/0x2a0 [ 66.539061][ C1] __kasan_check_read+0x44/0x54 [ 66.539969][ C1] do_raw_spin_unlock+0x68/0x234 [ 66.540836][ C1] _raw_spin_unlock+0x94/0x11c [ 66.541656][ C1] lockref_put_or_lock+0x7c/0xd0 [ 66.542490][ C1] dput+0x1fc/0x448 [ 66.543190][ C1] path_umount+0x240/0x1180 [ 66.544011][ C1] __arm64_sys_umount+0x130/0x184 [ 66.544936][ C1] invoke_syscall+0x98/0x28c [ 66.545857][ C1] el0_svc_common+0x13c/0x258 [ 66.546770][ C1] do_el0_svc+0x5c/0x140 [ 66.547562][ C1] el0_svc+0x78/0x1d0 [ 66.548279][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 66.549134][ C1] el0t_64_sync+0x1a0/0x1a4 [ 66.549962][ C1] irq event stamp: 251940 [ 66.550728][ C1] hardirqs last enabled at (251939): [] kasan_quarantine_put+0xc4/0x200 [ 66.552532][ C1] hardirqs last disabled at (251940): [] enter_el1_irq_or_nmi+0x10/0x1c [ 66.554306][ C1] softirqs last enabled at (251930): [] local_bh_enable+0x10/0x34 [ 66.556007][ C1] softirqs last disabled at (251928): [] local_bh_disable+0x10/0x34 [ 66.557614][ C1] ---[ end trace 5fb5e4773a4d54dc ]--- [ 66.597009][ T4833] loop0: detected capacity change from 0 to 128 [ 66.649397][ T4833] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.650696][ T4833] Bad inode number on dev loop0: 2 is out of range [ 66.651726][ T4833] SysV FS: get root inode failed [ 66.652531][ T4833] oldfs: cannot read superblock [ 66.661141][ C1] ------------[ cut here ]------------ [ 66.662070][ C1] VFS: brelse: Trying to free free buffer [ 66.662989][ C1] WARNING: CPU: 1 PID: 4834 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.664322][ C1] Modules linked in: [ 66.664904][ C1] CPU: 1 PID: 4834 Comm: syz-executor Tainted: G W syzkaller #0 [ 66.666347][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.667882][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.669256][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 66.670213][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 66.671171][ C1] sp : ffff800008017df0 [ 66.671884][ C1] x29: ffff800008017df0 x28: ffff0000c1161b40 x27: 1fffe000341d065c [ 66.673346][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 66.674786][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeb7c28 [ 66.676273][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 66.677719][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 66.679202][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 66.680654][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 443b3d0418787000 [ 66.682120][ C1] x8 : 443b3d0418787000 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.683598][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 66.684985][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 66.686469][ C1] Call trace: [ 66.687042][ C1] invalidate_bh_lru+0x128/0x22c [ 66.687969][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 66.688999][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 66.690228][ C1] ipi_handler+0x10c/0x70c [ 66.690980][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 66.691966][ C1] handle_domain_irq+0x148/0x200 [ 66.692902][ C1] gic_handle_irq+0x78/0x1b8 [ 66.693704][ C1] call_on_irq_stack+0x30/0x48 [ 66.694494][ C1] do_interrupt_handler+0x6c/0x88 [ 66.695385][ C1] el1_interrupt+0x30/0x58 [ 66.696179][ C1] el1h_64_irq_handler+0x18/0x24 [ 66.697106][ C1] el1h_64_irq+0x78/0x7c [ 66.697867][ C1] __sanitizer_cov_trace_pc+0x4/0xa8 [ 66.698859][ C1] pick_file+0x148/0x200 [ 66.699670][ C1] close_fd+0x4c/0x84 [ 66.700411][ C1] __arm64_sys_close+0x3c/0x80 [ 66.701300][ C1] invoke_syscall+0x98/0x28c [ 66.702117][ C1] el0_svc_common+0x13c/0x258 [ 66.702930][ C1] do_el0_svc+0x5c/0x140 [ 66.703730][ C1] el0_svc+0x78/0x1d0 [ 66.704506][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 66.705409][ C1] el0t_64_sync+0x1a0/0x1a4 [ 66.706233][ C1] irq event stamp: 868 [ 66.706926][ C1] hardirqs last enabled at (867): [] el0_svc_common+0xa0/0x258 [ 66.708522][ C1] hardirqs last disabled at (868): [] enter_el1_irq_or_nmi+0x10/0x1c [ 66.710275][ C1] softirqs last enabled at (704): [] local_bh_enable+0x10/0x34 [ 66.711914][ C1] softirqs last disabled at (702): [] local_bh_disable+0x10/0x34 [ 66.713694][ C1] ---[ end trace 5fb5e4773a4d54dd ]--- [ 66.760468][ T4835] loop0: detected capacity change from 0 to 128 [ 66.838971][ T4835] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.840349][ T4835] Bad inode number on dev loop0: 2 is out of range [ 66.841512][ T4835] SysV FS: get root inode failed [ 66.842386][ T4835] oldfs: cannot read superblock [ 66.850650][ T4720] ------------[ cut here ]------------ [ 66.851605][ T4720] VFS: brelse: Trying to free free buffer [ 66.852549][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.853906][ T4720] Modules linked in: [ 66.854504][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 66.855859][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.857455][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.858765][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 66.859751][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 66.860680][ T4720] sp : ffff80001f9d77d0 [ 66.861416][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 66.862923][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 66.864418][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000def98060 [ 66.865926][ T4720] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 66.867546][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 66.869055][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 66.870499][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 66.872007][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.873441][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 66.874864][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 66.876319][ T4720] Call trace: [ 66.876907][ T4720] invalidate_bh_lru+0x128/0x22c [ 66.877810][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 66.878841][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 66.879746][ T4720] invalidate_bh_lrus+0x34/0x40 [ 66.880587][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 66.881516][ T4720] blkdev_put+0x444/0x6c4 [ 66.882278][ T4720] blkdev_close+0x74/0xb0 [ 66.883025][ T4720] __fput+0x1b8/0x7e8 [ 66.883744][ T4720] ____fput+0x20/0x30 [ 66.884453][ T4720] task_work_run+0x13c/0x1e8 [ 66.885266][ T4720] do_notify_resume+0x2488/0x30a8 [ 66.886150][ T4720] el0_svc+0xf0/0x1d0 [ 66.886857][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 66.887751][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 66.888593][ T4720] irq event stamp: 217054 [ 66.889356][ T4720] hardirqs last enabled at (217053): [] kasan_quarantine_put+0xc4/0x200 [ 66.891193][ T4720] hardirqs last disabled at (217054): [] smp_call_function_many_cond+0xa50/0xec0 [ 66.893105][ T4720] softirqs last enabled at (216850): [] local_bh_enable+0x10/0x34 [ 66.894755][ T4720] softirqs last disabled at (216848): [] local_bh_disable+0x10/0x34 [ 66.896416][ T4720] ---[ end trace 5fb5e4773a4d54de ]--- [ 66.940278][ T4837] loop0: detected capacity change from 0 to 128 [ 66.942583][ T4837] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.943747][ T4837] Bad inode number on dev loop0: 2 is out of range [ 66.944814][ T4837] SysV FS: get root inode failed [ 66.945723][ T4837] oldfs: cannot read superblock [ 66.953804][ C1] ------------[ cut here ]------------ [ 66.954846][ C1] VFS: brelse: Trying to free free buffer [ 66.955771][ C1] WARNING: CPU: 1 PID: 4838 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.957187][ C1] Modules linked in: [ 66.957803][ C1] CPU: 1 PID: 4838 Comm: syz-executor Tainted: G W syzkaller #0 [ 66.959446][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.961239][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.962657][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 66.963557][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 66.964500][ C1] sp : ffff800008017df0 [ 66.965193][ C1] x29: ffff800008017df0 x28: ffff0000c6a18000 x27: 1fffe000341d065b [ 66.966624][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 66.968054][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000def98400 [ 66.969485][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 66.970988][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 66.972443][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 66.973920][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 11bd48672ee50f00 [ 66.975367][ C1] x8 : 11bd48672ee50f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.976845][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 66.978299][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 66.979754][ C1] Call trace: [ 66.980340][ C1] invalidate_bh_lru+0x128/0x22c [ 66.981262][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 66.982342][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 66.983588][ C1] ipi_handler+0x10c/0x70c [ 66.984411][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 66.985390][ C1] handle_domain_irq+0x148/0x200 [ 66.986302][ C1] gic_handle_irq+0x78/0x1b8 [ 66.987097][ C1] call_on_irq_stack+0x30/0x48 [ 66.987908][ C1] do_interrupt_handler+0x6c/0x88 [ 66.988768][ C1] el1_interrupt+0x30/0x58 [ 66.989550][ C1] el1h_64_irq_handler+0x18/0x24 [ 66.990484][ C1] el1h_64_irq+0x78/0x7c [ 66.991282][ C1] stack_depot_save+0xc8/0x49c [ 66.992177][ C1] __kasan_slab_alloc+0xa8/0xcc [ 66.993072][ C1] slab_post_alloc_hook+0x74/0x3f8 [ 66.993994][ C1] kmem_cache_alloc+0x1dc/0x3d8 [ 66.994850][ C1] proc_alloc_inode+0x24/0xb0 [ 66.995832][ C1] new_inode_pseudo+0x68/0x200 [ 66.996787][ C1] new_inode+0x38/0x174 [ 66.997513][ C1] proc_pid_make_inode+0x30/0x1a8 [ 66.998413][ C1] proc_pid_instantiate+0x5c/0x27c [ 66.999333][ C1] proc_pid_lookup+0x2e0/0x454 [ 67.000174][ C1] proc_root_lookup+0x30/0x68 [ 67.000989][ C1] __lookup_slow+0x25c/0x39c [ 67.001865][ C1] lookup_slow+0x60/0x84 [ 67.002683][ C1] walk_component+0x2b8/0x3b8 [ 67.003589][ C1] link_path_walk+0x5a0/0xbd4 [ 67.004453][ C1] path_openat+0x1c0/0x2808 [ 67.005144][ C1] do_filp_open+0x188/0x370 [ 67.005841][ C1] do_sys_openat2+0x134/0x3fc [ 67.006566][ C1] __arm64_sys_openat+0x11c/0x150 [ 67.007536][ C1] invoke_syscall+0x98/0x28c [ 67.008398][ C1] el0_svc_common+0x13c/0x258 [ 67.009384][ C1] do_el0_svc+0x5c/0x140 [ 67.010224][ C1] el0_svc+0x78/0x1d0 [ 67.011001][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 67.011943][ C1] el0t_64_sync+0x1a0/0x1a4 [ 67.012785][ C1] irq event stamp: 1174 [ 67.013648][ C1] hardirqs last enabled at (1173): [] try_charge_memcg+0x1c8/0x115c [ 67.015435][ C1] hardirqs last disabled at (1174): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.017168][ C1] softirqs last enabled at (1152): [] local_bh_enable+0x10/0x34 [ 67.018904][ C1] softirqs last disabled at (1150): [] local_bh_disable+0x10/0x34 [ 67.020601][ C1] ---[ end trace 5fb5e4773a4d54df ]--- [ 67.051050][ T4839] loop0: detected capacity change from 0 to 128 [ 67.053860][ T4839] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.055123][ T4839] Bad inode number on dev loop0: 2 is out of range [ 67.056272][ T4839] SysV FS: get root inode failed [ 67.057128][ T4839] oldfs: cannot read superblock [ 67.060802][ T4720] ------------[ cut here ]------------ [ 67.061720][ T4720] VFS: brelse: Trying to free free buffer [ 67.062657][ T4720] WARNING: CPU: 0 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.064082][ T4720] Modules linked in: [ 67.064693][ T4720] CPU: 0 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 67.066028][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.067611][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.069109][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 67.070076][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 67.071049][ T4720] sp : ffff80001f9d77d0 [ 67.071854][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 67.073416][ T4720] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 67.074844][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6cee0 [ 67.076200][ T4720] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 67.077492][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 67.078800][ T4720] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 67.080160][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 67.081539][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.082953][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 67.084348][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 67.085748][ T4720] Call trace: [ 67.086293][ T4720] invalidate_bh_lru+0x128/0x22c [ 67.087132][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 67.088168][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 67.089055][ T4720] invalidate_bh_lrus+0x34/0x40 [ 67.089877][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 67.090758][ T4720] blkdev_put+0x444/0x6c4 [ 67.091498][ T4720] blkdev_close+0x74/0xb0 [ 67.092222][ T4720] __fput+0x1b8/0x7e8 [ 67.092888][ T4720] ____fput+0x20/0x30 [ 67.093577][ T4720] task_work_run+0x13c/0x1e8 [ 67.094327][ T4720] do_notify_resume+0x2488/0x30a8 [ 67.095190][ T4720] el0_svc+0xf0/0x1d0 [ 67.095925][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 67.096783][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 67.097554][ T4720] irq event stamp: 223378 [ 67.098281][ T4720] hardirqs last enabled at (223377): [] kasan_quarantine_put+0xc4/0x200 [ 67.099981][ T4720] hardirqs last disabled at (223378): [] smp_call_function_many_cond+0xa50/0xec0 [ 67.101752][ T4720] softirqs last enabled at (223178): [] local_bh_enable+0x10/0x34 [ 67.103404][ T4720] softirqs last disabled at (223176): [] local_bh_disable+0x10/0x34 [ 67.105038][ T4720] ---[ end trace 5fb5e4773a4d54e0 ]--- [ 67.129114][ T4841] loop0: detected capacity change from 0 to 128 [ 67.159313][ T4841] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.160682][ T4841] Bad inode number on dev loop0: 2 is out of range [ 67.161892][ T4841] SysV FS: get root inode failed [ 67.162755][ T4841] oldfs: cannot read superblock [ 67.165824][ C1] ------------[ cut here ]------------ [ 67.166739][ C1] VFS: brelse: Trying to free free buffer [ 67.167708][ C1] WARNING: CPU: 1 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.169199][ C1] Modules linked in: [ 67.169877][ C1] CPU: 1 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 67.171402][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.173263][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.174731][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 67.175695][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 67.176652][ C1] sp : ffff800008017df0 [ 67.177407][ C1] x29: ffff800008017df0 x28: ffff0000d7338000 x27: 1fffe000341d065c [ 67.178869][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 67.180279][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000def987a0 [ 67.181604][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 67.182989][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 67.184423][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 67.185848][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 148fc7e429cfbf00 [ 67.187339][ C1] x8 : 148fc7e429cfbf00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.188825][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 67.190226][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 67.191649][ C1] Call trace: [ 67.192224][ C1] invalidate_bh_lru+0x128/0x22c [ 67.193075][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 67.194165][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.195417][ C1] ipi_handler+0x10c/0x70c [ 67.196177][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 67.197125][ C1] handle_domain_irq+0x148/0x200 [ 67.197943][ C1] gic_handle_irq+0x78/0x1b8 [ 67.198741][ C1] call_on_irq_stack+0x30/0x48 [ 67.199554][ C1] do_interrupt_handler+0x6c/0x88 [ 67.200416][ C1] el1_interrupt+0x30/0x58 [ 67.201180][ C1] el1h_64_irq_handler+0x18/0x24 [ 67.202054][ C1] el1h_64_irq+0x78/0x7c [ 67.202795][ C1] seqcount_lockdep_reader_access+0x214/0x2b8 [ 67.203815][ C1] step_into+0x500/0xa74 [ 67.204553][ C1] walk_component+0x1f4/0x3b8 [ 67.205364][ C1] link_path_walk+0x5a0/0xbd4 [ 67.206189][ C1] path_lookupat+0xb4/0x3f0 [ 67.206941][ C1] filename_lookup+0x1c8/0x478 [ 67.207749][ C1] user_path_at_empty+0x5c/0x1a0 [ 67.208610][ C1] vfs_statx+0xf8/0x474 [ 67.209341][ C1] __arm64_sys_newfstatat+0x128/0x1c0 [ 67.210251][ C1] invoke_syscall+0x98/0x28c [ 67.211064][ C1] el0_svc_common+0x13c/0x258 [ 67.211874][ C1] do_el0_svc+0x5c/0x140 [ 67.212626][ C1] el0_svc+0x78/0x1d0 [ 67.213334][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 67.214217][ C1] el0t_64_sync+0x1a0/0x1a4 [ 67.215015][ C1] irq event stamp: 986188 [ 67.215780][ C1] hardirqs last enabled at (986187): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 67.217725][ C1] hardirqs last disabled at (986188): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.219409][ C1] softirqs last enabled at (986178): [] local_bh_enable+0x10/0x34 [ 67.221062][ C1] softirqs last disabled at (986176): [] local_bh_disable+0x10/0x34 [ 67.222675][ C1] ---[ end trace 5fb5e4773a4d54e1 ]--- [ 67.267911][ T4843] loop0: detected capacity change from 0 to 128 [ 67.349340][ T4843] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.350693][ T4843] Bad inode number on dev loop0: 2 is out of range [ 67.351792][ T4843] SysV FS: get root inode failed [ 67.352581][ T4843] oldfs: cannot read superblock [ 67.373423][ C1] ------------[ cut here ]------------ [ 67.374382][ C1] VFS: brelse: Trying to free free buffer [ 67.375331][ C1] WARNING: CPU: 1 PID: 4847 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.376804][ C1] Modules linked in: [ 67.377395][ C1] CPU: 1 PID: 4847 Comm: syz.0.75 Tainted: G W syzkaller #0 [ 67.378867][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.380728][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.382186][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 67.383230][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 67.384144][ C1] sp : ffff800008017df0 [ 67.384888][ C1] x29: ffff800008017df0 x28: ffff0000d5de1b40 x27: 1fffe000341d065c [ 67.386341][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 67.387831][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000def98b40 [ 67.389301][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 67.390734][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 67.392186][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 67.393645][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : cba0c06ed5e36b00 [ 67.395076][ C1] x8 : cba0c06ed5e36b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.396498][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 67.397913][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 67.399352][ C1] Call trace: [ 67.399910][ C1] invalidate_bh_lru+0x128/0x22c [ 67.400782][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 67.401847][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.403040][ C1] ipi_handler+0x10c/0x70c [ 67.403792][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 67.404746][ C1] handle_domain_irq+0x148/0x200 [ 67.405602][ C1] gic_handle_irq+0x78/0x1b8 [ 67.406372][ C1] call_on_irq_stack+0x30/0x48 [ 67.407200][ C1] do_interrupt_handler+0x6c/0x88 [ 67.408077][ C1] el1_interrupt+0x30/0x58 [ 67.408895][ C1] el1h_64_irq_handler+0x18/0x24 [ 67.409767][ C1] el1h_64_irq+0x78/0x7c [ 67.410544][ C1] call_rcu+0x5a8/0x8e4 [ 67.411277][ C1] tlb_finish_mmu+0x140/0x37c [ 67.412118][ C1] unmap_region+0x2cc/0x328 [ 67.412941][ C1] __do_munmap+0x894/0xc34 [ 67.413698][ C1] __vm_munmap+0x134/0x238 [ 67.414483][ C1] __arm64_sys_munmap+0x74/0x8c [ 67.415357][ C1] invoke_syscall+0x98/0x28c [ 67.416186][ C1] el0_svc_common+0x13c/0x258 [ 67.417010][ C1] do_el0_svc+0x5c/0x140 [ 67.417761][ C1] el0_svc+0x78/0x1d0 [ 67.418464][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 67.419340][ C1] el0t_64_sync+0x1a0/0x1a4 [ 67.420154][ C1] irq event stamp: 580 [ 67.420839][ C1] hardirqs last enabled at (579): [] call_rcu+0x598/0x8e4 [ 67.422392][ C1] hardirqs last disabled at (580): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.424071][ C1] softirqs last enabled at (54): [] local_bh_enable+0x10/0x34 [ 67.425726][ C1] softirqs last disabled at (52): [] local_bh_disable+0x10/0x34 [ 67.427363][ C1] ---[ end trace 5fb5e4773a4d54e2 ]--- [ 67.471939][ T4847] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.473243][ T4847] Bad inode number on dev loop0: 2 is out of range [ 67.474448][ T4847] SysV FS: get root inode failed [ 67.475300][ T4847] oldfs: cannot read superblock [ 67.477783][ C0] ------------[ cut here ]------------ [ 67.478744][ C0] VFS: brelse: Trying to free free buffer [ 67.479759][ C0] WARNING: CPU: 0 PID: 4847 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.481243][ C0] Modules linked in: [ 67.481918][ C0] CPU: 0 PID: 4847 Comm: syz.0.75 Tainted: G W syzkaller #0 [ 67.483657][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.485374][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.486708][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 67.487670][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 67.488592][ C0] sp : ffff800008007df0 [ 67.489307][ C0] x29: ffff800008007df0 x28: ffff0000d5de1b40 x27: 1fffe000341cc45c [ 67.490707][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 67.492019][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6d970 [ 67.493375][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 67.494752][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 67.496121][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 67.497501][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : cba0c06ed5e36b00 [ 67.498817][ C0] x8 : cba0c06ed5e36b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.500147][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 67.501506][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 67.502885][ C0] Call trace: [ 67.503460][ C0] invalidate_bh_lru+0x128/0x22c [ 67.504448][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 67.505641][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.506921][ C0] ipi_handler+0x10c/0x70c [ 67.507680][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 67.508600][ C0] handle_domain_irq+0x148/0x200 [ 67.509417][ C0] gic_handle_irq+0x78/0x1b8 [ 67.510231][ C0] call_on_irq_stack+0x30/0x48 [ 67.511090][ C0] do_interrupt_handler+0x6c/0x88 [ 67.511948][ C0] el1_interrupt+0x30/0x58 [ 67.512690][ C0] el1h_64_irq_handler+0x18/0x24 [ 67.513546][ C0] el1h_64_irq+0x78/0x7c [ 67.514284][ C0] lock_page_memcg+0x120/0x22c [ 67.515088][ C0] page_remove_rmap+0x3c/0xfb4 [ 67.515892][ C0] unmap_page_range+0xa60/0x180c [ 67.516759][ C0] unmap_single_vma+0x13c/0x1e4 [ 67.517576][ C0] unmap_vmas+0x110/0x218 [ 67.518289][ C0] exit_mmap+0x2c4/0x510 [ 67.519154][ C0] __mmput+0xe8/0x3a0 [ 67.519878][ C0] mmput+0x80/0xc0 [ 67.520502][ C0] exit_mm+0x5dc/0x704 [ 67.521105][ C0] do_exit+0x4bc/0x1f54 [ 67.521702][ C0] do_group_exit+0x104/0x274 [ 67.522364][ C0] get_signal+0x638/0x13b0 [ 67.522999][ C0] do_notify_resume+0x344/0x30a8 [ 67.523710][ C0] el0_svc+0xf0/0x1d0 [ 67.524267][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 67.525133][ C0] el0t_64_sync+0x1a0/0x1a4 [ 67.525896][ C0] irq event stamp: 1860 [ 67.526601][ C0] hardirqs last enabled at (1859): [] lock_page_memcg+0x110/0x22c [ 67.528199][ C0] hardirqs last disabled at (1860): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.529870][ C0] softirqs last enabled at (758): [] local_bh_enable+0x10/0x34 [ 67.531445][ C0] softirqs last disabled at (756): [] local_bh_disable+0x10/0x34 [ 67.533051][ C0] ---[ end trace 5fb5e4773a4d54e3 ]--- [ 67.596685][ T4849] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.598157][ T4849] Bad inode number on dev loop0: 2 is out of range [ 67.599557][ T4849] SysV FS: get root inode failed [ 67.600410][ T4849] oldfs: cannot read superblock [ 67.607229][ C1] ------------[ cut here ]------------ [ 67.608257][ C1] VFS: brelse: Trying to free free buffer [ 67.609303][ C1] WARNING: CPU: 1 PID: 4850 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.610848][ C1] Modules linked in: [ 67.611546][ C1] CPU: 1 PID: 4850 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.613099][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.614877][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.616245][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 67.617196][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 67.618147][ C1] sp : ffff800008017df0 [ 67.618893][ C1] x29: ffff800008017df0 x28: ffff0000ca089b40 x27: 1fffe000341d065c [ 67.620348][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 67.621839][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000def98ee0 [ 67.623244][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 67.624655][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 67.626069][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 67.627475][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : cffa95ee32ea4c00 [ 67.628860][ C1] x8 : cffa95ee32ea4c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.630222][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 67.631584][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 67.632966][ C1] Call trace: [ 67.633559][ C1] invalidate_bh_lru+0x128/0x22c [ 67.634507][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 67.635658][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.636871][ C1] ipi_handler+0x10c/0x70c [ 67.637657][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 67.638639][ C1] handle_domain_irq+0x148/0x200 [ 67.639562][ C1] gic_handle_irq+0x78/0x1b8 [ 67.640383][ C1] call_on_irq_stack+0x30/0x48 [ 67.641219][ C1] do_interrupt_handler+0x6c/0x88 [ 67.642110][ C1] el1_interrupt+0x30/0x58 [ 67.642910][ C1] el1h_64_irq_handler+0x18/0x24 [ 67.643808][ C1] el1h_64_irq+0x78/0x7c [ 67.644580][ C1] __fget_light+0x4/0x1e0 [ 67.645367][ C1] ksys_read+0x8c/0x228 [ 67.646094][ C1] __arm64_sys_read+0x7c/0x90 [ 67.646909][ C1] invoke_syscall+0x98/0x28c [ 67.647776][ C1] el0_svc_common+0x13c/0x258 [ 67.648583][ C1] do_el0_svc+0x5c/0x140 [ 67.649375][ C1] el0_svc+0x78/0x1d0 [ 67.650165][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 67.651068][ C1] el0t_64_sync+0x1a0/0x1a4 [ 67.651919][ C1] irq event stamp: 826 [ 67.652701][ C1] hardirqs last enabled at (825): [] el0_svc_common+0xa0/0x258 [ 67.654348][ C1] hardirqs last disabled at (826): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.656104][ C1] softirqs last enabled at (758): [] local_bh_enable+0x10/0x34 [ 67.657777][ C1] softirqs last disabled at (756): [] local_bh_disable+0x10/0x34 [ 67.659456][ C1] ---[ end trace 5fb5e4773a4d54e4 ]--- [ 67.770675][ T4851] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.771973][ T4851] Bad inode number on dev loop0: 2 is out of range [ 67.773086][ T4851] SysV FS: get root inode failed [ 67.773874][ T4851] oldfs: cannot read superblock [ 67.779747][ C0] ------------[ cut here ]------------ [ 67.780675][ C0] VFS: brelse: Trying to free free buffer [ 67.781585][ C0] WARNING: CPU: 0 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.782982][ C0] Modules linked in: [ 67.783590][ C0] CPU: 0 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.785038][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.786674][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.787886][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 67.788862][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 67.789753][ C0] sp : ffff800008007df0 [ 67.790449][ C0] x29: ffff800008007df0 x28: ffff0000c92bd1c0 x27: 1fffe000341cc45c [ 67.791824][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 67.793201][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6dd10 [ 67.794569][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 67.795997][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 67.797386][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 67.798767][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 19df2bd9a1324800 [ 67.800134][ C0] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.801469][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 67.802822][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 67.804206][ C0] Call trace: [ 67.804749][ C0] invalidate_bh_lru+0x128/0x22c [ 67.805562][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 67.806572][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.807772][ C0] ipi_handler+0x10c/0x70c [ 67.808504][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 67.809485][ C0] handle_domain_irq+0x148/0x200 [ 67.810334][ C0] gic_handle_irq+0x78/0x1b8 [ 67.811088][ C0] call_on_irq_stack+0x30/0x48 [ 67.811914][ C0] do_interrupt_handler+0x6c/0x88 [ 67.812775][ C0] el1_interrupt+0x30/0x58 [ 67.813601][ C0] el1h_64_irq_handler+0x18/0x24 [ 67.814453][ C0] el1h_64_irq+0x78/0x7c [ 67.815175][ C0] __sanitizer_cov_trace_const_cmp8+0xb0/0xbc [ 67.816180][ C0] arch_stack_walk+0x204/0x2c0 [ 67.816996][ C0] stack_trace_save+0x9c/0xf0 [ 67.817808][ C0] kasan_set_track+0x4c/0x84 [ 67.818626][ C0] kasan_set_free_info+0x28/0x4c [ 67.819473][ C0] ____kasan_slab_free+0x118/0x164 [ 67.820366][ C0] __kasan_slab_free+0x18/0x28 [ 67.821198][ C0] slab_free_freelist_hook+0x128/0x1e4 [ 67.822192][ C0] kfree+0x16c/0x404 [ 67.822894][ C0] kvfree+0x40/0x50 [ 67.823569][ C0] __vunmap+0x914/0x9e4 [ 67.824306][ C0] vfree+0xbc/0x154 [ 67.824964][ C0] __do_replace+0x85c/0x9c0 [ 67.825743][ C0] do_ip6t_set_ctl+0xadc/0xe38 [ 67.826524][ C0] nf_setsockopt+0x260/0x280 [ 67.827340][ C0] ipv6_setsockopt+0x1b64/0x392c [ 67.828201][ C0] tcp_setsockopt+0x1f4/0x1b8c [ 67.829085][ C0] sock_common_setsockopt+0xb0/0xcc [ 67.830028][ C0] __sys_setsockopt+0x260/0x36c [ 67.830888][ C0] __arm64_sys_setsockopt+0xc0/0xdc [ 67.831797][ C0] invoke_syscall+0x98/0x28c [ 67.832633][ C0] el0_svc_common+0x13c/0x258 [ 67.833471][ C0] do_el0_svc+0x5c/0x140 [ 67.834195][ C0] el0_svc+0x78/0x1d0 [ 67.834883][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 67.835786][ C0] el0t_64_sync+0x1a0/0x1a4 [ 67.836594][ C0] irq event stamp: 275804 [ 67.837321][ C0] hardirqs last enabled at (275803): [] free_unref_page+0x148/0x1f8 [ 67.838951][ C0] hardirqs last disabled at (275804): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.840690][ C0] softirqs last enabled at (275788): [] local_bh_enable+0x10/0x34 [ 67.842300][ C0] softirqs last disabled at (275786): [] local_bh_disable+0x10/0x34 [ 67.844003][ C0] ---[ end trace 5fb5e4773a4d54e5 ]--- [ 67.929131][ T4853] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.930469][ T4853] Bad inode number on dev loop0: 2 is out of range [ 67.931480][ T4853] SysV FS: get root inode failed [ 67.932337][ T4853] oldfs: cannot read superblock [ 67.952924][ T4720] ------------[ cut here ]------------ [ 67.953926][ T4720] VFS: brelse: Trying to free free buffer [ 67.954850][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.956218][ T4720] Modules linked in: [ 67.956884][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 67.958227][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.960136][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.961595][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 67.962551][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 67.963551][ T4720] sp : ffff80001f9d77d0 [ 67.964303][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 67.966049][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 67.967564][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000def9c400 [ 67.969049][ T4720] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 67.970431][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 67.971901][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 67.973340][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 67.974763][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.976072][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 67.977499][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 67.978941][ T4720] Call trace: [ 67.979531][ T4720] invalidate_bh_lru+0x128/0x22c [ 67.980430][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 67.981481][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 67.982390][ T4720] invalidate_bh_lrus+0x34/0x40 [ 67.983265][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 67.984222][ T4720] blkdev_put+0x444/0x6c4 [ 67.984990][ T4720] blkdev_close+0x74/0xb0 [ 67.985821][ T4720] __fput+0x1b8/0x7e8 [ 67.986551][ T4720] ____fput+0x20/0x30 [ 67.987278][ T4720] task_work_run+0x13c/0x1e8 [ 67.988144][ T4720] do_notify_resume+0x2488/0x30a8 [ 67.989086][ T4720] el0_svc+0xf0/0x1d0 [ 67.989824][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 67.990767][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 67.991606][ T4720] irq event stamp: 257366 [ 67.992356][ T4720] hardirqs last enabled at (257365): [] kasan_quarantine_put+0xc4/0x200 [ 67.994151][ T4720] hardirqs last disabled at (257366): [] smp_call_function_many_cond+0xa50/0xec0 [ 67.996015][ T4720] softirqs last enabled at (257150): [] local_bh_enable+0x10/0x34 [ 67.997644][ T4720] softirqs last disabled at (257148): [] local_bh_disable+0x10/0x34 [ 67.999322][ T4720] ---[ end trace 5fb5e4773a4d54e6 ]--- [ 68.089187][ T4857] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.090494][ T4857] Bad inode number on dev loop0: 2 is out of range [ 68.091465][ T4857] SysV FS: get root inode failed [ 68.092269][ T4857] oldfs: cannot read superblock [ 68.100475][ T4720] ------------[ cut here ]------------ [ 68.101366][ T4720] VFS: brelse: Trying to free free buffer [ 68.102256][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.103691][ T4720] Modules linked in: [ 68.104324][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 68.105643][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.107177][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.108578][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 68.109506][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 68.110452][ T4720] sp : ffff80001f9d77d0 [ 68.111237][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 68.112715][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 68.114148][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000def9c7a0 [ 68.115557][ T4720] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 68.117025][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.118473][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 68.119908][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 68.121420][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.122903][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.124362][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.125839][ T4720] Call trace: [ 68.126397][ T4720] invalidate_bh_lru+0x128/0x22c [ 68.127265][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 68.128289][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.129218][ T4720] invalidate_bh_lrus+0x34/0x40 [ 68.130080][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 68.131018][ T4720] blkdev_put+0x444/0x6c4 [ 68.131765][ T4720] blkdev_close+0x74/0xb0 [ 68.132525][ T4720] __fput+0x1b8/0x7e8 [ 68.133225][ T4720] ____fput+0x20/0x30 [ 68.133937][ T4720] task_work_run+0x13c/0x1e8 [ 68.134681][ T4720] do_notify_resume+0x2488/0x30a8 [ 68.135577][ T4720] el0_svc+0xf0/0x1d0 [ 68.136262][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 68.137130][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 68.137964][ T4720] irq event stamp: 260722 [ 68.138722][ T4720] hardirqs last enabled at (260721): [] kasan_quarantine_put+0xc4/0x200 [ 68.140514][ T4720] hardirqs last disabled at (260722): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.142359][ T4720] softirqs last enabled at (260522): [] local_bh_enable+0x10/0x34 [ 68.143915][ T4720] softirqs last disabled at (260520): [] local_bh_disable+0x10/0x34 [ 68.145514][ T4720] ---[ end trace 5fb5e4773a4d54e7 ]--- [ 68.191486][ T4859] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.193107][ T4859] Bad inode number on dev loop0: 2 is out of range [ 68.194300][ T4859] SysV FS: get root inode failed [ 68.195118][ T4859] oldfs: cannot read superblock [ 68.202343][ T4720] ------------[ cut here ]------------ [ 68.203300][ T4720] VFS: brelse: Trying to free free buffer [ 68.204237][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.205583][ T4720] Modules linked in: [ 68.206162][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 68.207467][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.209211][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.210641][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 68.211581][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 68.212584][ T4720] sp : ffff80001f9d77d0 [ 68.213352][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 68.214781][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 68.216262][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000def9cb40 [ 68.217671][ T4720] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 68.219152][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.220628][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 68.222433][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 68.223911][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.225319][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.226766][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.228254][ T4720] Call trace: [ 68.228819][ T4720] invalidate_bh_lru+0x128/0x22c [ 68.229729][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 68.230804][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.231655][ T4720] invalidate_bh_lrus+0x34/0x40 [ 68.232509][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 68.233389][ T4720] blkdev_put+0x444/0x6c4 [ 68.234161][ T4720] blkdev_close+0x74/0xb0 [ 68.234901][ T4720] __fput+0x1b8/0x7e8 [ 68.235585][ T4720] ____fput+0x20/0x30 [ 68.236266][ T4720] task_work_run+0x13c/0x1e8 [ 68.237137][ T4720] do_notify_resume+0x2488/0x30a8 [ 68.238070][ T4720] el0_svc+0xf0/0x1d0 [ 68.238816][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 68.239727][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 68.240506][ T4720] irq event stamp: 264082 [ 68.241270][ T4720] hardirqs last enabled at (264081): [] kasan_quarantine_put+0xc4/0x200 [ 68.243094][ T4720] hardirqs last disabled at (264082): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.244931][ T4720] softirqs last enabled at (263850): [] local_bh_enable+0x10/0x34 [ 68.246641][ T4720] softirqs last disabled at (263848): [] local_bh_disable+0x10/0x34 [ 68.248340][ T4720] ---[ end trace 5fb5e4773a4d54e8 ]--- [ 68.362481][ T4861] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.363870][ T4861] Bad inode number on dev loop0: 2 is out of range [ 68.365126][ T4861] SysV FS: get root inode failed [ 68.366020][ T4861] oldfs: cannot read superblock [ 68.366903][ T4861] ------------[ cut here ]------------ [ 68.367791][ T4861] VFS: brelse: Trying to free free buffer [ 68.368884][ T4861] WARNING: CPU: 0 PID: 4861 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.370367][ T4861] Modules linked in: [ 68.371063][ T4861] CPU: 0 PID: 4861 Comm: syz.0.82 Tainted: G W syzkaller #0 [ 68.372552][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.374308][ T4861] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.375672][ T4861] pc : invalidate_bh_lru+0x128/0x22c [ 68.376539][ T4861] lr : invalidate_bh_lru+0x128/0x22c [ 68.377462][ T4861] sp : ffff8000201a7710 [ 68.378127][ T4861] x29: ffff8000201a7710 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 68.379485][ T4861] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 68.380771][ T4861] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d6d4e8 [ 68.382155][ T4861] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 68.383538][ T4861] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.384989][ T4861] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 68.386415][ T4861] x11: ff80800008300a7c x10: 0000000000000000 x9 : b77774d9c3f72600 [ 68.387849][ T4861] x8 : b77774d9c3f72600 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.389233][ T4861] x5 : ffff8000201a7018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.390683][ T4861] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.392092][ T4861] Call trace: [ 68.392653][ T4861] invalidate_bh_lru+0x128/0x22c [ 68.393502][ T4861] smp_call_function_many_cond+0xa5c/0xec0 [ 68.394500][ T4861] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.395427][ T4861] invalidate_bh_lrus+0x34/0x40 [ 68.396228][ T4861] blkdev_flush_mapping+0x16c/0x334 [ 68.397097][ T4861] blkdev_put+0x444/0x6c4 [ 68.397813][ T4861] kill_block_super+0xa0/0xe0 [ 68.398603][ T4861] deactivate_locked_super+0xc0/0x13c [ 68.399509][ T4861] mount_bdev+0x284/0x35c [ 68.400222][ T4861] sysv_mount+0x44/0x58 [ 68.400950][ T4861] legacy_get_tree+0xd8/0x174 [ 68.401761][ T4861] vfs_get_tree+0x90/0x278 [ 68.402530][ T4861] do_new_mount+0x228/0x804 [ 68.403303][ T4861] path_mount+0x57c/0xfe8 [ 68.404017][ T4861] __arm64_sys_mount+0x488/0x5f8 [ 68.404846][ T4861] invoke_syscall+0x98/0x28c [ 68.405581][ T4861] el0_svc_common+0x13c/0x258 [ 68.406377][ T4861] do_el0_svc+0x5c/0x140 [ 68.407114][ T4861] el0_svc+0x78/0x1d0 [ 68.407805][ T4861] el0t_64_sync_handler+0xcc/0xe4 [ 68.408670][ T4861] el0t_64_sync+0x1a0/0x1a4 [ 68.409415][ T4861] irq event stamp: 1154 [ 68.410173][ T4861] hardirqs last enabled at (1153): [] kasan_quarantine_put+0xc4/0x200 [ 68.411834][ T4861] hardirqs last disabled at (1154): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.413672][ T4861] softirqs last enabled at (946): [] local_bh_enable+0x10/0x34 [ 68.415339][ T4861] softirqs last disabled at (944): [] local_bh_disable+0x10/0x34 [ 68.416981][ T4861] ---[ end trace 5fb5e4773a4d54e9 ]--- [ 68.559114][ T4863] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.560483][ T4863] Bad inode number on dev loop0: 2 is out of range [ 68.561556][ T4863] SysV FS: get root inode failed [ 68.562291][ T4863] oldfs: cannot read superblock [ 68.570421][ T4720] ------------[ cut here ]------------ [ 68.571374][ T4720] VFS: brelse: Trying to free free buffer [ 68.572311][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.573810][ T4720] Modules linked in: [ 68.574424][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 68.575780][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.577424][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.578793][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 68.579737][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 68.580692][ T4720] sp : ffff80001f9d77d0 [ 68.581416][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 68.582864][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 68.584303][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000def9cee0 [ 68.585754][ T4720] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 68.587185][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.588771][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 68.590286][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 68.591678][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.593065][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.594528][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.596017][ T4720] Call trace: [ 68.596612][ T4720] invalidate_bh_lru+0x128/0x22c [ 68.597530][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 68.598598][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.599544][ T4720] invalidate_bh_lrus+0x34/0x40 [ 68.600467][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 68.601431][ T4720] blkdev_put+0x444/0x6c4 [ 68.602224][ T4720] blkdev_close+0x74/0xb0 [ 68.603005][ T4720] __fput+0x1b8/0x7e8 [ 68.603722][ T4720] ____fput+0x20/0x30 [ 68.604393][ T4720] task_work_run+0x13c/0x1e8 [ 68.605216][ T4720] do_notify_resume+0x2488/0x30a8 [ 68.606107][ T4720] el0_svc+0xf0/0x1d0 [ 68.606815][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 68.607683][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 68.608463][ T4720] irq event stamp: 273544 [ 68.609240][ T4720] hardirqs last enabled at (273543): [] kasan_quarantine_put+0xc4/0x200 [ 68.611031][ T4720] hardirqs last disabled at (273544): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.612941][ T4720] softirqs last enabled at (273326): [] local_bh_enable+0x10/0x34 [ 68.614639][ T4720] softirqs last disabled at (273324): [] local_bh_disable+0x10/0x34 [ 68.616366][ T4720] ---[ end trace 5fb5e4773a4d54ea ]--- [ 68.662066][ T4865] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.663297][ T4865] Bad inode number on dev loop0: 2 is out of range [ 68.664328][ T4865] SysV FS: get root inode failed [ 68.665116][ T4865] oldfs: cannot read superblock [ 68.668764][ C1] ------------[ cut here ]------------ [ 68.669780][ C1] VFS: brelse: Trying to free free buffer [ 68.670849][ C1] WARNING: CPU: 1 PID: 4399 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.672500][ C1] Modules linked in: [ 68.673173][ C1] CPU: 1 PID: 4399 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.674769][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.676516][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.677934][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 68.678903][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 68.679863][ C1] sp : ffff800008017df0 [ 68.680622][ C1] x29: ffff800008017df0 x28: ffff0000ccaa8000 x27: 1fffe000341d065c [ 68.682041][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 68.683549][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000d0557318 [ 68.684996][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 68.686429][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.687889][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 68.689399][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 149619722ba25100 [ 68.690837][ C1] x8 : 149619722ba25100 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.692285][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.693735][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.695176][ C1] Call trace: [ 68.695766][ C1] invalidate_bh_lru+0x128/0x22c [ 68.696634][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 68.697697][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.698905][ C1] ipi_handler+0x10c/0x70c [ 68.699690][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 68.700694][ C1] handle_domain_irq+0x148/0x200 [ 68.701571][ C1] gic_handle_irq+0x78/0x1b8 [ 68.702430][ C1] call_on_irq_stack+0x30/0x48 [ 68.703284][ C1] do_interrupt_handler+0x6c/0x88 [ 68.704172][ C1] el1_interrupt+0x30/0x58 [ 68.704983][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.705879][ C1] el1h_64_irq+0x78/0x7c [ 68.706624][ C1] do_notify_resume+0x110/0x30a8 [ 68.707505][ C1] el0_svc+0xf0/0x1d0 [ 68.708211][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 68.709094][ C1] el0t_64_sync+0x1a0/0x1a4 [ 68.709876][ C1] irq event stamp: 543364 [ 68.710627][ C1] hardirqs last enabled at (543363): [] do_notify_resume+0x104/0x30a8 [ 68.712295][ C1] hardirqs last disabled at (543364): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.714116][ C1] softirqs last enabled at (543360): [] release_sock+0x1d0/0x258 [ 68.715837][ C1] softirqs last disabled at (543358): [] release_sock+0x34/0x258 [ 68.717491][ C1] ---[ end trace 5fb5e4773a4d54eb ]--- [ 68.777249][ T4867] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.778768][ T4867] Bad inode number on dev loop0: 2 is out of range [ 68.779848][ T4867] SysV FS: get root inode failed [ 68.780735][ T4867] oldfs: cannot read superblock [ 68.785645][ C0] ------------[ cut here ]------------ [ 68.786655][ C0] VFS: brelse: Trying to free free buffer [ 68.787648][ C0] WARNING: CPU: 0 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.789125][ C0] Modules linked in: [ 68.789788][ C0] CPU: 0 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.791264][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.792901][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.794224][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.795148][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.796068][ C0] sp : ffff800008007df0 [ 68.796784][ C0] x29: ffff800008007df0 x28: ffff0000c92bd1c0 x27: 1fffe000341cc45c [ 68.798207][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 68.799576][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d2f400 [ 68.800990][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 68.802347][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.803724][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 68.805199][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 19df2bd9a1324800 [ 68.806687][ C0] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.808149][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.809623][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.811012][ C0] Call trace: [ 68.811604][ C0] invalidate_bh_lru+0x128/0x22c [ 68.812460][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.813449][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.814605][ C0] ipi_handler+0x10c/0x70c [ 68.815364][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.816254][ C0] handle_domain_irq+0x148/0x200 [ 68.817097][ C0] gic_handle_irq+0x78/0x1b8 [ 68.817913][ C0] call_on_irq_stack+0x30/0x48 [ 68.818695][ C0] do_interrupt_handler+0x6c/0x88 [ 68.819554][ C0] el1_interrupt+0x30/0x58 [ 68.820301][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.821172][ C0] el1h_64_irq+0x78/0x7c [ 68.821889][ C0] cpuset_fork+0x4/0x190 [ 68.822627][ C0] copy_process+0x3340/0x36f4 [ 68.823444][ C0] kernel_clone+0x1ec/0xa10 [ 68.824250][ C0] __arm64_sys_clone+0x154/0x1c0 [ 68.825101][ C0] invoke_syscall+0x98/0x28c [ 68.825897][ C0] el0_svc_common+0x13c/0x258 [ 68.826716][ C0] do_el0_svc+0x5c/0x140 [ 68.827439][ C0] el0_svc+0x78/0x1d0 [ 68.828156][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 68.829030][ C0] el0t_64_sync+0x1a0/0x1a4 [ 68.829823][ C0] irq event stamp: 294136 [ 68.830569][ C0] hardirqs last enabled at (294135): [] _raw_spin_unlock_irq+0x98/0x128 [ 68.832246][ C0] hardirqs last disabled at (294136): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.833984][ C0] softirqs last enabled at (293966): [] local_bh_enable+0x10/0x34 [ 68.835629][ C0] softirqs last disabled at (293964): [] local_bh_disable+0x10/0x34 [ 68.837220][ C0] ---[ end trace 5fb5e4773a4d54ec ]--- [ 68.881810][ T4869] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.883139][ T4869] Bad inode number on dev loop0: 2 is out of range [ 68.884169][ T4869] SysV FS: get root inode failed [ 68.884990][ T4869] oldfs: cannot read superblock [ 68.889466][ C1] ------------[ cut here ]------------ [ 68.890360][ C1] VFS: brelse: Trying to free free buffer [ 68.891355][ C1] WARNING: CPU: 1 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.892771][ C1] Modules linked in: [ 68.893416][ C1] CPU: 1 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.894788][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.896317][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.897519][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 68.898467][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 68.899428][ C1] sp : ffff800008017df0 [ 68.900177][ C1] x29: ffff800008017df0 x28: ffff0000c92bd1c0 x27: 1fffe000341d065c [ 68.901619][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 68.903082][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000d05576b8 [ 68.904466][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 68.906021][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.907485][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 68.908913][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 19df2bd9a1324800 [ 68.910356][ C1] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.911909][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.913356][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.914817][ C1] Call trace: [ 68.915404][ C1] invalidate_bh_lru+0x128/0x22c [ 68.916307][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 68.917380][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.918627][ C1] ipi_handler+0x10c/0x70c [ 68.919388][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 68.920358][ C1] handle_domain_irq+0x148/0x200 [ 68.921277][ C1] gic_handle_irq+0x78/0x1b8 [ 68.922117][ C1] call_on_irq_stack+0x30/0x48 [ 68.922998][ C1] do_interrupt_handler+0x6c/0x88 [ 68.923887][ C1] el0_interrupt+0x94/0x248 [ 68.924703][ C1] __el0_irq_handler_common+0x18/0x24 [ 68.925667][ C1] el0t_64_irq_handler+0x10/0x1c [ 68.926593][ C1] el0t_64_irq+0x1a0/0x1a4 [ 68.927331][ C1] irq event stamp: 295188 [ 68.928071][ C1] hardirqs last enabled at (295187): [] el0t_64_sync_handler+0x6c/0xe4 [ 68.929883][ C1] hardirqs last disabled at (295188): [] __el0_irq_handler_common+0x18/0x24 [ 68.931686][ C1] softirqs last enabled at (295184): [] local_bh_enable+0x10/0x34 [ 68.933370][ C1] softirqs last disabled at (295182): [] local_bh_disable+0x10/0x34 [ 68.935121][ C1] ---[ end trace 5fb5e4773a4d54ed ]--- [ 69.010010][ T4871] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.011427][ T4871] Bad inode number on dev loop0: 2 is out of range [ 69.012501][ T4871] SysV FS: get root inode failed [ 69.013358][ T4871] oldfs: cannot read superblock [ 69.020715][ T4720] ------------[ cut here ]------------ [ 69.021715][ T4720] VFS: brelse: Trying to free free buffer [ 69.022720][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.024171][ T4720] Modules linked in: [ 69.024784][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 69.026234][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.027721][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.029101][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 69.030064][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 69.031037][ T4720] sp : ffff80001f9d77d0 [ 69.031791][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 69.033269][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 69.034658][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000d0557a58 [ 69.036238][ T4720] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 69.037819][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.039456][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 69.040910][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 69.042427][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.044123][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.045582][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.047083][ T4720] Call trace: [ 69.047686][ T4720] invalidate_bh_lru+0x128/0x22c [ 69.048621][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 69.049690][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.050631][ T4720] invalidate_bh_lrus+0x34/0x40 [ 69.051490][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 69.052402][ T4720] blkdev_put+0x444/0x6c4 [ 69.053206][ T4720] blkdev_close+0x74/0xb0 [ 69.053964][ T4720] __fput+0x1b8/0x7e8 [ 69.054661][ T4720] ____fput+0x20/0x30 [ 69.055388][ T4720] task_work_run+0x13c/0x1e8 [ 69.056163][ T4720] do_notify_resume+0x2488/0x30a8 [ 69.057051][ T4720] el0_svc+0xf0/0x1d0 [ 69.057777][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 69.058661][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 69.059446][ T4720] irq event stamp: 287330 [ 69.060242][ T4720] hardirqs last enabled at (287329): [] kasan_quarantine_put+0xc4/0x200 [ 69.062002][ T4720] hardirqs last disabled at (287330): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.063875][ T4720] softirqs last enabled at (287112): [] local_bh_enable+0x10/0x34 [ 69.065565][ T4720] softirqs last disabled at (287110): [] local_bh_disable+0x10/0x34 [ 69.067277][ T4720] ---[ end trace 5fb5e4773a4d54ee ]--- [ 69.092745][ T4873] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.094221][ T4873] Bad inode number on dev loop0: 2 is out of range [ 69.095374][ T4873] SysV FS: get root inode failed [ 69.096208][ T4873] oldfs: cannot read superblock [ 69.103912][ C1] ------------[ cut here ]------------ [ 69.104856][ C1] VFS: brelse: Trying to free free buffer [ 69.105835][ C1] WARNING: CPU: 1 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.107233][ C1] Modules linked in: [ 69.107878][ C1] CPU: 1 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 69.109517][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.111263][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.112626][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 69.113584][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 69.114544][ C1] sp : ffff800008017df0 [ 69.115343][ C1] x29: ffff800008017df0 x28: ffff0000c92bd1c0 x27: 1fffe000341d065b [ 69.116815][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 69.118236][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000d0557df8 [ 69.119746][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 69.121178][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.122640][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 69.124065][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 19df2bd9a1324800 [ 69.125523][ C1] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.126967][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.128466][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.129928][ C1] Call trace: [ 69.130489][ C1] invalidate_bh_lru+0x128/0x22c [ 69.131395][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 69.132467][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.133687][ C1] ipi_handler+0x10c/0x70c [ 69.134498][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 69.135415][ C1] handle_domain_irq+0x148/0x200 [ 69.136272][ C1] gic_handle_irq+0x78/0x1b8 [ 69.137091][ C1] call_on_irq_stack+0x30/0x48 [ 69.138013][ C1] do_interrupt_handler+0x6c/0x88 [ 69.138881][ C1] el1_interrupt+0x30/0x58 [ 69.139628][ C1] el1h_64_irq_handler+0x18/0x24 [ 69.140520][ C1] el1h_64_irq+0x78/0x7c [ 69.141279][ C1] qlist_free_all+0x78/0xa8 [ 69.142070][ C1] kasan_quarantine_reduce+0x124/0x130 [ 69.143033][ C1] __kasan_slab_alloc+0x34/0xcc [ 69.143920][ C1] slab_post_alloc_hook+0x74/0x3f8 [ 69.144820][ C1] __kmalloc+0x204/0x440 [ 69.145584][ C1] tomoyo_encode+0x260/0x484 [ 69.146415][ C1] tomoyo_realpath_from_path+0x4ec/0x540 [ 69.147444][ C1] tomoyo_path_perm+0x1e4/0x49c [ 69.148315][ C1] tomoyo_path_rmdir+0xa8/0xf4 [ 69.149156][ C1] security_path_rmdir+0xe4/0x134 [ 69.150044][ C1] do_rmdir+0x1dc/0x64c [ 69.150807][ C1] __arm64_sys_unlinkat+0xcc/0xfc [ 69.151666][ C1] invoke_syscall+0x98/0x28c [ 69.152371][ C1] el0_svc_common+0x13c/0x258 [ 69.153130][ C1] do_el0_svc+0x5c/0x140 [ 69.153881][ C1] el0_svc+0x78/0x1d0 [ 69.154588][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 69.155497][ C1] el0t_64_sync+0x1a0/0x1a4 [ 69.156284][ C1] irq event stamp: 300510 [ 69.157059][ C1] hardirqs last enabled at (300509): [] put_cpu_partial+0x188/0x214 [ 69.158783][ C1] hardirqs last disabled at (300510): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.160538][ C1] softirqs last enabled at (299962): [] local_bh_enable+0x10/0x34 [ 69.162180][ C1] softirqs last disabled at (299960): [] local_bh_disable+0x10/0x34 [ 69.163846][ C1] ---[ end trace 5fb5e4773a4d54ef ]--- [ 69.229936][ T4875] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.231401][ T4875] Bad inode number on dev loop0: 2 is out of range [ 69.232787][ T4875] SysV FS: get root inode failed [ 69.233639][ T4875] oldfs: cannot read superblock [ 69.241417][ C1] ------------[ cut here ]------------ [ 69.242361][ C1] VFS: brelse: Trying to free free buffer [ 69.243292][ C1] WARNING: CPU: 1 PID: 4876 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.244698][ C1] Modules linked in: [ 69.245304][ C1] CPU: 1 PID: 4876 Comm: syz-executor Tainted: G W syzkaller #0 [ 69.246635][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.248204][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.249660][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 69.250612][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 69.251534][ C1] sp : ffff800008017df0 [ 69.252239][ C1] x29: ffff800008017df0 x28: ffff0000ce911b40 x27: 1fffe000341d065b [ 69.253681][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 69.255106][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000defd3230 [ 69.256538][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 69.257980][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.259465][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 69.260899][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 8ba2dcd1b5b47e00 [ 69.262332][ C1] x8 : 8ba2dcd1b5b47e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.263765][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.265205][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.266640][ C1] Call trace: [ 69.267241][ C1] invalidate_bh_lru+0x128/0x22c [ 69.268170][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 69.269265][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.270458][ C1] ipi_handler+0x10c/0x70c [ 69.271248][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 69.272204][ C1] handle_domain_irq+0x148/0x200 [ 69.273073][ C1] gic_handle_irq+0x78/0x1b8 [ 69.273867][ C1] call_on_irq_stack+0x30/0x48 [ 69.274682][ C1] do_interrupt_handler+0x6c/0x88 [ 69.275583][ C1] el0_interrupt+0x94/0x248 [ 69.276376][ C1] __el0_irq_handler_common+0x18/0x24 [ 69.277315][ C1] el0t_64_irq_handler+0x10/0x1c [ 69.278194][ C1] el0t_64_irq+0x1a0/0x1a4 [ 69.278954][ C1] irq event stamp: 850 [ 69.279672][ C1] hardirqs last enabled at (849): [] el0t_64_sync_handler+0xcc/0xe4 [ 69.281300][ C1] hardirqs last disabled at (850): [] __el0_irq_handler_common+0x18/0x24 [ 69.283000][ C1] softirqs last enabled at (692): [] local_bh_enable+0x10/0x34 [ 69.284638][ C1] softirqs last disabled at (690): [] local_bh_disable+0x10/0x34 [ 69.286271][ C1] ---[ end trace 5fb5e4773a4d54f0 ]--- [ 69.338254][ T4877] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.339713][ T4877] Bad inode number on dev loop0: 2 is out of range [ 69.340916][ T4877] SysV FS: get root inode failed [ 69.341781][ T4877] oldfs: cannot read superblock [ 69.347000][ C0] ------------[ cut here ]------------ [ 69.348012][ C0] VFS: brelse: Trying to free free buffer [ 69.349063][ C0] WARNING: CPU: 0 PID: 0 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.350429][ C0] Modules linked in: [ 69.351112][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 [ 69.352508][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.354220][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.355568][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.356493][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.357405][ C0] sp : ffff800008007df0 [ 69.358129][ C0] x29: ffff800008007df0 x28: ffff8000143d38c0 x27: 1fffe000341cc45c [ 69.359535][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 69.360946][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2cca230 [ 69.362333][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 69.363701][ C0] x17: 0000000000010003 x16: ffff8000082dc19c x15: 0000000000000012 [ 69.365115][ C0] x14: 0000000000000001 x13: 1ffff00001000edc x12: 0000000000000000 [ 69.366453][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 5238ef69e727e100 [ 69.367897][ C0] x8 : 5238ef69e727e100 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.369259][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff8000083083a4 [ 69.370634][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 69.372041][ C0] Call trace: [ 69.372618][ C0] invalidate_bh_lru+0x128/0x22c [ 69.373437][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.374430][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.375593][ C0] ipi_handler+0x10c/0x70c [ 69.376352][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.377252][ C0] handle_domain_irq+0x148/0x200 [ 69.378037][ C0] gic_handle_irq+0x78/0x1b8 [ 69.378799][ C0] call_on_irq_stack+0x30/0x48 [ 69.379604][ C0] do_interrupt_handler+0x6c/0x88 [ 69.380468][ C0] el1_interrupt+0x30/0x58 [ 69.381145][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.381961][ C0] el1h_64_irq+0x78/0x7c [ 69.382694][ C0] arch_local_irq_enable+0xc/0x18 [ 69.383595][ C0] default_idle_call+0xcc/0x40c [ 69.384404][ C0] do_idle+0x304/0x574 [ 69.385133][ C0] cpu_startup_entry+0x24/0x28 [ 69.385989][ C0] rest_init+0x360/0x390 [ 69.386714][ C0] arch_call_rest_init+0x14/0x20 [ 69.387496][ C0] start_kernel+0x484/0x530 [ 69.388254][ C0] __primary_switched+0xa8/0xb0 [ 69.389058][ C0] irq event stamp: 426560 [ 69.389781][ C0] hardirqs last enabled at (426559): [] default_idle_call+0xb8/0x40c [ 69.391351][ C0] hardirqs last disabled at (426560): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.393031][ C0] softirqs last enabled at (426422): [] handle_softirqs+0xa70/0xc14 [ 69.394692][ C0] softirqs last disabled at (426401): [] __irq_exit_rcu+0x240/0x434 [ 69.396312][ C0] ---[ end trace 5fb5e4773a4d54f1 ]--- [ 69.509212][ T4879] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.510547][ T4879] Bad inode number on dev loop0: 2 is out of range [ 69.511541][ T4879] SysV FS: get root inode failed [ 69.512305][ T4879] oldfs: cannot read superblock [ 69.516851][ C0] ------------[ cut here ]------------ [ 69.517758][ C0] VFS: brelse: Trying to free free buffer [ 69.518722][ C0] WARNING: CPU: 0 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.520217][ C0] Modules linked in: [ 69.520923][ C0] CPU: 0 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 69.522293][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.524006][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.525356][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.526238][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.527112][ C0] sp : ffff800008007df0 [ 69.527813][ C0] x29: ffff800008007df0 x28: ffff0000d7338000 x27: 1fffe000341cc45b [ 69.529144][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 69.530548][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2cca5d0 [ 69.531898][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 69.533275][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.534684][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 69.536080][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 148fc7e429cfbf00 [ 69.537485][ C0] x8 : 148fc7e429cfbf00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.538837][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.540173][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 69.541527][ C0] Call trace: [ 69.542149][ C0] invalidate_bh_lru+0x128/0x22c [ 69.542938][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.543919][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.545048][ C0] ipi_handler+0x10c/0x70c [ 69.545754][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.546688][ C0] handle_domain_irq+0x148/0x200 [ 69.547472][ C0] gic_handle_irq+0x78/0x1b8 [ 69.548242][ C0] call_on_irq_stack+0x30/0x48 [ 69.549040][ C0] do_interrupt_handler+0x6c/0x88 [ 69.549778][ C0] el1_interrupt+0x30/0x58 [ 69.550451][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.551251][ C0] el1h_64_irq+0x78/0x7c [ 69.552010][ C0] _raw_write_unlock_irq+0xa0/0x128 [ 69.552924][ C0] ep_done_scan+0x3e8/0x40c [ 69.553723][ C0] ep_poll+0xebc/0x1650 [ 69.554451][ C0] do_epoll_wait+0x19c/0x204 [ 69.555226][ C0] do_epoll_pwait+0x70/0x194 [ 69.555966][ C0] __arm64_sys_epoll_pwait+0x200/0x258 [ 69.556898][ C0] invoke_syscall+0x98/0x28c [ 69.557719][ C0] el0_svc_common+0x13c/0x258 [ 69.558537][ C0] do_el0_svc+0x5c/0x140 [ 69.559210][ C0] el0_svc+0x78/0x1d0 [ 69.559868][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 69.560695][ C0] el0t_64_sync+0x1a0/0x1a4 [ 69.561503][ C0] irq event stamp: 1036422 [ 69.562246][ C0] hardirqs last enabled at (1036421): [] _raw_write_unlock_irq+0x98/0x128 [ 69.563974][ C0] hardirqs last disabled at (1036422): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.565619][ C0] softirqs last enabled at (1036344): [] local_bh_enable+0x10/0x34 [ 69.567197][ C0] softirqs last disabled at (1036342): [] local_bh_disable+0x10/0x34 [ 69.568808][ C0] ---[ end trace 5fb5e4773a4d54f2 ]--- [ 69.599223][ T7] cfg80211: failed to load regulatory.db [ 69.599381][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.601400][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.659913][ T4881] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.661175][ T4881] Bad inode number on dev loop0: 2 is out of range [ 69.662224][ T4881] SysV FS: get root inode failed [ 69.665952][ T4881] oldfs: cannot read superblock [ 69.672912][ T4720] ------------[ cut here ]------------ [ 69.673791][ T4720] VFS: brelse: Trying to free free buffer [ 69.674700][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.676218][ T4720] Modules linked in: [ 69.676955][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 69.678452][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.680230][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.681593][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 69.682507][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 69.683450][ T4720] sp : ffff80001f9d77d0 [ 69.684188][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 69.685548][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 69.687003][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000defd35d0 [ 69.688474][ T4720] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 69.689923][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.691469][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 69.692949][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 69.694521][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.696064][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.697634][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.699113][ T4720] Call trace: [ 69.699709][ T4720] invalidate_bh_lru+0x128/0x22c [ 69.700614][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 69.701714][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.702761][ T4720] invalidate_bh_lrus+0x34/0x40 [ 69.703677][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 69.704737][ T4720] blkdev_put+0x444/0x6c4 [ 69.705616][ T4720] blkdev_close+0x74/0xb0 [ 69.706412][ T4720] __fput+0x1b8/0x7e8 [ 69.707137][ T4720] ____fput+0x20/0x30 [ 69.707879][ T4720] task_work_run+0x13c/0x1e8 [ 69.708689][ T4720] do_notify_resume+0x2488/0x30a8 [ 69.709583][ T4720] el0_svc+0xf0/0x1d0 [ 69.710281][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 69.711134][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 69.711978][ T4720] irq event stamp: 307016 [ 69.712802][ T4720] hardirqs last enabled at (307015): [] kasan_quarantine_put+0xc4/0x200 [ 69.714595][ T4720] hardirqs last disabled at (307016): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.716475][ T4720] softirqs last enabled at (306824): [] local_bh_enable+0x10/0x34 [ 69.718149][ T4720] softirqs last disabled at (306822): [] local_bh_disable+0x10/0x34 [ 69.719930][ T4720] ---[ end trace 5fb5e4773a4d54f3 ]--- [ 69.786914][ T4883] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.801275][ T4883] Bad inode number on dev loop0: 2 is out of range [ 69.802422][ T4883] SysV FS: get root inode failed [ 69.803394][ T4883] oldfs: cannot read superblock [ 69.813931][ C0] ------------[ cut here ]------------ [ 69.814802][ C0] VFS: brelse: Trying to free free buffer [ 69.815704][ C0] WARNING: CPU: 0 PID: 1856 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.817045][ C0] Modules linked in: [ 69.817658][ C0] CPU: 0 PID: 1856 Comm: kworker/u4:5 Tainted: G W syzkaller #0 [ 69.819147][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.820827][ C0] Workqueue: events_power_efficient gc_worker [ 69.821870][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.823352][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.824296][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.825194][ C0] sp : ffff800008007df0 [ 69.825914][ C0] x29: ffff800008007df0 x28: ffff0000cdb43680 x27: 1fffe000341cc45b [ 69.827326][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 69.828730][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2cca970 [ 69.830055][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 69.831388][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.832748][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 69.834056][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 29e1e91e8b997400 [ 69.835699][ C0] x8 : 29e1e91e8b997400 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.837222][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.838769][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.840148][ C0] Call trace: [ 69.840719][ C0] invalidate_bh_lru+0x128/0x22c [ 69.841526][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.842530][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.843731][ C0] ipi_handler+0x10c/0x70c [ 69.844483][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.845398][ C0] handle_domain_irq+0x148/0x200 [ 69.846224][ C0] gic_handle_irq+0x78/0x1b8 [ 69.847029][ C0] call_on_irq_stack+0x30/0x48 [ 69.847857][ C0] do_interrupt_handler+0x6c/0x88 [ 69.848725][ C0] el1_interrupt+0x30/0x58 [ 69.849508][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.850397][ C0] el1h_64_irq+0x78/0x7c [ 69.851149][ C0] seqcount_lockdep_reader_access+0x21c/0x2c0 [ 69.852151][ C0] gc_worker+0x28c/0x1170 [ 69.852907][ C0] process_one_work+0x7a4/0x1178 [ 69.853756][ C0] worker_thread+0xb30/0x103c [ 69.854572][ C0] kthread+0x37c/0x460 [ 69.855266][ C0] ret_from_fork+0x10/0x20 [ 69.856057][ C0] irq event stamp: 1624264 [ 69.856830][ C0] hardirqs last enabled at (1624263): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 69.858727][ C0] hardirqs last disabled at (1624264): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.860527][ C0] softirqs last enabled at (1616108): [] handle_softirqs+0xa70/0xc14 [ 69.862191][ C0] softirqs last disabled at (1616101): [] __irq_exit_rcu+0x240/0x434 [ 69.863802][ C0] ---[ end trace 5fb5e4773a4d54f4 ]--- [ 69.942987][ T4885] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.944296][ T4885] Bad inode number on dev loop0: 2 is out of range [ 69.945313][ T4885] SysV FS: get root inode failed [ 69.946122][ T4885] oldfs: cannot read superblock [ 69.955702][ C0] ------------[ cut here ]------------ [ 69.956697][ C0] VFS: brelse: Trying to free free buffer [ 69.957705][ C0] WARNING: CPU: 0 PID: 405 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.959284][ C0] Modules linked in: [ 69.959968][ C0] CPU: 0 PID: 405 Comm: kworker/u4:3 Tainted: G W syzkaller #0 [ 69.961678][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.963426][ C0] Workqueue: events_power_efficient gc_worker [ 69.964626][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.965964][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.966966][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.967870][ C0] sp : ffff800008007df0 [ 69.968564][ C0] x29: ffff800008007df0 x28: ffff0000c8171b40 x27: 1fffe000341cc45c [ 69.969946][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 69.971386][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2ccad10 [ 69.972841][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 69.974221][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.975630][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 69.976985][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 64415536cb30c500 [ 69.978365][ C0] x8 : 64415536cb30c500 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.979705][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.981140][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.982497][ C0] Call trace: [ 69.983020][ C0] invalidate_bh_lru+0x128/0x22c [ 69.983881][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.984857][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.986008][ C0] ipi_handler+0x10c/0x70c [ 69.986853][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.987911][ C0] handle_domain_irq+0x148/0x200 [ 69.988882][ C0] gic_handle_irq+0x78/0x1b8 [ 69.989679][ C0] call_on_irq_stack+0x30/0x48 [ 69.990537][ C0] do_interrupt_handler+0x6c/0x88 [ 69.991418][ C0] el1_interrupt+0x30/0x58 [ 69.992194][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.993119][ C0] el1h_64_irq+0x78/0x7c [ 69.993852][ C0] seqcount_lockdep_reader_access+0x21c/0x2c0 [ 69.994896][ C0] gc_worker+0x28c/0x1170 [ 69.995662][ C0] process_one_work+0x7a4/0x1178 [ 69.996515][ C0] worker_thread+0x8fc/0x103c [ 69.997313][ C0] kthread+0x37c/0x460 [ 69.998009][ C0] ret_from_fork+0x10/0x20 [ 69.998771][ C0] irq event stamp: 735466 [ 69.999516][ C0] hardirqs last enabled at (735465): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 70.001358][ C0] hardirqs last disabled at (735466): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.003068][ C0] softirqs last enabled at (727600): [] handle_softirqs+0xa70/0xc14 [ 70.004687][ C0] softirqs last disabled at (727591): [] __irq_exit_rcu+0x240/0x434 [ 70.006347][ C0] ---[ end trace 5fb5e4773a4d54f5 ]--- [ 70.057135][ T4887] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.060715][ T4887] Bad inode number on dev loop0: 2 is out of range [ 70.061780][ T4887] SysV FS: get root inode failed [ 70.062559][ T4887] oldfs: cannot read superblock [ 70.069942][ T4720] ------------[ cut here ]------------ [ 70.070809][ T4720] VFS: brelse: Trying to free free buffer [ 70.071747][ T4720] WARNING: CPU: 0 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.073113][ T4720] Modules linked in: [ 70.073714][ T4720] CPU: 0 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 70.074946][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.076444][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.077629][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 70.078503][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 70.079407][ T4720] sp : ffff80001f9d77d0 [ 70.080109][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 70.081712][ T4720] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 70.083234][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2ccb148 [ 70.084771][ T4720] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 70.086152][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.087554][ T4720] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 70.088952][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 70.090359][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.091727][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.093094][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.094495][ T4720] Call trace: [ 70.095047][ T4720] invalidate_bh_lru+0x128/0x22c [ 70.095873][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 70.096845][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.097582][ T4720] invalidate_bh_lrus+0x34/0x40 [ 70.098271][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 70.099006][ T4720] blkdev_put+0x444/0x6c4 [ 70.099650][ T4720] blkdev_close+0x74/0xb0 [ 70.100280][ T4720] __fput+0x1b8/0x7e8 [ 70.100842][ T4720] ____fput+0x20/0x30 [ 70.101406][ T4720] task_work_run+0x13c/0x1e8 [ 70.102059][ T4720] do_notify_resume+0x2488/0x30a8 [ 70.102786][ T4720] el0_svc+0xf0/0x1d0 [ 70.103350][ T4720] el0t_64_sync_handler+0xcc/0xe4 [ 70.104072][ T4720] el0t_64_sync+0x1a0/0x1a4 [ 70.104717][ T4720] irq event stamp: 319970 [ 70.105341][ T4720] hardirqs last enabled at (319969): [] kasan_quarantine_put+0xc4/0x200 [ 70.106831][ T4720] hardirqs last disabled at (319970): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.108387][ T4720] softirqs last enabled at (319770): [] local_bh_enable+0x10/0x34 [ 70.109901][ T4720] softirqs last disabled at (319768): [] local_bh_disable+0x10/0x34 [ 70.111279][ T4720] ---[ end trace 5fb5e4773a4d54f6 ]--- [ 70.178632][ T4889] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.179991][ T4889] Bad inode number on dev loop0: 2 is out of range [ 70.181171][ T4889] SysV FS: get root inode failed [ 70.182108][ T4889] oldfs: cannot read superblock [ 70.187206][ C1] ------------[ cut here ]------------ [ 70.188086][ C1] VFS: brelse: Trying to free free buffer [ 70.189196][ C1] WARNING: CPU: 1 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.190747][ C1] Modules linked in: [ 70.191458][ C1] CPU: 1 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.193095][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.195219][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.196709][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.197650][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.198609][ C1] sp : ffff800008017df0 [ 70.199362][ C1] x29: ffff800008017df0 x28: ffff0000c92bd1c0 x27: 1fffe000341d065c [ 70.200861][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 70.202434][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000defd3970 [ 70.203934][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 70.205526][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.207065][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.208526][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 19df2bd9a1324800 [ 70.210043][ C1] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.211456][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.212946][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 70.214364][ C1] Call trace: [ 70.214947][ C1] invalidate_bh_lru+0x128/0x22c [ 70.215810][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.216869][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.218059][ C1] ipi_handler+0x10c/0x70c [ 70.218848][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.219868][ C1] handle_domain_irq+0x148/0x200 [ 70.220751][ C1] gic_handle_irq+0x78/0x1b8 [ 70.221572][ C1] call_on_irq_stack+0x30/0x48 [ 70.222424][ C1] do_interrupt_handler+0x6c/0x88 [ 70.223380][ C1] el1_interrupt+0x30/0x58 [ 70.224186][ C1] el1h_64_irq_handler+0x18/0x24 [ 70.225072][ C1] el1h_64_irq+0x78/0x7c [ 70.225847][ C1] rcu_is_watching+0x98/0x134 [ 70.226677][ C1] lock_acquire+0xc4/0x618 [ 70.227469][ C1] rcu_lock_acquire+0x40/0x4c [ 70.228304][ C1] count_memcg_event_mm+0x2c/0x300 [ 70.229271][ C1] handle_mm_fault+0x19c/0x2aac [ 70.230151][ C1] do_page_fault+0x690/0xad0 [ 70.231011][ C1] do_mem_abort+0x6c/0x1b0 [ 70.231799][ C1] el0_da+0x90/0x1ec [ 70.232499][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 70.233373][ C1] el0t_64_sync+0x1a0/0x1a4 [ 70.234168][ C1] irq event stamp: 320432 [ 70.234955][ C1] hardirqs last enabled at (320431): [] local_daif_restore+0x1c/0x3c [ 70.236704][ C1] hardirqs last disabled at (320432): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.238508][ C1] softirqs last enabled at (320230): [] local_bh_enable+0x10/0x34 [ 70.240221][ C1] softirqs last disabled at (320228): [] local_bh_disable+0x10/0x34 [ 70.241954][ C1] ---[ end trace 5fb5e4773a4d54f7 ]--- [ 70.329443][ T4891] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.330813][ T4891] Bad inode number on dev loop0: 2 is out of range [ 70.331933][ T4891] SysV FS: get root inode failed [ 70.332724][ T4891] oldfs: cannot read superblock [ 70.340027][ C0] ------------[ cut here ]------------ [ 70.340899][ C0] VFS: brelse: Trying to free free buffer [ 70.341807][ C0] WARNING: CPU: 0 PID: 4652 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.343146][ C0] Modules linked in: [ 70.343790][ C0] CPU: 0 PID: 4652 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.345201][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.346921][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.348142][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.349062][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.349976][ C0] sp : ffff800008007df0 [ 70.350783][ C0] x29: ffff800008007df0 x28: ffff0000c92bd1c0 x27: 1fffe000341cc45c [ 70.352140][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 70.353484][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2ccb4e8 [ 70.354923][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 70.356364][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.357746][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 70.359143][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 19df2bd9a1324800 [ 70.360489][ C0] x8 : 19df2bd9a1324800 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.361843][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.363243][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 70.364716][ C0] Call trace: [ 70.365299][ C0] invalidate_bh_lru+0x128/0x22c [ 70.366134][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.367188][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.368359][ C0] ipi_handler+0x10c/0x70c [ 70.369154][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.370100][ C0] handle_domain_irq+0x148/0x200 [ 70.370996][ C0] gic_handle_irq+0x78/0x1b8 [ 70.371793][ C0] call_on_irq_stack+0x30/0x48 [ 70.372597][ C0] do_interrupt_handler+0x6c/0x88 [ 70.373459][ C0] el1_interrupt+0x30/0x58 [ 70.374232][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.375094][ C0] el1h_64_irq+0x78/0x7c [ 70.375801][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 70.376843][ C0] add_wait_queue+0x150/0x17c [ 70.377695][ C0] do_wait+0x180/0xa70 [ 70.378384][ C0] kernel_wait4+0x1f8/0x340 [ 70.379069][ C0] __arm64_sys_wait4+0x13c/0x300 [ 70.379883][ C0] invoke_syscall+0x98/0x28c [ 70.380824][ C0] el0_svc_common+0x13c/0x258 [ 70.381749][ C0] do_el0_svc+0x5c/0x140 [ 70.382503][ C0] el0_svc+0x78/0x1d0 [ 70.383227][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 70.384285][ C0] el0t_64_sync+0x1a0/0x1a4 [ 70.385142][ C0] irq event stamp: 320796 [ 70.385947][ C0] hardirqs last enabled at (320795): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 70.387715][ C0] hardirqs last disabled at (320796): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.389419][ C0] softirqs last enabled at (320782): [] local_bh_enable+0x10/0x34 [ 70.391085][ C0] softirqs last disabled at (320780): [] local_bh_disable+0x10/0x34 [ 70.392748][ C0] ---[ end trace 5fb5e4773a4d54f8 ]--- [ 70.445707][ T4893] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.447158][ T4893] Bad inode number on dev loop0: 2 is out of range [ 70.448631][ T4893] SysV FS: get root inode failed [ 70.449580][ T4893] oldfs: cannot read superblock [ 70.455578][ C1] ------------[ cut here ]------------ [ 70.456589][ C1] VFS: brelse: Trying to free free buffer [ 70.457619][ C1] WARNING: CPU: 1 PID: 4894 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.459223][ C1] Modules linked in: [ 70.459919][ C1] CPU: 1 PID: 4894 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.461490][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.463265][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.464657][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.465651][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.466656][ C1] sp : ffff800008017df0 [ 70.467377][ C1] x29: ffff800008017df0 x28: ffff0000ce910000 x27: 1fffe000341d065c [ 70.468804][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 70.470291][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000defd3d10 [ 70.471699][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 70.473122][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.474533][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.475918][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 4df61b90f783cb00 [ 70.477400][ C1] x8 : 4df61b90f783cb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.478867][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.480329][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 70.481759][ C1] Call trace: [ 70.482347][ C1] invalidate_bh_lru+0x128/0x22c [ 70.483142][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.484215][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.485445][ C1] ipi_handler+0x10c/0x70c [ 70.486276][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.487267][ C1] handle_domain_irq+0x148/0x200 [ 70.488331][ C1] gic_handle_irq+0x78/0x1b8 [ 70.489332][ C1] call_on_irq_stack+0x30/0x48 [ 70.490373][ C1] do_interrupt_handler+0x6c/0x88 [ 70.491444][ C1] el1_interrupt+0x30/0x58 [ 70.492280][ C1] el1h_64_irq_handler+0x18/0x24 [ 70.493158][ C1] el1h_64_irq+0x78/0x7c [ 70.493900][ C1] check_preemption_disabled+0x1c/0x164 [ 70.494893][ C1] debug_smp_processor_id+0x20/0x2c [ 70.495887][ C1] rcu_is_watching+0x50/0x134 [ 70.496728][ C1] lock_release+0xb4/0x8ec [ 70.497528][ C1] fs_reclaim_acquire+0x130/0x1c4 [ 70.498430][ C1] slab_pre_alloc_hook+0x38/0xe8 [ 70.499363][ C1] kmem_cache_alloc+0x94/0x3d8 [ 70.500241][ C1] getname_flags+0xb8/0x44c [ 70.501065][ C1] getname+0x28/0x38 [ 70.501823][ C1] do_sys_openat2+0xdc/0x3fc [ 70.502642][ C1] __arm64_sys_openat+0x11c/0x150 [ 70.503546][ C1] invoke_syscall+0x98/0x28c [ 70.504372][ C1] el0_svc_common+0x13c/0x258 [ 70.505196][ C1] do_el0_svc+0x5c/0x140 [ 70.505965][ C1] el0_svc+0x78/0x1d0 [ 70.506717][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 70.507634][ C1] el0t_64_sync+0x1a0/0x1a4 [ 70.508423][ C1] irq event stamp: 698 [ 70.509128][ C1] hardirqs last enabled at (697): [] el0_svc_common+0xa0/0x258 [ 70.510882][ C1] hardirqs last disabled at (698): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.512716][ C1] softirqs last enabled at (692): [] local_bh_enable+0x10/0x34 [ 70.514356][ C1] softirqs last disabled at (690): [] local_bh_disable+0x10/0x34 [ 70.516048][ C1] ---[ end trace 5fb5e4773a4d54f9 ]--- [ 70.599101][ T4895] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.600448][ T4895] Bad inode number on dev loop0: 2 is out of range [ 70.601665][ T4895] SysV FS: get root inode failed [ 70.602557][ T4895] oldfs: cannot read superblock [ 70.611304][ C0] ------------[ cut here ]------------ [ 70.612200][ C0] VFS: brelse: Trying to free free buffer [ 70.613151][ C0] WARNING: CPU: 0 PID: 4896 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.614599][ C0] Modules linked in: [ 70.615231][ C0] CPU: 0 PID: 4896 Comm: syz.0.100 Tainted: G W syzkaller #0 [ 70.616657][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.618285][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.619656][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.620575][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.621473][ C0] sp : ffff800008007df0 [ 70.622180][ C0] x29: ffff800008007df0 x28: ffff0000ccab9b40 x27: 1fffe000341cc45c [ 70.623623][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 70.625096][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2ccb888 [ 70.626497][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 70.627918][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.629278][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 70.630666][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : c575ffdf7c57c700 [ 70.632088][ C0] x8 : c575ffdf7c57c700 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.633533][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.634930][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 70.636346][ C0] Call trace: [ 70.636894][ C0] invalidate_bh_lru+0x128/0x22c [ 70.637746][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.638804][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.640000][ C0] ipi_handler+0x10c/0x70c [ 70.640759][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.641725][ C0] handle_domain_irq+0x148/0x200 [ 70.642525][ C0] gic_handle_irq+0x78/0x1b8 [ 70.643279][ C0] call_on_irq_stack+0x30/0x48 [ 70.644090][ C0] do_interrupt_handler+0x6c/0x88 [ 70.644929][ C0] el1_interrupt+0x30/0x58 [ 70.645672][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.646571][ C0] el1h_64_irq+0x78/0x7c [ 70.647261][ C0] _raw_spin_unlock_irq+0xa0/0x128 [ 70.648074][ C0] cgroup_can_fork+0x4a4/0xcd8 [ 70.648929][ C0] copy_process+0x24ac/0x36f4 [ 70.649734][ C0] kernel_clone+0x1ec/0xa10 [ 70.650527][ C0] __arm64_sys_clone3+0x340/0x374 [ 70.651357][ C0] invoke_syscall+0x98/0x28c [ 70.652112][ C0] el0_svc_common+0x13c/0x258 [ 70.652896][ C0] do_el0_svc+0x5c/0x140 [ 70.653639][ C0] el0_svc+0x78/0x1d0 [ 70.654277][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 70.655103][ C0] el0t_64_sync+0x1a0/0x1a4 [ 70.655835][ C0] irq event stamp: 1450 [ 70.656550][ C0] hardirqs last enabled at (1449): [] _raw_spin_unlock_irq+0x98/0x128 [ 70.658272][ C0] hardirqs last disabled at (1450): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.659847][ C0] softirqs last enabled at (1420): [] local_bh_enable+0x10/0x34 [ 70.661418][ C0] softirqs last disabled at (1418): [] local_bh_disable+0x10/0x34 [ 70.662951][ C0] ---[ end trace 5fb5e4773a4d54fa ]--- [ 70.692749][ T4897] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.694044][ T4897] Bad inode number on dev loop0: 2 is out of range [ 70.695102][ T4897] SysV FS: get root inode failed [ 70.695946][ T4897] oldfs: cannot read superblock [ 70.699081][ C1] ------------[ cut here ]------------ [ 70.700105][ C1] VFS: brelse: Trying to free free buffer [ 70.701196][ C1] WARNING: CPU: 1 PID: 4404 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.702646][ C1] Modules linked in: [ 70.703251][ C1] CPU: 1 PID: 4404 Comm: syz-execprog Tainted: G W syzkaller #0 [ 70.704682][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.706224][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.707498][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.708444][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.709415][ C1] sp : ffff800008017df0 [ 70.710142][ C1] x29: ffff800008017df0 x28: ffff0000de4951c0 x27: 1fffe000341d065c [ 70.711659][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 70.713142][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deefadf8 [ 70.714590][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 70.716067][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.717689][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.719207][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 00098a72533e9600 [ 70.720610][ C1] x8 : 00098a72533e9600 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.722048][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.723491][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.724902][ C1] Call trace: [ 70.725482][ C1] invalidate_bh_lru+0x128/0x22c [ 70.726388][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.727484][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.728712][ C1] ipi_handler+0x10c/0x70c [ 70.729512][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.730572][ C1] handle_domain_irq+0x148/0x200 [ 70.731493][ C1] gic_handle_irq+0x78/0x1b8 [ 70.732318][ C1] call_on_irq_stack+0x30/0x48 [ 70.733188][ C1] do_interrupt_handler+0x6c/0x88 [ 70.734113][ C1] el0_interrupt+0x94/0x248 [ 70.734926][ C1] __el0_irq_handler_common+0x18/0x24 [ 70.735919][ C1] el0t_64_irq_handler+0x10/0x1c [ 70.736823][ C1] el0t_64_irq+0x1a0/0x1a4 [ 70.737589][ C1] irq event stamp: 490516 [ 70.738347][ C1] hardirqs last enabled at (490515): [] el0t_64_sync_handler+0xcc/0xe4 [ 70.740096][ C1] hardirqs last disabled at (490516): [] __el0_irq_handler_common+0x18/0x24 [ 70.741873][ C1] softirqs last enabled at (490512): [] local_bh_enable+0x10/0x34 [ 70.743581][ C1] softirqs last disabled at (490510): [] local_bh_disable+0x10/0x34 [ 70.745293][ C1] ---[ end trace 5fb5e4773a4d54fb ]--- [ 70.797634][ T4899] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.799789][ T4899] Bad inode number on dev loop0: 2 is out of range [ 70.800879][ T4899] SysV FS: get root inode failed [ 70.801703][ T4899] oldfs: cannot read superblock [ 70.817244][ T4720] ------------[ cut here ]------------ [ 70.818220][ T4720] VFS: brelse: Trying to free free buffer [ 70.819304][ T4720] WARNING: CPU: 1 PID: 4720 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.820902][ T4720] Modules linked in: [ 70.821604][ T4720] CPU: 1 PID: 4720 Comm: udevd Tainted: G W syzkaller #0 [ 70.823156][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.824966][ T4720] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.826391][ T4720] pc : invalidate_bh_lru+0x128/0x22c [ 70.827421][ T4720] lr : invalidate_bh_lru+0x128/0x22c [ 70.828513][ T4720] sp : ffff80001f9d77d0 [ 70.829234][ T4720] x29: ffff80001f9d77d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 70.830700][ T4720] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 70.832159][ T4720] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed9230 [ 70.833614][ T4720] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 70.835042][ T4720] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.836488][ T4720] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.837940][ T4720] x11: ff80800008300a7c x10: 0000000000000000 x9 : 72e37756ff3be100 [ 70.839401][ T4720] x8 : 72e37756ff3be100 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.840963][ T4720] x5 : ffff80001f9d70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.842379][ T4720] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.843824][ T4720] Call trace: [ 70.844536][ T4720] invalidate_bh_lru+0x128/0x22c [ 70.845477][ T4720] smp_call_function_many_cond+0xa5c/0xec0 [ 70.846654][ T4720] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.847617][ T4720] invalidate_bh_lrus+0x34/0x40 [ 70.848611][ T4720] blkdev_flush_mapping+0x16c/0x334 [ 70.849593][ T4720] blkdev_put+0x444/0x6c4 [ 70.850363][ T4720] blkdev_close+0x74/0xb0 [ 70.851170][ T4720] __fput+0x1b8/0x7e8 [ 70.851883][ T4720] ____fput+0x20/0x30 [ 70.852562][ T4720] task_work_run+0x13c/0x1e8 [ 70.853384][ T4720] do_notify_resume+0x2488/0x30a8 [ 70.854304][ T4720] el0_svc+0xf0/0x1d0