[ 53.067437][ T1607] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.402954][ T1607] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.444108][ T1607] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.484761][ T1607] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. 1970/01/01 00:00:56 parsed 1 programs [ 58.180847][ T4371] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 58.445866][ T1607] device hsr_slave_0 left promiscuous mode [ 58.490278][ T1607] device hsr_slave_1 left promiscuous mode [ 58.579996][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.581511][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.583309][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.584844][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.589359][ T1607] device bridge_slave_1 left promiscuous mode [ 58.591500][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.630530][ T1607] device bridge_slave_0 left promiscuous mode [ 58.631787][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.770001][ T1607] device veth1_macvtap left promiscuous mode [ 58.771208][ T1607] device veth0_macvtap left promiscuous mode [ 58.772513][ T1607] device veth1_vlan left promiscuous mode [ 58.773677][ T1607] device veth0_vlan left promiscuous mode [ 58.906954][ T1607] team0 (unregistering): Port device team_slave_1 removed [ 58.913510][ T1607] team0 (unregistering): Port device team_slave_0 removed [ 58.918332][ T1607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.964748][ T1607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.086768][ T1607] bond0 (unregistering): Released all slaves [ 61.007769][ T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.009391][ T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.012718][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.020640][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.022461][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.024022][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.107646][ T4420] chnl_net:caif_netlink_parms(): no params data found [ 61.128443][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.130571][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.132457][ T4420] device bridge_slave_0 entered promiscuous mode [ 61.134913][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.136480][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.138397][ T4420] device bridge_slave_1 entered promiscuous mode [ 61.147911][ T4420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.151580][ T4420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.161046][ T4420] team0: Port device team_slave_0 added [ 61.163559][ T4420] team0: Port device team_slave_1 added [ 61.172415][ T4420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.173861][ T4420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.179160][ T4420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.182485][ T4420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.183888][ T4420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.189254][ T4420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.232358][ T4420] device hsr_slave_0 entered promiscuous mode [ 61.261345][ T4420] device hsr_slave_1 entered promiscuous mode [ 61.817098][ T4420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.851834][ T4420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.891404][ T4420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.921855][ T4420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.957642][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.959310][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.960978][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.962409][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.982929][ T4420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.987676][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.989862][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.991744][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.998047][ T4420] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.005227][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.007073][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.008563][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.013269][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.015147][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.017213][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.018596][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.025129][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.027743][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.046953][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.049741][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.058152][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.060359][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.062395][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.064292][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.066076][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.067923][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.069740][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.074975][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.128873][ T4420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.141101][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.142807][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.144467][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.146612][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.162756][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.164699][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.166651][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.168443][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.172399][ T4420] device veth0_vlan entered promiscuous mode [ 62.177292][ T4420] device veth1_vlan entered promiscuous mode [ 62.187622][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.189533][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.197158][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.199057][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.204498][ T4420] device veth0_macvtap entered promiscuous mode [ 62.207321][ T4420] device veth1_macvtap entered promiscuous mode [ 62.214184][ T4420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.215634][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.217407][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.219268][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.221411][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.225552][ T4420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.228654][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.232250][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.234802][ T4420] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.236472][ T4420] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.238100][ T4420] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.239725][ T4420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:02 executed programs: 0 [ 63.078432][ T4628] chnl_net:caif_netlink_parms(): no params data found [ 63.102355][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.103896][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.105753][ T4628] device bridge_slave_0 entered promiscuous mode [ 63.108122][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.109726][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.112639][ T4628] device bridge_slave_1 entered promiscuous mode [ 63.125892][ T4628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.128954][ T4628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.139540][ T4628] team0: Port device team_slave_0 added [ 63.142793][ T4628] team0: Port device team_slave_1 added [ 63.151927][ T4628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.153407][ T4628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.158627][ T4628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.162171][ T4628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.163555][ T4628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.168780][ T4628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.231393][ T4628] device hsr_slave_0 entered promiscuous mode [ 63.270743][ T4628] device hsr_slave_1 entered promiscuous mode [ 63.320291][ T4628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.321882][ T4628] Cannot create hsr debugfs directory [ 63.362061][ T4628] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.080000][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 66.154525][ T4628] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.149980][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 68.033782][ T4628] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.085355][ T4628] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.225145][ T4628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.241752][ T4628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.281344][ T4628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.322282][ T4628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.394545][ T4628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.399703][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.401947][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.404883][ T4628] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.407621][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.409563][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.411725][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.413141][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.414859][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.418035][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.420097][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.422068][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.423421][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.426428][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.429710][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.434742][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.436846][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.438829][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.445443][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.447408][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.452125][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.453971][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.457277][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.459145][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.462405][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.505533][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.507166][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.525728][ T4628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.532984][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.535028][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.543761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.545693][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.547717][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.549503][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.553258][ T4628] device veth0_vlan entered promiscuous mode [ 68.557070][ T4628] device veth1_vlan entered promiscuous mode [ 68.579684][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.582458][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.584269][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.586096][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.589295][ T4628] device veth0_macvtap entered promiscuous mode [ 68.593892][ T4628] device veth1_macvtap entered promiscuous mode [ 68.599149][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.601950][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.604511][ T4628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.607236][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.609257][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.612250][ T4628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.613741][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.615627][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.617389][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.620773][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.622674][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.624645][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.631630][ T4628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.633255][ T4628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.634827][ T4628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.636385][ T4628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.658980][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.663603][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.675762][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.682744][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.684387][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.686044][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:08 executed programs: 2 [ 68.710760][ T4710] loop0: detected capacity change from 0 to 128 [ 68.722192][ T4710] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.723672][ T4710] Bad inode number on dev loop0: 2 is out of range [ 68.724812][ T4710] SysV FS: get root inode failed [ 68.725691][ T4710] oldfs: cannot read superblock [ 68.726720][ T4710] ------------[ cut here ]------------ [ 68.727740][ T4710] VFS: brelse: Trying to free free buffer [ 68.728859][ T4710] WARNING: CPU: 1 PID: 4710 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.730589][ T4710] Modules linked in: [ 68.731395][ T4710] CPU: 1 PID: 4710 Comm: syz.0.16 Not tainted syzkaller #0 [ 68.732886][ T4710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.734981][ T4710] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.736657][ T4710] pc : invalidate_bh_lru+0x128/0x22c [ 68.737787][ T4710] lr : invalidate_bh_lru+0x128/0x22c [ 68.738897][ T4710] sp : ffff80001f467710 [ 68.739769][ T4710] x29: ffff80001f467710 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 68.741472][ T4710] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 68.743149][ T4710] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25456b8 [ 68.744813][ T4710] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 68.746485][ T4710] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.748150][ T4710] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 68.749806][ T4710] x11: ff80800008300a7c x10: 0000000000000000 x9 : 361213ffc3594000 [ 68.751434][ T4710] x8 : 361213ffc3594000 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.753096][ T4710] x5 : ffff80001f467018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.754667][ T4710] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.756304][ T4710] Call trace: [ 68.757010][ T4710] invalidate_bh_lru+0x128/0x22c [ 68.758001][ T4710] smp_call_function_many_cond+0xa5c/0xec0 [ 68.759191][ T4710] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.760246][ T4710] invalidate_bh_lrus+0x34/0x40 [ 68.761226][ T4710] blkdev_flush_mapping+0x16c/0x334 [ 68.762281][ T4710] blkdev_put+0x444/0x6c4 [ 68.763103][ T4710] kill_block_super+0xa0/0xe0 [ 68.764004][ T4710] deactivate_locked_super+0xc0/0x13c [ 68.765086][ T4710] mount_bdev+0x284/0x35c [ 68.765944][ T4710] sysv_mount+0x44/0x58 [ 68.766804][ T4710] legacy_get_tree+0xd8/0x174 [ 68.767761][ T4710] vfs_get_tree+0x90/0x278 [ 68.768674][ T4710] do_new_mount+0x228/0x804 [ 68.769603][ T4710] path_mount+0x57c/0xfe8 [ 68.770487][ T4710] __arm64_sys_mount+0x488/0x5f8 [ 68.771488][ T4710] invoke_syscall+0x98/0x28c [ 68.772416][ T4710] el0_svc_common+0x13c/0x258 [ 68.773370][ T4710] do_el0_svc+0x5c/0x140 [ 68.774240][ T4710] el0_svc+0x78/0x1d0 [ 68.775060][ T4710] el0t_64_sync_handler+0xcc/0xe4 [ 68.776090][ T4710] el0t_64_sync+0x1a0/0x1a4 [ 68.777020][ T4710] irq event stamp: 1318 [ 68.777898][ T4710] hardirqs last enabled at (1317): [] kasan_quarantine_put+0xc4/0x200 [ 68.779853][ T4710] hardirqs last disabled at (1318): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.781939][ T4710] softirqs last enabled at (1042): [] local_bh_enable+0x10/0x34 [ 68.783832][ T4710] softirqs last disabled at (1040): [] local_bh_disable+0x10/0x34 [ 68.785795][ T4710] ---[ end trace f47a0c0763f84437 ]--- [ 68.884478][ T4712] loop0: detected capacity change from 0 to 128 [ 68.887495][ T4712] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.888977][ T4712] Bad inode number on dev loop0: 2 is out of range [ 68.890797][ T4712] SysV FS: get root inode failed [ 68.891950][ T4712] oldfs: cannot read superblock [ 68.895330][ C0] ------------[ cut here ]------------ [ 68.896412][ C0] VFS: brelse: Trying to free free buffer [ 68.897698][ C0] WARNING: CPU: 0 PID: 4628 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.899451][ C0] Modules linked in: [ 68.900247][ C0] CPU: 0 PID: 4628 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.902116][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.904187][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.905823][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.906932][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.908058][ C0] sp : ffff800008007df0 [ 68.908945][ C0] x29: ffff800008007df0 x28: ffff0000cc85d1c0 x27: 1fffe000341cc45c [ 68.910712][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 68.912393][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2520970 [ 68.914088][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 68.915731][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 68.917399][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 68.919066][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 08b2120ccda4ce00 [ 68.920757][ C0] x8 : 08b2120ccda4ce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.922418][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 68.924062][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 68.925741][ C0] Call trace: [ 68.926403][ C0] invalidate_bh_lru+0x128/0x22c [ 68.927396][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.928633][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.930097][ C0] ipi_handler+0x10c/0x70c [ 68.931019][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.932156][ C0] handle_domain_irq+0x148/0x200 [ 68.933152][ C0] gic_handle_irq+0x78/0x1b8 [ 68.934056][ C0] call_on_irq_stack+0x30/0x48 [ 68.935015][ C0] do_interrupt_handler+0x6c/0x88 [ 68.936038][ C0] el1_interrupt+0x30/0x58 [ 68.936949][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.937979][ C0] el1h_64_irq+0x78/0x7c [ 68.938843][ C0] arch_local_irq_restore+0x8/0x10 [ 68.939894][ C0] rcu_read_lock_any_held+0x38/0xdc [ 68.940962][ C0] touch_atime+0x13c/0x918 [ 68.941862][ C0] iterate_dir+0x280/0x4d0 [ 68.942765][ C0] __arm64_sys_getdents64+0x11c/0x338 [ 68.943860][ C0] invoke_syscall+0x98/0x28c [ 68.944789][ C0] el0_svc_common+0x13c/0x258 [ 68.945752][ C0] do_el0_svc+0x5c/0x140 [ 68.946625][ C0] el0_svc+0x78/0x1d0 [ 68.947447][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 68.948428][ C0] el0t_64_sync+0x1a0/0x1a4 [ 68.949328][ C0] irq event stamp: 174640 [ 68.950159][ C0] hardirqs last enabled at (174639): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 68.952352][ C0] hardirqs last disabled at (174640): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.954293][ C0] softirqs last enabled at (174550): [] local_bh_enable+0x10/0x34 [ 68.956284][ C0] softirqs last disabled at (174548): [] local_bh_disable+0x10/0x34 [ 68.958410][ C0] ---[ end trace f47a0c0763f84438 ]--- [ 69.016022][ T4714] loop0: detected capacity change from 0 to 128 [ 69.051589][ T4714] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.053141][ T4714] Bad inode number on dev loop0: 2 is out of range [ 69.054340][ T4714] SysV FS: get root inode failed [ 69.055583][ T4714] oldfs: cannot read superblock [ 69.071786][ T4716] ------------[ cut here ]------------ [ 69.072943][ T4716] VFS: brelse: Trying to free free buffer [ 69.074161][ T4716] WARNING: CPU: 1 PID: 4716 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.075978][ T4716] Modules linked in: [ 69.076785][ T4716] CPU: 1 PID: 4716 Comm: syz.0.19 Tainted: G W syzkaller #0 [ 69.078542][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.080583][ T4716] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.082176][ T4716] pc : invalidate_bh_lru+0x128/0x22c [ 69.083220][ T4716] lr : invalidate_bh_lru+0x128/0x22c [ 69.084313][ T4716] sp : ffff80001f7077d0 [ 69.085170][ T4716] x29: ffff80001f7077d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 69.086823][ T4716] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 69.088463][ T4716] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2545b40 [ 69.090066][ T4716] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 69.091716][ T4716] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.093363][ T4716] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 69.095020][ T4716] x11: ff80800008300a7c x10: 0000000000000000 x9 : da1b350c894a2a00 [ 69.096685][ T4716] x8 : da1b350c894a2a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.098366][ T4716] x5 : ffff80001f7070d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.100023][ T4716] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.101688][ T4716] Call trace: [ 69.102361][ T4716] invalidate_bh_lru+0x128/0x22c [ 69.103380][ T4716] smp_call_function_many_cond+0xa5c/0xec0 [ 69.104559][ T4716] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.105579][ T4716] invalidate_bh_lrus+0x34/0x40 [ 69.106558][ T4716] blkdev_flush_mapping+0x16c/0x334 [ 69.107636][ T4716] blkdev_put+0x444/0x6c4 [ 69.108574][ T4716] blkdev_close+0x74/0xb0 [ 69.109464][ T4716] __fput+0x1b8/0x7e8 [ 69.110241][ T4716] ____fput+0x20/0x30 [ 69.111047][ T4716] task_work_run+0x13c/0x1e8 [ 69.111988][ T4716] do_notify_resume+0x2488/0x30a8 [ 69.113010][ T4716] el0_svc+0xf0/0x1d0 [ 69.113802][ T4716] el0t_64_sync_handler+0xcc/0xe4 [ 69.114782][ T4716] el0t_64_sync+0x1a0/0x1a4 [ 69.115701][ T4716] irq event stamp: 836 [ 69.116515][ T4716] hardirqs last enabled at (835): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 69.118594][ T4716] hardirqs last disabled at (836): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.120698][ T4716] softirqs last enabled at (802): [] local_bh_enable+0x10/0x34 [ 69.122518][ T4716] softirqs last disabled at (800): [] local_bh_disable+0x10/0x34 [ 69.124370][ T4716] ---[ end trace f47a0c0763f84439 ]--- [ 69.168282][ T4718] loop0: detected capacity change from 0 to 128 [ 69.172124][ T4718] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.173770][ T4718] Bad inode number on dev loop0: 2 is out of range [ 69.175182][ T4718] SysV FS: get root inode failed [ 69.176207][ T4718] oldfs: cannot read superblock [ 69.179014][ C1] ------------[ cut here ]------------ [ 69.180199][ C1] VFS: brelse: Trying to free free buffer [ 69.181478][ C1] WARNING: CPU: 1 PID: 4718 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.183329][ C1] Modules linked in: [ 69.184113][ C1] CPU: 1 PID: 4718 Comm: syz.0.20 Tainted: G W syzkaller #0 [ 69.185900][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.188022][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.189646][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 69.190754][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 69.191858][ C1] sp : ffff800008017df0 [ 69.192715][ C1] x29: ffff800008017df0 x28: ffff0000d0f98000 x27: 1fffe000341d065c [ 69.194382][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 69.196014][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2545ee0 [ 69.197652][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 69.199303][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.201001][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 69.202702][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 61f8ac2b4cf62600 [ 69.204404][ C1] x8 : 61f8ac2b4cf62600 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.206062][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.207725][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.209411][ C1] Call trace: [ 69.210103][ C1] invalidate_bh_lru+0x128/0x22c [ 69.211151][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 69.212355][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.213785][ C1] ipi_handler+0x10c/0x70c [ 69.214689][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 69.215784][ C1] handle_domain_irq+0x148/0x200 [ 69.216778][ C1] gic_handle_irq+0x78/0x1b8 [ 69.217700][ C1] call_on_irq_stack+0x30/0x48 [ 69.218656][ C1] do_interrupt_handler+0x6c/0x88 [ 69.219639][ C1] el1_interrupt+0x30/0x58 [ 69.220493][ C1] el1h_64_irq_handler+0x18/0x24 [ 69.221439][ C1] el1h_64_irq+0x78/0x7c [ 69.222263][ C1] kasan_check_range+0x78/0x2a0 [ 69.223244][ C1] __kasan_check_read+0x44/0x54 [ 69.224222][ C1] locks_remove_posix+0xd8/0x658 [ 69.225260][ C1] filp_close+0xf8/0x154 [ 69.226110][ C1] put_files_struct+0x1c0/0x36c [ 69.227081][ C1] exit_files+0x78/0x98 [ 69.227922][ C1] do_exit+0x610/0x1f54 [ 69.228761][ C1] do_group_exit+0x104/0x274 [ 69.229685][ C1] get_signal+0x638/0x13b0 [ 69.230553][ C1] do_notify_resume+0x344/0x30a8 [ 69.231535][ C1] el0_svc+0xf0/0x1d0 [ 69.232317][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 69.233329][ C1] el0t_64_sync+0x1a0/0x1a4 [ 69.234232][ C1] irq event stamp: 2770 [ 69.235056][ C1] hardirqs last enabled at (2769): [] kasan_quarantine_put+0xc4/0x200 [ 69.237022][ C1] hardirqs last disabled at (2770): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.238968][ C1] softirqs last enabled at (964): [] local_bh_enable+0x10/0x34 [ 69.240792][ C1] softirqs last disabled at (962): [] local_bh_disable+0x10/0x34 [ 69.242715][ C1] ---[ end trace f47a0c0763f8443a ]--- [ 69.247121][ T4173] Bluetooth: hci1: command 0x040f tx timeout [ 69.298964][ T4720] loop0: detected capacity change from 0 to 128 [ 69.341564][ T4720] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.343043][ T4720] Bad inode number on dev loop0: 2 is out of range [ 69.344264][ T4720] SysV FS: get root inode failed [ 69.345227][ T4720] oldfs: cannot read superblock [ 69.358162][ T4704] ------------[ cut here ]------------ [ 69.359249][ T4704] VFS: brelse: Trying to free free buffer [ 69.360416][ T4704] WARNING: CPU: 0 PID: 4704 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.362235][ T4704] Modules linked in: [ 69.363016][ T4704] CPU: 0 PID: 4704 Comm: udevd Tainted: G W syzkaller #0 [ 69.364660][ T4704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.366745][ T4704] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.368582][ T4704] pc : invalidate_bh_lru+0x128/0x22c [ 69.369710][ T4704] lr : invalidate_bh_lru+0x128/0x22c [ 69.370853][ T4704] sp : ffff80001f4f77d0 [ 69.371727][ T4704] x29: ffff80001f4f77d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 69.373640][ T4704] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 69.375480][ T4704] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2677060 [ 69.377260][ T4704] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 69.379027][ T4704] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.380773][ T4704] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 69.382695][ T4704] x11: ff80800008300a7c x10: 0000000000000000 x9 : b19bf0998b386300 [ 69.384360][ T4704] x8 : b19bf0998b386300 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.386059][ T4704] x5 : ffff80001f4f70d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.387719][ T4704] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.389434][ T4704] Call trace: [ 69.390124][ T4704] invalidate_bh_lru+0x128/0x22c [ 69.391175][ T4704] smp_call_function_many_cond+0xa5c/0xec0 [ 69.392368][ T4704] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.393391][ T4704] invalidate_bh_lrus+0x34/0x40 [ 69.394391][ T4704] blkdev_flush_mapping+0x16c/0x334 [ 69.395482][ T4704] blkdev_put+0x444/0x6c4 [ 69.396366][ T4704] blkdev_close+0x74/0xb0 [ 69.397267][ T4704] __fput+0x1b8/0x7e8 [ 69.398082][ T4704] ____fput+0x20/0x30 [ 69.398894][ T4704] task_work_run+0x13c/0x1e8 [ 69.399856][ T4704] do_notify_resume+0x2488/0x30a8 [ 69.400919][ T4704] el0_svc+0xf0/0x1d0 [ 69.401749][ T4704] el0t_64_sync_handler+0xcc/0xe4 [ 69.402812][ T4704] el0t_64_sync+0x1a0/0x1a4 [ 69.403770][ T4704] irq event stamp: 42204 [ 69.404672][ T4704] hardirqs last enabled at (42203): [] kasan_quarantine_put+0xc4/0x200 [ 69.406850][ T4704] hardirqs last disabled at (42204): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.409114][ T4704] softirqs last enabled at (41942): [] local_bh_enable+0x10/0x34 [ 69.411152][ T4704] softirqs last disabled at (41940): [] local_bh_disable+0x10/0x34 [ 69.413131][ T4704] ---[ end trace f47a0c0763f8443b ]--- [ 69.433833][ T4722] loop0: detected capacity change from 0 to 128 [ 69.437173][ T4722] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.438698][ T4722] Bad inode number on dev loop0: 2 is out of range [ 69.442088][ T4722] SysV FS: get root inode failed [ 69.443032][ T4722] oldfs: cannot read superblock [ 69.448763][ T4704] ------------[ cut here ]------------ [ 69.449836][ T4704] VFS: brelse: Trying to free free buffer [ 69.451073][ T4704] WARNING: CPU: 1 PID: 4704 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.453048][ T4704] Modules linked in: [ 69.453957][ T4704] CPU: 1 PID: 4704 Comm: udevd Tainted: G W syzkaller #0 [ 69.455782][ T4704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.457951][ T4704] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.459636][ T4704] pc : invalidate_bh_lru+0x128/0x22c [ 69.460777][ T4704] lr : invalidate_bh_lru+0x128/0x22c [ 69.461898][ T4704] sp : ffff80001f4f77d0 [ 69.462772][ T4704] x29: ffff80001f4f77d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 69.464365][ T4704] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 69.466019][ T4704] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e254b318 [ 69.467760][ T4704] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 69.469397][ T4704] x17: 0000000000000000 x16: ffff8000082dc19c x15: 0000000000000012 [ 69.471025][ T4704] x14: 0000000000000001 x13: 1ffff00003e9ee18 x12: 0000000000000000 [ 69.472641][ T4704] x11: ff80800008300a7c x10: 0000000000000000 x9 : b19bf0998b386300 [ 69.474270][ T4704] x8 : b19bf0998b386300 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.475879][ T4704] x5 : ffff80001f4f70d8 x4 : ffff80001448f520 x3 : ffff8000083083a4 [ 69.477487][ T4704] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.479075][ T4704] Call trace: [ 69.479748][ T4704] invalidate_bh_lru+0x128/0x22c [ 69.480768][ T4704] smp_call_function_many_cond+0xa5c/0xec0 [ 69.481984][ T4704] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.483070][ T4704] invalidate_bh_lrus+0x34/0x40 [ 69.484132][ T4704] blkdev_flush_mapping+0x16c/0x334 [ 69.485152][ T4704] blkdev_put+0x444/0x6c4 [ 69.486056][ T4704] blkdev_close+0x74/0xb0 [ 69.486997][ T4704] __fput+0x1b8/0x7e8 [ 69.487861][ T4704] ____fput+0x20/0x30 [ 69.488727][ T4704] task_work_run+0x13c/0x1e8 [ 69.489668][ T4704] do_notify_resume+0x2488/0x30a8 [ 69.490739][ T4704] el0_svc+0xf0/0x1d0 [ 69.491580][ T4704] el0t_64_sync_handler+0xcc/0xe4 [ 69.492612][ T4704] el0t_64_sync+0x1a0/0x1a4 [ 69.493506][ T4704] irq event stamp: 46686 [ 69.494356][ T4704] hardirqs last enabled at (46685): [] kasan_quarantine_put+0xc4/0x200 [ 69.496324][ T4704] hardirqs last disabled at (46686): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.498443][ T4704] softirqs last enabled at (46410): [] local_bh_enable+0x10/0x34 [ 69.500407][ T4704] softirqs last disabled at (46408): [] local_bh_disable+0x10/0x34 [ 69.502614][ T4704] ---[ end trace f47a0c0763f8443c ]--- [ 69.545961][ T4724] loop0: detected capacity change from 0 to 128 [ 69.548381][ T4724] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.549812][ T4724] Bad inode number on dev loop0: 2 is out of range [ 69.557208][ T4724] SysV FS: get root inode failed [ 69.558161][ T4724] oldfs: cannot read superblock [ 69.577080][ C1] ------------[ cut here ]------------ [ 69.578272][ C1] VFS: brelse: Trying to free free buffer [ 69.579439][ C1] WARNING: CPU: 1 PID: 4726 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.581308][ C1] Modules linked in: [ 69.582145][ C1] CPU: 1 PID: 4726 Comm: syz.0.24 Tainted: G W syzkaller #0 [ 69.583976][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.586104][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.587719][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 69.588821][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 69.589915][ C1] sp : ffff800008017df0 [ 69.590772][ C1] x29: ffff800008017df0 x28: ffff0000c2588000 x27: 1fffe000341d065c [ 69.592368][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 69.593983][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e254b6b8 [ 69.595601][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 69.597247][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.599008][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 69.600726][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 8ea0ca9a2ed19400 [ 69.602330][ C1] x8 : 8ea0ca9a2ed19400 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.603912][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.605513][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 69.607078][ C1] Call trace: [ 69.607726][ C1] invalidate_bh_lru+0x128/0x22c [ 69.608708][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 69.609881][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.611268][ C1] ipi_handler+0x10c/0x70c [ 69.612140][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 69.613219][ C1] handle_domain_irq+0x148/0x200 [ 69.614329][ C1] gic_handle_irq+0x78/0x1b8 [ 69.615266][ C1] call_on_irq_stack+0x30/0x48 [ 69.616188][ C1] do_interrupt_handler+0x6c/0x88 [ 69.617170][ C1] el1_interrupt+0x30/0x58 [ 69.618039][ C1] el1h_64_irq_handler+0x18/0x24 [ 69.619026][ C1] el1h_64_irq+0x78/0x7c [ 69.619869][ C1] lock_page_memcg+0x120/0x22c [ 69.620845][ C1] page_remove_rmap+0x3c/0xfb4 [ 69.621825][ C1] unmap_page_range+0xa60/0x180c [ 69.622812][ C1] unmap_single_vma+0x13c/0x1e4 [ 69.623814][ C1] unmap_vmas+0x110/0x218 [ 69.624668][ C1] exit_mmap+0x2c4/0x510 [ 69.625505][ C1] __mmput+0xe8/0x3a0 [ 69.626291][ C1] mmput+0x80/0xc0 [ 69.627038][ C1] exit_mm+0x5dc/0x704 [ 69.627863][ C1] do_exit+0x4bc/0x1f54 [ 69.628675][ C1] do_group_exit+0x104/0x274 [ 69.629593][ C1] get_signal+0x638/0x13b0 [ 69.630485][ C1] do_notify_resume+0x344/0x30a8 [ 69.631461][ C1] el0_svc+0xf0/0x1d0 [ 69.632262][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 69.633309][ C1] el0t_64_sync+0x1a0/0x1a4 [ 69.634177][ C1] irq event stamp: 1276 [ 69.634978][ C1] hardirqs last enabled at (1275): [] lock_page_memcg+0x110/0x22c [ 69.636832][ C1] hardirqs last disabled at (1276): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.638823][ C1] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 69.640597][ C1] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 69.642452][ C1] ---[ end trace f47a0c0763f8443d ]--- [ 69.645617][ T7] cfg80211: failed to load regulatory.db [ 69.649186][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.650644][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.714351][ T4729] loop0: detected capacity change from 0 to 128 [ 69.731046][ T4729] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.732626][ T4729] Bad inode number on dev loop0: 2 is out of range [ 69.734191][ T4729] SysV FS: get root inode failed [ 69.735222][ T4729] oldfs: cannot read superblock [ 69.742160][ C0] ------------[ cut here ]------------ [ 69.743240][ C0] VFS: brelse: Trying to free free buffer [ 69.744366][ C0] WARNING: CPU: 0 PID: 351 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.746153][ C0] Modules linked in: [ 69.746953][ C0] CPU: 0 PID: 351 Comm: kworker/u4:3 Tainted: G W syzkaller #0 [ 69.748782][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.750878][ C0] Workqueue: events_power_efficient gc_worker [ 69.752058][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.753619][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.754718][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.755806][ C0] sp : ffff800008007df0 [ 69.756646][ C0] x29: ffff800008007df0 x28: ffff0000c7eb8000 x27: 1fffe000341cc45b [ 69.758284][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 69.759943][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2677400 [ 69.761607][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 69.763253][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.764868][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 69.766514][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 396a1aa3bc3a6600 [ 69.768103][ C0] x8 : 396a1aa3bc3a6600 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.769704][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.771305][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.772915][ C0] Call trace: [ 69.773603][ C0] invalidate_bh_lru+0x128/0x22c [ 69.774601][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.775870][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.777386][ C0] ipi_handler+0x10c/0x70c [ 69.778309][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.779447][ C0] handle_domain_irq+0x148/0x200 [ 69.780454][ C0] gic_handle_irq+0x78/0x1b8 [ 69.781387][ C0] call_on_irq_stack+0x30/0x48 [ 69.782331][ C0] do_interrupt_handler+0x6c/0x88 [ 69.783343][ C0] el1_interrupt+0x30/0x58 [ 69.784261][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.785238][ C0] el1h_64_irq+0x78/0x7c [ 69.786107][ C0] seqcount_lockdep_reader_access+0x21c/0x2c0 [ 69.787295][ C0] gc_worker+0x28c/0x1170 [ 69.788128][ C0] process_one_work+0x7a4/0x1178 [ 69.789086][ C0] worker_thread+0xb30/0x103c [ 69.789997][ C0] kthread+0x37c/0x460 [ 69.790783][ C0] ret_from_fork+0x10/0x20 [ 69.791653][ C0] irq event stamp: 787240 [ 69.792685][ C0] hardirqs last enabled at (787239): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 69.795233][ C0] hardirqs last disabled at (787240): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.797355][ C0] softirqs last enabled at (780436): [] handle_softirqs+0xa70/0xc14 [ 69.799367][ C0] softirqs last disabled at (780327): [] __irq_exit_rcu+0x240/0x434 [ 69.801636][ C0] ---[ end trace f47a0c0763f8443e ]--- [ 69.821620][ T4731] loop0: detected capacity change from 0 to 128 [ 69.851728][ T4731] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.853300][ T4731] Bad inode number on dev loop0: 2 is out of range [ 69.854755][ T4731] SysV FS: get root inode failed [ 69.855859][ T4731] oldfs: cannot read superblock [ 69.873939][ C0] ------------[ cut here ]------------ [ 69.875111][ C0] VFS: brelse: Trying to free free buffer [ 69.876305][ C0] WARNING: CPU: 0 PID: 351 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.878052][ C0] Modules linked in: [ 69.878805][ C0] CPU: 0 PID: 351 Comm: kworker/u4:3 Tainted: G W syzkaller #0 [ 69.880562][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.882699][ C0] Workqueue: events_power_efficient gc_worker [ 69.883984][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.885631][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.886726][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.887837][ C0] sp : ffff800008007df0 [ 69.888711][ C0] x29: ffff800008007df0 x28: ffff0000c7eb8000 x27: 1fffe000341cc45c [ 69.890436][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 69.892173][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e26777a0 [ 69.893887][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 69.895540][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 69.897215][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 69.898952][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 396a1aa3bc3a6600 [ 69.900549][ C0] x8 : 396a1aa3bc3a6600 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.902171][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 69.903858][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.905562][ C0] Call trace: [ 69.906254][ C0] invalidate_bh_lru+0x128/0x22c [ 69.907294][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.908511][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.909940][ C0] ipi_handler+0x10c/0x70c [ 69.910887][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.912005][ C0] handle_domain_irq+0x148/0x200 [ 69.912984][ C0] gic_handle_irq+0x78/0x1b8 [ 69.913891][ C0] call_on_irq_stack+0x30/0x48 [ 69.914816][ C0] do_interrupt_handler+0x6c/0x88 [ 69.915826][ C0] el1_interrupt+0x30/0x58 [ 69.916719][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.917704][ C0] el1h_64_irq+0x78/0x7c [ 69.918549][ C0] seqcount_lockdep_reader_access+0x21c/0x2c0 [ 69.919762][ C0] gc_worker+0x28c/0x1170 [ 69.920625][ C0] process_one_work+0x7a4/0x1178 [ 69.921689][ C0] worker_thread+0x8fc/0x103c [ 69.922639][ C0] kthread+0x37c/0x460 [ 69.923470][ C0] ret_from_fork+0x10/0x20 [ 69.924372][ C0] irq event stamp: 857666 [ 69.925257][ C0] hardirqs last enabled at (857665): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 69.927482][ C0] hardirqs last disabled at (857666): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.929508][ C0] softirqs last enabled at (855840): [] handle_softirqs+0xa70/0xc14 [ 69.931529][ C0] softirqs last disabled at (855813): [] __irq_exit_rcu+0x240/0x434 [ 69.933544][ C0] ---[ end trace f47a0c0763f8443f ]--- [ 69.993730][ T4733] loop0: detected capacity change from 0 to 128 [ 70.041424][ T4733] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.042827][ T4733] Bad inode number on dev loop0: 2 is out of range [ 70.044709][ T4733] SysV FS: get root inode failed [ 70.045713][ T4733] oldfs: cannot read superblock [ 70.046736][ T4733] ------------[ cut here ]------------ [ 70.047834][ T4733] VFS: brelse: Trying to free free buffer [ 70.049016][ T4733] WARNING: CPU: 1 PID: 4733 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.050805][ T4733] Modules linked in: [ 70.051589][ T4733] CPU: 1 PID: 4733 Comm: syz.0.27 Tainted: G W syzkaller #0 [ 70.053371][ T4733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.055448][ T4733] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.057098][ T4733] pc : invalidate_bh_lru+0x128/0x22c [ 70.058208][ T4733] lr : invalidate_bh_lru+0x128/0x22c [ 70.059460][ T4733] sp : ffff80001fbb7710 [ 70.060447][ T4733] x29: ffff80001fbb7710 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 70.062287][ T4733] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 70.064213][ T4733] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e254ba58 [ 70.066004][ T4733] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 70.067912][ T4733] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.069762][ T4733] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.071514][ T4733] x11: ff80800008300a7c x10: 0000000000000000 x9 : 38699b449a29d500 [ 70.073282][ T4733] x8 : 38699b449a29d500 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.075078][ T4733] x5 : ffff80001fbb7018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.076745][ T4733] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.078523][ T4733] Call trace: [ 70.079215][ T4733] invalidate_bh_lru+0x128/0x22c [ 70.080248][ T4733] smp_call_function_many_cond+0xa5c/0xec0 [ 70.081451][ T4733] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.082518][ T4733] invalidate_bh_lrus+0x34/0x40 [ 70.083484][ T4733] blkdev_flush_mapping+0x16c/0x334 [ 70.084567][ T4733] blkdev_put+0x444/0x6c4 [ 70.085441][ T4733] kill_block_super+0xa0/0xe0 [ 70.086380][ T4733] deactivate_locked_super+0xc0/0x13c [ 70.087450][ T4733] mount_bdev+0x284/0x35c [ 70.088322][ T4733] sysv_mount+0x44/0x58 [ 70.089163][ T4733] legacy_get_tree+0xd8/0x174 [ 70.090123][ T4733] vfs_get_tree+0x90/0x278 [ 70.091023][ T4733] do_new_mount+0x228/0x804 [ 70.091947][ T4733] path_mount+0x57c/0xfe8 [ 70.092840][ T4733] __arm64_sys_mount+0x488/0x5f8 [ 70.093850][ T4733] invoke_syscall+0x98/0x28c [ 70.094807][ T4733] el0_svc_common+0x13c/0x258 [ 70.095783][ T4733] do_el0_svc+0x5c/0x140 [ 70.096641][ T4733] el0_svc+0x78/0x1d0 [ 70.097472][ T4733] el0t_64_sync_handler+0xcc/0xe4 [ 70.098483][ T4733] el0t_64_sync+0x1a0/0x1a4 [ 70.099407][ T4733] irq event stamp: 1178 [ 70.100262][ T4733] hardirqs last enabled at (1177): [] kasan_quarantine_put+0xc4/0x200 [ 70.102290][ T4733] hardirqs last disabled at (1178): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.104433][ T4733] softirqs last enabled at (978): [] local_bh_enable+0x10/0x34 [ 70.106269][ T4733] softirqs last disabled at (976): [] local_bh_disable+0x10/0x34 [ 70.108142][ T4733] ---[ end trace f47a0c0763f84440 ]--- [ 70.200043][ T4735] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.201563][ T4735] Bad inode number on dev loop0: 2 is out of range [ 70.202853][ T4735] SysV FS: get root inode failed [ 70.203875][ T4735] oldfs: cannot read superblock [ 70.204917][ C0] ------------[ cut here ]------------ [ 70.206021][ C0] VFS: brelse: Trying to free free buffer [ 70.207208][ C0] WARNING: CPU: 0 PID: 9 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.208944][ C0] Modules linked in: [ 70.209725][ C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Tainted: G W syzkaller #0 [ 70.211538][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.213681][ C0] Workqueue: events_power_efficient gc_worker [ 70.214984][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.216594][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.217705][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.218782][ C0] sp : ffff800008007df0 [ 70.219651][ C0] x29: ffff800008007df0 x28: ffff0000c0948000 x27: 1fffe000341cc45b [ 70.221271][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 70.222852][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2677b40 [ 70.224548][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 70.226274][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.227873][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 70.229493][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : a3ab5f18d336e700 [ 70.231214][ C0] x8 : a3ab5f18d336e700 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.233049][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.234860][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.236661][ C0] Call trace: [ 70.237391][ C0] invalidate_bh_lru+0x128/0x22c [ 70.238491][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.239837][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.241402][ C0] ipi_handler+0x10c/0x70c [ 70.242395][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.243578][ C0] handle_domain_irq+0x148/0x200 [ 70.244639][ C0] gic_handle_irq+0x78/0x1b8 [ 70.245594][ C0] call_on_irq_stack+0x30/0x48 [ 70.246561][ C0] do_interrupt_handler+0x6c/0x88 [ 70.247575][ C0] el1_interrupt+0x30/0x58 [ 70.248481][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.249497][ C0] el1h_64_irq+0x78/0x7c [ 70.250362][ C0] seqcount_lockdep_reader_access+0x21c/0x2c0 [ 70.251625][ C0] gc_worker+0x28c/0x1170 [ 70.252509][ C0] process_one_work+0x7a4/0x1178 [ 70.253503][ C0] worker_thread+0x8fc/0x103c [ 70.254460][ C0] kthread+0x37c/0x460 [ 70.255279][ C0] ret_from_fork+0x10/0x20 [ 70.256210][ C0] irq event stamp: 590586 [ 70.257072][ C0] hardirqs last enabled at (590585): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 70.259218][ C0] hardirqs last disabled at (590586): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.261128][ C0] softirqs last enabled at (586394): [] handle_softirqs+0xa70/0xc14 [ 70.263076][ C0] softirqs last disabled at (586381): [] __irq_exit_rcu+0x240/0x434 [ 70.265036][ C0] ---[ end trace f47a0c0763f84441 ]--- [ 70.455308][ T4737] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.456902][ T4737] Bad inode number on dev loop0: 2 is out of range [ 70.458159][ T4737] SysV FS: get root inode failed [ 70.459054][ T4737] oldfs: cannot read superblock [ 70.462250][ T4727] ------------[ cut here ]------------ [ 70.463219][ T4727] VFS: brelse: Trying to free free buffer [ 70.464297][ T4727] WARNING: CPU: 1 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.465928][ T4727] Modules linked in: [ 70.466644][ T4727] CPU: 1 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 70.468273][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.470275][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.471986][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 70.473093][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 70.474216][ T4727] sp : ffff80001f8477d0 [ 70.475094][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 70.476774][ T4727] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 70.478419][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea6a060 [ 70.480293][ T4727] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 70.482082][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.483885][ T4727] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.485575][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 70.487238][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.488941][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.490700][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.492407][ T4727] Call trace: [ 70.493087][ T4727] invalidate_bh_lru+0x128/0x22c [ 70.494116][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 70.495351][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.496415][ T4727] invalidate_bh_lrus+0x34/0x40 [ 70.497378][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 70.498419][ T4727] blkdev_put+0x444/0x6c4 [ 70.499287][ T4727] blkdev_close+0x74/0xb0 [ 70.500129][ T4727] __fput+0x1b8/0x7e8 [ 70.500905][ T4727] ____fput+0x20/0x30 [ 70.501723][ T4727] task_work_run+0x13c/0x1e8 [ 70.502811][ T4727] do_notify_resume+0x2488/0x30a8 [ 70.503995][ T4727] el0_svc+0xf0/0x1d0 [ 70.504921][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 70.506030][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 70.506936][ T4727] irq event stamp: 31526 [ 70.507794][ T4727] hardirqs last enabled at (31525): [] kasan_quarantine_put+0xc4/0x200 [ 70.509840][ T4727] hardirqs last disabled at (31526): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.511963][ T4727] softirqs last enabled at (31264): [] local_bh_enable+0x10/0x34 [ 70.513945][ T4727] softirqs last disabled at (31262): [] local_bh_disable+0x10/0x34 [ 70.515967][ T4727] ---[ end trace f47a0c0763f84442 ]--- [ 70.631678][ T4739] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.633204][ T4739] Bad inode number on dev loop0: 2 is out of range [ 70.634644][ T4739] SysV FS: get root inode failed [ 70.635888][ T4739] oldfs: cannot read superblock [ 70.644278][ T4727] ------------[ cut here ]------------ [ 70.645378][ T4727] VFS: brelse: Trying to free free buffer [ 70.646566][ T4727] WARNING: CPU: 0 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.648236][ T4727] Modules linked in: [ 70.648951][ T4727] CPU: 0 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 70.650616][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.652723][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.654311][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 70.655372][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 70.656436][ T4727] sp : ffff80001f8477d0 [ 70.657246][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 70.658847][ T4727] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 70.660493][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2677ee0 [ 70.662162][ T4727] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 70.663781][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.665377][ T4727] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 70.667001][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 70.668737][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.670655][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.672595][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.674335][ T4727] Call trace: [ 70.675045][ T4727] invalidate_bh_lru+0x128/0x22c [ 70.676132][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 70.677393][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.678489][ T4727] invalidate_bh_lrus+0x34/0x40 [ 70.679551][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 70.680706][ T4727] blkdev_put+0x444/0x6c4 [ 70.681677][ T4727] blkdev_close+0x74/0xb0 [ 70.682626][ T4727] __fput+0x1b8/0x7e8 [ 70.683485][ T4727] ____fput+0x20/0x30 [ 70.684423][ T4727] task_work_run+0x13c/0x1e8 [ 70.685417][ T4727] do_notify_resume+0x2488/0x30a8 [ 70.686491][ T4727] el0_svc+0xf0/0x1d0 [ 70.687283][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 70.688274][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 70.689201][ T4727] irq event stamp: 38618 [ 70.690043][ T4727] hardirqs last enabled at (38617): [] kasan_quarantine_put+0xc4/0x200 [ 70.692054][ T4727] hardirqs last disabled at (38618): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.694166][ T4727] softirqs last enabled at (38354): [] local_bh_enable+0x10/0x34 [ 70.696075][ T4727] softirqs last disabled at (38352): [] local_bh_disable+0x10/0x34 [ 70.698033][ T4727] ---[ end trace f47a0c0763f84443 ]--- [ 70.781445][ T4741] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.782893][ T4741] Bad inode number on dev loop0: 2 is out of range [ 70.784166][ T4741] SysV FS: get root inode failed [ 70.785138][ T4741] oldfs: cannot read superblock [ 70.794370][ C0] ------------[ cut here ]------------ [ 70.795526][ C0] VFS: brelse: Trying to free free buffer [ 70.796742][ C0] WARNING: CPU: 0 PID: 4742 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.798450][ C0] Modules linked in: [ 70.799196][ C0] CPU: 0 PID: 4742 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.801059][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.803211][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.804836][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.805909][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.806979][ C0] sp : ffff800008007df0 [ 70.807801][ C0] x29: ffff800008007df0 x28: ffff0000ca12d1c0 x27: 1fffe000341cc45c [ 70.809442][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 70.811151][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25c8318 [ 70.812836][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 70.814510][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.816173][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 70.817820][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 54f46b1596347e00 [ 70.819465][ C0] x8 : 54f46b1596347e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.821136][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.822787][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.824433][ C0] Call trace: [ 70.825115][ C0] invalidate_bh_lru+0x128/0x22c [ 70.826128][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.827356][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.828790][ C0] ipi_handler+0x10c/0x70c [ 70.829712][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.830879][ C0] handle_domain_irq+0x148/0x200 [ 70.831922][ C0] gic_handle_irq+0x78/0x1b8 [ 70.832903][ C0] call_on_irq_stack+0x30/0x48 [ 70.833912][ C0] do_interrupt_handler+0x6c/0x88 [ 70.834968][ C0] el1_interrupt+0x30/0x58 [ 70.835940][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.837015][ C0] el1h_64_irq+0x78/0x7c [ 70.837914][ C0] __filename_parentat+0x418/0x558 [ 70.838992][ C0] filename_create+0xd4/0x3a8 [ 70.839987][ C0] do_symlinkat+0xc8/0x5b4 [ 70.840925][ C0] __arm64_sys_symlinkat+0xa4/0xbc [ 70.842007][ C0] invoke_syscall+0x98/0x28c [ 70.842925][ C0] el0_svc_common+0x13c/0x258 [ 70.843871][ C0] do_el0_svc+0x5c/0x140 [ 70.844755][ C0] el0_svc+0x78/0x1d0 [ 70.845579][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 70.846591][ C0] el0t_64_sync+0x1a0/0x1a4 [ 70.847499][ C0] irq event stamp: 674 [ 70.848332][ C0] hardirqs last enabled at (673): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 70.850487][ C0] hardirqs last disabled at (674): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.852333][ C0] softirqs last enabled at (628): [] local_bh_enable+0x10/0x34 [ 70.854204][ C0] softirqs last disabled at (626): [] local_bh_disable+0x10/0x34 [ 70.856037][ C0] ---[ end trace f47a0c0763f84444 ]--- [ 70.943936][ T4743] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.945421][ T4743] Bad inode number on dev loop0: 2 is out of range [ 70.946683][ T4743] SysV FS: get root inode failed [ 70.947639][ T4743] oldfs: cannot read superblock [ 70.949028][ T1607] device hsr_slave_0 left promiscuous mode [ 70.957274][ T4727] ------------[ cut here ]------------ [ 70.958319][ T4727] VFS: brelse: Trying to free free buffer [ 70.959447][ T4727] WARNING: CPU: 1 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.961232][ T4727] Modules linked in: [ 70.962023][ T4727] CPU: 1 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 70.963988][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.966357][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.968111][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 70.969266][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 70.970435][ T4727] sp : ffff80001f8477d0 [ 70.971360][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 70.973144][ T4727] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 70.975002][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea6a400 [ 70.976819][ T4727] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 70.978594][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 70.980251][ T4727] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 70.981899][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 70.983560][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.985157][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 70.986750][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.988430][ T4727] Call trace: [ 70.989116][ T4727] invalidate_bh_lru+0x128/0x22c [ 70.990109][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 70.991296][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.992334][ T4727] invalidate_bh_lrus+0x34/0x40 [ 70.993309][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 70.994336][ T4727] blkdev_put+0x444/0x6c4 [ 70.995213][ T4727] blkdev_close+0x74/0xb0 [ 70.996083][ T4727] __fput+0x1b8/0x7e8 [ 70.996878][ T4727] ____fput+0x20/0x30 [ 70.997671][ T4727] task_work_run+0x13c/0x1e8 [ 70.998610][ T4727] do_notify_resume+0x2488/0x30a8 [ 70.999573][ T4727] el0_svc+0xf0/0x1d0 [ 71.000356][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 71.001340][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 71.002235][ T4727] irq event stamp: 46866 [ 71.003071][ T4727] hardirqs last enabled at (46865): [] kasan_quarantine_put+0xc4/0x200 [ 71.005044][ T4727] hardirqs last disabled at (46866): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.007120][ T4727] softirqs last enabled at (46598): [] local_bh_enable+0x10/0x34 [ 71.008967][ T4727] softirqs last disabled at (46596): [] local_bh_disable+0x10/0x34 [ 71.010888][ T4727] ---[ end trace f47a0c0763f84445 ]--- [ 71.057240][ T1607] device hsr_slave_1 left promiscuous mode [ 71.091402][ T4746] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.092894][ T4746] Bad inode number on dev loop0: 2 is out of range [ 71.094165][ T4746] SysV FS: get root inode failed [ 71.095301][ T4746] oldfs: cannot read superblock [ 71.105088][ C1] ------------[ cut here ]------------ [ 71.106247][ C1] VFS: brelse: Trying to free free buffer [ 71.107392][ C1] WARNING: CPU: 1 PID: 4748 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.109064][ C1] Modules linked in: [ 71.109821][ C1] CPU: 1 PID: 4748 Comm: syz.0.34 Tainted: G W syzkaller #0 [ 71.111590][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.113664][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.115206][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.116284][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.117380][ C1] sp : ffff800008017df0 [ 71.118207][ C1] x29: ffff800008017df0 x28: ffff0000c6830000 x27: 1fffe000341d065c [ 71.120076][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 71.121939][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea6a7a0 [ 71.123718][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 71.125482][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.127224][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 71.128850][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 3fc7c0ee47845200 [ 71.130511][ C1] x8 : 3fc7c0ee47845200 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.132211][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.133903][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.135782][ C1] Call trace: [ 71.136544][ C1] invalidate_bh_lru+0x128/0x22c [ 71.137682][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.138994][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.140511][ C1] ipi_handler+0x10c/0x70c [ 71.141441][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.142600][ C1] handle_domain_irq+0x148/0x200 [ 71.143646][ C1] gic_handle_irq+0x78/0x1b8 [ 71.144616][ C1] call_on_irq_stack+0x30/0x48 [ 71.145599][ C1] do_interrupt_handler+0x6c/0x88 [ 71.146665][ C1] el1_interrupt+0x30/0x58 [ 71.147576][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.148603][ C1] el1h_64_irq+0x78/0x7c [ 71.149497][ C1] kasan_check_range+0x88/0x2a0 [ 71.150497][ C1] memset+0x58/0x88 [ 71.151393][ C1] unwind_frame+0xcc/0x684 [ 71.152412][ C1] arch_stack_walk+0x204/0x2c0 [ 71.153511][ C1] stack_trace_save+0x9c/0xf0 [ 71.154568][ C1] __kasan_slab_alloc+0x8c/0xcc [ 71.155657][ C1] slab_post_alloc_hook+0x74/0x3f8 [ 71.156820][ C1] kmem_cache_alloc+0x1dc/0x3d8 [ 71.157917][ C1] __anon_vma_prepare+0xb0/0x374 [ 71.159099][ C1] handle_mm_fault+0x2894/0x2aac [ 71.160212][ C1] do_page_fault+0x690/0xad0 [ 71.161242][ C1] do_translation_fault+0xe0/0x130 [ 71.162356][ C1] do_mem_abort+0x6c/0x1b0 [ 71.163259][ C1] el0_da+0x90/0x1ec [ 71.164059][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 71.165111][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.166042][ C1] irq event stamp: 144 [ 71.166874][ C1] hardirqs last enabled at (143): [] pte_alloc_one+0x194/0x254 [ 71.168785][ C1] hardirqs last disabled at (144): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.170849][ C1] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 71.172791][ C1] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 71.174756][ C1] ---[ end trace f47a0c0763f84446 ]--- [ 71.190060][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.191638][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.193803][ T1607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.195182][ T1607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.196784][ T1607] device bridge_slave_1 left promiscuous mode [ 71.198287][ T1607] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.240545][ T1607] device bridge_slave_0 left promiscuous mode [ 71.241778][ T1607] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.244347][ T4748] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.245643][ T4748] Bad inode number on dev loop0: 2 is out of range [ 71.246883][ T4748] SysV FS: get root inode failed [ 71.247862][ T4748] oldfs: cannot read superblock [ 71.268370][ C1] ------------[ cut here ]------------ [ 71.269460][ C1] VFS: brelse: Trying to free free buffer [ 71.270671][ C1] WARNING: CPU: 1 PID: 4752 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.272358][ C1] Modules linked in: [ 71.273152][ C1] CPU: 1 PID: 4752 Comm: syz.0.36 Tainted: G W syzkaller #0 [ 71.274817][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.276874][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.278419][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.279491][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.280507][ C1] sp : ffff800008017df0 [ 71.281312][ C1] x29: ffff800008017df0 x28: ffff0000cad98000 x27: 1fffe000341d065c [ 71.282927][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 71.284467][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea6ab40 [ 71.285999][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 71.287531][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.289100][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 71.290656][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : eb1ad7b85c54ca00 [ 71.292225][ C1] x8 : eb1ad7b85c54ca00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.293828][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.295369][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.296893][ C1] Call trace: [ 71.297519][ C1] invalidate_bh_lru+0x128/0x22c [ 71.298521][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.299691][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.301045][ C1] ipi_handler+0x10c/0x70c [ 71.301911][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.302989][ C1] handle_domain_irq+0x148/0x200 [ 71.303962][ C1] gic_handle_irq+0x78/0x1b8 [ 71.304872][ C1] call_on_irq_stack+0x30/0x48 [ 71.305839][ C1] do_interrupt_handler+0x6c/0x88 [ 71.306792][ C1] el1_interrupt+0x30/0x58 [ 71.307654][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.308610][ C1] el1h_64_irq+0x78/0x7c [ 71.309436][ C1] lock_acquire+0x234/0x618 [ 71.310325][ C1] rcu_lock_acquire+0x40/0x4c [ 71.311248][ C1] __cgroup_throttle_swaprate+0x7c/0x560 [ 71.312355][ C1] shmem_add_to_page_cache+0x890/0x1328 [ 71.313353][ C1] shmem_getpage_gfp+0x12c0/0x1f8c [ 71.314363][ C1] shmem_write_begin+0xe0/0x294 [ 71.315352][ C1] generic_perform_write+0x20c/0x490 [ 71.316393][ C1] __generic_file_write_iter+0x23c/0x44c [ 71.317513][ C1] generic_file_write_iter+0xb0/0x1b4 [ 71.318618][ C1] vfs_write+0x590/0xa64 [ 71.319499][ C1] ksys_write+0x12c/0x228 [ 71.320372][ C1] __arm64_sys_write+0x7c/0x90 [ 71.321320][ C1] invoke_syscall+0x98/0x28c [ 71.322202][ C1] el0_svc_common+0x13c/0x258 [ 71.323086][ C1] do_el0_svc+0x5c/0x140 [ 71.323936][ C1] el0_svc+0x78/0x1d0 [ 71.324737][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.325761][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.326665][ C1] irq event stamp: 426 [ 71.327544][ C1] hardirqs last enabled at (425): [] charge_memcg+0x190/0x21c [ 71.329304][ C1] hardirqs last disabled at (426): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.331257][ C1] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 71.333102][ C1] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 71.334982][ C1] ---[ end trace f47a0c0763f84447 ]--- [ 71.340508][ T4429] Bluetooth: hci1: command 0x0419 tx timeout [ 71.375898][ T4752] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.377467][ T4752] Bad inode number on dev loop0: 2 is out of range [ 71.378721][ T4752] SysV FS: get root inode failed [ 71.379739][ T4752] oldfs: cannot read superblock [ 71.385385][ C1] ------------[ cut here ]------------ [ 71.386429][ C1] VFS: brelse: Trying to free free buffer [ 71.387545][ C1] WARNING: CPU: 1 PID: 4628 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.389266][ C1] Modules linked in: [ 71.390034][ C1] CPU: 1 PID: 4628 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.391930][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.394055][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.395718][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.396781][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.397856][ C1] sp : ffff800008017df0 [ 71.398686][ C1] x29: ffff800008017df0 x28: ffff0000cc85d1c0 x27: 1fffe000341d065b [ 71.400589][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 71.402514][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea6aee0 [ 71.404291][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 71.406109][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.407787][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 71.409440][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 08b2120ccda4ce00 [ 71.411125][ C1] x8 : 08b2120ccda4ce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.412891][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.414622][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.416527][ C1] Call trace: [ 71.417301][ C1] invalidate_bh_lru+0x128/0x22c [ 71.418472][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.419816][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.421299][ C1] ipi_handler+0x10c/0x70c [ 71.422251][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.423378][ C1] handle_domain_irq+0x148/0x200 [ 71.424387][ C1] gic_handle_irq+0x78/0x1b8 [ 71.425362][ C1] call_on_irq_stack+0x30/0x48 [ 71.426363][ C1] do_interrupt_handler+0x6c/0x88 [ 71.427421][ C1] el1_interrupt+0x30/0x58 [ 71.428405][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.429448][ C1] el1h_64_irq+0x78/0x7c [ 71.430306][ C1] call_rcu+0x5a8/0x8e4 [ 71.431141][ C1] dentry_free+0xa8/0x17c [ 71.431976][ C1] __dentry_kill+0x454/0x590 [ 71.432914][ C1] dentry_kill+0xcc/0x24c [ 71.433785][ C1] dput+0x22c/0x448 [ 71.434539][ C1] do_rmdir+0x258/0x64c [ 71.435372][ C1] __arm64_sys_unlinkat+0xcc/0xfc [ 71.436431][ C1] invoke_syscall+0x98/0x28c [ 71.437392][ C1] el0_svc_common+0x13c/0x258 [ 71.438384][ C1] do_el0_svc+0x5c/0x140 [ 71.439282][ C1] el0_svc+0x78/0x1d0 [ 71.440104][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.441278][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.442347][ C1] irq event stamp: 235840 [ 71.443364][ C1] hardirqs last enabled at (235839): [] call_rcu+0x598/0x8e4 [ 71.445523][ C1] hardirqs last disabled at (235840): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.447656][ C1] softirqs last enabled at (235656): [] local_bh_enable+0x10/0x34 [ 71.449675][ C1] softirqs last disabled at (235654): [] local_bh_disable+0x10/0x34 [ 71.451731][ C1] ---[ end trace f47a0c0763f84448 ]--- [ 71.472440][ T1607] device veth1_macvtap left promiscuous mode [ 71.473589][ T1607] device veth0_macvtap left promiscuous mode [ 71.474782][ T1607] device veth1_vlan left promiscuous mode [ 71.475912][ T1607] device veth0_vlan left promiscuous mode [ 71.541776][ T4754] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.543170][ T4754] Bad inode number on dev loop0: 2 is out of range [ 71.544392][ T4754] SysV FS: get root inode failed [ 71.545477][ T4754] oldfs: cannot read superblock [ 71.553732][ C1] ------------[ cut here ]------------ [ 71.554880][ C1] VFS: brelse: Trying to free free buffer [ 71.556106][ C1] WARNING: CPU: 1 PID: 148 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.557755][ C1] Modules linked in: [ 71.558477][ C1] CPU: 1 PID: 148 Comm: kworker/u4:2 Tainted: G W syzkaller #0 [ 71.560154][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.562245][ C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 71.563738][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.565352][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.566408][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.567482][ C1] sp : ffff800008017df0 [ 71.568298][ C1] x29: ffff800008017df0 x28: ffff0000c2b51b40 x27: 1fffe000341d065b [ 71.569859][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 71.571419][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea67318 [ 71.572983][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 71.574853][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.576740][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 71.578441][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 53edd9b81bfc7500 [ 71.580131][ C1] x8 : 53edd9b81bfc7500 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.581836][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.583553][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 71.585177][ C1] Call trace: [ 71.585869][ C1] invalidate_bh_lru+0x128/0x22c [ 71.586885][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.588104][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.589493][ C1] ipi_handler+0x10c/0x70c [ 71.590354][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.591465][ C1] handle_domain_irq+0x148/0x200 [ 71.592464][ C1] gic_handle_irq+0x78/0x1b8 [ 71.593417][ C1] call_on_irq_stack+0x30/0x48 [ 71.594360][ C1] do_interrupt_handler+0x6c/0x88 [ 71.595345][ C1] el1_interrupt+0x30/0x58 [ 71.596264][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.597326][ C1] el1h_64_irq+0x78/0x7c [ 71.598212][ C1] __sanitizer_cov_trace_pc+0xa4/0xa8 [ 71.599334][ C1] unwind_frame+0x3c4/0x684 [ 71.600313][ C1] walk_stackframe+0x6c/0xa8 [ 71.601312][ C1] return_address+0xd8/0x15c [ 71.602292][ C1] preempt_count_add+0x14c/0x41c [ 71.603301][ C1] _raw_spin_lock+0x24/0x10c [ 71.604239][ C1] wg_ratelimiter_gc_entries+0x70/0x3dc [ 71.605394][ C1] process_one_work+0x7a4/0x1178 [ 71.606440][ C1] worker_thread+0x8fc/0x103c [ 71.607436][ C1] kthread+0x37c/0x460 [ 71.608283][ C1] ret_from_fork+0x10/0x20 [ 71.609227][ C1] irq event stamp: 774544 [ 71.610132][ C1] hardirqs last enabled at (774543): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 71.612461][ C1] hardirqs last disabled at (774544): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.614586][ C1] softirqs last enabled at (774538): [] neigh_periodic_work+0xb34/0xc04 [ 71.616783][ C1] softirqs last disabled at (774534): [] neigh_periodic_work+0x9f0/0xc04 [ 71.618877][ C1] ---[ end trace f47a0c0763f84449 ]--- [ 71.691445][ T4757] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.692882][ T4757] Bad inode number on dev loop0: 2 is out of range [ 71.694110][ T4757] SysV FS: get root inode failed [ 71.695038][ T4757] oldfs: cannot read superblock [ 71.705773][ T4727] ------------[ cut here ]------------ [ 71.706981][ T4727] VFS: brelse: Trying to free free buffer [ 71.708166][ T4727] WARNING: CPU: 0 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.709938][ T4727] Modules linked in: [ 71.710742][ T4727] CPU: 0 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 71.712449][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.714568][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.716434][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 71.717641][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 71.718800][ T4727] sp : ffff80001f8477d0 [ 71.719699][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 71.721487][ T4727] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 71.723295][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25c86b8 [ 71.725118][ T4727] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 71.726830][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.728575][ T4727] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 71.730294][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 71.732081][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.733829][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.735596][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.737387][ T4727] Call trace: [ 71.738100][ T4727] invalidate_bh_lru+0x128/0x22c [ 71.739163][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 71.740398][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.741493][ T4727] invalidate_bh_lrus+0x34/0x40 [ 71.742544][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 71.743598][ T4727] blkdev_put+0x444/0x6c4 [ 71.744508][ T4727] blkdev_close+0x74/0xb0 [ 71.745422][ T4727] __fput+0x1b8/0x7e8 [ 71.746269][ T4727] ____fput+0x20/0x30 [ 71.747083][ T4727] task_work_run+0x13c/0x1e8 [ 71.748046][ T4727] do_notify_resume+0x2488/0x30a8 [ 71.749078][ T4727] el0_svc+0xf0/0x1d0 [ 71.749905][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 71.750940][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 71.751854][ T4727] irq event stamp: 75840 [ 71.752723][ T4727] hardirqs last enabled at (75839): [] kasan_quarantine_put+0xc4/0x200 [ 71.754815][ T4727] hardirqs last disabled at (75840): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.756991][ T4727] softirqs last enabled at (75588): [] local_bh_enable+0x10/0x34 [ 71.758949][ T4727] softirqs last disabled at (75586): [] local_bh_disable+0x10/0x34 [ 71.760915][ T4727] ---[ end trace f47a0c0763f8444a ]--- [ 71.764823][ T1607] team0 (unregistering): Port device team_slave_1 removed [ 71.770266][ T1607] team0 (unregistering): Port device team_slave_0 removed [ 71.774905][ T1607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.811645][ T4759] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.813404][ T4759] Bad inode number on dev loop0: 2 is out of range [ 71.814811][ T4759] SysV FS: get root inode failed [ 71.815856][ T4759] oldfs: cannot read superblock [ 71.821699][ C1] ------------[ cut here ]------------ [ 71.822889][ C1] VFS: brelse: Trying to free free buffer [ 71.824197][ C1] WARNING: CPU: 1 PID: 4628 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.825866][ C1] Modules linked in: [ 71.826603][ C1] CPU: 1 PID: 4628 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.828333][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.830241][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.831861][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.832942][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.834026][ C1] sp : ffff800008017df0 [ 71.834876][ C1] x29: ffff800008017df0 x28: ffff0000cc85d1c0 x27: 1fffe000341d065c [ 71.836527][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 71.838161][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea676b8 [ 71.839831][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 71.841457][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 71.843065][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 71.844761][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 08b2120ccda4ce00 [ 71.846396][ C1] x8 : 08b2120ccda4ce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.848051][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 71.849679][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.851324][ C1] Call trace: [ 71.852003][ C1] invalidate_bh_lru+0x128/0x22c [ 71.852996][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.854199][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.855610][ C1] ipi_handler+0x10c/0x70c [ 71.856461][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.857566][ C1] handle_domain_irq+0x148/0x200 [ 71.858531][ C1] gic_handle_irq+0x78/0x1b8 [ 71.859411][ C1] call_on_irq_stack+0x30/0x48 [ 71.860362][ C1] do_interrupt_handler+0x6c/0x88 [ 71.861380][ C1] el1_interrupt+0x30/0x58 [ 71.862269][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.863258][ C1] el1h_64_irq+0x78/0x7c [ 71.864115][ C1] kasan_quarantine_put+0xd4/0x200 [ 71.865166][ C1] ____kasan_slab_free+0x124/0x164 [ 71.866217][ C1] __kasan_slab_free+0x18/0x28 [ 71.867191][ C1] slab_free_freelist_hook+0x128/0x1e4 [ 71.868353][ C1] kmem_cache_free+0xdc/0x3b4 [ 71.869304][ C1] do_mkdirat+0x47c/0x514 [ 71.870189][ C1] __arm64_sys_mkdirat+0x90/0xa8 [ 71.871189][ C1] invoke_syscall+0x98/0x28c [ 71.872150][ C1] el0_svc_common+0x13c/0x258 [ 71.873136][ C1] do_el0_svc+0x5c/0x140 [ 71.874012][ C1] el0_svc+0x78/0x1d0 [ 71.874840][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.875887][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.876806][ C1] irq event stamp: 245264 [ 71.877695][ C1] hardirqs last enabled at (245263): [] kasan_quarantine_put+0xc4/0x200 [ 71.879698][ C1] hardirqs last disabled at (245264): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.881713][ C1] softirqs last enabled at (245224): [] local_bh_enable+0x10/0x34 [ 71.883643][ C1] softirqs last disabled at (245222): [] local_bh_disable+0x10/0x34 [ 71.885575][ C1] ---[ end trace f47a0c0763f8444b ]--- [ 71.889344][ T1607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.983015][ T4761] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.984504][ T4761] Bad inode number on dev loop0: 2 is out of range [ 71.985988][ T4761] SysV FS: get root inode failed [ 71.987065][ T4761] oldfs: cannot read superblock [ 71.998144][ T4727] ------------[ cut here ]------------ [ 71.999341][ T4727] VFS: brelse: Trying to free free buffer [ 72.000640][ T4727] WARNING: CPU: 0 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.001090][ T1607] bond0 (unregistering): Released all slaves [ 72.002688][ T4727] Modules linked in: [ 72.004788][ T4727] CPU: 0 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 72.006601][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.008808][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.010400][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 72.011491][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 72.012590][ T4727] sp : ffff80001f8477d0 [ 72.013466][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 72.015139][ T4727] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 72.016888][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25c8a58 [ 72.018621][ T4727] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 72.020387][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.022045][ T4727] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 72.023666][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 72.025323][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.026971][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.028650][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 72.030281][ T4727] Call trace: [ 72.030961][ T4727] invalidate_bh_lru+0x128/0x22c [ 72.031983][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 72.033184][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 72.034264][ T4727] invalidate_bh_lrus+0x34/0x40 [ 72.035305][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 72.036445][ T4727] blkdev_put+0x444/0x6c4 [ 72.037371][ T4727] blkdev_close+0x74/0xb0 [ 72.038294][ T4727] __fput+0x1b8/0x7e8 [ 72.039143][ T4727] ____fput+0x20/0x30 [ 72.039992][ T4727] task_work_run+0x13c/0x1e8 [ 72.040951][ T4727] do_notify_resume+0x2488/0x30a8 [ 72.042013][ T4727] el0_svc+0xf0/0x1d0 [ 72.042844][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 72.043912][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 72.044892][ T4727] irq event stamp: 84146 [ 72.045809][ T4727] hardirqs last enabled at (84145): [] kasan_quarantine_put+0xc4/0x200 [ 72.048055][ T4727] hardirqs last disabled at (84146): [] smp_call_function_many_cond+0xa50/0xec0 [ 72.050341][ T4727] softirqs last enabled at (83878): [] local_bh_enable+0x10/0x34 [ 72.052339][ T4727] softirqs last disabled at (83876): [] local_bh_disable+0x10/0x34 [ 72.054346][ T4727] ---[ end trace f47a0c0763f8444c ]--- [ 72.122037][ T4763] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.123537][ T4763] Bad inode number on dev loop0: 2 is out of range [ 72.124843][ T4763] SysV FS: get root inode failed [ 72.125679][ T4763] oldfs: cannot read superblock [ 72.131438][ C0] ------------[ cut here ]------------ [ 72.132476][ C0] VFS: brelse: Trying to free free buffer [ 72.133592][ C0] WARNING: CPU: 0 PID: 4628 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.135245][ C0] Modules linked in: [ 72.135986][ C0] CPU: 0 PID: 4628 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.137602][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.139476][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.141000][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.142065][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.143169][ C0] sp : ffff800008007df0 [ 72.144017][ C0] x29: ffff800008007df0 x28: ffff0000cc85d1c0 x27: 1fffe000341cc45c [ 72.145632][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 72.147250][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25c8df8 [ 72.148856][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 72.150467][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.152085][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 72.153698][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 08b2120ccda4ce00 [ 72.155326][ C0] x8 : 08b2120ccda4ce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.156944][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.158565][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.160113][ C0] Call trace: [ 72.160756][ C0] invalidate_bh_lru+0x128/0x22c [ 72.161750][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.162957][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.164367][ C0] ipi_handler+0x10c/0x70c [ 72.165270][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.166363][ C0] handle_domain_irq+0x148/0x200 [ 72.167358][ C0] gic_handle_irq+0x78/0x1b8 [ 72.168270][ C0] call_on_irq_stack+0x30/0x48 [ 72.169201][ C0] do_interrupt_handler+0x6c/0x88 [ 72.170170][ C0] el1_interrupt+0x30/0x58 [ 72.171033][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.172010][ C0] el1h_64_irq+0x78/0x7c [ 72.172836][ C0] lock_acquire+0x234/0x618 [ 72.173744][ C0] __might_fault+0xc8/0x128 [ 72.174652][ C0] xt_obj_to_user+0x58/0x3c8 [ 72.175586][ C0] xt_target_to_user+0x88/0x1ac [ 72.176569][ C0] do_ip6t_get_ctl+0x1068/0x1464 [ 72.177554][ C0] nf_getsockopt+0x254/0x274 [ 72.178509][ C0] ipv6_getsockopt+0x588/0x256c [ 72.179443][ C0] tcp_getsockopt+0x214/0x2d2c [ 72.180380][ C0] sock_common_getsockopt+0xa8/0xc4 [ 72.181431][ C0] __sys_getsockopt+0x1b8/0x250 [ 72.182360][ C0] __arm64_sys_getsockopt+0xc0/0xdc [ 72.183364][ C0] invoke_syscall+0x98/0x28c [ 72.184267][ C0] el0_svc_common+0x13c/0x258 [ 72.185201][ C0] do_el0_svc+0x5c/0x140 [ 72.186045][ C0] el0_svc+0x78/0x1d0 [ 72.186842][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 72.187858][ C0] el0t_64_sync+0x1a0/0x1a4 [ 72.188750][ C0] irq event stamp: 252710 [ 72.189618][ C0] hardirqs last enabled at (252709): [] alloc_counters+0x3c4/0x790 [ 72.191611][ C0] hardirqs last disabled at (252710): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.193583][ C0] softirqs last enabled at (252634): [] local_bh_enable+0x10/0x34 [ 72.195426][ C0] softirqs last disabled at (252632): [] local_bh_disable+0x10/0x34 [ 72.197383][ C0] ---[ end trace f47a0c0763f8444d ]--- [ 72.282533][ T4765] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.284096][ T4765] Bad inode number on dev loop0: 2 is out of range [ 72.285387][ T4765] SysV FS: get root inode failed [ 72.286464][ T4765] oldfs: cannot read superblock [ 72.291595][ C1] ------------[ cut here ]------------ [ 72.292708][ C1] VFS: brelse: Trying to free free buffer [ 72.293887][ C1] WARNING: CPU: 1 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.295654][ C1] Modules linked in: [ 72.296427][ C1] CPU: 1 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 72.298068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.300020][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.301645][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.302751][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.303861][ C1] sp : ffff800008017df0 [ 72.304735][ C1] x29: ffff800008017df0 x28: ffff0000d718b680 x27: 1fffe000341d065b [ 72.306403][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 72.308126][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea67a58 [ 72.309787][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 72.311371][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.312978][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 72.314545][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 2b50879382d06200 [ 72.316144][ C1] x8 : 2b50879382d06200 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.317713][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.319345][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 72.320993][ C1] Call trace: [ 72.321644][ C1] invalidate_bh_lru+0x128/0x22c [ 72.322625][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.323787][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.325193][ C1] ipi_handler+0x10c/0x70c [ 72.326108][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.327263][ C1] handle_domain_irq+0x148/0x200 [ 72.328286][ C1] gic_handle_irq+0x78/0x1b8 [ 72.329199][ C1] call_on_irq_stack+0x30/0x48 [ 72.330170][ C1] do_interrupt_handler+0x6c/0x88 [ 72.331163][ C1] el1_interrupt+0x30/0x58 [ 72.332053][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.333037][ C1] el1h_64_irq+0x78/0x7c [ 72.333884][ C1] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 72.335052][ C1] debug_object_active_state+0x16c/0x370 [ 72.336190][ C1] call_rcu+0x6c/0x8e4 [ 72.337006][ C1] dentry_free+0xa8/0x17c [ 72.337879][ C1] __dentry_kill+0x454/0x590 [ 72.338784][ C1] dentry_kill+0xcc/0x24c [ 72.339657][ C1] dput+0x22c/0x448 [ 72.340433][ C1] step_into+0x740/0xa74 [ 72.341291][ C1] walk_component+0x1f4/0x3b8 [ 72.342228][ C1] path_lookupat+0x168/0x3f0 [ 72.343107][ C1] filename_lookup+0x1c8/0x478 [ 72.344045][ C1] user_path_at_empty+0x5c/0x1a0 [ 72.345050][ C1] do_readlinkat+0xe0/0x3fc [ 72.345993][ C1] __arm64_sys_readlinkat+0xa0/0xbc [ 72.347037][ C1] invoke_syscall+0x98/0x28c [ 72.347949][ C1] el0_svc_common+0x13c/0x258 [ 72.348878][ C1] do_el0_svc+0x5c/0x140 [ 72.349760][ C1] el0_svc+0x78/0x1d0 [ 72.350581][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 72.351607][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.352489][ C1] irq event stamp: 1196214 [ 72.353354][ C1] hardirqs last enabled at (1196213): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 72.355489][ C1] hardirqs last disabled at (1196214): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.357485][ C1] softirqs last enabled at (1196178): [] local_bh_enable+0x10/0x34 [ 72.359415][ C1] softirqs last disabled at (1196176): [] local_bh_disable+0x10/0x34 [ 72.361424][ C1] ---[ end trace f47a0c0763f8444e ]--- [ 72.482720][ T4767] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.484202][ T4767] Bad inode number on dev loop0: 2 is out of range [ 72.485536][ T4767] SysV FS: get root inode failed [ 72.486521][ T4767] oldfs: cannot read superblock [ 72.494830][ C0] ------------[ cut here ]------------ [ 72.495927][ C0] VFS: brelse: Trying to free free buffer [ 72.497055][ C0] WARNING: CPU: 0 PID: 4768 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.498677][ C0] Modules linked in: [ 72.499382][ C0] CPU: 0 PID: 4768 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.501156][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.503243][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.504823][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.505870][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.506906][ C0] sp : ffff800008007df0 [ 72.507778][ C0] x29: ffff800008007df0 x28: ffff0000da1ad1c0 x27: 1fffe000341cc45b [ 72.509429][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 72.511150][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25c9230 [ 72.512797][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 72.514455][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.516123][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 72.518029][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 32576e2077697d00 [ 72.519962][ C0] x8 : 32576e2077697d00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.521792][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.523510][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 72.525188][ C0] Call trace: [ 72.525838][ C0] invalidate_bh_lru+0x128/0x22c [ 72.526844][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.528059][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.529460][ C0] ipi_handler+0x10c/0x70c [ 72.530389][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.531458][ C0] handle_domain_irq+0x148/0x200 [ 72.532448][ C0] gic_handle_irq+0x78/0x1b8 [ 72.533332][ C0] call_on_irq_stack+0x30/0x48 [ 72.534275][ C0] do_interrupt_handler+0x6c/0x88 [ 72.535286][ C0] el1_interrupt+0x30/0x58 [ 72.536164][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.537136][ C0] el1h_64_irq+0x78/0x7c [ 72.537974][ C0] __sanitizer_cov_trace_pc+0x10/0xa8 [ 72.539095][ C0] do_set_pte+0x244/0x4e4 [ 72.540000][ C0] filemap_map_pages+0x9c4/0xc44 [ 72.541026][ C0] handle_mm_fault+0x18b0/0x2aac [ 72.541960][ C0] do_page_fault+0x690/0xad0 [ 72.542893][ C0] do_translation_fault+0xe0/0x130 [ 72.543911][ C0] do_mem_abort+0x6c/0x1b0 [ 72.544792][ C0] el0_da+0x90/0x1ec [ 72.545575][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 72.546633][ C0] el0t_64_sync+0x1a0/0x1a4 [ 72.547555][ C0] irq event stamp: 274 [ 72.548348][ C0] hardirqs last enabled at (273): [] lock_page_memcg+0x110/0x22c [ 72.550302][ C0] hardirqs last disabled at (274): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.552214][ C0] softirqs last enabled at (24): [] local_bh_enable+0x10/0x34 [ 72.553994][ C0] softirqs last disabled at (22): [] local_bh_disable+0x10/0x34 [ 72.555855][ C0] ---[ end trace f47a0c0763f8444f ]--- [ 72.651015][ T4769] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.652488][ T4769] Bad inode number on dev loop0: 2 is out of range [ 72.653659][ T4769] SysV FS: get root inode failed [ 72.654557][ T4769] oldfs: cannot read superblock [ 72.665153][ C1] ------------[ cut here ]------------ [ 72.666343][ C1] VFS: brelse: Trying to free free buffer [ 72.667520][ C1] WARNING: CPU: 1 PID: 4770 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.669214][ C1] Modules linked in: [ 72.669972][ C1] CPU: 1 PID: 4770 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.671883][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.674245][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.675976][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.677166][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.678311][ C1] sp : ffff800008017df0 [ 72.679167][ C1] x29: ffff800008017df0 x28: ffff0000d71f8000 x27: 1fffe000341d065b [ 72.680854][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 72.682555][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea67df8 [ 72.684472][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 72.686400][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.688344][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 72.690203][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 00dbce7aa4edef00 [ 72.691917][ C1] x8 : 00dbce7aa4edef00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.693833][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.695749][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.697612][ C1] Call trace: [ 72.698342][ C1] invalidate_bh_lru+0x128/0x22c [ 72.699459][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.700813][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.702414][ C1] ipi_handler+0x10c/0x70c [ 72.703429][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.704685][ C1] handle_domain_irq+0x148/0x200 [ 72.705734][ C1] gic_handle_irq+0x78/0x1b8 [ 72.706683][ C1] call_on_irq_stack+0x30/0x48 [ 72.707686][ C1] do_interrupt_handler+0x6c/0x88 [ 72.708775][ C1] el1_interrupt+0x30/0x58 [ 72.709758][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.710826][ C1] el1h_64_irq+0x78/0x7c [ 72.711703][ C1] do_notify_resume+0x110/0x30a8 [ 72.712754][ C1] el0_svc+0xf0/0x1d0 [ 72.713571][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 72.714599][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.715524][ C1] irq event stamp: 950 [ 72.716341][ C1] hardirqs last enabled at (949): [] do_notify_resume+0x104/0x30a8 [ 72.718367][ C1] hardirqs last disabled at (950): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.720287][ C1] softirqs last enabled at (882): [] local_bh_enable+0x10/0x34 [ 72.722188][ C1] softirqs last disabled at (880): [] local_bh_disable+0x10/0x34 [ 72.724085][ C1] ---[ end trace f47a0c0763f84450 ]--- [ 72.764184][ T4771] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.765752][ T4771] Bad inode number on dev loop0: 2 is out of range [ 72.767027][ T4771] SysV FS: get root inode failed [ 72.768000][ T4771] oldfs: cannot read superblock [ 72.772806][ C0] ------------[ cut here ]------------ [ 72.773939][ C0] VFS: brelse: Trying to free free buffer [ 72.775058][ C0] WARNING: CPU: 0 PID: 4628 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.776718][ C0] Modules linked in: [ 72.777448][ C0] CPU: 0 PID: 4628 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.779103][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.781134][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.782829][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.783956][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.785081][ C0] sp : ffff800008007df0 [ 72.785924][ C0] x29: ffff800008007df0 x28: ffff0000cc85d1c0 x27: 1fffe000341cc45c [ 72.787597][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 72.789211][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25c95d0 [ 72.790791][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 72.792425][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.794111][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 72.795754][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 08b2120ccda4ce00 [ 72.797382][ C0] x8 : 08b2120ccda4ce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.799028][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.800671][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.802305][ C0] Call trace: [ 72.802984][ C0] invalidate_bh_lru+0x128/0x22c [ 72.804018][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.805196][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.806629][ C0] ipi_handler+0x10c/0x70c [ 72.807526][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.808640][ C0] handle_domain_irq+0x148/0x200 [ 72.809646][ C0] gic_handle_irq+0x78/0x1b8 [ 72.810537][ C0] call_on_irq_stack+0x30/0x48 [ 72.811462][ C0] do_interrupt_handler+0x6c/0x88 [ 72.812452][ C0] el1_interrupt+0x30/0x58 [ 72.813352][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.814382][ C0] el1h_64_irq+0x78/0x7c [ 72.815235][ C0] seqcount_lockdep_reader_access+0x21c/0x2c0 [ 72.816487][ C0] ktime_get_coarse_real_ts64+0x4c/0x138 [ 72.817628][ C0] current_time+0x94/0x2a4 [ 72.818528][ C0] shmem_get_inode+0x330/0x97c [ 72.819479][ C0] shmem_mknod+0x68/0x1c0 [ 72.820372][ C0] shmem_mkdir+0x38/0x78 [ 72.821271][ C0] vfs_mkdir+0x314/0x4d8 [ 72.822111][ C0] do_mkdirat+0x1c0/0x514 [ 72.822994][ C0] __arm64_sys_mkdirat+0x90/0xa8 [ 72.824002][ C0] invoke_syscall+0x98/0x28c [ 72.824931][ C0] el0_svc_common+0x13c/0x258 [ 72.825878][ C0] do_el0_svc+0x5c/0x140 [ 72.826738][ C0] el0_svc+0x78/0x1d0 [ 72.827539][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 72.828544][ C0] el0t_64_sync+0x1a0/0x1a4 [ 72.829433][ C0] irq event stamp: 264888 [ 72.830303][ C0] hardirqs last enabled at (264887): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 72.832528][ C0] hardirqs last disabled at (264888): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.834580][ C0] softirqs last enabled at (264856): [] local_bh_enable+0x10/0x34 [ 72.836634][ C0] softirqs last disabled at (264854): [] local_bh_disable+0x10/0x34 [ 72.838668][ C0] ---[ end trace f47a0c0763f84451 ]--- [ 72.896422][ T4774] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.898055][ T4774] Bad inode number on dev loop0: 2 is out of range [ 72.899561][ T4774] SysV FS: get root inode failed [ 72.903262][ T4774] oldfs: cannot read superblock [ 72.909726][ C0] ------------[ cut here ]------------ [ 72.910945][ C0] VFS: brelse: Trying to free free buffer [ 72.912195][ C0] WARNING: CPU: 0 PID: 4628 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.914054][ C0] Modules linked in: [ 72.914853][ C0] CPU: 0 PID: 4628 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.916654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.918674][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.920235][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.921303][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.922391][ C0] sp : ffff800008007df0 [ 72.923234][ C0] x29: ffff800008007df0 x28: ffff0000cc85d1c0 x27: 1fffe000341cc45c [ 72.924908][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 72.926563][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25c9970 [ 72.928221][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010004 [ 72.930039][ C0] x17: 0000000000010004 x16: ffff8000113710a0 x15: 0000000000000012 [ 72.931805][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 72.933601][ C0] x11: ff80800008300a7c x10: 0000000000010003 x9 : 08b2120ccda4ce00 [ 72.935275][ C0] x8 : 08b2120ccda4ce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.936897][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 72.938585][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000027 [ 72.940273][ C0] Call trace: [ 72.941047][ C0] invalidate_bh_lru+0x128/0x22c [ 72.942223][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.943686][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.945344][ C0] ipi_handler+0x10c/0x70c [ 72.946403][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.947691][ C0] handle_domain_irq+0x148/0x200 [ 72.948772][ C0] gic_handle_irq+0x78/0x1b8 [ 72.949782][ C0] call_on_irq_stack+0x30/0x48 [ 72.950846][ C0] do_interrupt_handler+0x6c/0x88 [ 72.952044][ C0] el1_interrupt+0x30/0x58 [ 72.953098][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.954272][ C0] el1h_64_irq+0x78/0x7c [ 72.955282][ C0] __sanitizer_cov_trace_pc+0xa4/0xa8 [ 72.956521][ C0] copy_mm+0x9f0/0x1070 [ 72.957428][ C0] copy_process+0x15bc/0x36f4 [ 72.958446][ C0] kernel_clone+0x1ec/0xa10 [ 72.959426][ C0] __arm64_sys_clone+0x154/0x1c0 [ 72.960489][ C0] invoke_syscall+0x98/0x28c [ 72.961483][ C0] el0_svc_common+0x13c/0x258 [ 72.962485][ C0] do_el0_svc+0x5c/0x140 [ 72.963417][ C0] el0_svc+0x78/0x1d0 [ 72.964295][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 72.965359][ C0] el0t_64_sync+0x1a0/0x1a4 [ 72.966299][ C0] irq event stamp: 269318 [ 72.967227][ C0] hardirqs last enabled at (269317): [] ___slab_alloc+0xc10/0xd84 [ 72.969268][ C0] hardirqs last disabled at (269318): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.971413][ C0] softirqs last enabled at (269186): [] local_bh_enable+0x10/0x34 [ 72.973431][ C0] softirqs last disabled at (269184): [] local_bh_disable+0x10/0x34 [ 72.975448][ C0] ---[ end trace f47a0c0763f84452 ]--- [ 73.053156][ T4776] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.054717][ T4776] Bad inode number on dev loop0: 2 is out of range [ 73.056198][ T4776] SysV FS: get root inode failed [ 73.057290][ T4776] oldfs: cannot read superblock [ 73.062400][ C1] ------------[ cut here ]------------ [ 73.063492][ C1] VFS: brelse: Trying to free free buffer [ 73.064646][ C1] WARNING: CPU: 1 PID: 4628 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.066312][ C1] Modules linked in: [ 73.067056][ C1] CPU: 1 PID: 4628 Comm: syz-executor Tainted: G W syzkaller #0 [ 73.068742][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.070799][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.072473][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.073565][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.074659][ C1] sp : ffff800008017df0 [ 73.075498][ C1] x29: ffff800008017df0 x28: ffff0000cc85d1c0 x27: 1fffe000341d065c [ 73.077164][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 73.078808][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea63230 [ 73.080457][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 73.082057][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.083681][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 73.085304][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 08b2120ccda4ce00 [ 73.086904][ C1] x8 : 08b2120ccda4ce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.088559][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.090218][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 73.091809][ C1] Call trace: [ 73.092478][ C1] invalidate_bh_lru+0x128/0x22c [ 73.093464][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.094700][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.096087][ C1] ipi_handler+0x10c/0x70c [ 73.096991][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.098079][ C1] handle_domain_irq+0x148/0x200 [ 73.099069][ C1] gic_handle_irq+0x78/0x1b8 [ 73.099983][ C1] call_on_irq_stack+0x30/0x48 [ 73.100913][ C1] do_interrupt_handler+0x6c/0x88 [ 73.101893][ C1] el1_interrupt+0x30/0x58 [ 73.102788][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.103793][ C1] el1h_64_irq+0x78/0x7c [ 73.104648][ C1] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 73.105798][ C1] debug_object_activate+0x254/0x4bc [ 73.106890][ C1] call_rcu+0x54/0x8e4 [ 73.107733][ C1] __fput+0x51c/0x7e8 [ 73.108541][ C1] ____fput+0x20/0x30 [ 73.109344][ C1] task_work_run+0x13c/0x1e8 [ 73.110306][ C1] do_notify_resume+0x2488/0x30a8 [ 73.111303][ C1] el0_svc+0xf0/0x1d0 [ 73.112097][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 73.113086][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.113966][ C1] irq event stamp: 270642 [ 73.114799][ C1] hardirqs last enabled at (270641): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 73.116855][ C1] hardirqs last disabled at (270642): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.118794][ C1] softirqs last enabled at (270520): [] local_bh_enable+0x10/0x34 [ 73.120546][ C1] softirqs last disabled at (270518): [] local_bh_disable+0x10/0x34 [ 73.122464][ C1] ---[ end trace f47a0c0763f84453 ]--- [ 73.212064][ T4778] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.213504][ T4778] Bad inode number on dev loop0: 2 is out of range [ 73.214821][ T4778] SysV FS: get root inode failed [ 73.215779][ T4778] oldfs: cannot read superblock [ 73.225207][ C0] ------------[ cut here ]------------ [ 73.226363][ C0] VFS: brelse: Trying to free free buffer [ 73.227549][ C0] WARNING: CPU: 0 PID: 4780 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.229189][ C0] Modules linked in: [ 73.229983][ C0] CPU: 0 PID: 4780 Comm: syz.0.49 Tainted: G W syzkaller #0 [ 73.231800][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.233937][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.235613][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.236761][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.237900][ C0] sp : ffff800008007df0 [ 73.238815][ C0] x29: ffff800008007df0 x28: ffff0000c0cb51c0 x27: 1fffe000341cc45c [ 73.240489][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 73.242208][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e25c9d10 [ 73.243945][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 73.245729][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.247479][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 73.249228][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : d23e01fd4170d100 [ 73.250937][ C0] x8 : d23e01fd4170d100 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.252633][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.254285][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.255913][ C0] Call trace: [ 73.256573][ C0] invalidate_bh_lru+0x128/0x22c [ 73.257592][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.258846][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.260253][ C0] ipi_handler+0x10c/0x70c [ 73.261145][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.262267][ C0] handle_domain_irq+0x148/0x200 [ 73.263267][ C0] gic_handle_irq+0x78/0x1b8 [ 73.264197][ C0] call_on_irq_stack+0x30/0x48 [ 73.265172][ C0] do_interrupt_handler+0x6c/0x88 [ 73.266220][ C0] el0_interrupt+0x94/0x248 [ 73.267167][ C0] __el0_irq_handler_common+0x18/0x24 [ 73.268289][ C0] el0t_64_irq_handler+0x10/0x1c [ 73.269295][ C0] el0t_64_irq+0x1a0/0x1a4 [ 73.270190][ C0] irq event stamp: 162 [ 73.271015][ C0] hardirqs last enabled at (161): [] el0t_64_sync_handler+0xd8/0xe4 [ 73.272941][ C0] hardirqs last disabled at (162): [] __el0_irq_handler_common+0x18/0x24 [ 73.274976][ C0] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 73.276853][ C0] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 73.278737][ C0] ---[ end trace f47a0c0763f84454 ]--- [ 73.363788][ T4780] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.365311][ T4780] Bad inode number on dev loop0: 2 is out of range [ 73.366608][ T4780] SysV FS: get root inode failed [ 73.367584][ T4780] oldfs: cannot read superblock [ 73.372676][ C1] ------------[ cut here ]------------ [ 73.373729][ C1] VFS: brelse: Trying to free free buffer [ 73.374912][ C1] WARNING: CPU: 1 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.376612][ C1] Modules linked in: [ 73.377367][ C1] CPU: 1 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 73.378998][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.381007][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.382530][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.383568][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.384650][ C1] sp : ffff800008017df0 [ 73.385463][ C1] x29: ffff800008017df0 x28: ffff0000d718b680 x27: 1fffe000341d065b [ 73.387002][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 73.388681][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea635d0 [ 73.390541][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 73.392177][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.393839][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 73.395432][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 2b50879382d06200 [ 73.397134][ C1] x8 : 2b50879382d06200 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.398830][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.400546][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.402247][ C1] Call trace: [ 73.402934][ C1] invalidate_bh_lru+0x128/0x22c [ 73.403964][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.405220][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.406675][ C1] ipi_handler+0x10c/0x70c [ 73.407571][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.408683][ C1] handle_domain_irq+0x148/0x200 [ 73.409656][ C1] gic_handle_irq+0x78/0x1b8 [ 73.410597][ C1] call_on_irq_stack+0x30/0x48 [ 73.411574][ C1] do_interrupt_handler+0x6c/0x88 [ 73.412606][ C1] el1_interrupt+0x30/0x58 [ 73.413510][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.414497][ C1] el1h_64_irq+0x78/0x7c [ 73.415339][ C1] arch_local_irq_restore+0x8/0x10 [ 73.416384][ C1] ___might_sleep+0x48/0x4dc [ 73.417304][ C1] __might_sleep+0x98/0x124 [ 73.418207][ C1] down_read+0x3c/0x38c [ 73.419054][ C1] kernfs_iop_permission+0x64/0x2d8 [ 73.420113][ C1] inode_permission+0x1d0/0x3c0 [ 73.421101][ C1] link_path_walk+0x28c/0xbd4 [ 73.422019][ C1] path_lookupat+0xb4/0x3f0 [ 73.422941][ C1] filename_lookup+0x1c8/0x478 [ 73.423928][ C1] user_path_at_empty+0x5c/0x1a0 [ 73.424950][ C1] vfs_statx+0xf8/0x474 [ 73.425787][ C1] __arm64_sys_newfstatat+0x128/0x1c0 [ 73.426882][ C1] invoke_syscall+0x98/0x28c [ 73.427813][ C1] el0_svc_common+0x13c/0x258 [ 73.428796][ C1] do_el0_svc+0x5c/0x140 [ 73.429642][ C1] el0_svc+0x78/0x1d0 [ 73.430449][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 73.431464][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.432363][ C1] irq event stamp: 1226648 [ 73.433245][ C1] hardirqs last enabled at (1226647): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 73.435490][ C1] hardirqs last disabled at (1226648): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.437572][ C1] softirqs last enabled at (1226638): [] local_bh_enable+0x10/0x34 [ 73.439547][ C1] softirqs last disabled at (1226636): [] local_bh_disable+0x10/0x34 [ 73.441574][ C1] ---[ end trace f47a0c0763f84455 ]--- [ 73.522103][ T4782] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.523719][ T4782] Bad inode number on dev loop0: 2 is out of range [ 73.525144][ T4782] SysV FS: get root inode failed [ 73.526237][ T4782] oldfs: cannot read superblock [ 73.527315][ T4782] ------------[ cut here ]------------ [ 73.528529][ T4782] VFS: brelse: Trying to free free buffer [ 73.529832][ T4782] WARNING: CPU: 0 PID: 4782 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.531731][ T4782] Modules linked in: [ 73.532509][ T4782] CPU: 0 PID: 4782 Comm: syz.0.50 Tainted: G W syzkaller #0 [ 73.534214][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.536211][ T4782] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.537940][ T4782] pc : invalidate_bh_lru+0x128/0x22c [ 73.539199][ T4782] lr : invalidate_bh_lru+0x128/0x22c [ 73.540404][ T4782] sp : ffff80001fba7710 [ 73.541322][ T4782] x29: ffff80001fba7710 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 73.543041][ T4782] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 73.544716][ T4782] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c0661df8 [ 73.546429][ T4782] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 73.548149][ T4782] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.549824][ T4782] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 73.551441][ T4782] x11: ff80800008300a7c x10: 0000000000000000 x9 : 1e77d0368dc2c600 [ 73.553124][ T4782] x8 : 1e77d0368dc2c600 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.554888][ T4782] x5 : ffff80001fba7018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.556664][ T4782] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.558420][ T4782] Call trace: [ 73.559137][ T4782] invalidate_bh_lru+0x128/0x22c [ 73.560204][ T4782] smp_call_function_many_cond+0xa5c/0xec0 [ 73.561458][ T4782] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.562575][ T4782] invalidate_bh_lrus+0x34/0x40 [ 73.563581][ T4782] blkdev_flush_mapping+0x16c/0x334 [ 73.564654][ T4782] blkdev_put+0x444/0x6c4 [ 73.565519][ T4782] kill_block_super+0xa0/0xe0 [ 73.566471][ T4782] deactivate_locked_super+0xc0/0x13c [ 73.567538][ T4782] mount_bdev+0x284/0x35c [ 73.568387][ T4782] sysv_mount+0x44/0x58 [ 73.569198][ T4782] legacy_get_tree+0xd8/0x174 [ 73.570130][ T4782] vfs_get_tree+0x90/0x278 [ 73.571010][ T4782] do_new_mount+0x228/0x804 [ 73.571914][ T4782] path_mount+0x57c/0xfe8 [ 73.572764][ T4782] __arm64_sys_mount+0x488/0x5f8 [ 73.573773][ T4782] invoke_syscall+0x98/0x28c [ 73.574731][ T4782] el0_svc_common+0x13c/0x258 [ 73.575723][ T4782] do_el0_svc+0x5c/0x140 [ 73.576575][ T4782] el0_svc+0x78/0x1d0 [ 73.577400][ T4782] el0t_64_sync_handler+0xcc/0xe4 [ 73.578376][ T4782] el0t_64_sync+0x1a0/0x1a4 [ 73.579276][ T4782] irq event stamp: 1716 [ 73.580118][ T4782] hardirqs last enabled at (1715): [] kasan_quarantine_put+0xc4/0x200 [ 73.582123][ T4782] hardirqs last disabled at (1716): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.584232][ T4782] softirqs last enabled at (1518): [] local_bh_enable+0x10/0x34 [ 73.586136][ T4782] softirqs last disabled at (1516): [] local_bh_disable+0x10/0x34 [ 73.588086][ T4782] ---[ end trace f47a0c0763f84456 ]--- [ 73.782027][ T4786] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.783596][ T4786] Bad inode number on dev loop0: 2 is out of range [ 73.785017][ T4786] SysV FS: get root inode failed [ 73.786000][ T4786] oldfs: cannot read superblock [ 73.800925][ C1] ------------[ cut here ]------------ [ 73.802024][ C1] VFS: brelse: Trying to free free buffer [ 73.803143][ C1] WARNING: CPU: 1 PID: 4628 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.804841][ C1] Modules linked in: [ 73.805594][ C1] CPU: 1 PID: 4628 Comm: syz-executor Tainted: G W syzkaller #0 [ 73.807307][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.809241][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.810807][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.811898][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.813027][ C1] sp : ffff800008017df0 [ 73.813920][ C1] x29: ffff800008017df0 x28: ffff0000cc85d1c0 x27: 1fffe000341d065c [ 73.815711][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 73.817451][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea63970 [ 73.819395][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 73.821284][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 73.822949][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 73.824806][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 08b2120ccda4ce00 [ 73.826643][ C1] x8 : 08b2120ccda4ce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.828476][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 73.830320][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.832042][ C1] Call trace: [ 73.832735][ C1] invalidate_bh_lru+0x128/0x22c [ 73.833755][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.835126][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.836646][ C1] ipi_handler+0x10c/0x70c [ 73.837626][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.838808][ C1] handle_domain_irq+0x148/0x200 [ 73.839896][ C1] gic_handle_irq+0x78/0x1b8 [ 73.840910][ C1] call_on_irq_stack+0x30/0x48 [ 73.841970][ C1] do_interrupt_handler+0x6c/0x88 [ 73.843056][ C1] el1_interrupt+0x30/0x58 [ 73.844016][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.845034][ C1] el1h_64_irq+0x78/0x7c [ 73.845885][ C1] task_work_add+0x218/0x27c [ 73.846808][ C1] fput_many+0x104/0x1f8 [ 73.847634][ C1] fput+0x24/0x34 [ 73.848325][ C1] filp_close+0x100/0x154 [ 73.849157][ C1] close_fd+0x74/0x84 [ 73.849943][ C1] __arm64_sys_close+0x3c/0x80 [ 73.850893][ C1] invoke_syscall+0x98/0x28c [ 73.851813][ C1] el0_svc_common+0x13c/0x258 [ 73.852754][ C1] do_el0_svc+0x5c/0x140 [ 73.853588][ C1] el0_svc+0x78/0x1d0 [ 73.854375][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 73.855363][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.856246][ C1] irq event stamp: 285340 [ 73.857111][ C1] hardirqs last enabled at (285339): [] el0_svc_common+0xa0/0x258 [ 73.858985][ C1] hardirqs last disabled at (285340): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.860931][ C1] softirqs last enabled at (285220): [] local_bh_enable+0x10/0x34 [ 73.862817][ C1] softirqs last disabled at (285218): [] local_bh_disable+0x10/0x34 [ 73.864712][ C1] ---[ end trace f47a0c0763f84457 ]--- 1970/01/01 00:01:13 executed programs: 38 [ 73.933145][ T4790] set_capacity_and_notify: 23 callbacks suppressed [ 73.933155][ T4790] loop0: detected capacity change from 0 to 128 [ 73.982041][ T4790] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.983564][ T4790] Bad inode number on dev loop0: 2 is out of range [ 73.984865][ T4790] SysV FS: get root inode failed [ 73.985858][ T4790] oldfs: cannot read superblock [ 73.986956][ T4790] ------------[ cut here ]------------ [ 73.988137][ T4790] VFS: brelse: Trying to free free buffer [ 73.989345][ T4790] WARNING: CPU: 0 PID: 4790 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.991125][ T4790] Modules linked in: [ 73.991936][ T4790] CPU: 0 PID: 4790 Comm: syz.0.53 Tainted: G W syzkaller #0 [ 73.993753][ T4790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.995848][ T4790] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.997408][ T4790] pc : invalidate_bh_lru+0x128/0x22c [ 73.998473][ T4790] lr : invalidate_bh_lru+0x128/0x22c [ 73.999524][ T4790] sp : ffff80001fc67710 [ 74.000378][ T4790] x29: ffff80001fc67710 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 74.001980][ T4790] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 74.003575][ T4790] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e254c060 [ 74.005156][ T4790] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 74.006745][ T4790] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.008388][ T4790] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 74.010093][ T4790] x11: ff80800008300a7c x10: 0000000000000000 x9 : bbaf4d4802e46d00 [ 74.011705][ T4790] x8 : bbaf4d4802e46d00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.013276][ T4790] x5 : ffff80001fc67018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.014931][ T4790] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.016530][ T4790] Call trace: [ 74.017188][ T4790] invalidate_bh_lru+0x128/0x22c [ 74.018248][ T4790] smp_call_function_many_cond+0xa5c/0xec0 [ 74.019439][ T4790] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.020517][ T4790] invalidate_bh_lrus+0x34/0x40 [ 74.021491][ T4790] blkdev_flush_mapping+0x16c/0x334 [ 74.022594][ T4790] blkdev_put+0x444/0x6c4 [ 74.023454][ T4790] kill_block_super+0xa0/0xe0 [ 74.024370][ T4790] deactivate_locked_super+0xc0/0x13c [ 74.025433][ T4790] mount_bdev+0x284/0x35c [ 74.026293][ T4790] sysv_mount+0x44/0x58 [ 74.027144][ T4790] legacy_get_tree+0xd8/0x174 [ 74.028119][ T4790] vfs_get_tree+0x90/0x278 [ 74.029007][ T4790] do_new_mount+0x228/0x804 [ 74.030064][ T4790] path_mount+0x57c/0xfe8 [ 74.031074][ T4790] __arm64_sys_mount+0x488/0x5f8 [ 74.032101][ T4790] invoke_syscall+0x98/0x28c [ 74.033059][ T4790] el0_svc_common+0x13c/0x258 [ 74.034055][ T4790] do_el0_svc+0x5c/0x140 [ 74.034958][ T4790] el0_svc+0x78/0x1d0 [ 74.035871][ T4790] el0t_64_sync_handler+0xcc/0xe4 [ 74.037067][ T4790] el0t_64_sync+0x1a0/0x1a4 [ 74.038078][ T4790] irq event stamp: 1700 [ 74.039007][ T4790] hardirqs last enabled at (1699): [] kasan_quarantine_put+0xc4/0x200 [ 74.041250][ T4790] hardirqs last disabled at (1700): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.043631][ T4790] softirqs last enabled at (1502): [] local_bh_enable+0x10/0x34 [ 74.045732][ T4790] softirqs last disabled at (1500): [] local_bh_disable+0x10/0x34 [ 74.047837][ T4790] ---[ end trace f47a0c0763f84458 ]--- [ 74.193131][ T4792] loop0: detected capacity change from 0 to 128 [ 74.199961][ T4792] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.201478][ T4792] Bad inode number on dev loop0: 2 is out of range [ 74.202783][ T4792] SysV FS: get root inode failed [ 74.203753][ T4792] oldfs: cannot read superblock [ 74.209300][ C1] ------------[ cut here ]------------ [ 74.210419][ C1] VFS: brelse: Trying to free free buffer [ 74.211671][ C1] WARNING: CPU: 1 PID: 1607 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.213617][ C1] Modules linked in: [ 74.214438][ C1] CPU: 1 PID: 1607 Comm: kworker/u4:5 Tainted: G W syzkaller #0 [ 74.216258][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.218307][ C1] Workqueue: netns cleanup_net [ 74.219253][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.220796][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.221891][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.222955][ C1] sp : ffff800008017df0 [ 74.223780][ C1] x29: ffff800008017df0 x28: ffff0000ccfad1c0 x27: 1fffe000341d065b [ 74.225426][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 74.227039][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea63d10 [ 74.228662][ C1] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 74.230305][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.231914][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 74.233510][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : fae91730c8d94c00 [ 74.235105][ C1] x8 : fae91730c8d94c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.236693][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.238252][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 74.239864][ C1] Call trace: [ 74.240524][ C1] invalidate_bh_lru+0x128/0x22c [ 74.241514][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 74.242709][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.244083][ C1] ipi_handler+0x10c/0x70c [ 74.245006][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 74.246083][ C1] handle_domain_irq+0x148/0x200 [ 74.247058][ C1] gic_handle_irq+0x78/0x1b8 [ 74.247979][ C1] call_on_irq_stack+0x30/0x48 [ 74.248869][ C1] do_interrupt_handler+0x6c/0x88 [ 74.249934][ C1] el1_interrupt+0x30/0x58 [ 74.250848][ C1] el1h_64_irq_handler+0x18/0x24 [ 74.251972][ C1] el1h_64_irq+0x78/0x7c [ 74.252871][ C1] lock_acquire+0x234/0x618 [ 74.253822][ C1] rcu_lock_acquire+0x40/0x4c [ 74.254815][ C1] inet_twsk_purge+0x110/0x7c4 [ 74.255822][ C1] dccp_v4_exit_batch+0x20/0x2c [ 74.256837][ C1] cleanup_net+0x650/0xab8 [ 74.257758][ C1] process_one_work+0x7a4/0x1178 [ 74.258809][ C1] worker_thread+0x8fc/0x103c [ 74.259764][ C1] kthread+0x37c/0x460 [ 74.260583][ C1] ret_from_fork+0x10/0x20 [ 74.261465][ C1] irq event stamp: 2363956 [ 74.262359][ C1] hardirqs last enabled at (2363955): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 74.264572][ C1] hardirqs last disabled at (2363956): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.266630][ C1] softirqs last enabled at (2363948): [] handle_softirqs+0xa70/0xc14 [ 74.268628][ C1] softirqs last disabled at (2363937): [] __irq_exit_rcu+0x240/0x434 [ 74.270619][ C1] ---[ end trace f47a0c0763f84459 ]--- [ 74.343165][ T4794] loop0: detected capacity change from 0 to 128 [ 74.376764][ T4794] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.378267][ T4794] Bad inode number on dev loop0: 2 is out of range [ 74.379755][ T4794] SysV FS: get root inode failed [ 74.386770][ T4794] oldfs: cannot read superblock [ 74.392755][ T4727] ------------[ cut here ]------------ [ 74.393869][ T4727] VFS: brelse: Trying to free free buffer [ 74.394966][ T4727] WARNING: CPU: 0 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.396564][ T4727] Modules linked in: [ 74.397278][ T4727] CPU: 0 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 74.398791][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.400611][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.402160][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 74.403219][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 74.404240][ T4727] sp : ffff80001f8477d0 [ 74.405039][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 74.406622][ T4727] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 74.408538][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e254c5d0 [ 74.410256][ T4727] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 74.411966][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.413680][ T4727] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 74.415350][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 74.417036][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.418703][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.420397][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.422074][ T4727] Call trace: [ 74.422760][ T4727] invalidate_bh_lru+0x128/0x22c [ 74.423793][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 74.425014][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.426059][ T4727] invalidate_bh_lrus+0x34/0x40 [ 74.427077][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 74.428142][ T4727] blkdev_put+0x444/0x6c4 [ 74.429045][ T4727] blkdev_close+0x74/0xb0 [ 74.429961][ T4727] __fput+0x1b8/0x7e8 [ 74.430773][ T4727] ____fput+0x20/0x30 [ 74.431615][ T4727] task_work_run+0x13c/0x1e8 [ 74.432514][ T4727] do_notify_resume+0x2488/0x30a8 [ 74.433513][ T4727] el0_svc+0xf0/0x1d0 [ 74.434325][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 74.435346][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 74.436253][ T4727] irq event stamp: 155788 [ 74.437114][ T4727] hardirqs last enabled at (155787): [] kasan_quarantine_put+0xc4/0x200 [ 74.439181][ T4727] hardirqs last disabled at (155788): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.441345][ T4727] softirqs last enabled at (155526): [] local_bh_enable+0x10/0x34 [ 74.443310][ T4727] softirqs last disabled at (155524): [] local_bh_disable+0x10/0x34 [ 74.445224][ T4727] ---[ end trace f47a0c0763f8445a ]--- [ 74.486102][ T4797] loop0: detected capacity change from 0 to 128 [ 74.488710][ T4797] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.490708][ T4797] Bad inode number on dev loop0: 2 is out of range [ 74.492107][ T4797] SysV FS: get root inode failed [ 74.493142][ T4797] oldfs: cannot read superblock [ 74.501557][ T4727] ------------[ cut here ]------------ [ 74.502639][ T4727] VFS: brelse: Trying to free free buffer [ 74.503847][ T4727] WARNING: CPU: 0 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.505548][ T4727] Modules linked in: [ 74.506291][ T4727] CPU: 0 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 74.507900][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.509699][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.511254][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 74.512338][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 74.513402][ T4727] sp : ffff80001f8477d0 [ 74.514245][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 74.515921][ T4727] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 74.517612][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f0148 [ 74.519215][ T4727] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 74.520879][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.522515][ T4727] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 74.524160][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 74.525777][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.527360][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.528926][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.530500][ T4727] Call trace: [ 74.531142][ T4727] invalidate_bh_lru+0x128/0x22c [ 74.532155][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 74.533357][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.534396][ T4727] invalidate_bh_lrus+0x34/0x40 [ 74.535406][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 74.536422][ T4727] blkdev_put+0x444/0x6c4 [ 74.537268][ T4727] blkdev_close+0x74/0xb0 [ 74.538111][ T4727] __fput+0x1b8/0x7e8 [ 74.538887][ T4727] ____fput+0x20/0x30 [ 74.539660][ T4727] task_work_run+0x13c/0x1e8 [ 74.540564][ T4727] do_notify_resume+0x2488/0x30a8 [ 74.541570][ T4727] el0_svc+0xf0/0x1d0 [ 74.542360][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 74.543354][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 74.544231][ T4727] irq event stamp: 164258 [ 74.545083][ T4727] hardirqs last enabled at (164257): [] kasan_quarantine_put+0xc4/0x200 [ 74.547029][ T4727] hardirqs last disabled at (164258): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.549131][ T4727] softirqs last enabled at (163992): [] local_bh_enable+0x10/0x34 [ 74.550949][ T4727] softirqs last disabled at (163990): [] local_bh_disable+0x10/0x34 [ 74.552882][ T4727] ---[ end trace f47a0c0763f8445b ]--- [ 74.573653][ T4799] loop0: detected capacity change from 0 to 128 [ 74.640083][ T4799] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.641535][ T4799] Bad inode number on dev loop0: 2 is out of range [ 74.642927][ T4799] SysV FS: get root inode failed [ 74.643883][ T4799] oldfs: cannot read superblock [ 74.653096][ C0] ------------[ cut here ]------------ [ 74.654219][ C0] VFS: brelse: Trying to free free buffer [ 74.655437][ C0] WARNING: CPU: 0 PID: 1607 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.657210][ C0] Modules linked in: [ 74.657994][ C0] CPU: 0 PID: 1607 Comm: kworker/u4:5 Tainted: G W syzkaller #0 [ 74.659789][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.662057][ C0] Workqueue: netns cleanup_net [ 74.663140][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.664851][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 74.665987][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 74.667220][ C0] sp : ffff800008007df0 [ 74.668197][ C0] x29: ffff800008007df0 x28: ffff0000ccfad1c0 x27: 1fffe000341cc45b [ 74.670028][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 74.671675][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f04e8 [ 74.673571][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 74.675546][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.677266][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 74.678935][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : fae91730c8d94c00 [ 74.680612][ C0] x8 : fae91730c8d94c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.682411][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.684210][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 74.685993][ C0] Call trace: [ 74.686710][ C0] invalidate_bh_lru+0x128/0x22c [ 74.687768][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 74.689045][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.690505][ C0] ipi_handler+0x10c/0x70c [ 74.691449][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 74.692578][ C0] handle_domain_irq+0x148/0x200 [ 74.693612][ C0] gic_handle_irq+0x78/0x1b8 [ 74.694582][ C0] call_on_irq_stack+0x30/0x48 [ 74.695585][ C0] do_interrupt_handler+0x6c/0x88 [ 74.696632][ C0] el1_interrupt+0x30/0x58 [ 74.697523][ C0] el1h_64_irq_handler+0x18/0x24 [ 74.698638][ C0] el1h_64_irq+0x78/0x7c [ 74.699601][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 74.700870][ C0] free_percpu+0x6d4/0xb68 [ 74.701848][ C0] ipv4_mib_exit_net+0xa8/0x138 [ 74.702914][ C0] cleanup_net+0x5d0/0xab8 [ 74.703866][ C0] process_one_work+0x7a4/0x1178 [ 74.704930][ C0] worker_thread+0x8fc/0x103c [ 74.705860][ C0] kthread+0x37c/0x460 [ 74.706673][ C0] ret_from_fork+0x10/0x20 [ 74.707572][ C0] irq event stamp: 2457202 [ 74.708472][ C0] hardirqs last enabled at (2457201): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 74.710738][ C0] hardirqs last disabled at (2457202): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.713106][ C0] softirqs last enabled at (2457190): [] handle_softirqs+0xa70/0xc14 [ 74.715058][ C0] softirqs last disabled at (2457143): [] __irq_exit_rcu+0x240/0x434 [ 74.717055][ C0] ---[ end trace f47a0c0763f8445c ]--- [ 74.762801][ T4801] loop0: detected capacity change from 0 to 128 [ 74.850933][ T4801] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.852457][ T4801] Bad inode number on dev loop0: 2 is out of range [ 74.853800][ T4801] SysV FS: get root inode failed [ 74.854805][ T4801] oldfs: cannot read superblock [ 74.876341][ T4727] ------------[ cut here ]------------ [ 74.877479][ T4727] VFS: brelse: Trying to free free buffer [ 74.878701][ T4727] WARNING: CPU: 1 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.880473][ T4727] Modules linked in: [ 74.881263][ T4727] CPU: 1 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 74.883247][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.885642][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.887373][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 74.888489][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 74.889625][ T4727] sp : ffff80001f8477d0 [ 74.890510][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 74.892266][ T4727] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 74.894007][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea5f148 [ 74.895916][ T4727] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 74.897779][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 74.899536][ T4727] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 74.901355][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 74.903079][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.904835][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 74.906604][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.908311][ T4727] Call trace: [ 74.909009][ T4727] invalidate_bh_lru+0x128/0x22c [ 74.910016][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 74.911221][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.912416][ T4727] invalidate_bh_lrus+0x34/0x40 [ 74.913445][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 74.914580][ T4727] blkdev_put+0x444/0x6c4 [ 74.915518][ T4727] blkdev_close+0x74/0xb0 [ 74.916440][ T4727] __fput+0x1b8/0x7e8 [ 74.917303][ T4727] ____fput+0x20/0x30 [ 74.918150][ T4727] task_work_run+0x13c/0x1e8 [ 74.919117][ T4727] do_notify_resume+0x2488/0x30a8 [ 74.920169][ T4727] el0_svc+0xf0/0x1d0 [ 74.920998][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 74.922056][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 74.922955][ T4727] irq event stamp: 175872 [ 74.923868][ T4727] hardirqs last enabled at (175871): [] kasan_quarantine_put+0xc4/0x200 [ 74.925925][ T4727] hardirqs last disabled at (175872): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.928153][ T4727] softirqs last enabled at (175616): [] local_bh_enable+0x10/0x34 [ 74.930141][ T4727] softirqs last disabled at (175614): [] local_bh_disable+0x10/0x34 [ 74.932172][ T4727] ---[ end trace f47a0c0763f8445d ]--- [ 74.972342][ T4804] loop0: detected capacity change from 0 to 128 [ 74.974894][ T4804] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.976283][ T4804] Bad inode number on dev loop0: 2 is out of range [ 74.977601][ T4804] SysV FS: get root inode failed [ 74.978602][ T4804] oldfs: cannot read superblock [ 74.981901][ C1] ------------[ cut here ]------------ [ 74.983052][ C1] VFS: brelse: Trying to free free buffer [ 74.984279][ C1] WARNING: CPU: 1 PID: 4804 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.986039][ C1] Modules linked in: [ 74.986840][ C1] CPU: 1 PID: 4804 Comm: syz.0.59 Tainted: G W syzkaller #0 [ 74.988658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.990703][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.992201][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.993247][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.994333][ C1] sp : ffff800008017df0 [ 74.995175][ C1] x29: ffff800008017df0 x28: ffff0000cafe3680 x27: 1fffe000341d065c [ 74.996831][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 74.998419][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea5f4e8 [ 75.000006][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 75.001600][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.003206][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 75.004797][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 9847e63b407b3300 [ 75.006417][ C1] x8 : 9847e63b407b3300 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.007984][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.009598][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 75.011247][ C1] Call trace: [ 75.011924][ C1] invalidate_bh_lru+0x128/0x22c [ 75.012986][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.014202][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.015625][ C1] ipi_handler+0x10c/0x70c [ 75.016504][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.017590][ C1] handle_domain_irq+0x148/0x200 [ 75.018745][ C1] gic_handle_irq+0x78/0x1b8 [ 75.019741][ C1] call_on_irq_stack+0x30/0x48 [ 75.020799][ C1] do_interrupt_handler+0x6c/0x88 [ 75.021813][ C1] el1_interrupt+0x30/0x58 [ 75.022734][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.023698][ C1] el1h_64_irq+0x78/0x7c [ 75.024550][ C1] lock_page_memcg+0x120/0x22c [ 75.025521][ C1] page_remove_rmap+0x3c/0xfb4 [ 75.026504][ C1] unmap_page_range+0xa60/0x180c [ 75.027563][ C1] unmap_single_vma+0x13c/0x1e4 [ 75.028581][ C1] unmap_vmas+0x110/0x218 [ 75.029496][ C1] exit_mmap+0x2c4/0x510 [ 75.030352][ C1] __mmput+0xe8/0x3a0 [ 75.031157][ C1] mmput+0x80/0xc0 [ 75.031873][ C1] exit_mm+0x5dc/0x704 [ 75.032658][ C1] do_exit+0x4bc/0x1f54 [ 75.033489][ C1] do_group_exit+0x104/0x274 [ 75.034396][ C1] get_signal+0x638/0x13b0 [ 75.035276][ C1] do_notify_resume+0x344/0x30a8 [ 75.036252][ C1] el0_svc+0xf0/0x1d0 [ 75.037011][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 75.037993][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.038940][ C1] irq event stamp: 2332 [ 75.039739][ C1] hardirqs last enabled at (2331): [] lock_page_memcg+0x110/0x22c [ 75.041552][ C1] hardirqs last disabled at (2332): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.043537][ C1] softirqs last enabled at (1176): [] local_bh_enable+0x10/0x34 [ 75.045402][ C1] softirqs last disabled at (1174): [] local_bh_disable+0x10/0x34 [ 75.047259][ C1] ---[ end trace f47a0c0763f8445e ]--- [ 75.088550][ T4806] loop0: detected capacity change from 0 to 128 [ 75.095829][ T4806] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.097265][ T4806] Bad inode number on dev loop0: 2 is out of range [ 75.098671][ T4806] SysV FS: get root inode failed [ 75.099723][ T4806] oldfs: cannot read superblock [ 75.130614][ T4812] ------------[ cut here ]------------ [ 75.131726][ T4812] VFS: brelse: Trying to free free buffer [ 75.132903][ T4812] WARNING: CPU: 0 PID: 4812 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.134558][ T4812] Modules linked in: [ 75.135306][ T4812] CPU: 0 PID: 4812 Comm: syz.0.63 Tainted: G W syzkaller #0 [ 75.137068][ T4812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.139201][ T4812] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.140988][ T4812] pc : invalidate_bh_lru+0x128/0x22c [ 75.142157][ T4812] lr : invalidate_bh_lru+0x128/0x22c [ 75.143295][ T4812] sp : ffff80001fe577d0 [ 75.144182][ T4812] x29: ffff80001fe577d0 x28: ffff8000143ad000 x27: 1fffe000341cc45c [ 75.145784][ T4812] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 75.147409][ T4812] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f0888 [ 75.149217][ T4812] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 75.151014][ T4812] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.152749][ T4812] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 75.154634][ T4812] x11: ff80800008300a7c x10: 0000000000000000 x9 : 64afaf3560c5cf00 [ 75.156527][ T4812] x8 : 64afaf3560c5cf00 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.158448][ T4812] x5 : ffff80001fe570d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.160401][ T4812] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 75.162216][ T4812] Call trace: [ 75.162955][ T4812] invalidate_bh_lru+0x128/0x22c [ 75.164048][ T4812] smp_call_function_many_cond+0xa5c/0xec0 [ 75.165305][ T4812] on_each_cpu_cond_mask+0x5c/0xc4 [ 75.166390][ T4812] invalidate_bh_lrus+0x34/0x40 [ 75.167415][ T4812] blkdev_flush_mapping+0x16c/0x334 [ 75.168515][ T4812] blkdev_put+0x444/0x6c4 [ 75.169428][ T4812] blkdev_close+0x74/0xb0 [ 75.170347][ T4812] __fput+0x1b8/0x7e8 [ 75.171204][ T4812] ____fput+0x20/0x30 [ 75.172063][ T4812] task_work_run+0x13c/0x1e8 [ 75.173049][ T4812] do_notify_resume+0x2488/0x30a8 [ 75.174122][ T4812] el0_svc+0xf0/0x1d0 [ 75.174943][ T4812] el0t_64_sync_handler+0xcc/0xe4 [ 75.175973][ T4812] el0t_64_sync+0x1a0/0x1a4 [ 75.176847][ T4812] irq event stamp: 824 [ 75.177658][ T4812] hardirqs last enabled at (823): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 75.179793][ T4812] hardirqs last disabled at (824): [] smp_call_function_many_cond+0xa50/0xec0 [ 75.181931][ T4812] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 75.183816][ T4812] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 75.185692][ T4812] ---[ end trace f47a0c0763f8445f ]--- [ 75.225885][ T4814] loop0: detected capacity change from 0 to 128 [ 75.251408][ T4814] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.252826][ T4814] Bad inode number on dev loop0: 2 is out of range [ 75.254037][ T4814] SysV FS: get root inode failed [ 75.255138][ T4814] oldfs: cannot read superblock [ 75.267591][ T4816] ------------[ cut here ]------------ [ 75.268677][ T4816] VFS: brelse: Trying to free free buffer [ 75.269849][ T4816] WARNING: CPU: 1 PID: 4816 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.271705][ T4816] Modules linked in: [ 75.272512][ T4816] CPU: 1 PID: 4816 Comm: syz.0.65 Tainted: G W syzkaller #0 [ 75.274315][ T4816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.276389][ T4816] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.277984][ T4816] pc : invalidate_bh_lru+0x128/0x22c [ 75.279078][ T4816] lr : invalidate_bh_lru+0x128/0x22c [ 75.280191][ T4816] sp : ffff80001fc677d0 [ 75.281072][ T4816] x29: ffff80001fc677d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 75.282735][ T4816] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 75.284423][ T4816] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea5f888 [ 75.286079][ T4816] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 75.287728][ T4816] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.289381][ T4816] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 75.291054][ T4816] x11: ff80800008300a7c x10: 0000000000000000 x9 : da85f9e96831b100 [ 75.292680][ T4816] x8 : da85f9e96831b100 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.294345][ T4816] x5 : ffff80001fc670d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.295970][ T4816] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 75.297893][ T4816] Call trace: [ 75.298663][ T4816] invalidate_bh_lru+0x128/0x22c [ 75.299818][ T4816] smp_call_function_many_cond+0xa5c/0xec0 [ 75.301093][ T4816] on_each_cpu_cond_mask+0x5c/0xc4 [ 75.302199][ T4816] invalidate_bh_lrus+0x34/0x40 [ 75.303346][ T4816] blkdev_flush_mapping+0x16c/0x334 [ 75.304585][ T4816] blkdev_put+0x444/0x6c4 [ 75.305566][ T4816] blkdev_close+0x74/0xb0 [ 75.306501][ T4816] __fput+0x1b8/0x7e8 [ 75.307353][ T4816] ____fput+0x20/0x30 [ 75.308240][ T4816] task_work_run+0x13c/0x1e8 [ 75.309241][ T4816] do_notify_resume+0x2488/0x30a8 [ 75.310290][ T4816] el0_svc+0xf0/0x1d0 [ 75.311133][ T4816] el0t_64_sync_handler+0xcc/0xe4 [ 75.312208][ T4816] el0t_64_sync+0x1a0/0x1a4 [ 75.313198][ T4816] irq event stamp: 850 [ 75.314094][ T4816] hardirqs last enabled at (849): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 75.316397][ T4816] hardirqs last disabled at (850): [] smp_call_function_many_cond+0xa50/0xec0 [ 75.318670][ T4816] softirqs last enabled at (816): [] local_bh_enable+0x10/0x34 [ 75.320686][ T4816] softirqs last disabled at (814): [] local_bh_disable+0x10/0x34 [ 75.322676][ T4816] ---[ end trace f47a0c0763f84460 ]--- [ 75.386262][ T4818] loop0: detected capacity change from 0 to 128 [ 75.433137][ T4818] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.434563][ T4818] Bad inode number on dev loop0: 2 is out of range [ 75.435790][ T4818] SysV FS: get root inode failed [ 75.436726][ T4818] oldfs: cannot read superblock [ 75.444965][ C1] ------------[ cut here ]------------ [ 75.446037][ C1] VFS: brelse: Trying to free free buffer [ 75.447174][ C1] WARNING: CPU: 1 PID: 4819 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.448866][ C1] Modules linked in: [ 75.449599][ C1] CPU: 1 PID: 4819 Comm: syz.0.67 Tainted: G W syzkaller #0 [ 75.451356][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.453451][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.455085][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.456189][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.457298][ C1] sp : ffff800008017df0 [ 75.458155][ C1] x29: ffff800008017df0 x28: ffff0000cca451c0 x27: 1fffe000341d065c [ 75.459787][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 75.461417][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea5fc28 [ 75.463081][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 75.464709][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.466356][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 75.468023][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 490ef28607159700 [ 75.469663][ C1] x8 : 490ef28607159700 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.471295][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.472910][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 75.474513][ C1] Call trace: [ 75.475179][ C1] invalidate_bh_lru+0x128/0x22c [ 75.476145][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.477332][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.478709][ C1] ipi_handler+0x10c/0x70c [ 75.479607][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.480731][ C1] handle_domain_irq+0x148/0x200 [ 75.481696][ C1] gic_handle_irq+0x78/0x1b8 [ 75.482630][ C1] call_on_irq_stack+0x30/0x48 [ 75.483572][ C1] do_interrupt_handler+0x6c/0x88 [ 75.484593][ C1] el1_interrupt+0x30/0x58 [ 75.485489][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.486549][ C1] el1h_64_irq+0x78/0x7c [ 75.487464][ C1] do_raw_spin_lock+0x88/0x2fc [ 75.488458][ C1] _raw_spin_lock+0xb8/0x10c [ 75.489418][ C1] validate_mm+0x2bc/0x864 [ 75.490313][ C1] mmap_region+0xcd8/0x13d4 [ 75.491212][ C1] do_mmap+0x6d0/0xe24 [ 75.492044][ C1] vm_mmap_pgoff+0x194/0x298 [ 75.492986][ C1] ksys_mmap_pgoff+0x11c/0x638 [ 75.493920][ C1] __arm64_sys_mmap+0x108/0x120 [ 75.494885][ C1] invoke_syscall+0x98/0x28c [ 75.495793][ C1] el0_svc_common+0x13c/0x258 [ 75.496789][ C1] do_el0_svc+0x5c/0x140 [ 75.497617][ C1] el0_svc+0x78/0x1d0 [ 75.498371][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 75.499340][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.500216][ C1] irq event stamp: 1422 [ 75.501027][ C1] hardirqs last enabled at (1421): [] el0_svc_common+0xa0/0x258 [ 75.502939][ C1] hardirqs last disabled at (1422): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.504964][ C1] softirqs last enabled at (1200): [] local_bh_enable+0x10/0x34 [ 75.506846][ C1] softirqs last disabled at (1198): [] local_bh_disable+0x10/0x34 [ 75.508698][ C1] ---[ end trace f47a0c0763f84461 ]--- [ 75.625156][ T4820] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.626606][ T4820] Bad inode number on dev loop0: 2 is out of range [ 75.627951][ T4820] SysV FS: get root inode failed [ 75.628951][ T4820] oldfs: cannot read superblock [ 75.637276][ C0] ------------[ cut here ]------------ [ 75.638389][ C0] VFS: brelse: Trying to free free buffer [ 75.639554][ C0] WARNING: CPU: 0 PID: 4821 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.641305][ C0] Modules linked in: [ 75.642106][ C0] CPU: 0 PID: 4821 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.643925][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.645898][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.647492][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.648582][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.649668][ C0] sp : ffff800008007df0 [ 75.650646][ C0] x29: ffff800008007df0 x28: ffff0000d5d6d1c0 x27: 1fffe000341cc45c [ 75.652517][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 75.654365][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f0c28 [ 75.656149][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010004 [ 75.657807][ C0] x17: 0000000000010004 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.659477][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 75.661136][ C0] x11: ff80800008300a7c x10: 0000000000010003 x9 : 1010c88af9ec1700 [ 75.662830][ C0] x8 : 1010c88af9ec1700 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.664479][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.666132][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000027 [ 75.667764][ C0] Call trace: [ 75.668403][ C0] invalidate_bh_lru+0x128/0x22c [ 75.669391][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.670581][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.671994][ C0] ipi_handler+0x10c/0x70c [ 75.672924][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.673986][ C0] handle_domain_irq+0x148/0x200 [ 75.674938][ C0] gic_handle_irq+0x78/0x1b8 [ 75.675850][ C0] call_on_irq_stack+0x30/0x48 [ 75.676809][ C0] do_interrupt_handler+0x6c/0x88 [ 75.677835][ C0] el1_interrupt+0x30/0x58 [ 75.678725][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.679730][ C0] el1h_64_irq+0x78/0x7c [ 75.680581][ C0] __d_add+0x488/0x620 [ 75.681392][ C0] d_splice_alias+0xf8/0x320 [ 75.682311][ C0] proc_pident_instantiate+0x1e0/0x274 [ 75.683415][ C0] proc_pident_lookup+0x17c/0x264 [ 75.684364][ C0] proc_tgid_base_lookup+0x34/0x44 [ 75.685348][ C0] path_openat+0xc84/0x2808 [ 75.686236][ C0] do_filp_open+0x188/0x370 [ 75.687120][ C0] do_sys_openat2+0x134/0x3fc [ 75.688032][ C0] __arm64_sys_openat+0x11c/0x150 [ 75.689001][ C0] invoke_syscall+0x98/0x28c [ 75.689961][ C0] el0_svc_common+0x13c/0x258 [ 75.690938][ C0] do_el0_svc+0x5c/0x140 [ 75.691819][ C0] el0_svc+0x78/0x1d0 [ 75.692640][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 75.693631][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.694538][ C0] irq event stamp: 906 [ 75.695339][ C0] hardirqs last enabled at (905): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 75.697457][ C0] hardirqs last disabled at (906): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.699383][ C0] softirqs last enabled at (866): [] local_bh_enable+0x10/0x34 [ 75.701235][ C0] softirqs last disabled at (864): [] local_bh_disable+0x10/0x34 [ 75.703161][ C0] ---[ end trace f47a0c0763f84462 ]--- [ 75.791229][ T4822] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.792668][ T4822] Bad inode number on dev loop0: 2 is out of range [ 75.793898][ T4822] SysV FS: get root inode failed [ 75.794846][ T4822] oldfs: cannot read superblock [ 75.807345][ C1] ------------[ cut here ]------------ [ 75.808466][ C1] VFS: brelse: Trying to free free buffer [ 75.809707][ C1] WARNING: CPU: 1 PID: 4824 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.811604][ C1] Modules linked in: [ 75.812451][ C1] CPU: 1 PID: 4824 Comm: syz.0.69 Tainted: G W syzkaller #0 [ 75.814347][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.816550][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.818133][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.819211][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.820251][ C1] sp : ffff800008017df0 [ 75.821081][ C1] x29: ffff800008017df0 x28: ffff0000cc33b680 x27: 1fffe000341d065c [ 75.822722][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 75.824372][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea5b060 [ 75.826001][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 75.827638][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.829236][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 75.830862][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : d4f6e8ddae990b00 [ 75.832559][ C1] x8 : d4f6e8ddae990b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.834234][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.835920][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.837836][ C1] Call trace: [ 75.838607][ C1] invalidate_bh_lru+0x128/0x22c [ 75.839599][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.840853][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.842285][ C1] ipi_handler+0x10c/0x70c [ 75.843194][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.844341][ C1] handle_domain_irq+0x148/0x200 [ 75.845338][ C1] gic_handle_irq+0x78/0x1b8 [ 75.846276][ C1] call_on_irq_stack+0x30/0x48 [ 75.847256][ C1] do_interrupt_handler+0x6c/0x88 [ 75.848278][ C1] el0_interrupt+0x94/0x248 [ 75.849256][ C1] __el0_irq_handler_common+0x18/0x24 [ 75.850332][ C1] el0t_64_irq_handler+0x10/0x1c [ 75.851382][ C1] el0t_64_irq+0x1a0/0x1a4 [ 75.852256][ C1] irq event stamp: 360 [ 75.853068][ C1] hardirqs last enabled at (359): [] el0t_64_sync_handler+0xd8/0xe4 [ 75.854978][ C1] hardirqs last disabled at (360): [] __el0_irq_handler_common+0x18/0x24 [ 75.857026][ C1] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 75.858783][ C1] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 75.860622][ C1] ---[ end trace f47a0c0763f84463 ]--- [ 75.894788][ T4824] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.896698][ T4824] Bad inode number on dev loop0: 2 is out of range [ 75.898091][ T4824] SysV FS: get root inode failed [ 75.899224][ T4824] oldfs: cannot read superblock [ 75.905393][ C0] ------------[ cut here ]------------ [ 75.906572][ C0] VFS: brelse: Trying to free free buffer [ 75.907714][ C0] WARNING: CPU: 0 PID: 4628 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.909475][ C0] Modules linked in: [ 75.910234][ C0] CPU: 0 PID: 4628 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.912012][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.914040][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.915635][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.916691][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.917742][ C0] sp : ffff800008007df0 [ 75.918562][ C0] x29: ffff800008007df0 x28: ffff0000cc85d1c0 x27: 1fffe000341cc45c [ 75.920172][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 75.921828][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f1060 [ 75.923438][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 75.925018][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 75.926636][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 75.928265][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 08b2120ccda4ce00 [ 75.929930][ C0] x8 : 08b2120ccda4ce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.931559][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 75.933156][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 75.934766][ C0] Call trace: [ 75.935414][ C0] invalidate_bh_lru+0x128/0x22c [ 75.936413][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.937616][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.939015][ C0] ipi_handler+0x10c/0x70c [ 75.939875][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.940958][ C0] handle_domain_irq+0x148/0x200 [ 75.941963][ C0] gic_handle_irq+0x78/0x1b8 [ 75.942889][ C0] call_on_irq_stack+0x30/0x48 [ 75.943813][ C0] do_interrupt_handler+0x6c/0x88 [ 75.944784][ C0] el1_interrupt+0x30/0x58 [ 75.945650][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.946607][ C0] el1h_64_irq+0x78/0x7c [ 75.947457][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 75.948545][ C0] debug_check_no_obj_freed+0x39c/0x454 [ 75.949614][ C0] __vunmap+0x270/0x9e4 [ 75.950422][ C0] vfree+0xbc/0x154 [ 75.951149][ C0] do_ip6t_get_ctl+0x11a8/0x1464 [ 75.952102][ C0] nf_getsockopt+0x254/0x274 [ 75.953000][ C0] ipv6_getsockopt+0x588/0x256c [ 75.953952][ C0] tcp_getsockopt+0x214/0x2d2c [ 75.954895][ C0] sock_common_getsockopt+0xa8/0xc4 [ 75.955935][ C0] __sys_getsockopt+0x1b8/0x250 [ 75.956906][ C0] __arm64_sys_getsockopt+0xc0/0xdc [ 75.957936][ C0] invoke_syscall+0x98/0x28c [ 75.958852][ C0] el0_svc_common+0x13c/0x258 [ 75.959815][ C0] do_el0_svc+0x5c/0x140 [ 75.960695][ C0] el0_svc+0x78/0x1d0 [ 75.961512][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 75.962548][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.963470][ C0] irq event stamp: 336888 [ 75.964338][ C0] hardirqs last enabled at (336887): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 75.966428][ C0] hardirqs last disabled at (336888): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.968429][ C0] softirqs last enabled at (336778): [] release_sock+0x1d0/0x258 [ 75.970282][ C0] softirqs last disabled at (336776): [] release_sock+0x34/0x258 [ 75.972100][ C0] ---[ end trace f47a0c0763f84464 ]--- [ 76.014891][ T4826] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.016363][ T4826] Bad inode number on dev loop0: 2 is out of range [ 76.017574][ T4826] SysV FS: get root inode failed [ 76.018695][ T4826] oldfs: cannot read superblock [ 76.021755][ C1] ------------[ cut here ]------------ [ 76.022773][ C1] VFS: brelse: Trying to free free buffer [ 76.023905][ C1] WARNING: CPU: 1 PID: 4826 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.025559][ C1] Modules linked in: [ 76.026303][ C1] CPU: 1 PID: 4826 Comm: syz.0.70 Tainted: G W syzkaller #0 [ 76.027961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.029932][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.031555][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 76.032656][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 76.033742][ C1] sp : ffff800008017df0 [ 76.034579][ C1] x29: ffff800008017df0 x28: ffff0000d5d69b40 x27: 1fffe000341d065c [ 76.036465][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 76.038253][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea5b400 [ 76.040102][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 76.041885][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.043550][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 76.045249][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 25dde45559e91e00 [ 76.046884][ C1] x8 : 25dde45559e91e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.048485][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.050385][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 76.052209][ C1] Call trace: [ 76.052951][ C1] invalidate_bh_lru+0x128/0x22c [ 76.054103][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 76.055328][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.056728][ C1] ipi_handler+0x10c/0x70c [ 76.057656][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 76.058727][ C1] handle_domain_irq+0x148/0x200 [ 76.059764][ C1] gic_handle_irq+0x78/0x1b8 [ 76.060733][ C1] call_on_irq_stack+0x30/0x48 [ 76.061707][ C1] do_interrupt_handler+0x6c/0x88 [ 76.062732][ C1] el1_interrupt+0x30/0x58 [ 76.063644][ C1] el1h_64_irq_handler+0x18/0x24 [ 76.064648][ C1] el1h_64_irq+0x78/0x7c [ 76.065515][ C1] __sanitizer_cov_trace_pc+0x10/0xa8 [ 76.066574][ C1] free_pages_and_swap_cache+0x9c/0xb4 [ 76.067667][ C1] tlb_finish_mmu+0x1a0/0x37c [ 76.068582][ C1] exit_mmap+0x2e0/0x510 [ 76.069576][ C1] __mmput+0xe8/0x3a0 [ 76.070400][ C1] mmput+0x80/0xc0 [ 76.071185][ C1] exit_mm+0x5dc/0x704 [ 76.072031][ C1] do_exit+0x4bc/0x1f54 [ 76.072908][ C1] do_group_exit+0x104/0x274 [ 76.073829][ C1] get_signal+0x638/0x13b0 [ 76.074716][ C1] do_notify_resume+0x344/0x30a8 [ 76.075698][ C1] el0_svc+0xf0/0x1d0 [ 76.076487][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 76.077497][ C1] el0t_64_sync+0x1a0/0x1a4 [ 76.078398][ C1] irq event stamp: 3100 [ 76.079233][ C1] hardirqs last enabled at (3099): [] free_unref_page_list+0x6b8/0x740 [ 76.081215][ C1] hardirqs last disabled at (3100): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.083248][ C1] softirqs last enabled at (1758): [] local_bh_enable+0x10/0x34 [ 76.085182][ C1] softirqs last disabled at (1756): [] local_bh_disable+0x10/0x34 [ 76.087066][ C1] ---[ end trace f47a0c0763f84465 ]--- [ 76.210874][ T4828] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.212465][ T4828] Bad inode number on dev loop0: 2 is out of range [ 76.213689][ T4828] SysV FS: get root inode failed [ 76.214650][ T4828] oldfs: cannot read superblock [ 76.215741][ T4828] ------------[ cut here ]------------ [ 76.216777][ T4828] VFS: brelse: Trying to free free buffer [ 76.217992][ T4828] WARNING: CPU: 0 PID: 4828 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.219805][ T4828] Modules linked in: [ 76.220593][ T4828] CPU: 0 PID: 4828 Comm: syz.0.71 Tainted: G W syzkaller #0 [ 76.222333][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.224419][ T4828] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.226020][ T4828] pc : invalidate_bh_lru+0x128/0x22c [ 76.227098][ T4828] lr : invalidate_bh_lru+0x128/0x22c [ 76.228142][ T4828] sp : ffff80001ff87710 [ 76.228933][ T4828] x29: ffff80001ff87710 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 76.230593][ T4828] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 76.232523][ T4828] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f1400 [ 76.234408][ T4828] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 76.236301][ T4828] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.238240][ T4828] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 76.240084][ T4828] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10b950abc5810000 [ 76.241940][ T4828] x8 : 10b950abc5810000 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.243739][ T4828] x5 : ffff80001ff87018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.245543][ T4828] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 76.247286][ T4828] Call trace: [ 76.247994][ T4828] invalidate_bh_lru+0x128/0x22c [ 76.249067][ T4828] smp_call_function_many_cond+0xa5c/0xec0 [ 76.250326][ T4828] on_each_cpu_cond_mask+0x5c/0xc4 [ 76.251450][ T4828] invalidate_bh_lrus+0x34/0x40 [ 76.252508][ T4828] blkdev_flush_mapping+0x16c/0x334 [ 76.253668][ T4828] blkdev_put+0x444/0x6c4 [ 76.254574][ T4828] kill_block_super+0xa0/0xe0 [ 76.255552][ T4828] deactivate_locked_super+0xc0/0x13c [ 76.256660][ T4828] mount_bdev+0x284/0x35c [ 76.257555][ T4828] sysv_mount+0x44/0x58 [ 76.258453][ T4828] legacy_get_tree+0xd8/0x174 [ 76.259456][ T4828] vfs_get_tree+0x90/0x278 [ 76.260410][ T4828] do_new_mount+0x228/0x804 [ 76.261329][ T4828] path_mount+0x57c/0xfe8 [ 76.262215][ T4828] __arm64_sys_mount+0x488/0x5f8 [ 76.263231][ T4828] invoke_syscall+0x98/0x28c [ 76.264208][ T4828] el0_svc_common+0x13c/0x258 [ 76.265157][ T4828] do_el0_svc+0x5c/0x140 [ 76.266032][ T4828] el0_svc+0x78/0x1d0 [ 76.266837][ T4828] el0t_64_sync_handler+0xcc/0xe4 [ 76.267847][ T4828] el0t_64_sync+0x1a0/0x1a4 [ 76.268783][ T4828] irq event stamp: 1226 [ 76.269617][ T4828] hardirqs last enabled at (1225): [] kasan_quarantine_put+0xc4/0x200 [ 76.271694][ T4828] hardirqs last disabled at (1226): [] smp_call_function_many_cond+0xa50/0xec0 [ 76.273865][ T4828] softirqs last enabled at (1218): [] handle_softirqs+0xa70/0xc14 [ 76.275761][ T4828] softirqs last disabled at (1159): [] __irq_exit_rcu+0x240/0x434 [ 76.277724][ T4828] ---[ end trace f47a0c0763f84466 ]--- [ 76.421830][ T4830] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.423238][ T4830] Bad inode number on dev loop0: 2 is out of range [ 76.424817][ T4830] SysV FS: get root inode failed [ 76.425867][ T4830] oldfs: cannot read superblock [ 76.434136][ C1] ------------[ cut here ]------------ [ 76.435213][ C1] VFS: brelse: Trying to free free buffer [ 76.436363][ C1] WARNING: CPU: 1 PID: 4831 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.438098][ C1] Modules linked in: [ 76.438891][ C1] CPU: 1 PID: 4831 Comm: syz-executor Tainted: G W syzkaller #0 [ 76.440694][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.442696][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.444331][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 76.445463][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 76.446542][ C1] sp : ffff800008017df0 [ 76.447383][ C1] x29: ffff800008017df0 x28: ffff0000ccc3d1c0 x27: 1fffe000341d065c [ 76.449012][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 76.450666][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea5b7a0 [ 76.452305][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 76.453955][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.455653][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 76.457353][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : 49b39ea61721bd00 [ 76.458969][ C1] x8 : 49b39ea61721bd00 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.460594][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.462223][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 76.463912][ C1] Call trace: [ 76.464585][ C1] invalidate_bh_lru+0x128/0x22c [ 76.465623][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 76.466991][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.468467][ C1] ipi_handler+0x10c/0x70c [ 76.469488][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 76.470669][ C1] handle_domain_irq+0x148/0x200 [ 76.471810][ C1] gic_handle_irq+0x78/0x1b8 [ 76.472762][ C1] call_on_irq_stack+0x30/0x48 [ 76.473781][ C1] do_interrupt_handler+0x6c/0x88 [ 76.474872][ C1] el1_interrupt+0x30/0x58 [ 76.475825][ C1] el1h_64_irq_handler+0x18/0x24 [ 76.476986][ C1] el1h_64_irq+0x78/0x7c [ 76.477918][ C1] local_daif_restore+0x20/0x3c [ 76.479004][ C1] el0_ia+0xd0/0x2b8 [ 76.479874][ C1] el0t_64_sync_handler+0xc0/0xe4 [ 76.480998][ C1] el0t_64_sync+0x1a0/0x1a4 [ 76.481997][ C1] irq event stamp: 80 [ 76.482881][ C1] hardirqs last enabled at (79): [] local_daif_restore+0x1c/0x3c [ 76.484931][ C1] hardirqs last disabled at (80): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.487255][ C1] softirqs last enabled at (24): [] local_bh_enable+0x10/0x34 [ 76.489430][ C1] softirqs last disabled at (22): [] local_bh_disable+0x10/0x34 [ 76.491575][ C1] ---[ end trace f47a0c0763f84467 ]--- [ 76.605409][ T4832] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.606863][ T4832] Bad inode number on dev loop0: 2 is out of range [ 76.608098][ T4832] SysV FS: get root inode failed [ 76.609040][ T4832] oldfs: cannot read superblock [ 76.609999][ T4832] ------------[ cut here ]------------ [ 76.611003][ T4832] VFS: brelse: Trying to free free buffer [ 76.612077][ T4832] WARNING: CPU: 0 PID: 4832 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.613685][ T4832] Modules linked in: [ 76.614394][ T4832] CPU: 0 PID: 4832 Comm: syz.0.73 Tainted: G W syzkaller #0 [ 76.615955][ T4832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.617750][ T4832] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.619193][ T4832] pc : invalidate_bh_lru+0x128/0x22c [ 76.620203][ T4832] lr : invalidate_bh_lru+0x128/0x22c [ 76.621268][ T4832] sp : ffff80001ff07710 [ 76.622101][ T4832] x29: ffff80001ff07710 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 76.623680][ T4832] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 76.625280][ T4832] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f17a0 [ 76.626895][ T4832] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 76.628507][ T4832] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.630215][ T4832] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 76.631797][ T4832] x11: ff80800008300a7c x10: 0000000000000000 x9 : 99430d412dc7c800 [ 76.633376][ T4832] x8 : 99430d412dc7c800 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.634983][ T4832] x5 : ffff80001ff07018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.636644][ T4832] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 76.638297][ T4832] Call trace: [ 76.638974][ T4832] invalidate_bh_lru+0x128/0x22c [ 76.639962][ T4832] smp_call_function_many_cond+0xa5c/0xec0 [ 76.641138][ T4832] on_each_cpu_cond_mask+0x5c/0xc4 [ 76.642180][ T4832] invalidate_bh_lrus+0x34/0x40 [ 76.643140][ T4832] blkdev_flush_mapping+0x16c/0x334 [ 76.644199][ T4832] blkdev_put+0x444/0x6c4 [ 76.645066][ T4832] kill_block_super+0xa0/0xe0 [ 76.646007][ T4832] deactivate_locked_super+0xc0/0x13c [ 76.647057][ T4832] mount_bdev+0x284/0x35c [ 76.647930][ T4832] sysv_mount+0x44/0x58 [ 76.648892][ T4832] legacy_get_tree+0xd8/0x174 [ 76.649884][ T4832] vfs_get_tree+0x90/0x278 [ 76.650821][ T4832] do_new_mount+0x228/0x804 [ 76.651786][ T4832] path_mount+0x57c/0xfe8 [ 76.652696][ T4832] __arm64_sys_mount+0x488/0x5f8 [ 76.653714][ T4832] invoke_syscall+0x98/0x28c [ 76.654665][ T4832] el0_svc_common+0x13c/0x258 [ 76.655634][ T4832] do_el0_svc+0x5c/0x140 [ 76.656505][ T4832] el0_svc+0x78/0x1d0 [ 76.657319][ T4832] el0t_64_sync_handler+0xcc/0xe4 [ 76.658496][ T4832] el0t_64_sync+0x1a0/0x1a4 [ 76.659457][ T4832] irq event stamp: 1184 [ 76.660315][ T4832] hardirqs last enabled at (1183): [] kasan_quarantine_put+0xc4/0x200 [ 76.662448][ T4832] hardirqs last disabled at (1184): [] smp_call_function_many_cond+0xa50/0xec0 [ 76.664749][ T4832] softirqs last enabled at (1174): [] handle_softirqs+0xa70/0xc14 [ 76.666818][ T4832] softirqs last disabled at (1163): [] __irq_exit_rcu+0x240/0x434 [ 76.669052][ T4832] ---[ end trace f47a0c0763f84468 ]--- [ 76.745433][ T4834] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.746890][ T4834] Bad inode number on dev loop0: 2 is out of range [ 76.748289][ T4834] SysV FS: get root inode failed [ 76.749619][ T4834] oldfs: cannot read superblock [ 76.757879][ T4727] ------------[ cut here ]------------ [ 76.758991][ T4727] VFS: brelse: Trying to free free buffer [ 76.760114][ T4727] WARNING: CPU: 0 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.761972][ T4727] Modules linked in: [ 76.762771][ T4727] CPU: 0 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 76.764473][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.766454][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.768273][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 76.769427][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 76.770671][ T4727] sp : ffff80001f8477d0 [ 76.771666][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 76.773428][ T4727] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 76.775191][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f1b40 [ 76.776903][ T4727] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 76.778608][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.780363][ T4727] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 76.782171][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 76.783912][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.785689][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.787473][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 76.789155][ T4727] Call trace: [ 76.789835][ T4727] invalidate_bh_lru+0x128/0x22c [ 76.790858][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 76.792056][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 76.793147][ T4727] invalidate_bh_lrus+0x34/0x40 [ 76.794201][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 76.795303][ T4727] blkdev_put+0x444/0x6c4 [ 76.796184][ T4727] blkdev_close+0x74/0xb0 [ 76.797068][ T4727] __fput+0x1b8/0x7e8 [ 76.797869][ T4727] ____fput+0x20/0x30 [ 76.798672][ T4727] task_work_run+0x13c/0x1e8 [ 76.799597][ T4727] do_notify_resume+0x2488/0x30a8 [ 76.800637][ T4727] el0_svc+0xf0/0x1d0 [ 76.801469][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 76.802489][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 76.803443][ T4727] irq event stamp: 255856 [ 76.804340][ T4727] hardirqs last enabled at (255855): [] kasan_quarantine_put+0xc4/0x200 [ 76.806458][ T4727] hardirqs last disabled at (255856): [] smp_call_function_many_cond+0xa50/0xec0 [ 76.808667][ T4727] softirqs last enabled at (255594): [] local_bh_enable+0x10/0x34 [ 76.810607][ T4727] softirqs last disabled at (255592): [] local_bh_disable+0x10/0x34 [ 76.812589][ T4727] ---[ end trace f47a0c0763f84469 ]--- [ 76.875428][ T4836] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.876998][ T4836] Bad inode number on dev loop0: 2 is out of range [ 76.878240][ T4836] SysV FS: get root inode failed [ 76.879215][ T4836] oldfs: cannot read superblock [ 76.888937][ C0] ------------[ cut here ]------------ [ 76.890033][ C0] VFS: brelse: Trying to free free buffer [ 76.891239][ C0] WARNING: CPU: 0 PID: 4838 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.893015][ C0] Modules linked in: [ 76.893816][ C0] CPU: 0 PID: 4838 Comm: syz.0.76 Tainted: G W syzkaller #0 [ 76.895586][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.897688][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.899309][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 76.900398][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 76.901457][ C0] sp : ffff800008007df0 [ 76.902285][ C0] x29: ffff800008007df0 x28: ffff0000ce4151c0 x27: 1fffe000341cc45c [ 76.903890][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 76.905498][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f1ee0 [ 76.907070][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 76.908676][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 76.910314][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 76.911960][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : bc6600274b4cab00 [ 76.913552][ C0] x8 : bc6600274b4cab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.915178][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 76.916836][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 76.918496][ C0] Call trace: [ 76.919164][ C0] invalidate_bh_lru+0x128/0x22c [ 76.920143][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 76.921360][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.922804][ C0] ipi_handler+0x10c/0x70c [ 76.923675][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 76.924786][ C0] handle_domain_irq+0x148/0x200 [ 76.925745][ C0] gic_handle_irq+0x78/0x1b8 [ 76.926633][ C0] call_on_irq_stack+0x30/0x48 [ 76.927576][ C0] do_interrupt_handler+0x6c/0x88 [ 76.928523][ C0] el1_interrupt+0x30/0x58 [ 76.929456][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.930426][ C0] el1h_64_irq+0x78/0x7c [ 76.931240][ C0] get_page_from_freelist+0x20c0/0x2a5c [ 76.932320][ C0] __alloc_pages+0x1a4/0x474 [ 76.933227][ C0] alloc_pages_vma+0x284/0x790 [ 76.934217][ C0] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 76.935506][ C0] handle_mm_fault+0x17f4/0x2aac [ 76.936579][ C0] do_page_fault+0x690/0xad0 [ 76.937514][ C0] do_translation_fault+0xe0/0x130 [ 76.938504][ C0] do_mem_abort+0x6c/0x1b0 [ 76.939372][ C0] el0_da+0x90/0x1ec [ 76.940156][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 76.941161][ C0] el0t_64_sync+0x1a0/0x1a4 [ 76.942056][ C0] irq event stamp: 206 [ 76.942885][ C0] hardirqs last enabled at (205): [] get_page_from_freelist+0x20ac/0x2a5c [ 76.944868][ C0] hardirqs last disabled at (206): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.946836][ C0] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 76.948726][ C0] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 76.950572][ C0] ---[ end trace f47a0c0763f8446a ]--- [ 77.014456][ T4838] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.016011][ T4838] Bad inode number on dev loop0: 2 is out of range [ 77.017253][ T4838] SysV FS: get root inode failed [ 77.018359][ T4838] oldfs: cannot read superblock [ 77.021898][ C1] ------------[ cut here ]------------ [ 77.022960][ C1] VFS: brelse: Trying to free free buffer [ 77.024080][ C1] WARNING: CPU: 1 PID: 4838 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.025832][ C1] Modules linked in: [ 77.026606][ C1] CPU: 1 PID: 4838 Comm: syz.0.76 Tainted: G W syzkaller #0 [ 77.028282][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.030303][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.031938][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 77.033062][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 77.034323][ C1] sp : ffff800008017df0 [ 77.035199][ C1] x29: ffff800008017df0 x28: ffff0000ce4151c0 x27: 1fffe000341d065c [ 77.036919][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 77.038593][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea5bb40 [ 77.040276][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010002 [ 77.041926][ C1] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.043511][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 77.045119][ C1] x11: ff80800008300a7c x10: 0000000000010001 x9 : bc6600274b4cab00 [ 77.046763][ C1] x8 : bc6600274b4cab00 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.048457][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.050149][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 77.051799][ C1] Call trace: [ 77.052481][ C1] invalidate_bh_lru+0x128/0x22c [ 77.053559][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 77.054807][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 77.056221][ C1] ipi_handler+0x10c/0x70c [ 77.057115][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 77.058207][ C1] handle_domain_irq+0x148/0x200 [ 77.059205][ C1] gic_handle_irq+0x78/0x1b8 [ 77.060124][ C1] call_on_irq_stack+0x30/0x48 [ 77.061087][ C1] do_interrupt_handler+0x6c/0x88 [ 77.062097][ C1] el1_interrupt+0x30/0x58 [ 77.063006][ C1] el1h_64_irq_handler+0x18/0x24 [ 77.064006][ C1] el1h_64_irq+0x78/0x7c [ 77.064868][ C1] arch_local_irq_restore+0x8/0x10 [ 77.065917][ C1] ___might_sleep+0x48/0x4dc [ 77.066846][ C1] __might_sleep+0x98/0x124 [ 77.067767][ C1] dput+0x70/0x448 [ 77.068514][ C1] path_put+0x40/0x6c [ 77.069322][ C1] exit_fs+0xc0/0x12c [ 77.070125][ C1] do_exit+0x618/0x1f54 [ 77.070948][ C1] do_group_exit+0x104/0x274 [ 77.071877][ C1] get_signal+0x638/0x13b0 [ 77.072764][ C1] do_notify_resume+0x344/0x30a8 [ 77.073734][ C1] el0_svc+0xf0/0x1d0 [ 77.074505][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 77.075511][ C1] el0t_64_sync+0x1a0/0x1a4 [ 77.076405][ C1] irq event stamp: 3292 [ 77.077237][ C1] hardirqs last enabled at (3291): [] kasan_quarantine_put+0xc4/0x200 [ 77.079279][ C1] hardirqs last disabled at (3292): [] enter_el1_irq_or_nmi+0x10/0x1c [ 77.081380][ C1] softirqs last enabled at (1488): [] local_bh_enable+0x10/0x34 [ 77.083392][ C1] softirqs last disabled at (1486): [] local_bh_disable+0x10/0x34 [ 77.085317][ C1] ---[ end trace f47a0c0763f8446b ]--- [ 77.140288][ T4840] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.141741][ T4840] Bad inode number on dev loop0: 2 is out of range [ 77.142979][ T4840] SysV FS: get root inode failed [ 77.144016][ T4840] oldfs: cannot read superblock [ 77.182431][ T4628] ------------[ cut here ]------------ [ 77.183545][ T4628] VFS: brelse: Trying to free free buffer [ 77.184730][ T4628] WARNING: CPU: 0 PID: 4628 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.186557][ T4628] Modules linked in: [ 77.187373][ T4628] CPU: 0 PID: 4628 Comm: syz-executor Tainted: G W syzkaller #0 [ 77.189172][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.191343][ T4628] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.193038][ T4628] pc : invalidate_bh_lru+0x128/0x22c [ 77.194191][ T4628] lr : invalidate_bh_lru+0x128/0x22c [ 77.195345][ T4628] sp : ffff80001fb96fa0 [ 77.196204][ T4628] x29: ffff80001fb96fa0 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 77.197897][ T4628] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 77.199543][ T4628] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f2a58 [ 77.201165][ T4628] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 77.202777][ T4628] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.204428][ T4628] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 77.206079][ T4628] x11: ff80800008300a7c x10: 0000000000000000 x9 : 08b2120ccda4ce00 [ 77.207717][ T4628] x8 : 08b2120ccda4ce00 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.209378][ T4628] x5 : ffff80001fb968b8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.211063][ T4628] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 77.212717][ T4628] Call trace: [ 77.213413][ T4628] invalidate_bh_lru+0x128/0x22c [ 77.214414][ T4628] smp_call_function_many_cond+0xa5c/0xec0 [ 77.215603][ T4628] on_each_cpu_cond_mask+0x5c/0xc4 [ 77.216658][ T4628] invalidate_bh_lrus+0x34/0x40 [ 77.217656][ T4628] invalidate_bdev+0x90/0xc0 [ 77.218610][ T4628] __loop_clr_fd+0x4e0/0x988 [ 77.219562][ T4628] lo_ioctl+0x10dc/0x1dd0 [ 77.220459][ T4628] blkdev_ioctl+0x62c/0xc14 [ 77.221402][ T4628] block_ioctl+0xa4/0x118 [ 77.222300][ T4628] __arm64_sys_ioctl+0x14c/0x1c8 [ 77.223315][ T4628] invoke_syscall+0x98/0x28c [ 77.224256][ T4628] el0_svc_common+0x13c/0x258 [ 77.225219][ T4628] do_el0_svc+0x5c/0x140 [ 77.226085][ T4628] el0_svc+0x78/0x1d0 [ 77.226898][ T4628] el0t_64_sync_handler+0xcc/0xe4 [ 77.227910][ T4628] el0t_64_sync+0x1a0/0x1a4 [ 77.228825][ T4628] irq event stamp: 360034 [ 77.229739][ T4628] hardirqs last enabled at (360033): [] _raw_spin_unlock_irq+0x98/0x128 [ 77.231770][ T4628] hardirqs last disabled at (360034): [] smp_call_function_many_cond+0xa50/0xec0 [ 77.233850][ T4628] softirqs last enabled at (359924): [] local_bh_enable+0x10/0x34 [ 77.235748][ T4628] softirqs last disabled at (359922): [] local_bh_disable+0x10/0x34 [ 77.237714][ T4628] ---[ end trace f47a0c0763f8446c ]--- [ 77.253236][ T4842] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.254734][ T4842] Bad inode number on dev loop0: 2 is out of range [ 77.256020][ T4842] SysV FS: get root inode failed [ 77.257058][ T4842] oldfs: cannot read superblock [ 77.260699][ T4727] ------------[ cut here ]------------ [ 77.261865][ T4727] VFS: brelse: Trying to free free buffer [ 77.263100][ T4727] WARNING: CPU: 1 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.264930][ T4727] Modules linked in: [ 77.265650][ T4727] CPU: 1 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 77.267317][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.269299][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.270998][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 77.272227][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 77.273350][ T4727] sp : ffff80001f8477d0 [ 77.274244][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 77.276025][ T4727] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 77.277796][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea5bee0 [ 77.279494][ T4727] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 77.281208][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.282900][ T4727] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 77.284586][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 77.286281][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.288020][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.289821][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 77.291636][ T4727] Call trace: [ 77.292366][ T4727] invalidate_bh_lru+0x128/0x22c [ 77.293468][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 77.294695][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 77.295780][ T4727] invalidate_bh_lrus+0x34/0x40 [ 77.296810][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 77.297917][ T4727] blkdev_put+0x444/0x6c4 [ 77.298815][ T4727] blkdev_close+0x74/0xb0 [ 77.299684][ T4727] __fput+0x1b8/0x7e8 [ 77.300470][ T4727] ____fput+0x20/0x30 [ 77.301251][ T4727] task_work_run+0x13c/0x1e8 [ 77.302151][ T4727] do_notify_resume+0x2488/0x30a8 [ 77.303153][ T4727] el0_svc+0xf0/0x1d0 [ 77.303926][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 77.304930][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 77.305834][ T4727] irq event stamp: 279848 [ 77.306730][ T4727] hardirqs last enabled at (279847): [] kasan_quarantine_put+0xc4/0x200 [ 77.308779][ T4727] hardirqs last disabled at (279848): [] smp_call_function_many_cond+0xa50/0xec0 [ 77.310938][ T4727] softirqs last enabled at (279672): [] local_bh_enable+0x10/0x34 [ 77.312952][ T4727] softirqs last disabled at (279670): [] local_bh_disable+0x10/0x34 [ 77.314998][ T4727] ---[ end trace f47a0c0763f8446d ]--- [ 77.342857][ T4844] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.344388][ T4844] Bad inode number on dev loop0: 2 is out of range [ 77.345929][ T4844] SysV FS: get root inode failed [ 77.346882][ T4844] oldfs: cannot read superblock [ 77.356043][ C0] ------------[ cut here ]------------ [ 77.357220][ C0] VFS: brelse: Trying to free free buffer [ 77.358413][ C0] WARNING: CPU: 0 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.360098][ C0] Modules linked in: [ 77.361028][ C0] CPU: 0 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 77.362917][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.365157][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.366934][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 77.368058][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 77.369264][ C0] sp : ffff800008007df0 [ 77.370145][ C0] x29: ffff800008007df0 x28: ffff0000d718b680 x27: 1fffe000341cc45b [ 77.371801][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 77.373442][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f2df8 [ 77.375090][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010002 [ 77.376753][ C0] x17: 0000000000010002 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.378424][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 77.380091][ C0] x11: ff80800008300a7c x10: 0000000000010001 x9 : 2b50879382d06200 [ 77.381798][ C0] x8 : 2b50879382d06200 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.383419][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.385087][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 77.386757][ C0] Call trace: [ 77.387457][ C0] invalidate_bh_lru+0x128/0x22c [ 77.388510][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 77.389779][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 77.391189][ C0] ipi_handler+0x10c/0x70c [ 77.392084][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 77.393183][ C0] handle_domain_irq+0x148/0x200 [ 77.394182][ C0] gic_handle_irq+0x78/0x1b8 [ 77.395111][ C0] call_on_irq_stack+0x30/0x48 [ 77.396048][ C0] do_interrupt_handler+0x6c/0x88 [ 77.397081][ C0] el1_interrupt+0x30/0x58 [ 77.397972][ C0] el1h_64_irq_handler+0x18/0x24 [ 77.398954][ C0] el1h_64_irq+0x78/0x7c [ 77.399805][ C0] __sanitizer_cov_trace_const_cmp8+0xb8/0xbc [ 77.401004][ C0] __arm64_sys_utimensat+0x154/0x228 [ 77.402063][ C0] invoke_syscall+0x98/0x28c [ 77.402916][ C0] el0_svc_common+0x13c/0x258 [ 77.403834][ C0] do_el0_svc+0x5c/0x140 [ 77.404651][ C0] el0_svc+0x78/0x1d0 [ 77.405425][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 77.406430][ C0] el0t_64_sync+0x1a0/0x1a4 [ 77.407318][ C0] irq event stamp: 1348832 [ 77.408199][ C0] hardirqs last enabled at (1348831): [] el0_svc_common+0xa0/0x258 [ 77.410162][ C0] hardirqs last disabled at (1348832): [] enter_el1_irq_or_nmi+0x10/0x1c [ 77.412241][ C0] softirqs last enabled at (1348792): [] local_bh_enable+0x10/0x34 [ 77.414161][ C0] softirqs last disabled at (1348790): [] local_bh_disable+0x10/0x34 [ 77.416100][ C0] ---[ end trace f47a0c0763f8446e ]--- [ 77.491208][ T4846] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.492623][ T4846] Bad inode number on dev loop0: 2 is out of range [ 77.494129][ T4846] SysV FS: get root inode failed [ 77.495266][ T4846] oldfs: cannot read superblock [ 77.496346][ T4846] ------------[ cut here ]------------ [ 77.497526][ T4846] VFS: brelse: Trying to free free buffer [ 77.498823][ T4846] WARNING: CPU: 0 PID: 4846 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.500796][ T4846] Modules linked in: [ 77.501725][ T4846] CPU: 0 PID: 4846 Comm: syz.0.80 Tainted: G W syzkaller #0 [ 77.503731][ T4846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.506042][ T4846] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.507917][ T4846] pc : invalidate_bh_lru+0x128/0x22c [ 77.509222][ T4846] lr : invalidate_bh_lru+0x128/0x22c [ 77.510533][ T4846] sp : ffff80001ff07710 [ 77.511502][ T4846] x29: ffff80001ff07710 x28: ffff8000143ad000 x27: 1fffe000341cc45b [ 77.513325][ T4846] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 77.515174][ T4846] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ed0f2230 [ 77.516936][ T4846] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 77.518668][ T4846] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.520378][ T4846] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 77.521988][ T4846] x11: ff80800008300a7c x10: 0000000000000000 x9 : 05a4f0c399a6f100 [ 77.523691][ T4846] x8 : 05a4f0c399a6f100 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.525328][ T4846] x5 : ffff80001ff07018 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.526986][ T4846] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 77.528652][ T4846] Call trace: [ 77.529334][ T4846] invalidate_bh_lru+0x128/0x22c [ 77.530372][ T4846] smp_call_function_many_cond+0xa5c/0xec0 [ 77.531579][ T4846] on_each_cpu_cond_mask+0x5c/0xc4 [ 77.532623][ T4846] invalidate_bh_lrus+0x34/0x40 [ 77.533645][ T4846] blkdev_flush_mapping+0x16c/0x334 [ 77.534726][ T4846] blkdev_put+0x444/0x6c4 [ 77.535629][ T4846] kill_block_super+0xa0/0xe0 [ 77.536595][ T4846] deactivate_locked_super+0xc0/0x13c [ 77.537683][ T4846] mount_bdev+0x284/0x35c [ 77.538606][ T4846] sysv_mount+0x44/0x58 [ 77.539483][ T4846] legacy_get_tree+0xd8/0x174 [ 77.540466][ T4846] vfs_get_tree+0x90/0x278 [ 77.541398][ T4846] do_new_mount+0x228/0x804 [ 77.542323][ T4846] path_mount+0x57c/0xfe8 [ 77.543203][ T4846] __arm64_sys_mount+0x488/0x5f8 [ 77.544199][ T4846] invoke_syscall+0x98/0x28c [ 77.545197][ T4846] el0_svc_common+0x13c/0x258 [ 77.546161][ T4846] do_el0_svc+0x5c/0x140 [ 77.547051][ T4846] el0_svc+0x78/0x1d0 [ 77.547870][ T4846] el0t_64_sync_handler+0xcc/0xe4 [ 77.548837][ T4846] el0t_64_sync+0x1a0/0x1a4 [ 77.549720][ T4846] irq event stamp: 1116 [ 77.550529][ T4846] hardirqs last enabled at (1115): [] kasan_quarantine_put+0xc4/0x200 [ 77.552429][ T4846] hardirqs last disabled at (1116): [] smp_call_function_many_cond+0xa50/0xec0 [ 77.554477][ T4846] softirqs last enabled at (924): [] local_bh_enable+0x10/0x34 [ 77.556321][ T4846] softirqs last disabled at (922): [] local_bh_disable+0x10/0x34 [ 77.558264][ T4846] ---[ end trace f47a0c0763f8446f ]--- [ 77.683952][ T4848] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.685438][ T4848] Bad inode number on dev loop0: 2 is out of range [ 77.686695][ T4848] SysV FS: get root inode failed [ 77.687690][ T4848] oldfs: cannot read superblock [ 77.694424][ C1] ------------[ cut here ]------------ [ 77.695543][ C1] VFS: brelse: Trying to free free buffer [ 77.696692][ C1] WARNING: CPU: 1 PID: 4849 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.698424][ C1] Modules linked in: [ 77.699182][ C1] CPU: 1 PID: 4849 Comm: syz-executor Tainted: G W syzkaller #0 [ 77.701032][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.703162][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.704854][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 77.705984][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 77.707184][ C1] sp : ffff800008017df0 [ 77.708047][ C1] x29: ffff800008017df0 x28: ffff0000ca688000 x27: 1fffe000341d065c [ 77.709760][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 77.711500][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea8bdf8 [ 77.713232][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010004 [ 77.715068][ C1] x17: 0000000000010004 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.716861][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 77.718611][ C1] x11: ff80800008300a7c x10: 0000000000010003 x9 : 2b55ba17c4a40c00 [ 77.720370][ C1] x8 : 2b55ba17c4a40c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.722123][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.723895][ C1] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000027 [ 77.725795][ C1] Call trace: [ 77.726564][ C1] invalidate_bh_lru+0x128/0x22c [ 77.727695][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 77.729072][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 77.730638][ C1] ipi_handler+0x10c/0x70c [ 77.731543][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 77.732682][ C1] handle_domain_irq+0x148/0x200 [ 77.733705][ C1] gic_handle_irq+0x78/0x1b8 [ 77.734649][ C1] call_on_irq_stack+0x30/0x48 [ 77.735632][ C1] do_interrupt_handler+0x6c/0x88 [ 77.736650][ C1] el1_interrupt+0x30/0x58 [ 77.737561][ C1] el1h_64_irq_handler+0x18/0x24 [ 77.738555][ C1] el1h_64_irq+0x78/0x7c [ 77.739428][ C1] preempt_count+0x50/0x68 [ 77.740487][ C1] debug_smp_processor_id+0x20/0x2c [ 77.741693][ C1] rcu_is_watching+0x50/0x134 [ 77.742777][ C1] percpu_ref_tryget+0x2c/0x22c [ 77.743885][ C1] get_mem_cgroup_from_objcg+0xb8/0x138 [ 77.745053][ C1] __memcg_kmem_uncharge_page+0xe8/0x1f0 [ 77.746246][ C1] free_thread_stack+0x1ac/0x61c [ 77.747265][ C1] put_task_stack+0xa8/0x178 [ 77.748198][ C1] finish_task_switch+0x344/0x6f4 [ 77.749223][ C1] schedule_tail+0x20/0x140 [ 77.750174][ C1] ret_from_fork+0x4/0x20 [ 77.751033][ C1] irq event stamp: 28 [ 77.751813][ C1] hardirqs last enabled at (27): [] refill_stock+0x1dc/0x390 [ 77.753620][ C1] hardirqs last disabled at (28): [] enter_el1_irq_or_nmi+0x10/0x1c [ 77.755881][ C1] softirqs last enabled at (0): [] copy_process+0x1244/0x36f4 [ 77.757996][ C1] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 77.759550][ C1] ---[ end trace f47a0c0763f84470 ]--- [ 77.841199][ T4850] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.842604][ T4850] Bad inode number on dev loop0: 2 is out of range [ 77.843806][ T4850] SysV FS: get root inode failed [ 77.844731][ T4850] oldfs: cannot read superblock [ 77.858876][ C0] ------------[ cut here ]------------ [ 77.860050][ C0] VFS: brelse: Trying to free free buffer [ 77.861342][ C0] WARNING: CPU: 0 PID: 4852 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.863149][ C0] Modules linked in: [ 77.863962][ C0] CPU: 0 PID: 4852 Comm: syz.0.83 Tainted: G W syzkaller #0 [ 77.865720][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.867747][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.869331][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 77.870356][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 77.871415][ C0] sp : ffff800008007df0 [ 77.872245][ C0] x29: ffff800008007df0 x28: ffff0000d3f50000 x27: 1fffe000341cc45c [ 77.873895][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 77.875553][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2468060 [ 77.877199][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010004 [ 77.878849][ C0] x17: 0000000000010004 x16: ffff8000113710a0 x15: 0000000000000012 [ 77.880421][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 77.881990][ C0] x11: ff80800008300a7c x10: 0000000000010003 x9 : a9094e42f8613e00 [ 77.883594][ C0] x8 : a9094e42f8613e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.885210][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 77.886833][ C0] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000027 [ 77.888479][ C0] Call trace: [ 77.889154][ C0] invalidate_bh_lru+0x128/0x22c [ 77.890175][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 77.891332][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 77.892717][ C0] ipi_handler+0x10c/0x70c [ 77.893610][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 77.894713][ C0] handle_domain_irq+0x148/0x200 [ 77.895667][ C0] gic_handle_irq+0x78/0x1b8 [ 77.896556][ C0] call_on_irq_stack+0x30/0x48 [ 77.897495][ C0] do_interrupt_handler+0x6c/0x88 [ 77.898470][ C0] el1_interrupt+0x30/0x58 [ 77.899369][ C0] el1h_64_irq_handler+0x18/0x24 [ 77.900370][ C0] el1h_64_irq+0x78/0x7c [ 77.901216][ C0] preempt_count+0x44/0x68 [ 77.902072][ C0] check_preemption_disabled+0x38/0x164 [ 77.903184][ C0] debug_smp_processor_id+0x20/0x2c [ 77.904206][ C0] rcu_is_watching+0x50/0x134 [ 77.905152][ C0] lock_page_memcg+0x5c/0x22c [ 77.906090][ C0] page_remove_rmap+0x3c/0xfb4 [ 77.907040][ C0] unmap_page_range+0xa60/0x180c [ 77.908062][ C0] unmap_single_vma+0x13c/0x1e4 [ 77.909082][ C0] unmap_vmas+0x110/0x218 [ 77.910004][ C0] exit_mmap+0x2c4/0x510 [ 77.910835][ C0] __mmput+0xe8/0x3a0 [ 77.911611][ C0] mmput+0x80/0xc0 [ 77.912343][ C0] exit_mm+0x5dc/0x704 [ 77.913129][ C0] do_exit+0x4bc/0x1f54 [ 77.913965][ C0] do_group_exit+0x104/0x274 [ 77.914878][ C0] get_signal+0x638/0x13b0 [ 77.915764][ C0] do_notify_resume+0x344/0x30a8 [ 77.916813][ C0] el0_svc+0xf0/0x1d0 [ 77.917618][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 77.918626][ C0] el0t_64_sync+0x1a0/0x1a4 [ 77.919537][ C0] irq event stamp: 1820 [ 77.920379][ C0] hardirqs last enabled at (1819): [] lock_page_memcg+0x110/0x22c [ 77.922339][ C0] hardirqs last disabled at (1820): [] enter_el1_irq_or_nmi+0x10/0x1c [ 77.924309][ C0] softirqs last enabled at (92): [] local_bh_enable+0x10/0x34 [ 77.926104][ C0] softirqs last disabled at (90): [] local_bh_disable+0x10/0x34 [ 77.927983][ C0] ---[ end trace f47a0c0763f84471 ]--- [ 78.044924][ T4854] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 78.046414][ T4854] Bad inode number on dev loop0: 2 is out of range [ 78.047718][ T4854] SysV FS: get root inode failed [ 78.048716][ T4854] oldfs: cannot read superblock [ 78.056287][ T4727] ------------[ cut here ]------------ [ 78.057469][ T4727] VFS: brelse: Trying to free free buffer [ 78.058710][ T4727] WARNING: CPU: 1 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 78.060722][ T4727] Modules linked in: [ 78.061597][ T4727] CPU: 1 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 78.063397][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.065431][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.067004][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 78.068084][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 78.069142][ T4727] sp : ffff80001f8477d0 [ 78.069990][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341d065b [ 78.071628][ T4727] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000000 [ 78.073226][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea75230 [ 78.074855][ T4727] x20: ffff0001a0e832d8 x19: ffff80001157afa0 x18: 0000000000000003 [ 78.076474][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 78.078075][ T4727] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 78.079693][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 78.081308][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 78.082944][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 78.084563][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 78.086215][ T4727] Call trace: [ 78.086871][ T4727] invalidate_bh_lru+0x128/0x22c [ 78.087861][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 78.089034][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 78.090072][ T4727] invalidate_bh_lrus+0x34/0x40 [ 78.091052][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 78.092121][ T4727] blkdev_put+0x444/0x6c4 [ 78.093012][ T4727] blkdev_close+0x74/0xb0 [ 78.093904][ T4727] __fput+0x1b8/0x7e8 [ 78.094713][ T4727] ____fput+0x20/0x30 [ 78.095504][ T4727] task_work_run+0x13c/0x1e8 [ 78.096419][ T4727] do_notify_resume+0x2488/0x30a8 [ 78.097462][ T4727] el0_svc+0xf0/0x1d0 [ 78.098302][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 78.099340][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 78.100272][ T4727] irq event stamp: 302600 [ 78.101117][ T4727] hardirqs last enabled at (302599): [] kasan_quarantine_put+0xc4/0x200 [ 78.103123][ T4727] hardirqs last disabled at (302600): [] smp_call_function_many_cond+0xa50/0xec0 [ 78.105286][ T4727] softirqs last enabled at (302332): [] local_bh_enable+0x10/0x34 [ 78.107147][ T4727] softirqs last disabled at (302330): [] local_bh_disable+0x10/0x34 [ 78.109023][ T4727] ---[ end trace f47a0c0763f84472 ]--- [ 78.193503][ T4856] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 78.194939][ T4856] Bad inode number on dev loop0: 2 is out of range [ 78.196170][ T4856] SysV FS: get root inode failed [ 78.197103][ T4856] oldfs: cannot read superblock [ 78.205103][ T4727] ------------[ cut here ]------------ [ 78.206165][ T4727] VFS: brelse: Trying to free free buffer [ 78.207259][ T4727] WARNING: CPU: 1 PID: 4727 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 78.208840][ T4727] Modules linked in: [ 78.209561][ T4727] CPU: 1 PID: 4727 Comm: udevd Tainted: G W syzkaller #0 [ 78.211206][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.213212][ T4727] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.214756][ T4727] pc : invalidate_bh_lru+0x128/0x22c [ 78.215826][ T4727] lr : invalidate_bh_lru+0x128/0x22c [ 78.216913][ T4727] sp : ffff80001f8477d0 [ 78.217735][ T4727] x29: ffff80001f8477d0 x28: ffff8000143ad000 x27: 1fffe000341d065c [ 78.219362][ T4727] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 78.220951][ T4727] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea755d0 [ 78.222617][ T4727] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000000003 [ 78.224243][ T4727] x17: 0000000000000000 x16: ffff8000113710a0 x15: 0000000000000012 [ 78.225806][ T4727] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 78.227372][ T4727] x11: ff80800008300a7c x10: 0000000000000000 x9 : 10c147d0304adb00 [ 78.228959][ T4727] x8 : 10c147d0304adb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 78.230545][ T4727] x5 : ffff80001f8470d8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 78.232126][ T4727] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 78.233743][ T4727] Call trace: [ 78.234341][ T4727] invalidate_bh_lru+0x128/0x22c [ 78.235311][ T4727] smp_call_function_many_cond+0xa5c/0xec0 [ 78.236471][ T4727] on_each_cpu_cond_mask+0x5c/0xc4 [ 78.237503][ T4727] invalidate_bh_lrus+0x34/0x40 [ 78.238442][ T4727] blkdev_flush_mapping+0x16c/0x334 [ 78.239475][ T4727] blkdev_put+0x444/0x6c4 [ 78.240380][ T4727] blkdev_close+0x74/0xb0 [ 78.241284][ T4727] __fput+0x1b8/0x7e8 [ 78.242104][ T4727] ____fput+0x20/0x30 [ 78.242889][ T4727] task_work_run+0x13c/0x1e8 [ 78.243805][ T4727] do_notify_resume+0x2488/0x30a8 [ 78.244802][ T4727] el0_svc+0xf0/0x1d0 [ 78.245616][ T4727] el0t_64_sync_handler+0xcc/0xe4 [ 78.246611][ T4727] el0t_64_sync+0x1a0/0x1a4 [ 78.247534][ T4727] irq event stamp: 306264 [ 78.248395][ T4727] hardirqs last enabled at (306263): [] kasan_quarantine_put+0xc4/0x200 [ 78.250476][ T4727] hardirqs last disabled at (306264): [] smp_call_function_many_cond+0xa50/0xec0 [ 78.252742][ T4727] softirqs last enabled at (305992): [] local_bh_enable+0x10/0x34 [ 78.254997][ T4727] softirqs last disabled at (305990): [] local_bh_disable+0x10/0x34 [ 78.257043][ T4727] ---[ end trace f47a0c0763f84473 ]--- [ 78.294842][ T4858] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 78.296227][ T4858] Bad inode number on dev loop0: 2 is out of range [ 78.297447][ T4858] SysV FS: get root inode failed [ 78.298502][ T4858] oldfs: cannot read superblock [ 78.323296][ C1] ------------[ cut here ]------------ [ 78.324464][ C1] VFS: brelse: Trying to free free buffer [ 78.325722][ C1] WARNING: CPU: 1 PID: 4861 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 78.327503][ C1] Modules linked in: [ 78.328259][ C1] CPU: 1 PID: 4861 Comm: syz-executor Tainted: G W syzkaller #0 [ 78.330039][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.332185][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.333818][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 78.334944][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 78.336104][ C1] sp : ffff800008017df0 [ 78.336937][ C1] x29: ffff800008017df0 x28: ffff0000c6813680 x27: 1fffe000341d065c [ 78.338669][ C1] x26: 0000000000000001 x25: ffff0001a0e832d8 x24: 0000000000000001 [ 78.340387][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dea75970 [ 78.342204][ C1] x20: ffff0001a0e832e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 78.343961][ C1] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 78.345788][ C1] x14: 0000000000000001 x13: 1fffe000341ce9ab x12: 0000000000000000 [ 78.347484][ C1] x11: ff80800008300a7c x10: 0000000000010002 x9 : 01b7dff2edf98e00 [ 78.349204][ C1] x8 : 01b7dff2edf98e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 78.350995][ C1] x5 : ffff8000080176f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 78.352714][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 78.354428][ C1] Call trace: [ 78.355127][ C1] invalidate_bh_lru+0x128/0x22c [ 78.356190][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 78.357478][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 78.358929][ C1] ipi_handler+0x10c/0x70c [ 78.359834][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 78.360936][ C1] handle_domain_irq+0x148/0x200 [ 78.361928][ C1] gic_handle_irq+0x78/0x1b8 [ 78.362863][ C1] call_on_irq_stack+0x30/0x48 [ 78.363825][ C1] do_interrupt_handler+0x6c/0x88 [ 78.364834][ C1] el1_interrupt+0x30/0x58 [ 78.365716][ C1] el1h_64_irq_handler+0x18/0x24 [ 78.366743][ C1] el1h_64_irq+0x78/0x7c [ 78.367635][ C1] ___slab_alloc+0x2dc/0xd84 [ 78.368607][ C1] __slab_alloc+0x68/0xc0 [ 78.369495][ C1] kmem_cache_alloc+0x2a8/0x3d8 [ 78.370446][ C1] shmem_alloc_inode+0x20/0x38 [ 78.371383][ C1] new_inode_pseudo+0x68/0x200 [ 78.372320][ C1] new_inode+0x38/0x174 [ 78.373162][ C1] shmem_get_inode+0x2cc/0x97c [ 78.374101][ C1] shmem_symlink+0xa8/0x4ac [ 78.374982][ C1] vfs_symlink+0x238/0x3b0 [ 78.375849][ C1] do_symlinkat+0x188/0x5b4 [ 78.376738][ C1] __arm64_sys_symlinkat+0xa4/0xbc [ 78.377741][ C1] invoke_syscall+0x98/0x28c [ 78.378636][ C1] el0_svc_common+0x13c/0x258 [ 78.379551][ C1] do_el0_svc+0x5c/0x140 [ 78.380399][ C1] el0_svc+0x78/0x1d0 [ 78.381181][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 78.382176][ C1] el0t_64_sync+0x1a0/0x1a4 [ 78.383075][ C1] irq event stamp: 714 [ 78.383879][ C1] hardirqs last enabled at (713): [] ___slab_alloc+0x2cc/0xd84 [ 78.385695][ C1] hardirqs last disabled at (714): [] enter_el1_irq_or_nmi+0x10/0x1c [ 78.387596][ C1] softirqs last enabled at (636): [] local_bh_enable+0x10/0x34 [ 78.389433][ C1] softirqs last disabled at (634): [] local_bh_disable+0x10/0x34 [ 78.391357][ C1] ---[ end trace f47a0c0763f84474 ]--- [ 78.484983][ T4862] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 78.486402][ T4862] Bad inode number on dev loop0: 2 is out of range [ 78.487696][ T4862] SysV FS: get root inode failed [ 78.488691][ T4862] oldfs: cannot read superblock [ 78.490664][ C0] ------------[ cut here ]------------ [ 78.491750][ C0] VFS: brelse: Trying to free free buffer [ 78.492922][ C0] WARNING: CPU: 0 PID: 4861 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 78.494577][ C0] Modules linked in: [ 78.495295][ C0] CPU: 0 PID: 4861 Comm: syz.0.88 Tainted: G W syzkaller #0 [ 78.496911][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.498794][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.500294][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 78.501392][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 78.502473][ C0] sp : ffff800008007df0 [ 78.503330][ C0] x29: ffff800008007df0 x28: ffff0000c6813680 x27: 1fffe000341cc45c [ 78.505012][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000001 [ 78.506629][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2468400 [ 78.508251][ C0] x20: ffff0001a0e622e0 x19: ffff80001157afa0 x18: 0000000000010003 [ 78.509915][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 78.511541][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 78.513046][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 01b7dff2edf98e00 [ 78.514765][ C0] x8 : 01b7dff2edf98e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 78.516442][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 78.518101][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 78.519692][ C0] Call trace: [ 78.520338][ C0] invalidate_bh_lru+0x128/0x22c [ 78.521288][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 78.522474][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 78.523891][ C0] ipi_handler+0x10c/0x70c [ 78.524836][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 78.525974][ C0] handle_domain_irq+0x148/0x200 [ 78.527011][ C0] gic_handle_irq+0x78/0x1b8 [ 78.527976][ C0] call_on_irq_stack+0x30/0x48 [ 78.528945][ C0] do_interrupt_handler+0x6c/0x88 [ 78.529939][ C0] el1_interrupt+0x30/0x58 [ 78.530847][ C0] el1h_64_irq_handler+0x18/0x24 [ 78.531832][ C0] el1h_64_irq+0x78/0x7c [ 78.532680][ C0] lock_acquire+0x234/0x618 [ 78.533591][ C0] _raw_spin_lock+0xb0/0x10c [ 78.534487][ C0] switch_task_namespaces+0x3c/0x104 [ 78.535547][ C0] exit_task_namespaces+0x24/0x34 [ 78.536592][ C0] do_exit+0x65c/0x1f54 [ 78.537405][ C0] do_group_exit+0x104/0x274 [ 78.538356][ C0] __wake_up_parent+0x0/0x60 [ 78.539264][ C0] invoke_syscall+0x98/0x28c [ 78.540224][ C0] el0_svc_common+0x13c/0x258 [ 78.541239][ C0] do_el0_svc+0x5c/0x140 [ 78.542128][ C0] el0_svc+0x78/0x1d0 [ 78.542947][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 78.543999][ C0] el0t_64_sync+0x1a0/0x1a4 [ 78.544941][ C0] irq event stamp: 1860 [ 78.545766][ C0] hardirqs last enabled at (1859): [] exit_mm+0x5ac/0x704 [ 78.547566][ C0] hardirqs last disabled at (1860): [] enter_el1_irq_or_nmi+0x10/0x1c [ 78.549531][ C0] softirqs last enabled at (1824): [] local_bh_enable+0x10/0x34 [ 78.551461][ C0] softirqs last disabled at (1822): [] local_bh_disable+0x10/0x34 [ 78.553445][ C0] ---[ end trace f47a0c0763f84475 ]--- [ 78.631420][ T4864] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 78.633003][ T4864] Bad inode number on dev loop0: 2 is out of range [ 78.634350][ T4864] SysV FS: get root inode failed [ 78.635287][ T4864] oldfs: cannot read superblock [ 78.639584][ C0] ------------[ cut here ]------------ [ 78.640714][ C0] VFS: brelse: Trying to free free buffer [ 78.641973][ C0] WARNING: CPU: 0 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 78.643725][ C0] Modules linked in: [ 78.644610][ C0] CPU: 0 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 78.646476][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.648663][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.650311][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 78.651452][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 78.652577][ C0] sp : ffff800008007df0 [ 78.653436][ C0] x29: ffff800008007df0 x28: ffff0000d718b680 x27: 1fffe000341cc45b [ 78.655185][ C0] x26: 0000000000000001 x25: ffff0001a0e622d8 x24: 0000000000000000 [ 78.656841][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e24687a0 [ 78.658502][ C0] x20: ffff0001a0e622d8 x19: ffff80001157afa0 x18: 0000000000010003 [ 78.660178][ C0] x17: 0000000000010003 x16: ffff8000113710a0 x15: 0000000000000012 [ 78.661891][ C0] x14: 0000000000000001 x13: 1fffe000341ca7ab x12: 0000000000000000 [ 78.663585][ C0] x11: ff80800008300a7c x10: 0000000000010002 x9 : 2b50879382d06200 [ 78.665314][ C0] x8 : 2b50879382d06200 x7 : 0000000000000001 x6 : 0000000000000001 [ 78.667050][ C0] x5 : ffff8000080076f8 x4 : ffff80001448f520 x3 : ffff800008510b80 [ 78.668773][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 78.670499][ C0] Call trace: [ 78.671204][ C0] invalidate_bh_lru+0x128/0x22c [ 78.672238][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 78.673520][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 78.674932][ C0] ipi_handler+0x10c/0x70c [ 78.675880][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 78.677006][ C0] handle_domain_irq+0x148/0x200 [ 78.678016][ C0] gic_handle_irq+0x78/0x1b8 [ 78.678940][ C0] call_on_irq_stack+0x30/0x48 [ 78.679869][ C0] do_interrupt_handler+0x6c/0x88 [ 78.680895][ C0] el1_interrupt+0x30/0x58 [ 78.681788][ C0] el1h_64_irq_handler+0x18/0x24 [ 78.682761][ C0] el1h_64_irq+0x78/0x7c [ 78.683626][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 78.684786][ C0] debug_check_no_obj_freed+0x39c/0x454 [ 78.685945][ C0] slab_free_freelist_hook+0x9c/0x1e4 [ 78.687035][ C0] kmem_cache_free+0xdc/0x3b4 [ 78.687985][ C0] user_path_at_empty+0x144/0x1a0 [ 78.689039][ C0] do_readlinkat+0xe0/0x3fc [ 78.689889][ C0] __arm64_sys_readlinkat+0xa0/0xbc [ 78.690941][ C0] invoke_syscall+0x98/0x28c [ 78.691870][ C0] el0_svc_common+0x13c/0x258 [ 78.692825][ C0] do_el0_svc+0x5c/0x140 [ 78.693683][ C0] el0_svc+0x78/0x1d0 [ 78.694484][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 78.695491][ C0] el0t_64_sync+0x1a0/0x1a4 [ 78.696405][ C0] irq event stamp: 1395462 [ 78.697294][ C0] hardirqs last enabled at (1395461): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 78.699522][ C0] hardirqs last disabled at (1395462): [] enter_el1_irq_or_nmi+0x10/0x1c [ 78.701557][ C0] softirqs last enabled at (1395448): [] local_bh_enable+0x10/0x34 [ 78.703570][ C0] softirqs last disabled at (1395446): [] local_bh_disable+0x10/0x34 [ 78.705590][ C0] ---[ end trace f47a0c0763f84476 ]---