[ 50.494179][ T1604] device hsr_slave_0 left promiscuous mode [ 50.539016][ T1604] device hsr_slave_1 left promiscuous mode [ 50.638894][ T1604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.640266][ T1604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.642185][ T1604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.643451][ T1604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.644985][ T1604] device bridge_slave_1 left promiscuous mode [ 50.646273][ T1604] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.680075][ T1604] device bridge_slave_0 left promiscuous mode [ 50.681048][ T1604] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.828885][ T1604] device veth1_macvtap left promiscuous mode [ 50.829951][ T1604] device veth0_macvtap left promiscuous mode [ 50.830957][ T1604] device veth1_vlan left promiscuous mode [ 50.831911][ T1604] device veth0_vlan left promiscuous mode [ 50.919643][ T1604] team0 (unregistering): Port device team_slave_1 removed [ 50.923844][ T1604] team0 (unregistering): Port device team_slave_0 removed [ 50.927903][ T1604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.971998][ T1604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.092086][ T1604] bond0 (unregistering): Released all slaves [ 53.662670][ T1604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.711794][ T1604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.761683][ T1604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.802921][ T1604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. 1970/01/01 00:00:54 parsed 1 programs [ 56.028820][ T4363] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 56.435087][ T1604] device hsr_slave_0 left promiscuous mode [ 56.468989][ T1604] device hsr_slave_1 left promiscuous mode [ 56.558758][ T1604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.560009][ T1604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.561900][ T1604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.563127][ T1604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.564523][ T1604] device bridge_slave_1 left promiscuous mode [ 56.565564][ T1604] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.619347][ T1604] device bridge_slave_0 left promiscuous mode [ 56.620473][ T1604] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.749409][ T1604] device veth1_macvtap left promiscuous mode [ 56.750420][ T1604] device veth0_macvtap left promiscuous mode [ 56.751427][ T1604] device veth1_vlan left promiscuous mode [ 56.752406][ T1604] device veth0_vlan left promiscuous mode [ 56.891522][ T1604] team0 (unregistering): Port device team_slave_1 removed [ 56.895818][ T1604] team0 (unregistering): Port device team_slave_0 removed [ 56.899991][ T1604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.932421][ T1604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.041826][ T1604] bond0 (unregistering): Released all slaves [ 57.552383][ T4430] chnl_net:caif_netlink_parms(): no params data found [ 57.570098][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.571334][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.572932][ T4430] device bridge_slave_0 entered promiscuous mode [ 57.574847][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.576066][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.577682][ T4430] device bridge_slave_1 entered promiscuous mode [ 57.585153][ T4430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.588264][ T4430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.596049][ T4430] team0: Port device team_slave_0 added [ 57.597911][ T4430] team0: Port device team_slave_1 added [ 57.604292][ T4430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.605430][ T4430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.610025][ T4430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.613049][ T4430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.614218][ T4430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.618179][ T4430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.659932][ T4430] device hsr_slave_0 entered promiscuous mode [ 57.698973][ T4430] device hsr_slave_1 entered promiscuous mode [ 58.290940][ T4430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.330376][ T4430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.379808][ T4430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.446261][ T4430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.522376][ T4430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.526335][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.527823][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.541372][ T4430] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.551121][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.552692][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.554451][ T1642] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.555545][ T1642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.556886][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.560647][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.562261][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.563740][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.564897][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.568152][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.572266][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.581157][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.583269][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.587679][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.607514][ T4430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.610401][ T4430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.613470][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.615440][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.617042][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.618501][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.622328][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.623843][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.625457][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.669108][ T4430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.670475][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.671871][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.679651][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.681270][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.687432][ T4430] device veth0_vlan entered promiscuous mode [ 58.688883][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.690452][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.691999][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.693342][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.696750][ T4430] device veth1_vlan entered promiscuous mode [ 58.704480][ T4430] device veth0_macvtap entered promiscuous mode [ 58.706741][ T4430] device veth1_macvtap entered promiscuous mode [ 58.712017][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.713471][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.714864][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.716389][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.717936][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.720378][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.725692][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.733791][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.737313][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.739217][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.740851][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.742402][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.746311][ T4430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.747720][ T4430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.749241][ T4430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.750485][ T4430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.940415][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.941769][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.943254][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.954730][ T351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.956100][ T351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.957419][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:59 executed programs: 0 [ 59.437933][ T4645] chnl_net:caif_netlink_parms(): no params data found [ 59.459535][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.460786][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.462254][ T4645] device bridge_slave_0 entered promiscuous mode [ 59.464463][ T4645] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.465669][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.467231][ T4645] device bridge_slave_1 entered promiscuous mode [ 59.475370][ T4645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.477872][ T4645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.488485][ T4645] team0: Port device team_slave_0 added [ 59.490566][ T4645] team0: Port device team_slave_1 added [ 59.496878][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.498048][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.502599][ T4645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.504997][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.506180][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.510302][ T4645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.549878][ T4645] device hsr_slave_0 entered promiscuous mode [ 59.569089][ T4645] device hsr_slave_1 entered promiscuous mode [ 59.610507][ T4645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.611843][ T4645] Cannot create hsr debugfs directory [ 59.643473][ T4645] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.458950][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 61.772290][ T4645] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.529302][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 64.502218][ T4645] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.572864][ T4645] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.722308][ T4645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.770369][ T4645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.819932][ T4645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.860000][ T4645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.930549][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.934130][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.935642][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.938181][ T4645] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.941286][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.942845][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.944312][ T1642] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.945391][ T1642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.946685][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.949441][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.951055][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.952524][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.953485][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.955947][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.958644][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.975422][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.977460][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.979382][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.981970][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.983598][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.986172][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.987698][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.991175][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.992829][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.995268][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.032958][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.034274][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.037284][ T4645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.044500][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.046228][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.052558][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.054058][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.055669][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.057087][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.059811][ T4645] device veth0_vlan entered promiscuous mode [ 65.063053][ T4645] device veth1_vlan entered promiscuous mode [ 65.071214][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.073160][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.074616][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.076074][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.078307][ T4645] device veth0_macvtap entered promiscuous mode [ 65.081272][ T4645] device veth1_macvtap entered promiscuous mode [ 65.086125][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.087714][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.090219][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.091423][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.092917][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.094254][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.095741][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.098020][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.100088][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.102122][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.103312][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.104883][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.107308][ T4645] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.108772][ T4645] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.110263][ T4645] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.111678][ T4645] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.132059][ T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.133318][ T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.134653][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.142521][ T1642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.143893][ T1642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.145365][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:05 executed programs: 2 [ 65.160567][ T4719] loop0: detected capacity change from 0 to 128 [ 65.165397][ T4719] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.166647][ T4719] Bad inode number on dev loop0: 2 is out of range [ 65.167723][ T4719] SysV FS: get root inode failed [ 65.168594][ T4719] oldfs: cannot read superblock [ 65.233044][ C1] ------------[ cut here ]------------ [ 65.234050][ C1] VFS: brelse: Trying to free free buffer [ 65.235190][ C1] WARNING: CPU: 1 PID: 0 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.236503][ C1] Modules linked in: [ 65.237073][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 65.238188][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 65.239886][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.241169][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 65.242139][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 65.243050][ C1] sp : ffff800008017df0 [ 65.243763][ C1] x29: ffff800008017df0 x28: ffff0000c0a68000 x27: 1fffe000341d4a5b [ 65.245209][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 65.246590][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfb665d0 [ 65.247903][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 65.249191][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 65.250561][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 65.252000][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 995bd34031550e00 [ 65.253283][ C1] x8 : 995bd34031550e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.254644][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 65.256099][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 65.257468][ C1] Call trace: [ 65.257972][ C1] invalidate_bh_lru+0x128/0x22c [ 65.258839][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 65.259883][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 65.261059][ C1] ipi_handler+0x10c/0x70c [ 65.261774][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 65.262632][ C1] handle_domain_irq+0x148/0x200 [ 65.263419][ C1] gic_handle_irq+0x78/0x1b8 [ 65.264201][ C1] call_on_irq_stack+0x30/0x48 [ 65.264983][ C1] do_interrupt_handler+0x6c/0x88 [ 65.265760][ C1] el1_interrupt+0x30/0x58 [ 65.266476][ C1] el1h_64_irq_handler+0x18/0x24 [ 65.267275][ C1] el1h_64_irq+0x78/0x7c [ 65.268032][ C1] arch_local_irq_enable+0xc/0x18 [ 65.268838][ C1] default_idle_call+0xcc/0x40c [ 65.269627][ C1] do_idle+0x304/0x574 [ 65.270246][ C1] cpu_startup_entry+0x24/0x28 [ 65.270997][ C1] secondary_start_kernel+0x234/0x284 [ 65.271892][ C1] __secondary_switched+0x94/0x98 [ 65.272683][ C1] irq event stamp: 427796 [ 65.273400][ C1] hardirqs last enabled at (427795): [] default_idle_call+0xb8/0x40c [ 65.275032][ C1] hardirqs last disabled at (427796): [] enter_el1_irq_or_nmi+0x10/0x1c [ 65.276622][ C1] softirqs last enabled at (427784): [] handle_softirqs+0xa70/0xc14 [ 65.278214][ C1] softirqs last disabled at (427741): [] __irq_exit_rcu+0x240/0x434 [ 65.279826][ C1] ---[ end trace 9860002a16993ee7 ]--- [ 65.287804][ T4721] loop0: detected capacity change from 0 to 128 [ 65.293471][ T4721] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.294853][ T4721] Bad inode number on dev loop0: 2 is out of range [ 65.295863][ T4721] SysV FS: get root inode failed [ 65.296607][ T4721] oldfs: cannot read superblock [ 65.303644][ C0] ------------[ cut here ]------------ [ 65.304490][ C0] VFS: brelse: Trying to free free buffer [ 65.305401][ C0] WARNING: CPU: 0 PID: 4722 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.306896][ C0] Modules linked in: [ 65.307514][ C0] CPU: 0 PID: 4722 Comm: syz-executor Tainted: G W syzkaller #0 [ 65.308879][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 65.310555][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.311745][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 65.312557][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 65.313389][ C0] sp : ffff800008007df0 [ 65.314066][ C0] x29: ffff800008007df0 x28: ffff0000edb91b40 x27: 1fffe000341d085c [ 65.315380][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 65.316774][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000df8f8c28 [ 65.318034][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 65.319387][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 65.320609][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 65.321976][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 5bd3f05765159700 [ 65.323283][ C0] x8 : 5bd3f05765159700 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.324653][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 65.325877][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 65.327192][ C0] Call trace: [ 65.327700][ C0] invalidate_bh_lru+0x128/0x22c [ 65.328508][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 65.329416][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 65.330556][ C0] ipi_handler+0x10c/0x70c [ 65.331261][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 65.332102][ C0] handle_domain_irq+0x148/0x200 [ 65.332961][ C0] gic_handle_irq+0x78/0x1b8 [ 65.333722][ C0] call_on_irq_stack+0x30/0x48 [ 65.334512][ C0] do_interrupt_handler+0x6c/0x88 [ 65.335324][ C0] el1_interrupt+0x30/0x58 [ 65.336012][ C0] el1h_64_irq_handler+0x18/0x24 [ 65.336781][ C0] el1h_64_irq+0x78/0x7c [ 65.337475][ C0] kasan_quarantine_put+0xd4/0x200 [ 65.338353][ C0] ____kasan_slab_free+0x124/0x164 [ 65.339148][ C0] __kasan_slab_free+0x18/0x28 [ 65.339885][ C0] slab_free_freelist_hook+0x128/0x1e4 [ 65.340777][ C0] kmem_cache_free+0xdc/0x3b4 [ 65.341566][ C0] do_symlinkat+0x408/0x5b4 [ 65.342343][ C0] __arm64_sys_symlinkat+0xa4/0xbc [ 65.343251][ C0] invoke_syscall+0x98/0x28c [ 65.343990][ C0] el0_svc_common+0x13c/0x258 [ 65.344719][ C0] do_el0_svc+0x5c/0x140 [ 65.345335][ C0] el0_svc+0x78/0x1d0 [ 65.345928][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 65.346759][ C0] el0t_64_sync+0x1a0/0x1a4 [ 65.347450][ C0] irq event stamp: 758 [ 65.348065][ C0] hardirqs last enabled at (757): [] kasan_quarantine_put+0xc4/0x200 [ 65.349605][ C0] hardirqs last disabled at (758): [] enter_el1_irq_or_nmi+0x10/0x1c [ 65.351159][ C0] softirqs last enabled at (670): [] local_bh_enable+0x10/0x34 [ 65.352655][ C0] softirqs last disabled at (668): [] local_bh_disable+0x10/0x34 [ 65.354234][ C0] ---[ end trace 9860002a16993ee8 ]--- [ 65.400688][ T4723] loop0: detected capacity change from 0 to 128 [ 65.451260][ T4723] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.452588][ T4723] Bad inode number on dev loop0: 2 is out of range [ 65.453555][ T4723] SysV FS: get root inode failed [ 65.454294][ T4723] oldfs: cannot read superblock [ 65.461812][ C1] ------------[ cut here ]------------ [ 65.462750][ C1] VFS: brelse: Trying to free free buffer [ 65.463645][ C1] WARNING: CPU: 1 PID: 4724 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.465071][ C1] Modules linked in: [ 65.465653][ C1] CPU: 1 PID: 4724 Comm: syz-executor Tainted: G W syzkaller #0 [ 65.467205][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 65.468708][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.470037][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 65.470898][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 65.471808][ C1] sp : ffff800008017df0 [ 65.472525][ C1] x29: ffff800008017df0 x28: ffff0000e7fa51c0 x27: 1fffe000341d4a5c [ 65.473896][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 65.475276][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfb66d10 [ 65.476866][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 65.478256][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 65.479675][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 65.481013][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 68687f0ea146d600 [ 65.482338][ C1] x8 : 68687f0ea146d600 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.483740][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 65.485027][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 65.486360][ C1] Call trace: [ 65.486937][ C1] invalidate_bh_lru+0x128/0x22c [ 65.487837][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 65.488814][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 65.489963][ C1] ipi_handler+0x10c/0x70c [ 65.490722][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 65.491694][ C1] handle_domain_irq+0x148/0x200 [ 65.492514][ C1] gic_handle_irq+0x78/0x1b8 [ 65.493248][ C1] call_on_irq_stack+0x30/0x48 [ 65.494065][ C1] do_interrupt_handler+0x6c/0x88 [ 65.494969][ C1] el1_interrupt+0x30/0x58 [ 65.495714][ C1] el1h_64_irq_handler+0x18/0x24 [ 65.496515][ C1] el1h_64_irq+0x78/0x7c [ 65.497235][ C1] _raw_spin_unlock_irq+0xa0/0x128 [ 65.498097][ C1] sigprocmask+0x268/0x2b4 [ 65.498858][ C1] __arm64_sys_rt_sigprocmask+0x2c8/0x474 [ 65.499835][ C1] invoke_syscall+0x98/0x28c [ 65.500605][ C1] el0_svc_common+0x13c/0x258 [ 65.501396][ C1] do_el0_svc+0x5c/0x140 [ 65.502113][ C1] el0_svc+0x78/0x1d0 [ 65.502745][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 65.503544][ C1] el0t_64_sync+0x1a0/0x1a4 [ 65.504307][ C1] irq event stamp: 244 [ 65.505013][ C1] hardirqs last enabled at (243): [] _raw_spin_unlock_irq+0x98/0x128 [ 65.506667][ C1] hardirqs last disabled at (244): [] enter_el1_irq_or_nmi+0x10/0x1c [ 65.508446][ C1] softirqs last enabled at (60): [] local_bh_enable+0x10/0x34 [ 65.510016][ C1] softirqs last disabled at (58): [] local_bh_disable+0x10/0x34 [ 65.511757][ C1] ---[ end trace 9860002a16993ee9 ]--- [ 65.549831][ T4725] loop0: detected capacity change from 0 to 128 [ 65.608765][ T3624] Bluetooth: hci0: command 0x040f tx timeout [ 65.611871][ T4725] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.613174][ T4725] Bad inode number on dev loop0: 2 is out of range [ 65.614633][ T4725] SysV FS: get root inode failed [ 65.615513][ T4725] oldfs: cannot read superblock [ 65.622204][ C0] ------------[ cut here ]------------ [ 65.623093][ C0] VFS: brelse: Trying to free free buffer [ 65.624026][ C0] WARNING: CPU: 0 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.625365][ C0] Modules linked in: [ 65.625955][ C0] CPU: 0 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 65.627296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 65.628970][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.630363][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 65.631231][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 65.632143][ C0] sp : ffff800008007df0 [ 65.632853][ C0] x29: ffff800008007df0 x28: ffff0000e8533680 x27: 1fffe000341d085c [ 65.634124][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 65.635684][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000df8f8060 [ 65.637077][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 65.638463][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 65.639798][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 65.641150][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 65.642423][ C0] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.643853][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 65.645155][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 65.646398][ C0] Call trace: [ 65.646905][ C0] invalidate_bh_lru+0x128/0x22c [ 65.647718][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 65.648781][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 65.649927][ C0] ipi_handler+0x10c/0x70c [ 65.650672][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 65.651591][ C0] handle_domain_irq+0x148/0x200 [ 65.652388][ C0] gic_handle_irq+0x78/0x1b8 [ 65.653142][ C0] call_on_irq_stack+0x30/0x48 [ 65.653893][ C0] do_interrupt_handler+0x6c/0x88 [ 65.654672][ C0] el1_interrupt+0x30/0x58 [ 65.655394][ C0] el1h_64_irq_handler+0x18/0x24 [ 65.656276][ C0] el1h_64_irq+0x78/0x7c [ 65.656964][ C0] lock_release+0x4a8/0x8ec [ 65.657738][ C0] rcu_lock_release+0x24/0x30 [ 65.658437][ C0] percpu_ref_put+0x150/0x230 [ 65.659298][ C0] obj_cgroup_charge_pages+0xc0/0x1a4 [ 65.660247][ C0] obj_cgroup_charge+0x188/0x2c8 [ 65.661094][ C0] slab_pre_alloc_hook+0xc8/0xe8 [ 65.661981][ C0] __kmalloc_node+0xb8/0x50c [ 65.662780][ C0] kvmalloc_node+0x88/0x200 [ 65.663500][ C0] xt_alloc_table_info+0x50/0xc4 [ 65.664242][ C0] do_ipt_set_ctl+0x838/0xe38 [ 65.664904][ C0] nf_setsockopt+0x260/0x280 [ 65.665638][ C0] ip_setsockopt+0x1da0/0x29bc [ 65.666432][ C0] tcp_setsockopt+0x1f4/0x1b8c [ 65.667213][ C0] sock_common_setsockopt+0xb0/0xcc [ 65.668041][ C0] __sys_setsockopt+0x260/0x36c [ 65.668853][ C0] __arm64_sys_setsockopt+0xc0/0xdc [ 65.669725][ C0] invoke_syscall+0x98/0x28c [ 65.670477][ C0] el0_svc_common+0x13c/0x258 [ 65.671224][ C0] do_el0_svc+0x5c/0x140 [ 65.671922][ C0] el0_svc+0x78/0x1d0 [ 65.672630][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 65.673474][ C0] el0t_64_sync+0x1a0/0x1a4 [ 65.674153][ C0] irq event stamp: 130664 [ 65.674830][ C0] hardirqs last enabled at (130663): [] try_charge_memcg+0x1c8/0x115c [ 65.676403][ C0] hardirqs last disabled at (130664): [] enter_el1_irq_or_nmi+0x10/0x1c [ 65.678063][ C0] softirqs last enabled at (130660): [] release_sock+0x1d0/0x258 [ 65.679574][ C0] softirqs last disabled at (130658): [] release_sock+0x34/0x258 [ 65.681020][ C0] ---[ end trace 9860002a16993eea ]--- [ 65.720772][ T4727] loop0: detected capacity change from 0 to 128 [ 65.760239][ T4727] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.761478][ T4727] Bad inode number on dev loop0: 2 is out of range [ 65.762571][ T4727] SysV FS: get root inode failed [ 65.763471][ T4727] oldfs: cannot read superblock [ 65.776014][ C1] ------------[ cut here ]------------ [ 65.776939][ C1] VFS: brelse: Trying to free free buffer [ 65.777946][ C1] WARNING: CPU: 1 PID: 4729 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.779450][ C1] Modules linked in: [ 65.780154][ C1] CPU: 1 PID: 4729 Comm: syz.0.21 Tainted: G W syzkaller #0 [ 65.781699][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 65.783545][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.784878][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 65.785737][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 65.786665][ C1] sp : ffff800008017df0 [ 65.787366][ C1] x29: ffff800008017df0 x28: ffff0000dc7c1b40 x27: 1fffe000341d4a5c [ 65.788704][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 65.790151][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfb67148 [ 65.791616][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 65.793055][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 65.794514][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 65.795979][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 4e0a682a10099300 [ 65.797290][ C1] x8 : 4e0a682a10099300 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.798595][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 65.800081][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 65.801523][ C1] Call trace: [ 65.802108][ C1] invalidate_bh_lru+0x128/0x22c [ 65.803019][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 65.804137][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 65.805326][ C1] ipi_handler+0x10c/0x70c [ 65.806146][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 65.807109][ C1] handle_domain_irq+0x148/0x200 [ 65.808022][ C1] gic_handle_irq+0x78/0x1b8 [ 65.808775][ C1] call_on_irq_stack+0x30/0x48 [ 65.809666][ C1] do_interrupt_handler+0x6c/0x88 [ 65.810482][ C1] el1_interrupt+0x30/0x58 [ 65.811266][ C1] el1h_64_irq_handler+0x18/0x24 [ 65.812124][ C1] el1h_64_irq+0x78/0x7c [ 65.812856][ C1] memset+0x3c/0x88 [ 65.813476][ C1] return_address+0xa4/0x15c [ 65.814243][ C1] preempt_count_add+0x14c/0x41c [ 65.815086][ C1] _raw_spin_lock+0x24/0x10c [ 65.815839][ C1] lockref_put_or_lock+0x30/0xd0 [ 65.816678][ C1] dput+0x1fc/0x448 [ 65.817355][ C1] path_put+0x40/0x6c [ 65.817999][ C1] exit_fs+0xc8/0x12c [ 65.818696][ C1] do_exit+0x618/0x1f54 [ 65.819560][ C1] do_group_exit+0x104/0x274 [ 65.820381][ C1] get_signal+0x638/0x13b0 [ 65.821271][ C1] do_notify_resume+0x344/0x30a8 [ 65.822105][ C1] el0_svc+0xf0/0x1d0 [ 65.822743][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 65.823609][ C1] el0t_64_sync+0x1a0/0x1a4 [ 65.824444][ C1] irq event stamp: 2178 [ 65.825211][ C1] hardirqs last enabled at (2177): [] kasan_quarantine_put+0xc4/0x200 [ 65.826991][ C1] hardirqs last disabled at (2178): [] enter_el1_irq_or_nmi+0x10/0x1c [ 65.828691][ C1] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 65.830350][ C1] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 65.831872][ C1] ---[ end trace 9860002a16993eeb ]--- [ 65.876231][ T4731] loop0: detected capacity change from 0 to 128 [ 65.899768][ T4731] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 65.900892][ T4731] Bad inode number on dev loop0: 2 is out of range [ 65.901819][ T4731] SysV FS: get root inode failed [ 65.902716][ T4731] oldfs: cannot read superblock [ 65.912222][ C0] ------------[ cut here ]------------ [ 65.913054][ C0] VFS: brelse: Trying to free free buffer [ 65.913896][ C0] WARNING: CPU: 0 PID: 4733 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 65.915276][ C0] Modules linked in: [ 65.915933][ C0] CPU: 0 PID: 4733 Comm: syz.0.23 Tainted: G W syzkaller #0 [ 65.917225][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 65.918756][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 65.919947][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 65.920871][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 65.921739][ C0] sp : ffff800008007df0 [ 65.922350][ C0] x29: ffff800008007df0 x28: ffff0000c7da9b40 x27: 1fffe000341d085c [ 65.923595][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 65.924897][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dda53230 [ 65.926220][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 65.927496][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 65.928863][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 65.930200][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 09aaec608f66a400 [ 65.931621][ C0] x8 : 09aaec608f66a400 x7 : 0000000000000001 x6 : 0000000000000001 [ 65.932984][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 65.934365][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 65.935810][ C0] Call trace: [ 65.936353][ C0] invalidate_bh_lru+0x128/0x22c [ 65.937218][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 65.938165][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 65.939274][ C0] ipi_handler+0x10c/0x70c [ 65.940104][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 65.941023][ C0] handle_domain_irq+0x148/0x200 [ 65.941822][ C0] gic_handle_irq+0x78/0x1b8 [ 65.942568][ C0] call_on_irq_stack+0x30/0x48 [ 65.943383][ C0] do_interrupt_handler+0x6c/0x88 [ 65.944217][ C0] el1_interrupt+0x30/0x58 [ 65.944959][ C0] el1h_64_irq_handler+0x18/0x24 [ 65.945781][ C0] el1h_64_irq+0x78/0x7c [ 65.946490][ C0] try_charge_memcg+0x1d8/0x115c [ 65.947311][ C0] charge_memcg+0xac/0x21c [ 65.948002][ C0] __mem_cgroup_charge+0x38/0xa8 [ 65.948804][ C0] shmem_add_to_page_cache+0x7d0/0x1328 [ 65.949697][ C0] shmem_getpage_gfp+0x12c0/0x1f8c [ 65.950547][ C0] shmem_write_begin+0xe0/0x294 [ 65.951362][ C0] generic_perform_write+0x20c/0x490 [ 65.952232][ C0] __generic_file_write_iter+0x23c/0x44c [ 65.953128][ C0] generic_file_write_iter+0xb0/0x1b4 [ 65.953932][ C0] vfs_write+0x590/0xa64 [ 65.954654][ C0] ksys_write+0x12c/0x228 [ 65.955331][ C0] __arm64_sys_write+0x7c/0x90 [ 65.956133][ C0] invoke_syscall+0x98/0x28c [ 65.956815][ C0] el0_svc_common+0x13c/0x258 [ 65.957574][ C0] do_el0_svc+0x5c/0x140 [ 65.958332][ C0] el0_svc+0x78/0x1d0 [ 65.959009][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 65.959904][ C0] el0t_64_sync+0x1a0/0x1a4 [ 65.960653][ C0] irq event stamp: 522 [ 65.961261][ C0] hardirqs last enabled at (521): [] try_charge_memcg+0x1c8/0x115c [ 65.962815][ C0] hardirqs last disabled at (522): [] enter_el1_irq_or_nmi+0x10/0x1c [ 65.964573][ C0] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 65.966072][ C0] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 65.967710][ C0] ---[ end trace 9860002a16993eec ]--- [ 66.011330][ T4733] loop0: detected capacity change from 0 to 128 [ 66.013497][ T4733] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.014704][ T4733] Bad inode number on dev loop0: 2 is out of range [ 66.015611][ T4733] SysV FS: get root inode failed [ 66.016379][ T4733] oldfs: cannot read superblock [ 66.023441][ C1] ------------[ cut here ]------------ [ 66.024361][ C1] VFS: brelse: Trying to free free buffer [ 66.025231][ C1] WARNING: CPU: 1 PID: 4734 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.026538][ C1] Modules linked in: [ 66.027211][ C1] CPU: 1 PID: 4734 Comm: syz-executor Tainted: G W syzkaller #0 [ 66.028608][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.030352][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.031669][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 66.032567][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 66.033508][ C1] sp : ffff800008017df0 [ 66.034184][ C1] x29: ffff800008017df0 x28: ffff0000cf2e3680 x27: 1fffe000341d4a5c [ 66.035556][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 66.036889][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfb674e8 [ 66.038226][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 66.039690][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 66.041101][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 66.042457][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : ccf9bc8b76681d00 [ 66.043813][ C1] x8 : ccf9bc8b76681d00 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.045174][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.046491][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 66.047868][ C1] Call trace: [ 66.048405][ C1] invalidate_bh_lru+0x128/0x22c [ 66.049207][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 66.050236][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 66.051381][ C1] ipi_handler+0x10c/0x70c [ 66.052161][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 66.053100][ C1] handle_domain_irq+0x148/0x200 [ 66.053944][ C1] gic_handle_irq+0x78/0x1b8 [ 66.054685][ C1] call_on_irq_stack+0x30/0x48 [ 66.055415][ C1] do_interrupt_handler+0x6c/0x88 [ 66.056266][ C1] el1_interrupt+0x30/0x58 [ 66.057009][ C1] el1h_64_irq_handler+0x18/0x24 [ 66.057837][ C1] el1h_64_irq+0x78/0x7c [ 66.058601][ C1] __sanitizer_cov_trace_pc+0x40/0xa8 [ 66.059564][ C1] d_add+0x4c/0x5c [ 66.060197][ C1] simple_lookup+0xcc/0xf0 [ 66.060962][ C1] lookup_one_qstr_excl+0x108/0x230 [ 66.061833][ C1] filename_create+0x1d0/0x3a8 [ 66.062644][ C1] do_symlinkat+0xc8/0x5b4 [ 66.063402][ C1] __arm64_sys_symlinkat+0xa4/0xbc [ 66.064274][ C1] invoke_syscall+0x98/0x28c [ 66.065039][ C1] el0_svc_common+0x13c/0x258 [ 66.065843][ C1] do_el0_svc+0x5c/0x140 [ 66.066574][ C1] el0_svc+0x78/0x1d0 [ 66.067267][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 66.068086][ C1] el0t_64_sync+0x1a0/0x1a4 [ 66.068876][ C1] irq event stamp: 772 [ 66.069569][ C1] hardirqs last enabled at (771): [] read_seqbegin+0x1fc/0x300 [ 66.071139][ C1] hardirqs last disabled at (772): [] enter_el1_irq_or_nmi+0x10/0x1c [ 66.072841][ C1] softirqs last enabled at (754): [] local_bh_enable+0x10/0x34 [ 66.074473][ C1] softirqs last disabled at (752): [] local_bh_disable+0x10/0x34 [ 66.076096][ C1] ---[ end trace 9860002a16993eed ]--- [ 66.135900][ T4735] loop0: detected capacity change from 0 to 128 [ 66.141206][ T4735] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.142477][ T4735] Bad inode number on dev loop0: 2 is out of range [ 66.143578][ T4735] SysV FS: get root inode failed [ 66.144487][ T4735] oldfs: cannot read superblock [ 66.163951][ T4713] ------------[ cut here ]------------ [ 66.165031][ T4713] VFS: brelse: Trying to free free buffer [ 66.166026][ T4713] WARNING: CPU: 1 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.167459][ T4713] Modules linked in: [ 66.168111][ T4713] CPU: 1 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 66.169511][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.171245][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.172687][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 66.173565][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 66.174406][ T4713] sp : ffff80001f2677d0 [ 66.175119][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d4a5c [ 66.176463][ T4713] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 66.177775][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfb67888 [ 66.179191][ T4713] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 66.180566][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 66.181919][ T4713] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 66.183455][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 66.185081][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.186620][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.187945][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 66.189386][ T4713] Call trace: [ 66.189922][ T4713] invalidate_bh_lru+0x128/0x22c [ 66.190769][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 66.191819][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 66.192736][ T4713] invalidate_bh_lrus+0x34/0x40 [ 66.193566][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 66.194426][ T4713] blkdev_put+0x444/0x6c4 [ 66.195267][ T4713] blkdev_close+0x74/0xb0 [ 66.196065][ T4713] __fput+0x1b8/0x7e8 [ 66.196751][ T4713] ____fput+0x20/0x30 [ 66.197458][ T4713] task_work_run+0x13c/0x1e8 [ 66.198240][ T4713] do_notify_resume+0x2488/0x30a8 [ 66.199127][ T4713] el0_svc+0xf0/0x1d0 [ 66.199815][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 66.200667][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 66.201385][ T4713] irq event stamp: 43272 [ 66.202065][ T4713] hardirqs last enabled at (43271): [] kasan_quarantine_put+0xc4/0x200 [ 66.203743][ T4713] hardirqs last disabled at (43272): [] smp_call_function_many_cond+0xa50/0xec0 [ 66.205517][ T4713] softirqs last enabled at (43060): [] local_bh_enable+0x10/0x34 [ 66.207152][ T4713] softirqs last disabled at (43058): [] local_bh_disable+0x10/0x34 [ 66.208704][ T4713] ---[ end trace 9860002a16993eee ]--- [ 66.241276][ T4739] loop0: detected capacity change from 0 to 128 [ 66.243995][ T4739] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.245089][ T4739] Bad inode number on dev loop0: 2 is out of range [ 66.246138][ T4739] SysV FS: get root inode failed [ 66.246976][ T4739] oldfs: cannot read superblock [ 66.254570][ C0] ------------[ cut here ]------------ [ 66.255376][ C0] VFS: brelse: Trying to free free buffer [ 66.256307][ C0] WARNING: CPU: 0 PID: 4740 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.257616][ C0] Modules linked in: [ 66.258167][ C0] CPU: 0 PID: 4740 Comm: syz-executor Tainted: G W syzkaller #0 [ 66.259612][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.261182][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.262470][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 66.263323][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 66.264101][ C0] sp : ffff800008007df0 [ 66.264781][ C0] x29: ffff800008007df0 x28: ffff0000d0f4d1c0 x27: 1fffe000341d085c [ 66.266158][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 66.267423][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dda535d0 [ 66.268685][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 66.270016][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 66.271288][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 66.272534][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : b7f22b4e99e40c00 [ 66.273682][ C0] x8 : b7f22b4e99e40c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.275018][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.276212][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 66.277430][ C0] Call trace: [ 66.277977][ C0] invalidate_bh_lru+0x128/0x22c [ 66.278735][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 66.279632][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 66.280716][ C0] ipi_handler+0x10c/0x70c [ 66.281420][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 66.282314][ C0] handle_domain_irq+0x148/0x200 [ 66.283092][ C0] gic_handle_irq+0x78/0x1b8 [ 66.283866][ C0] call_on_irq_stack+0x30/0x48 [ 66.284612][ C0] do_interrupt_handler+0x6c/0x88 [ 66.285419][ C0] el1_interrupt+0x30/0x58 [ 66.286203][ C0] el1h_64_irq_handler+0x18/0x24 [ 66.286920][ C0] el1h_64_irq+0x78/0x7c [ 66.287572][ C0] el0_svc_common+0xac/0x258 [ 66.288288][ C0] do_el0_svc+0x5c/0x140 [ 66.288945][ C0] el0_svc+0x78/0x1d0 [ 66.289587][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 66.290321][ C0] el0t_64_sync+0x1a0/0x1a4 [ 66.291001][ C0] irq event stamp: 530 [ 66.291558][ C0] hardirqs last enabled at (529): [] el0_svc_common+0xa0/0x258 [ 66.292997][ C0] hardirqs last disabled at (530): [] enter_el1_irq_or_nmi+0x10/0x1c [ 66.294477][ C0] softirqs last enabled at (60): [] local_bh_enable+0x10/0x34 [ 66.295941][ C0] softirqs last disabled at (58): [] local_bh_disable+0x10/0x34 [ 66.297342][ C0] ---[ end trace 9860002a16993eef ]--- [ 66.341678][ T4741] loop0: detected capacity change from 0 to 128 [ 66.345756][ T4741] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.347047][ T4741] Bad inode number on dev loop0: 2 is out of range [ 66.348154][ T4741] SysV FS: get root inode failed [ 66.349511][ T4741] oldfs: cannot read superblock [ 66.355412][ T4713] ------------[ cut here ]------------ [ 66.356256][ T4713] VFS: brelse: Trying to free free buffer [ 66.357189][ T4713] WARNING: CPU: 1 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.358634][ T4713] Modules linked in: [ 66.359364][ T4713] CPU: 1 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 66.360736][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.362607][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.363989][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 66.364959][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 66.365899][ T4713] sp : ffff80001f2677d0 [ 66.366574][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d4a5c [ 66.367900][ T4713] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 66.369298][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfb67c28 [ 66.370627][ T4713] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 66.371911][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 66.373582][ T4713] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 66.375175][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 66.376670][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.378061][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.379476][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 66.380878][ T4713] Call trace: [ 66.381442][ T4713] invalidate_bh_lru+0x128/0x22c [ 66.382248][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 66.383243][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 66.384113][ T4713] invalidate_bh_lrus+0x34/0x40 [ 66.384901][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 66.385835][ T4713] blkdev_put+0x444/0x6c4 [ 66.386562][ T4713] blkdev_close+0x74/0xb0 [ 66.387296][ T4713] __fput+0x1b8/0x7e8 [ 66.387987][ T4713] ____fput+0x20/0x30 [ 66.388689][ T4713] task_work_run+0x13c/0x1e8 [ 66.389465][ T4713] do_notify_resume+0x2488/0x30a8 [ 66.390292][ T4713] el0_svc+0xf0/0x1d0 [ 66.390945][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 66.391799][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 66.392512][ T4713] irq event stamp: 50648 [ 66.393198][ T4713] hardirqs last enabled at (50647): [] kasan_quarantine_put+0xc4/0x200 [ 66.394877][ T4713] hardirqs last disabled at (50648): [] smp_call_function_many_cond+0xa50/0xec0 [ 66.396634][ T4713] softirqs last enabled at (50448): [] local_bh_enable+0x10/0x34 [ 66.398293][ T4713] softirqs last disabled at (50446): [] local_bh_disable+0x10/0x34 [ 66.399994][ T4713] ---[ end trace 9860002a16993ef0 ]--- [ 66.469668][ T4743] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.470926][ T4743] Bad inode number on dev loop0: 2 is out of range [ 66.471909][ T4743] SysV FS: get root inode failed [ 66.472627][ T4743] oldfs: cannot read superblock [ 66.481954][ C1] ------------[ cut here ]------------ [ 66.482829][ C1] VFS: brelse: Trying to free free buffer [ 66.483723][ C1] WARNING: CPU: 1 PID: 4744 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.485088][ C1] Modules linked in: [ 66.485739][ C1] CPU: 1 PID: 4744 Comm: syz-executor Tainted: G W syzkaller #0 [ 66.487146][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.488797][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.490150][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 66.491002][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 66.491858][ C1] sp : ffff800008017df0 [ 66.492515][ C1] x29: ffff800008017df0 x28: ffff0000dc5c1b40 x27: 1fffe000341d4a5b [ 66.493905][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 66.495337][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dda527a0 [ 66.496798][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 66.498255][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 66.499704][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 66.501196][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : b8c2ad03a39c9f00 [ 66.502625][ C1] x8 : b8c2ad03a39c9f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.504019][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.505448][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 66.506919][ C1] Call trace: [ 66.507516][ C1] invalidate_bh_lru+0x128/0x22c [ 66.508394][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 66.509503][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 66.510689][ C1] ipi_handler+0x10c/0x70c [ 66.511457][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 66.512454][ C1] handle_domain_irq+0x148/0x200 [ 66.513451][ C1] gic_handle_irq+0x78/0x1b8 [ 66.514239][ C1] call_on_irq_stack+0x30/0x48 [ 66.515024][ C1] do_interrupt_handler+0x6c/0x88 [ 66.515928][ C1] el0_interrupt+0x94/0x248 [ 66.516753][ C1] __el0_irq_handler_common+0x18/0x24 [ 66.517624][ C1] el0t_64_irq_handler+0x10/0x1c [ 66.518455][ C1] el0t_64_irq+0x1a0/0x1a4 [ 66.519324][ C1] irq event stamp: 558 [ 66.520109][ C1] hardirqs last enabled at (557): [] el0t_64_sync_handler+0xd8/0xe4 [ 66.521874][ C1] hardirqs last disabled at (558): [] __el0_irq_handler_common+0x18/0x24 [ 66.523731][ C1] softirqs last enabled at (24): [] local_bh_enable+0x10/0x34 [ 66.525265][ C1] softirqs last disabled at (22): [] local_bh_disable+0x10/0x34 [ 66.526896][ C1] ---[ end trace 9860002a16993ef1 ]--- [ 66.554407][ T4745] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.555596][ T4745] Bad inode number on dev loop0: 2 is out of range [ 66.556726][ T4745] SysV FS: get root inode failed [ 66.557674][ T4745] oldfs: cannot read superblock [ 66.561921][ C1] ------------[ cut here ]------------ [ 66.562822][ C1] VFS: brelse: Trying to free free buffer [ 66.563777][ C1] WARNING: CPU: 1 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.565172][ C1] Modules linked in: [ 66.565765][ C1] CPU: 1 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 66.567151][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.568800][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.570311][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 66.571239][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 66.572212][ C1] sp : ffff800008017df0 [ 66.572981][ C1] x29: ffff800008017df0 x28: ffff0000e8533680 x27: 1fffe000341d4a5c [ 66.574560][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 66.576034][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dda52b40 [ 66.577346][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 66.578863][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 66.580290][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 66.581740][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 40e71f82f2236e00 [ 66.583114][ C1] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.584537][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.586056][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 66.587365][ C1] Call trace: [ 66.587988][ C1] invalidate_bh_lru+0x128/0x22c [ 66.588883][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 66.589910][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 66.591111][ C1] ipi_handler+0x10c/0x70c [ 66.591866][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 66.592824][ C1] handle_domain_irq+0x148/0x200 [ 66.593695][ C1] gic_handle_irq+0x78/0x1b8 [ 66.594567][ C1] call_on_irq_stack+0x30/0x48 [ 66.595444][ C1] do_interrupt_handler+0x6c/0x88 [ 66.596287][ C1] el1_interrupt+0x30/0x58 [ 66.597183][ C1] el1h_64_irq_handler+0x18/0x24 [ 66.598138][ C1] el1h_64_irq+0x78/0x7c [ 66.598878][ C1] ___slab_alloc+0xc20/0xd84 [ 66.599666][ C1] __slab_alloc+0x68/0xc0 [ 66.600419][ C1] kmem_cache_alloc_node_trace+0x2e0/0x428 [ 66.601430][ C1] __get_vm_area_node+0x14c/0x2e8 [ 66.602351][ C1] __vmalloc_node_range+0xe8/0x8c0 [ 66.603266][ C1] vzalloc+0x110/0x188 [ 66.603950][ C1] alloc_counters+0x80/0x790 [ 66.604741][ C1] do_ipt_get_ctl+0xb58/0x1464 [ 66.605577][ C1] nf_getsockopt+0x254/0x274 [ 66.606356][ C1] ip_getsockopt+0x1218/0x1664 [ 66.607220][ C1] tcp_getsockopt+0x214/0x2d2c [ 66.608034][ C1] sock_common_getsockopt+0xa8/0xc4 [ 66.608916][ C1] __sys_getsockopt+0x1b8/0x250 [ 66.609716][ C1] __arm64_sys_getsockopt+0xc0/0xdc [ 66.610638][ C1] invoke_syscall+0x98/0x28c [ 66.611513][ C1] el0_svc_common+0x13c/0x258 [ 66.612321][ C1] do_el0_svc+0x5c/0x140 [ 66.613178][ C1] el0_svc+0x78/0x1d0 [ 66.613965][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 66.615023][ C1] el0t_64_sync+0x1a0/0x1a4 [ 66.615911][ C1] irq event stamp: 154602 [ 66.616648][ C1] hardirqs last enabled at (154601): [] ___slab_alloc+0xc10/0xd84 [ 66.618437][ C1] hardirqs last disabled at (154602): [] enter_el1_irq_or_nmi+0x10/0x1c [ 66.620425][ C1] softirqs last enabled at (154594): [] release_sock+0x1d0/0x258 [ 66.622185][ C1] softirqs last disabled at (154592): [] release_sock+0x34/0x258 [ 66.623742][ C1] ---[ end trace 9860002a16993ef2 ]--- [ 66.662281][ T4747] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.663643][ T4747] Bad inode number on dev loop0: 2 is out of range [ 66.664715][ T4747] SysV FS: get root inode failed [ 66.665452][ T4747] oldfs: cannot read superblock [ 66.666267][ T4747] ------------[ cut here ]------------ [ 66.667091][ T4747] VFS: brelse: Trying to free free buffer [ 66.668065][ T4747] WARNING: CPU: 0 PID: 4747 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.669566][ T4747] Modules linked in: [ 66.670183][ T4747] CPU: 0 PID: 4747 Comm: syz.0.30 Tainted: G W syzkaller #0 [ 66.671615][ T4747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.673181][ T4747] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.674415][ T4747] pc : invalidate_bh_lru+0x128/0x22c [ 66.675243][ T4747] lr : invalidate_bh_lru+0x128/0x22c [ 66.676183][ T4747] sp : ffff80001f617710 [ 66.676772][ T4747] x29: ffff80001f617710 x28: ffff80001438d000 x27: 1fffe000341d085b [ 66.678086][ T4747] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 66.679472][ T4747] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfbb0230 [ 66.680759][ T4747] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 66.681988][ T4747] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 66.683300][ T4747] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 66.684507][ T4747] x11: ff8080000830061c x10: 0000000000000000 x9 : d956554d10884900 [ 66.685672][ T4747] x8 : d956554d10884900 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.686902][ T4747] x5 : ffff80001f617018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.688152][ T4747] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 66.689350][ T4747] Call trace: [ 66.689862][ T4747] invalidate_bh_lru+0x128/0x22c [ 66.690565][ T4747] smp_call_function_many_cond+0xa5c/0xec0 [ 66.691440][ T4747] on_each_cpu_cond_mask+0x5c/0xc4 [ 66.692218][ T4747] invalidate_bh_lrus+0x34/0x40 [ 66.692972][ T4747] blkdev_flush_mapping+0x16c/0x334 [ 66.693706][ T4747] blkdev_put+0x444/0x6c4 [ 66.694339][ T4747] kill_block_super+0xa0/0xe0 [ 66.695008][ T4747] deactivate_locked_super+0xc0/0x13c [ 66.695850][ T4747] mount_bdev+0x284/0x35c [ 66.696521][ T4747] sysv_mount+0x44/0x58 [ 66.697173][ T4747] legacy_get_tree+0xd8/0x174 [ 66.697918][ T4747] vfs_get_tree+0x90/0x278 [ 66.698613][ T4747] do_new_mount+0x228/0x804 [ 66.699283][ T4747] path_mount+0x57c/0xfe8 [ 66.699935][ T4747] __arm64_sys_mount+0x488/0x5f8 [ 66.700705][ T4747] invoke_syscall+0x98/0x28c [ 66.701358][ T4747] el0_svc_common+0x13c/0x258 [ 66.702032][ T4747] do_el0_svc+0x5c/0x140 [ 66.702657][ T4747] el0_svc+0x78/0x1d0 [ 66.703316][ T4747] el0t_64_sync_handler+0xcc/0xe4 [ 66.704137][ T4747] el0t_64_sync+0x1a0/0x1a4 [ 66.704807][ T4747] irq event stamp: 1024 [ 66.705414][ T4747] hardirqs last enabled at (1023): [] kasan_quarantine_put+0xc4/0x200 [ 66.706913][ T4747] hardirqs last disabled at (1024): [] smp_call_function_many_cond+0xa50/0xec0 [ 66.708628][ T4747] softirqs last enabled at (806): [] local_bh_enable+0x10/0x34 [ 66.710119][ T4747] softirqs last disabled at (804): [] local_bh_disable+0x10/0x34 [ 66.711681][ T4747] ---[ end trace 9860002a16993ef3 ]--- [ 66.801620][ T4749] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.802878][ T4749] Bad inode number on dev loop0: 2 is out of range [ 66.803967][ T4749] SysV FS: get root inode failed [ 66.804716][ T4749] oldfs: cannot read superblock [ 66.805560][ T4749] ------------[ cut here ]------------ [ 66.806521][ T4749] VFS: brelse: Trying to free free buffer [ 66.807531][ T4749] WARNING: CPU: 1 PID: 4749 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.809124][ T4749] Modules linked in: [ 66.809813][ T4749] CPU: 1 PID: 4749 Comm: syz.0.31 Tainted: G W syzkaller #0 [ 66.811327][ T4749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.812961][ T4749] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.814272][ T4749] pc : invalidate_bh_lru+0x128/0x22c [ 66.815170][ T4749] lr : invalidate_bh_lru+0x128/0x22c [ 66.816116][ T4749] sp : ffff80001f617710 [ 66.816807][ T4749] x29: ffff80001f617710 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 66.818147][ T4749] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 66.819401][ T4749] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dda52ee0 [ 66.820721][ T4749] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 66.822079][ T4749] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 66.823440][ T4749] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 66.824850][ T4749] x11: ff8080000830061c x10: 0000000000000000 x9 : 0375e0f20251dc00 [ 66.826198][ T4749] x8 : 0375e0f20251dc00 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.827603][ T4749] x5 : ffff80001f617018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.828913][ T4749] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 66.830141][ T4749] Call trace: [ 66.830635][ T4749] invalidate_bh_lru+0x128/0x22c [ 66.831386][ T4749] smp_call_function_many_cond+0xa5c/0xec0 [ 66.832268][ T4749] on_each_cpu_cond_mask+0x5c/0xc4 [ 66.833046][ T4749] invalidate_bh_lrus+0x34/0x40 [ 66.833762][ T4749] blkdev_flush_mapping+0x16c/0x334 [ 66.834559][ T4749] blkdev_put+0x444/0x6c4 [ 66.835192][ T4749] kill_block_super+0xa0/0xe0 [ 66.835938][ T4749] deactivate_locked_super+0xc0/0x13c [ 66.836751][ T4749] mount_bdev+0x284/0x35c [ 66.837419][ T4749] sysv_mount+0x44/0x58 [ 66.838069][ T4749] legacy_get_tree+0xd8/0x174 [ 66.838777][ T4749] vfs_get_tree+0x90/0x278 [ 66.839464][ T4749] do_new_mount+0x228/0x804 [ 66.840141][ T4749] path_mount+0x57c/0xfe8 [ 66.840955][ T4749] __arm64_sys_mount+0x488/0x5f8 [ 66.841787][ T4749] invoke_syscall+0x98/0x28c [ 66.842495][ T4749] el0_svc_common+0x13c/0x258 [ 66.843210][ T4749] do_el0_svc+0x5c/0x140 [ 66.843847][ T4749] el0_svc+0x78/0x1d0 [ 66.844507][ T4749] el0t_64_sync_handler+0xcc/0xe4 [ 66.845274][ T4749] el0t_64_sync+0x1a0/0x1a4 [ 66.845972][ T4749] irq event stamp: 1032 [ 66.846614][ T4749] hardirqs last enabled at (1031): [] kasan_quarantine_put+0xc4/0x200 [ 66.848172][ T4749] hardirqs last disabled at (1032): [] smp_call_function_many_cond+0xa50/0xec0 [ 66.849775][ T4749] softirqs last enabled at (796): [] local_bh_enable+0x10/0x34 [ 66.851204][ T4749] softirqs last disabled at (794): [] local_bh_disable+0x10/0x34 [ 66.852752][ T4749] ---[ end trace 9860002a16993ef4 ]--- [ 66.923505][ T4751] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 66.924797][ T4751] Bad inode number on dev loop0: 2 is out of range [ 66.925776][ T4751] SysV FS: get root inode failed [ 66.926626][ T4751] oldfs: cannot read superblock [ 66.933617][ T4713] ------------[ cut here ]------------ [ 66.934516][ T4713] VFS: brelse: Trying to free free buffer [ 66.935391][ T4713] WARNING: CPU: 0 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 66.936777][ T4713] Modules linked in: [ 66.937362][ T4713] CPU: 0 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 66.938653][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 66.940098][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.941328][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 66.942125][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 66.942999][ T4713] sp : ffff80001f2677d0 [ 66.943689][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 66.944990][ T4713] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 66.946224][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfbb05d0 [ 66.947542][ T4713] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 66.948873][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 66.950037][ T4713] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 66.951341][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 66.952685][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 66.954106][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 66.955455][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 66.956683][ T4713] Call trace: [ 66.957195][ T4713] invalidate_bh_lru+0x128/0x22c [ 66.957920][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 66.958784][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 66.959509][ T4713] invalidate_bh_lrus+0x34/0x40 [ 66.960244][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 66.961022][ T4713] blkdev_put+0x444/0x6c4 [ 66.961711][ T4713] blkdev_close+0x74/0xb0 [ 66.962432][ T4713] __fput+0x1b8/0x7e8 [ 66.963067][ T4713] ____fput+0x20/0x30 [ 66.963678][ T4713] task_work_run+0x13c/0x1e8 [ 66.964318][ T4713] do_notify_resume+0x2488/0x30a8 [ 66.965012][ T4713] el0_svc+0xf0/0x1d0 [ 66.965672][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 66.966477][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 66.967145][ T4713] irq event stamp: 71420 [ 66.967799][ T4713] hardirqs last enabled at (71419): [] kasan_quarantine_put+0xc4/0x200 [ 66.969430][ T4713] hardirqs last disabled at (71420): [] smp_call_function_many_cond+0xa50/0xec0 [ 66.971111][ T4713] softirqs last enabled at (71198): [] local_bh_enable+0x10/0x34 [ 66.972608][ T4713] softirqs last disabled at (71196): [] local_bh_disable+0x10/0x34 [ 66.974074][ T4713] ---[ end trace 9860002a16993ef5 ]--- [ 67.052484][ T4753] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.053666][ T4753] Bad inode number on dev loop0: 2 is out of range [ 67.054615][ T4753] SysV FS: get root inode failed [ 67.055320][ T4753] oldfs: cannot read superblock [ 67.064662][ C0] ------------[ cut here ]------------ [ 67.065593][ C0] VFS: brelse: Trying to free free buffer [ 67.066549][ C0] WARNING: CPU: 0 PID: 4754 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.067873][ C0] Modules linked in: [ 67.068507][ C0] CPU: 0 PID: 4754 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.069920][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.071572][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.072819][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 67.073713][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 67.074592][ C0] sp : ffff800008007df0 [ 67.075372][ C0] x29: ffff800008007df0 x28: ffff0000cc3d8000 x27: 1fffe000341d085c [ 67.076701][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 67.078101][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfbb0970 [ 67.079462][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 67.080908][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 67.082380][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 67.083753][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : e26bcf3358f2c300 [ 67.085123][ C0] x8 : e26bcf3358f2c300 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.086401][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.087809][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 67.089178][ C0] Call trace: [ 67.089713][ C0] invalidate_bh_lru+0x128/0x22c [ 67.090543][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 67.091404][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.092440][ C0] ipi_handler+0x10c/0x70c [ 67.093149][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 67.094011][ C0] handle_domain_irq+0x148/0x200 [ 67.094878][ C0] gic_handle_irq+0x78/0x1b8 [ 67.095659][ C0] call_on_irq_stack+0x30/0x48 [ 67.096420][ C0] do_interrupt_handler+0x6c/0x88 [ 67.097203][ C0] el1_interrupt+0x30/0x58 [ 67.097892][ C0] el1h_64_irq_handler+0x18/0x24 [ 67.098728][ C0] el1h_64_irq+0x78/0x7c [ 67.099412][ C0] __kasan_slab_alloc+0x54/0xcc [ 67.100126][ C0] slab_post_alloc_hook+0x74/0x3f8 [ 67.101102][ C0] kmem_cache_alloc+0x1dc/0x3d8 [ 67.101881][ C0] shmem_alloc_inode+0x20/0x38 [ 67.102617][ C0] new_inode_pseudo+0x68/0x200 [ 67.103383][ C0] new_inode+0x38/0x174 [ 67.104038][ C0] shmem_get_inode+0x2cc/0x97c [ 67.104904][ C0] shmem_symlink+0xa8/0x4ac [ 67.105679][ C0] vfs_symlink+0x238/0x3b0 [ 67.106364][ C0] do_symlinkat+0x188/0x5b4 [ 67.107104][ C0] __arm64_sys_symlinkat+0xa4/0xbc [ 67.108001][ C0] invoke_syscall+0x98/0x28c [ 67.108789][ C0] el0_svc_common+0x13c/0x258 [ 67.109625][ C0] do_el0_svc+0x5c/0x140 [ 67.110434][ C0] el0_svc+0x78/0x1d0 [ 67.111143][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 67.111990][ C0] el0t_64_sync+0x1a0/0x1a4 [ 67.112767][ C0] irq event stamp: 1002 [ 67.113498][ C0] hardirqs last enabled at (1001): [] try_charge_memcg+0x1c8/0x115c [ 67.115106][ C0] hardirqs last disabled at (1002): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.116699][ C0] softirqs last enabled at (860): [] local_bh_enable+0x10/0x34 [ 67.118154][ C0] softirqs last disabled at (858): [] local_bh_disable+0x10/0x34 [ 67.119607][ C0] ---[ end trace 9860002a16993ef6 ]--- [ 67.219809][ T4755] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.221010][ T4755] Bad inode number on dev loop0: 2 is out of range [ 67.222097][ T4755] SysV FS: get root inode failed [ 67.222945][ T4755] oldfs: cannot read superblock [ 67.240204][ C1] ------------[ cut here ]------------ [ 67.241158][ C1] VFS: brelse: Trying to free free buffer [ 67.242156][ C1] WARNING: CPU: 1 PID: 4758 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.243606][ C1] Modules linked in: [ 67.244211][ C1] CPU: 1 PID: 4758 Comm: syz.0.36 Tainted: G W syzkaller #0 [ 67.245516][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.247062][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.248305][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 67.249186][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 67.250067][ C1] sp : ffff800008017df0 [ 67.250733][ C1] x29: ffff800008017df0 x28: ffff0000d3f28000 x27: 1fffe000341d4a5c [ 67.252090][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 67.253482][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000df900400 [ 67.254723][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 67.256011][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 67.257304][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 67.258683][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : e20e545b6136f000 [ 67.260095][ C1] x8 : e20e545b6136f000 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.261474][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.262929][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 67.264299][ C1] Call trace: [ 67.264856][ C1] invalidate_bh_lru+0x128/0x22c [ 67.265729][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 67.266815][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.268004][ C1] ipi_handler+0x10c/0x70c [ 67.268761][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 67.269788][ C1] handle_domain_irq+0x148/0x200 [ 67.270767][ C1] gic_handle_irq+0x78/0x1b8 [ 67.271749][ C1] call_on_irq_stack+0x30/0x48 [ 67.272582][ C1] do_interrupt_handler+0x6c/0x88 [ 67.273541][ C1] el1_interrupt+0x30/0x58 [ 67.274364][ C1] el1h_64_irq_handler+0x18/0x24 [ 67.275324][ C1] el1h_64_irq+0x78/0x7c [ 67.276111][ C1] lock_acquire+0x234/0x618 [ 67.276957][ C1] rcu_lock_acquire+0x38/0x44 [ 67.277808][ C1] lock_page_memcg+0x50/0x22c [ 67.278599][ C1] page_add_file_rmap+0x148/0x8c4 [ 67.279478][ C1] do_set_pte+0x390/0x4e4 [ 67.280285][ C1] filemap_map_pages+0x9c4/0xc44 [ 67.281148][ C1] handle_mm_fault+0x18b0/0x2aac [ 67.282045][ C1] do_page_fault+0x690/0xad0 [ 67.282910][ C1] do_translation_fault+0xe0/0x130 [ 67.283858][ C1] do_mem_abort+0x6c/0x1b0 [ 67.284664][ C1] el0_ia+0xe0/0x2b8 [ 67.285415][ C1] el0t_64_sync_handler+0xc0/0xe4 [ 67.286364][ C1] el0t_64_sync+0x1a0/0x1a4 [ 67.287121][ C1] irq event stamp: 1146 [ 67.287827][ C1] hardirqs last enabled at (1145): [] lock_page_memcg+0x110/0x22c [ 67.289521][ C1] hardirqs last disabled at (1146): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.291268][ C1] softirqs last enabled at (1034): [] local_bh_enable+0x10/0x34 [ 67.292765][ C1] softirqs last disabled at (1032): [] local_bh_disable+0x10/0x34 [ 67.294492][ C1] ---[ end trace 9860002a16993ef7 ]--- [ 67.422307][ T4759] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.423475][ T4759] Bad inode number on dev loop0: 2 is out of range [ 67.424521][ T4759] SysV FS: get root inode failed [ 67.425361][ T4759] oldfs: cannot read superblock [ 67.429939][ C0] ------------[ cut here ]------------ [ 67.430761][ C0] VFS: brelse: Trying to free free buffer [ 67.431723][ C0] WARNING: CPU: 0 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.433162][ C0] Modules linked in: [ 67.433755][ C0] CPU: 0 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.435178][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.436804][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.437992][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 67.438832][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 67.439687][ C0] sp : ffff800008007df0 [ 67.440315][ C0] x29: ffff800008007df0 x28: ffff0000e8533680 x27: 1fffe000341d085c [ 67.441601][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 67.442880][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfbb0d10 [ 67.444199][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 67.445497][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 67.446791][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 67.448130][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 67.449415][ C0] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.450607][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.451795][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 67.453013][ C0] Call trace: [ 67.453540][ C0] invalidate_bh_lru+0x128/0x22c [ 67.454348][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 67.455353][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.456310][ C0] ipi_handler+0x10c/0x70c [ 67.456951][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 67.457849][ C0] handle_domain_irq+0x148/0x200 [ 67.458557][ C0] gic_handle_irq+0x78/0x1b8 [ 67.459187][ C0] call_on_irq_stack+0x30/0x48 [ 67.459902][ C0] do_interrupt_handler+0x6c/0x88 [ 67.460685][ C0] el1_interrupt+0x30/0x58 [ 67.461375][ C0] el1h_64_irq_handler+0x18/0x24 [ 67.462173][ C0] el1h_64_irq+0x78/0x7c [ 67.462797][ C0] kasan_quarantine_put+0xd4/0x200 [ 67.463586][ C0] ____kasan_slab_free+0x124/0x164 [ 67.464417][ C0] __kasan_slab_free+0x18/0x28 [ 67.465256][ C0] slab_free_freelist_hook+0x128/0x1e4 [ 67.466141][ C0] kfree+0x16c/0x404 [ 67.466747][ C0] tomoyo_realpath_from_path+0x4f8/0x540 [ 67.467556][ C0] tomoyo_path_perm+0x1e4/0x49c [ 67.468234][ C0] tomoyo_path_unlink+0xa8/0xf4 [ 67.468943][ C0] security_path_unlink+0xe4/0x134 [ 67.469646][ C0] do_unlinkat+0x27c/0x624 [ 67.470319][ C0] __arm64_sys_unlinkat+0xe0/0xfc [ 67.471112][ C0] invoke_syscall+0x98/0x28c [ 67.471877][ C0] el0_svc_common+0x13c/0x258 [ 67.472630][ C0] do_el0_svc+0x5c/0x140 [ 67.473237][ C0] el0_svc+0x78/0x1d0 [ 67.473887][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 67.474621][ C0] el0t_64_sync+0x1a0/0x1a4 [ 67.475332][ C0] irq event stamp: 171824 [ 67.475954][ C0] hardirqs last enabled at (171823): [] kasan_quarantine_put+0xc4/0x200 [ 67.477570][ C0] hardirqs last disabled at (171824): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.479134][ C0] softirqs last enabled at (171768): [] local_bh_enable+0x10/0x34 [ 67.480608][ C0] softirqs last disabled at (171766): [] local_bh_disable+0x10/0x34 [ 67.482114][ C0] ---[ end trace 9860002a16993ef8 ]--- [ 67.517105][ T4761] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.518331][ T4761] Bad inode number on dev loop0: 2 is out of range [ 67.519527][ T4761] SysV FS: get root inode failed [ 67.520273][ T4761] oldfs: cannot read superblock [ 67.527152][ C1] ------------[ cut here ]------------ [ 67.528150][ C1] VFS: brelse: Trying to free free buffer [ 67.529261][ C1] WARNING: CPU: 1 PID: 4762 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.530822][ C1] Modules linked in: [ 67.531466][ C1] CPU: 1 PID: 4762 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.532898][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.534669][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.535972][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 67.536837][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 67.537713][ C1] sp : ffff800008017df0 [ 67.538407][ C1] x29: ffff800008017df0 x28: ffff0000d0fd51c0 x27: 1fffe000341d4a5b [ 67.539783][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 67.541140][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000df9007a0 [ 67.542410][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 67.543799][ C1] x17: 0000000000010003 x16: ffff8000082dbd3c x15: 0000000000000012 [ 67.545138][ C1] x14: 0000000000000001 x13: 1ffff00001002edc x12: 0000000000000000 [ 67.546456][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 935e1a7bd4001f00 [ 67.547743][ C1] x8 : 935e1a7bd4001f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.549027][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff800008307f44 [ 67.550372][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 67.551705][ C1] Call trace: [ 67.552273][ C1] invalidate_bh_lru+0x128/0x22c [ 67.553253][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 67.554372][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.555607][ C1] ipi_handler+0x10c/0x70c [ 67.556371][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 67.557369][ C1] handle_domain_irq+0x148/0x200 [ 67.558271][ C1] gic_handle_irq+0x78/0x1b8 [ 67.559041][ C1] call_on_irq_stack+0x30/0x48 [ 67.559801][ C1] do_interrupt_handler+0x6c/0x88 [ 67.560657][ C1] el1_interrupt+0x30/0x58 [ 67.561448][ C1] el1h_64_irq_handler+0x18/0x24 [ 67.562442][ C1] el1h_64_irq+0x78/0x7c [ 67.563199][ C1] __sanitizer_cov_trace_pc+0x38/0xa8 [ 67.564167][ C1] filemap_map_pages+0x9c4/0xc44 [ 67.564989][ C1] handle_mm_fault+0x18b0/0x2aac [ 67.565827][ C1] do_page_fault+0x690/0xad0 [ 67.566614][ C1] do_translation_fault+0xe0/0x130 [ 67.567458][ C1] do_mem_abort+0x6c/0x1b0 [ 67.568192][ C1] el0_da+0x90/0x1ec [ 67.568876][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 67.569775][ C1] el0t_64_sync+0x1a0/0x1a4 [ 67.570563][ C1] irq event stamp: 294 [ 67.571272][ C1] hardirqs last enabled at (293): [] lock_page_memcg+0x110/0x22c [ 67.572769][ C1] hardirqs last disabled at (294): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.574402][ C1] softirqs last enabled at (24): [] local_bh_enable+0x10/0x34 [ 67.575930][ C1] softirqs last disabled at (22): [] local_bh_disable+0x10/0x34 [ 67.577651][ C1] ---[ end trace 9860002a16993ef9 ]--- [ 67.628292][ T4763] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.630085][ T4763] Bad inode number on dev loop0: 2 is out of range [ 67.631169][ T4763] SysV FS: get root inode failed [ 67.631862][ T4763] oldfs: cannot read superblock [ 67.634640][ T4713] ------------[ cut here ]------------ [ 67.635563][ T4713] VFS: brelse: Trying to free free buffer [ 67.636413][ T4713] WARNING: CPU: 1 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.637813][ T4713] Modules linked in: [ 67.638411][ T4713] CPU: 1 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 67.639686][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.641355][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.642582][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 67.643418][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 67.644263][ T4713] sp : ffff80001f2677d0 [ 67.644975][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 67.646402][ T4713] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 67.647779][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000df900b40 [ 67.649073][ T4713] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 67.650436][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 67.651780][ T4713] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 67.653113][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 67.654442][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.655725][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.657035][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 67.658320][ T4713] Call trace: [ 67.658874][ T4713] invalidate_bh_lru+0x128/0x22c [ 67.659723][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 67.660628][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 67.661426][ T4713] invalidate_bh_lrus+0x34/0x40 [ 67.662199][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 67.663078][ T4713] blkdev_put+0x444/0x6c4 [ 67.663776][ T4713] blkdev_close+0x74/0xb0 [ 67.664461][ T4713] __fput+0x1b8/0x7e8 [ 67.665108][ T4713] ____fput+0x20/0x30 [ 67.665745][ T4713] task_work_run+0x13c/0x1e8 [ 67.666554][ T4713] do_notify_resume+0x2488/0x30a8 [ 67.667364][ T4713] el0_svc+0xf0/0x1d0 [ 67.668074][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 67.668932][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 67.669687][ T4713] irq event stamp: 97784 [ 67.670406][ T4713] hardirqs last enabled at (97783): [] kasan_quarantine_put+0xc4/0x200 [ 67.672057][ T4713] hardirqs last disabled at (97784): [] smp_call_function_many_cond+0xa50/0xec0 [ 67.674031][ T4713] softirqs last enabled at (97588): [] local_bh_enable+0x10/0x34 [ 67.675583][ T4713] softirqs last disabled at (97586): [] local_bh_disable+0x10/0x34 [ 67.677410][ T4713] ---[ end trace 9860002a16993efa ]--- [ 67.688773][ T3624] Bluetooth: hci0: command 0x0419 tx timeout [ 67.716875][ T4765] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.718436][ T4765] Bad inode number on dev loop0: 2 is out of range [ 67.719916][ T4765] SysV FS: get root inode failed [ 67.720775][ T4765] oldfs: cannot read superblock [ 67.726331][ C1] ------------[ cut here ]------------ [ 67.727163][ C1] VFS: brelse: Trying to free free buffer [ 67.728083][ C1] WARNING: CPU: 1 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.729579][ C1] Modules linked in: [ 67.730191][ C1] CPU: 1 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.731649][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.733336][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.734694][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 67.735591][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 67.736529][ C1] sp : ffff800008017df0 [ 67.737189][ C1] x29: ffff800008017df0 x28: ffff0000e8533680 x27: 1fffe000341d4a5c [ 67.738501][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 67.739920][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000df900ee0 [ 67.741343][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010004 [ 67.742563][ C1] x17: 0000000000010004 x16: ffff80001134e478 x15: 0000000000000012 [ 67.743821][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 67.745124][ C1] x11: ff8080000830061c x10: 0000000000010003 x9 : 40e71f82f2236e00 [ 67.746505][ C1] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.747824][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.749141][ C1] x2 : 0000000000000001 x1 : 0000000100010003 x0 : 0000000000000027 [ 67.750505][ C1] Call trace: [ 67.751040][ C1] invalidate_bh_lru+0x128/0x22c [ 67.751866][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 67.752974][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.754121][ C1] ipi_handler+0x10c/0x70c [ 67.754906][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 67.755824][ C1] handle_domain_irq+0x148/0x200 [ 67.756640][ C1] gic_handle_irq+0x78/0x1b8 [ 67.757363][ C1] call_on_irq_stack+0x30/0x48 [ 67.758142][ C1] do_interrupt_handler+0x6c/0x88 [ 67.758991][ C1] el1_interrupt+0x30/0x58 [ 67.759797][ C1] el1h_64_irq_handler+0x18/0x24 [ 67.760537][ C1] el1h_64_irq+0x78/0x7c [ 67.761256][ C1] kasan_check_range+0x18/0x2a0 [ 67.762018][ C1] __kasan_check_read+0x44/0x54 [ 67.762831][ C1] copy_page_range+0xa9c/0x2348 [ 67.763658][ C1] copy_mm+0x9f0/0x1070 [ 67.764378][ C1] copy_process+0x15fc/0x3734 [ 67.765182][ C1] kernel_clone+0x1ec/0xa10 [ 67.765909][ C1] __arm64_sys_clone+0x154/0x1c0 [ 67.766760][ C1] invoke_syscall+0x98/0x28c [ 67.767525][ C1] el0_svc_common+0x13c/0x258 [ 67.768232][ C1] do_el0_svc+0x5c/0x140 [ 67.768961][ C1] el0_svc+0x78/0x1d0 [ 67.769663][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 67.770497][ C1] el0t_64_sync+0x1a0/0x1a4 [ 67.771201][ C1] irq event stamp: 180164 [ 67.771908][ C1] hardirqs last enabled at (180163): [] ___slab_alloc+0xc10/0xd84 [ 67.773376][ C1] hardirqs last disabled at (180164): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.774986][ C1] softirqs last enabled at (180044): [] local_bh_enable+0x10/0x34 [ 67.776751][ C1] softirqs last disabled at (180042): [] local_bh_disable+0x10/0x34 [ 67.778251][ C1] ---[ end trace 9860002a16993efb ]--- [ 67.860029][ T4767] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.861276][ T4767] Bad inode number on dev loop0: 2 is out of range [ 67.862426][ T4767] SysV FS: get root inode failed [ 67.863275][ T4767] oldfs: cannot read superblock [ 67.880926][ C0] ------------[ cut here ]------------ [ 67.881857][ C0] VFS: brelse: Trying to free free buffer [ 67.882736][ C0] WARNING: CPU: 0 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.884070][ C0] Modules linked in: [ 67.884644][ C0] CPU: 0 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.886104][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.887820][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.888990][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 67.889826][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 67.890672][ C0] sp : ffff800008007df0 [ 67.891287][ C0] x29: ffff800008007df0 x28: ffff0000e8533680 x27: 1fffe000341d085c [ 67.892494][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 67.893883][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfafb148 [ 67.895193][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 67.896421][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 67.897723][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 67.899114][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 40e71f82f2236e00 [ 67.900457][ C0] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.901762][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.903023][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 67.904369][ C0] Call trace: [ 67.904929][ C0] invalidate_bh_lru+0x128/0x22c [ 67.905809][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 67.906820][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.907884][ C0] ipi_handler+0x10c/0x70c [ 67.908534][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 67.909464][ C0] handle_domain_irq+0x148/0x200 [ 67.910278][ C0] gic_handle_irq+0x78/0x1b8 [ 67.911045][ C0] call_on_irq_stack+0x30/0x48 [ 67.911791][ C0] do_interrupt_handler+0x6c/0x88 [ 67.912596][ C0] el1_interrupt+0x30/0x58 [ 67.913305][ C0] el1h_64_irq_handler+0x18/0x24 [ 67.914064][ C0] el1h_64_irq+0x78/0x7c [ 67.914684][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 67.915516][ C0] pcpu_alloc+0x9fc/0x1640 [ 67.916226][ C0] __alloc_percpu+0x30/0x40 [ 67.916918][ C0] xt_percpu_counter_alloc+0x13c/0x1d4 [ 67.917763][ C0] translate_table+0xe84/0x1928 [ 67.918475][ C0] do_ip6t_set_ctl+0x9ec/0xe38 [ 67.919214][ C0] nf_setsockopt+0x260/0x280 [ 67.919944][ C0] ipv6_setsockopt+0x1b64/0x392c [ 67.920741][ C0] tcp_setsockopt+0x1f4/0x1b8c [ 67.921571][ C0] sock_common_setsockopt+0xb0/0xcc [ 67.922402][ C0] __sys_setsockopt+0x260/0x36c [ 67.923137][ C0] __arm64_sys_setsockopt+0xc0/0xdc [ 67.924007][ C0] invoke_syscall+0x98/0x28c [ 67.924807][ C0] el0_svc_common+0x13c/0x258 [ 67.925608][ C0] do_el0_svc+0x5c/0x140 [ 67.926420][ C0] el0_svc+0x78/0x1d0 [ 67.927204][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 67.928083][ C0] el0t_64_sync+0x1a0/0x1a4 [ 67.928843][ C0] irq event stamp: 185060 [ 67.929532][ C0] hardirqs last enabled at (185059): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 67.931272][ C0] hardirqs last disabled at (185060): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.932849][ C0] softirqs last enabled at (185052): [] release_sock+0x1d0/0x258 [ 67.934528][ C0] softirqs last disabled at (185050): [] release_sock+0x34/0x258 [ 67.936104][ C0] ---[ end trace 9860002a16993efc ]--- [ 67.972474][ T4771] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.973694][ T4771] Bad inode number on dev loop0: 2 is out of range [ 67.974705][ T4771] SysV FS: get root inode failed [ 67.975461][ T4771] oldfs: cannot read superblock [ 67.979999][ C1] ------------[ cut here ]------------ [ 67.980807][ C1] VFS: brelse: Trying to free free buffer [ 67.981780][ C1] WARNING: CPU: 1 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.983193][ C1] Modules linked in: [ 67.983765][ C1] CPU: 1 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.985086][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.986577][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.987770][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 67.988532][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 67.989411][ C1] sp : ffff800008017df0 [ 67.990046][ C1] x29: ffff800008017df0 x28: ffff0000e8533680 x27: 1fffe000341d4a5c [ 67.991252][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 67.992579][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2884318 [ 67.993848][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 67.995036][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 67.996310][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 67.997514][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 67.998753][ C1] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.000025][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.001301][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.002644][ C1] Call trace: [ 68.003150][ C1] invalidate_bh_lru+0x128/0x22c [ 68.003953][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 68.004875][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.005973][ C1] ipi_handler+0x10c/0x70c [ 68.006728][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 68.007661][ C1] handle_domain_irq+0x148/0x200 [ 68.008504][ C1] gic_handle_irq+0x78/0x1b8 [ 68.009211][ C1] call_on_irq_stack+0x30/0x48 [ 68.009991][ C1] do_interrupt_handler+0x6c/0x88 [ 68.010883][ C1] el1_interrupt+0x30/0x58 [ 68.011645][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.012508][ C1] el1h_64_irq+0x78/0x7c [ 68.013216][ C1] seqcount_lockdep_reader_access+0x21c/0x2c0 [ 68.014198][ C1] ktime_get_coarse_real_ts64+0x4c/0x138 [ 68.015083][ C1] current_time+0x94/0x2a4 [ 68.015803][ C1] shmem_get_inode+0x330/0x97c [ 68.016545][ C1] shmem_mknod+0x68/0x1c0 [ 68.017238][ C1] shmem_mkdir+0x38/0x78 [ 68.017893][ C1] vfs_mkdir+0x314/0x4d8 [ 68.018524][ C1] do_mkdirat+0x1c0/0x514 [ 68.019192][ C1] __arm64_sys_mkdirat+0x90/0xa8 [ 68.020012][ C1] invoke_syscall+0x98/0x28c [ 68.020767][ C1] el0_svc_common+0x13c/0x258 [ 68.021582][ C1] do_el0_svc+0x5c/0x140 [ 68.022305][ C1] el0_svc+0x78/0x1d0 [ 68.022938][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 68.023754][ C1] el0t_64_sync+0x1a0/0x1a4 [ 68.024509][ C1] irq event stamp: 186740 [ 68.025208][ C1] hardirqs last enabled at (186739): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 68.026925][ C1] hardirqs last disabled at (186740): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.028532][ C1] softirqs last enabled at (186714): [] local_bh_enable+0x10/0x34 [ 68.030035][ C1] softirqs last disabled at (186712): [] local_bh_disable+0x10/0x34 [ 68.031536][ C1] ---[ end trace 9860002a16993efd ]--- [ 68.068423][ T4773] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.070433][ T4773] Bad inode number on dev loop0: 2 is out of range [ 68.071850][ T4773] SysV FS: get root inode failed [ 68.072703][ T4773] oldfs: cannot read superblock [ 68.080665][ C0] ------------[ cut here ]------------ [ 68.081590][ C0] VFS: brelse: Trying to free free buffer [ 68.082553][ C0] WARNING: CPU: 0 PID: 4774 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.084022][ C0] Modules linked in: [ 68.084692][ C0] CPU: 0 PID: 4774 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.086157][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.087889][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.089251][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.090168][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.091110][ C0] sp : ffff800008007df0 [ 68.091902][ C0] x29: ffff800008007df0 x28: ffff0000ccce8000 x27: 1fffe000341d085c [ 68.093465][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 68.094892][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfafb4e8 [ 68.096275][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.097529][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.098912][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.100317][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 0a31e5b8bdab3500 [ 68.101710][ C0] x8 : 0a31e5b8bdab3500 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.103024][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.104448][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.105802][ C0] Call trace: [ 68.106322][ C0] invalidate_bh_lru+0x128/0x22c [ 68.107132][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.108129][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.109293][ C0] ipi_handler+0x10c/0x70c [ 68.110088][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.111119][ C0] handle_domain_irq+0x148/0x200 [ 68.112028][ C0] gic_handle_irq+0x78/0x1b8 [ 68.112795][ C0] call_on_irq_stack+0x30/0x48 [ 68.113594][ C0] do_interrupt_handler+0x6c/0x88 [ 68.114402][ C0] el1_interrupt+0x30/0x58 [ 68.115171][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.116076][ C0] el1h_64_irq+0x78/0x7c [ 68.116821][ C0] slab_post_alloc_hook+0x370/0x3f8 [ 68.117666][ C0] __kmalloc+0x204/0x440 [ 68.118384][ C0] tomoyo_encode+0x260/0x484 [ 68.119142][ C0] tomoyo_realpath_from_path+0x4ec/0x540 [ 68.120087][ C0] tomoyo_path_perm+0x1e4/0x49c [ 68.120882][ C0] tomoyo_path_symlink+0xac/0xf8 [ 68.121691][ C0] security_path_symlink+0xec/0x13c [ 68.122482][ C0] do_symlinkat+0x10c/0x5b4 [ 68.123192][ C0] __arm64_sys_symlinkat+0xa4/0xbc [ 68.123902][ C0] invoke_syscall+0x98/0x28c [ 68.124650][ C0] el0_svc_common+0x13c/0x258 [ 68.125482][ C0] do_el0_svc+0x5c/0x140 [ 68.126227][ C0] el0_svc+0x78/0x1d0 [ 68.126916][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 68.127766][ C0] el0t_64_sync+0x1a0/0x1a4 [ 68.128484][ C0] irq event stamp: 762 [ 68.129135][ C0] hardirqs last enabled at (761): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 68.130773][ C0] hardirqs last disabled at (762): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.132388][ C0] softirqs last enabled at (734): [] local_bh_enable+0x10/0x34 [ 68.133763][ C0] softirqs last disabled at (732): [] local_bh_disable+0x10/0x34 [ 68.135221][ C0] ---[ end trace 9860002a16993efe ]--- [ 68.270656][ T4775] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.271970][ T4775] Bad inode number on dev loop0: 2 is out of range [ 68.273012][ T4775] SysV FS: get root inode failed [ 68.273814][ T4775] oldfs: cannot read superblock [ 68.283067][ T4713] ------------[ cut here ]------------ [ 68.283937][ T4713] VFS: brelse: Trying to free free buffer [ 68.284792][ T4713] WARNING: CPU: 1 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.286125][ T4713] Modules linked in: [ 68.286671][ T4713] CPU: 1 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 68.287986][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.289655][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.290969][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 68.291864][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 68.292746][ T4713] sp : ffff80001f2677d0 [ 68.293416][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d4a5c [ 68.294752][ T4713] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 68.296035][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e28846b8 [ 68.297257][ T4713] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 68.298571][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 68.299936][ T4713] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 68.301308][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 68.302608][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.304017][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.305383][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.306641][ T4713] Call trace: [ 68.307177][ T4713] invalidate_bh_lru+0x128/0x22c [ 68.308001][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 68.308926][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.309767][ T4713] invalidate_bh_lrus+0x34/0x40 [ 68.310573][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 68.311387][ T4713] blkdev_put+0x444/0x6c4 [ 68.312100][ T4713] blkdev_close+0x74/0xb0 [ 68.312805][ T4713] __fput+0x1b8/0x7e8 [ 68.313398][ T4713] ____fput+0x20/0x30 [ 68.314085][ T4713] task_work_run+0x13c/0x1e8 [ 68.314884][ T4713] do_notify_resume+0x2488/0x30a8 [ 68.315745][ T4713] el0_svc+0xf0/0x1d0 [ 68.316328][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 68.317135][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 68.317889][ T4713] irq event stamp: 117702 [ 68.318628][ T4713] hardirqs last enabled at (117701): [] kasan_quarantine_put+0xc4/0x200 [ 68.320285][ T4713] hardirqs last disabled at (117702): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.321990][ T4713] softirqs last enabled at (117506): [] local_bh_enable+0x10/0x34 [ 68.323496][ T4713] softirqs last disabled at (117504): [] local_bh_disable+0x10/0x34 [ 68.325032][ T4713] ---[ end trace 9860002a16993eff ]--- [ 68.382446][ T4777] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.383555][ T4777] Bad inode number on dev loop0: 2 is out of range [ 68.384622][ T4777] SysV FS: get root inode failed [ 68.385397][ T4777] oldfs: cannot read superblock [ 68.388235][ C1] ------------[ cut here ]------------ [ 68.389100][ C1] VFS: brelse: Trying to free free buffer [ 68.390116][ C1] WARNING: CPU: 1 PID: 3661 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.391673][ C1] Modules linked in: [ 68.392340][ C1] CPU: 1 PID: 3661 Comm: udevd Tainted: G W syzkaller #0 [ 68.393759][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.395489][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.396758][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 68.397625][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 68.398437][ C1] sp : ffff800008017df0 [ 68.399129][ C1] x29: ffff800008017df0 x28: ffff0000d723b680 x27: 1fffe000341d4a5b [ 68.400448][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 68.401750][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2884a58 [ 68.403107][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.404395][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.405742][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 68.407068][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 2a8e883455a91600 [ 68.408436][ C1] x8 : 2a8e883455a91600 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.409665][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.410979][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.412387][ C1] Call trace: [ 68.412939][ C1] invalidate_bh_lru+0x128/0x22c [ 68.413740][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 68.414852][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.416039][ C1] ipi_handler+0x10c/0x70c [ 68.416775][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 68.417673][ C1] handle_domain_irq+0x148/0x200 [ 68.418521][ C1] gic_handle_irq+0x78/0x1b8 [ 68.419241][ C1] call_on_irq_stack+0x30/0x48 [ 68.419982][ C1] do_interrupt_handler+0x6c/0x88 [ 68.420878][ C1] el1_interrupt+0x30/0x58 [ 68.421570][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.422431][ C1] el1h_64_irq+0x78/0x7c [ 68.423227][ C1] el0_svc_common+0xac/0x258 [ 68.423978][ C1] do_el0_svc+0x5c/0x140 [ 68.424707][ C1] el0_svc+0x78/0x1d0 [ 68.425328][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 68.426131][ C1] el0t_64_sync+0x1a0/0x1a4 [ 68.426884][ C1] irq event stamp: 1010260 [ 68.427783][ C1] hardirqs last enabled at (1010259): [] el0_svc_common+0xa0/0x258 [ 68.429621][ C1] hardirqs last disabled at (1010260): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.431218][ C1] softirqs last enabled at (1010164): [] local_bh_enable+0x10/0x34 [ 68.432838][ C1] softirqs last disabled at (1010162): [] local_bh_disable+0x10/0x34 [ 68.434335][ C1] ---[ end trace 9860002a16993f00 ]--- [ 68.548820][ T4780] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.550012][ T4780] Bad inode number on dev loop0: 2 is out of range [ 68.551065][ T4780] SysV FS: get root inode failed [ 68.551817][ T4780] oldfs: cannot read superblock [ 68.560758][ C1] ------------[ cut here ]------------ [ 68.561603][ C1] VFS: brelse: Trying to free free buffer [ 68.562465][ C1] WARNING: CPU: 1 PID: 1604 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.563777][ C1] Modules linked in: [ 68.564396][ C1] CPU: 1 PID: 1604 Comm: kworker/u4:4 Tainted: G W syzkaller #0 [ 68.565656][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.567226][ C1] Workqueue: netns cleanup_net [ 68.568006][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.569286][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 68.570174][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 68.571053][ C1] sp : ffff800008017df0 [ 68.571752][ C1] x29: ffff800008017df0 x28: ffff0000c873d1c0 x27: 1fffe000341d4a5c [ 68.573159][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 68.574537][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2884df8 [ 68.575938][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.577257][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.578588][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 68.579860][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : e9b4b14db2653300 [ 68.581153][ C1] x8 : e9b4b14db2653300 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.582393][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.583734][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.585119][ C1] Call trace: [ 68.585719][ C1] invalidate_bh_lru+0x128/0x22c [ 68.586516][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 68.587471][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.588519][ C1] ipi_handler+0x10c/0x70c [ 68.589181][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 68.590063][ C1] handle_domain_irq+0x148/0x200 [ 68.590839][ C1] gic_handle_irq+0x78/0x1b8 [ 68.591568][ C1] call_on_irq_stack+0x30/0x48 [ 68.592345][ C1] do_interrupt_handler+0x6c/0x88 [ 68.593181][ C1] el1_interrupt+0x30/0x58 [ 68.593877][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.594647][ C1] el1h_64_irq+0x78/0x7c [ 68.595346][ C1] put_cpu_partial+0x198/0x214 [ 68.596132][ C1] __slab_free+0x178/0x240 [ 68.596845][ C1] ___cache_free+0x178/0x1bc [ 68.597561][ C1] qlink_free+0x5c/0xa0 [ 68.598198][ C1] qlist_free_all+0x40/0xa8 [ 68.598848][ C1] kasan_quarantine_reduce+0x124/0x130 [ 68.599712][ C1] __kasan_slab_alloc+0x34/0xcc [ 68.600501][ C1] slab_post_alloc_hook+0x74/0x3f8 [ 68.601353][ C1] kmem_cache_alloc_trace+0x1e0/0x3f0 [ 68.602253][ C1] netdevice_event+0x2b4/0x7b8 [ 68.603030][ C1] raw_notifier_call_chain+0xd8/0x168 [ 68.603905][ C1] unregister_netdevice_many+0xe90/0x1870 [ 68.604744][ C1] ieee80211_remove_interfaces+0x3ac/0x614 [ 68.605699][ C1] ieee80211_unregister_hw+0x5c/0x1f4 [ 68.606649][ C1] mac80211_hwsim_del_radio+0x224/0x3bc [ 68.607597][ C1] hwsim_exit_net+0x4b0/0x574 [ 68.608335][ C1] cleanup_net+0x5d0/0xab8 [ 68.608995][ C1] process_one_work+0x7a4/0x1178 [ 68.609796][ C1] worker_thread+0x8fc/0x103c [ 68.610553][ C1] kthread+0x37c/0x460 [ 68.611230][ C1] ret_from_fork+0x10/0x20 [ 68.611968][ C1] irq event stamp: 1398810 [ 68.612714][ C1] hardirqs last enabled at (1398809): [] put_cpu_partial+0x188/0x214 [ 68.614353][ C1] hardirqs last disabled at (1398810): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.615875][ C1] softirqs last enabled at (1398700): [] fib6_run_gc+0x1a0/0x260 [ 68.617497][ C1] softirqs last disabled at (1398686): [] fib6_run_gc+0x9c/0x260 [ 68.619106][ C1] ---[ end trace 9860002a16993f01 ]--- [ 68.712351][ T1604] device hsr_slave_0 left promiscuous mode [ 68.759690][ T4782] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.761120][ T4782] Bad inode number on dev loop0: 2 is out of range [ 68.762288][ T4782] SysV FS: get root inode failed [ 68.763170][ T4782] oldfs: cannot read superblock [ 68.772798][ T1604] device hsr_slave_1 left promiscuous mode [ 68.775118][ T4713] ------------[ cut here ]------------ [ 68.776084][ T4713] VFS: brelse: Trying to free free buffer [ 68.777128][ T4713] WARNING: CPU: 0 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.778484][ T4713] Modules linked in: [ 68.779180][ T4713] CPU: 0 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 68.780674][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.782255][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.783551][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 68.784443][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 68.785371][ T4713] sp : ffff80001f2677d0 [ 68.786049][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d085c [ 68.787369][ T4713] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 68.788696][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfafb888 [ 68.790058][ T4713] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 68.791390][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 68.792740][ T4713] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.794116][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 68.795463][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.796765][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.798048][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.799458][ T4713] Call trace: [ 68.800046][ T4713] invalidate_bh_lru+0x128/0x22c [ 68.800821][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 68.801870][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.802801][ T4713] invalidate_bh_lrus+0x34/0x40 [ 68.803677][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 68.804608][ T4713] blkdev_put+0x444/0x6c4 [ 68.805358][ T4713] blkdev_close+0x74/0xb0 [ 68.806085][ T4713] __fput+0x1b8/0x7e8 [ 68.806763][ T4713] ____fput+0x20/0x30 [ 68.807509][ T4713] task_work_run+0x13c/0x1e8 [ 68.808276][ T4713] do_notify_resume+0x2488/0x30a8 [ 68.809059][ T4713] el0_svc+0xf0/0x1d0 [ 68.809672][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 68.810574][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 68.811317][ T4713] irq event stamp: 130190 [ 68.812137][ T4713] hardirqs last enabled at (130189): [] kasan_quarantine_put+0xc4/0x200 [ 68.813723][ T4713] hardirqs last disabled at (130190): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.815635][ T4713] softirqs last enabled at (129984): [] local_bh_enable+0x10/0x34 [ 68.817256][ T4713] softirqs last disabled at (129982): [] local_bh_disable+0x10/0x34 [ 68.818996][ T4713] ---[ end trace 9860002a16993f02 ]--- [ 68.868779][ T1604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.870086][ T1604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.871582][ T1604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.872772][ T1604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.874050][ T1604] device bridge_slave_1 left promiscuous mode [ 68.875119][ T1604] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.890232][ T4784] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.891505][ T4784] Bad inode number on dev loop0: 2 is out of range [ 68.892605][ T4784] SysV FS: get root inode failed [ 68.893410][ T4784] oldfs: cannot read superblock [ 68.898460][ C0] ------------[ cut here ]------------ [ 68.899377][ C0] VFS: brelse: Trying to free free buffer [ 68.900319][ C0] WARNING: CPU: 0 PID: 3661 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.901756][ C0] Modules linked in: [ 68.902407][ C0] CPU: 0 PID: 3661 Comm: udevd Tainted: G W syzkaller #0 [ 68.903801][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.905441][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.906693][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.907521][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.908397][ C0] sp : ffff800008007df0 [ 68.909100][ C0] x29: ffff800008007df0 x28: ffff0000d723b680 x27: 1fffe000341d085b [ 68.910415][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 68.911734][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfafbc28 [ 68.912982][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.914203][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.915537][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.916810][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2a8e883455a91600 [ 68.918062][ C0] x8 : 2a8e883455a91600 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.919377][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.920731][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.921942][ C0] Call trace: [ 68.922480][ C0] invalidate_bh_lru+0x128/0x22c [ 68.923299][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.924226][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.925339][ C0] ipi_handler+0x10c/0x70c [ 68.926019][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.926840][ C0] handle_domain_irq+0x148/0x200 [ 68.927562][ C0] gic_handle_irq+0x78/0x1b8 [ 68.928304][ C0] call_on_irq_stack+0x30/0x48 [ 68.929059][ C0] do_interrupt_handler+0x6c/0x88 [ 68.929828][ C0] el0_interrupt+0x94/0x248 [ 68.930558][ C0] __el0_irq_handler_common+0x18/0x24 [ 68.931374][ C0] el0t_64_irq_handler+0x10/0x1c [ 68.932197][ C0] el0t_64_irq+0x1a0/0x1a4 [ 68.932909][ C0] irq event stamp: 1025358 [ 68.933671][ C0] hardirqs last enabled at (1025357): [] el0t_64_sync_handler+0xcc/0xe4 [ 68.935343][ C0] hardirqs last disabled at (1025358): [] __el0_irq_handler_common+0x18/0x24 [ 68.937035][ C0] softirqs last enabled at (1025010): [] local_bh_enable+0x10/0x34 [ 68.938594][ C0] softirqs last disabled at (1025008): [] local_bh_disable+0x10/0x34 [ 68.940172][ C0] ---[ end trace 9860002a16993f03 ]--- [ 68.959615][ T1604] device bridge_slave_0 left promiscuous mode [ 68.960697][ T1604] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.030419][ T4786] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.031737][ T4786] Bad inode number on dev loop0: 2 is out of range [ 69.032875][ T4786] SysV FS: get root inode failed [ 69.033669][ T4786] oldfs: cannot read superblock [ 69.050371][ C0] ------------[ cut here ]------------ [ 69.051269][ C0] VFS: brelse: Trying to free free buffer [ 69.052186][ C0] WARNING: CPU: 0 PID: 4789 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.053641][ C0] Modules linked in: [ 69.054252][ C0] CPU: 0 PID: 4789 Comm: syz-executor Tainted: G W syzkaller #0 [ 69.055592][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.057132][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.058364][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.059326][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.060305][ C0] sp : ffff800008007df0 [ 69.061010][ C0] x29: ffff800008007df0 x28: ffff0000ce30b680 x27: 1fffe000341d085c [ 69.062386][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 69.063726][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfaf7060 [ 69.065038][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 69.066390][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 69.067980][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.069506][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : f76d193d79928c00 [ 69.071015][ C0] x8 : f76d193d79928c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.072344][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.073648][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.074957][ C0] Call trace: [ 69.075511][ C0] invalidate_bh_lru+0x128/0x22c [ 69.076332][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.077211][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.078413][ C0] ipi_handler+0x10c/0x70c [ 69.079181][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.080161][ C0] handle_domain_irq+0x148/0x200 [ 69.081090][ C0] gic_handle_irq+0x78/0x1b8 [ 69.081823][ C0] call_on_irq_stack+0x30/0x48 [ 69.082526][ C0] do_interrupt_handler+0x6c/0x88 [ 69.083338][ C0] el1_interrupt+0x30/0x58 [ 69.084083][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.084906][ C0] el1h_64_irq+0x78/0x7c [ 69.085637][ C0] do_page_fault+0x1c0/0xad0 [ 69.086453][ C0] do_translation_fault+0xe0/0x130 [ 69.087311][ C0] do_mem_abort+0x6c/0x1b0 [ 69.088081][ C0] el0_ia+0xe0/0x2b8 [ 69.088718][ C0] el0t_64_sync_handler+0xc0/0xe4 [ 69.089594][ C0] el0t_64_sync+0x1a0/0x1a4 [ 69.090419][ C0] irq event stamp: 364 [ 69.091071][ C0] hardirqs last enabled at (363): [] local_daif_restore+0x1c/0x3c [ 69.092577][ C0] hardirqs last disabled at (364): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.094173][ C0] softirqs last enabled at (60): [] local_bh_enable+0x10/0x34 [ 69.095604][ C0] softirqs last disabled at (58): [] local_bh_disable+0x10/0x34 [ 69.097197][ C0] ---[ end trace 9860002a16993f04 ]--- [ 69.109276][ T1604] device veth1_macvtap left promiscuous mode [ 69.110426][ T1604] device veth0_macvtap left promiscuous mode [ 69.111518][ T1604] device veth1_vlan left promiscuous mode [ 69.112380][ T1604] device veth0_vlan left promiscuous mode [ 69.179538][ T4790] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.180806][ T4790] Bad inode number on dev loop0: 2 is out of range [ 69.181774][ T4790] SysV FS: get root inode failed [ 69.182588][ T4790] oldfs: cannot read superblock [ 69.183358][ C1] ------------[ cut here ]------------ [ 69.184268][ C1] VFS: brelse: Trying to free free buffer [ 69.185172][ C1] WARNING: CPU: 1 PID: 3661 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.186479][ C1] Modules linked in: [ 69.187036][ C1] CPU: 1 PID: 3661 Comm: udevd Tainted: G W syzkaller #0 [ 69.188264][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.189888][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.191113][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 69.191956][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 69.192837][ C1] sp : ffff800008017df0 [ 69.193491][ C1] x29: ffff800008017df0 x28: ffff0000d723b680 x27: 1fffe000341d4a5b [ 69.194807][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 69.196153][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dda62230 [ 69.197434][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 69.198708][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 69.200033][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 69.201351][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 2a8e883455a91600 [ 69.202748][ C1] x8 : 2a8e883455a91600 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.204017][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.205299][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.206590][ C1] Call trace: [ 69.207044][ C1] invalidate_bh_lru+0x128/0x22c [ 69.207875][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 69.208919][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.209988][ C1] ipi_handler+0x10c/0x70c [ 69.210734][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 69.211638][ C1] handle_domain_irq+0x148/0x200 [ 69.212535][ C1] gic_handle_irq+0x78/0x1b8 [ 69.213281][ C1] call_on_irq_stack+0x30/0x48 [ 69.214046][ C1] do_interrupt_handler+0x6c/0x88 [ 69.214929][ C1] el1_interrupt+0x30/0x58 [ 69.215722][ C1] el1h_64_irq_handler+0x18/0x24 [ 69.216532][ C1] el1h_64_irq+0x78/0x7c [ 69.217249][ C1] arch_local_irq_restore+0x8/0x10 [ 69.218061][ C1] ___might_sleep+0x98/0x4dc [ 69.218849][ C1] __might_sleep+0x98/0x124 [ 69.219546][ C1] __might_fault+0x80/0x128 [ 69.220265][ C1] filldir64+0x728/0xa08 [ 69.220942][ C1] kernfs_fop_readdir+0x4d8/0x78c [ 69.221775][ C1] iterate_dir+0x1f0/0x4d0 [ 69.222470][ C1] __arm64_sys_getdents64+0x11c/0x338 [ 69.223355][ C1] invoke_syscall+0x98/0x28c [ 69.224150][ C1] el0_svc_common+0x13c/0x258 [ 69.224930][ C1] do_el0_svc+0x5c/0x140 [ 69.225640][ C1] el0_svc+0x78/0x1d0 [ 69.226273][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 69.227090][ C1] el0t_64_sync+0x1a0/0x1a4 [ 69.227797][ C1] irq event stamp: 1034528 [ 69.228443][ C1] hardirqs last enabled at (1034527): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 69.230068][ C1] hardirqs last disabled at (1034528): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.231584][ C1] softirqs last enabled at (1034194): [] local_bh_enable+0x10/0x34 [ 69.233111][ C1] softirqs last disabled at (1034192): [] local_bh_disable+0x10/0x34 [ 69.234668][ C1] ---[ end trace 9860002a16993f05 ]--- [ 69.269188][ T1604] team0 (unregistering): Port device team_slave_1 removed [ 69.273563][ T1604] team0 (unregistering): Port device team_slave_0 removed [ 69.277344][ T1604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.294290][ T1604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.350662][ T4792] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.351867][ T4792] Bad inode number on dev loop0: 2 is out of range [ 69.352833][ T4792] SysV FS: get root inode failed [ 69.354865][ T4792] oldfs: cannot read superblock [ 69.364145][ C1] ------------[ cut here ]------------ [ 69.365144][ C1] VFS: brelse: Trying to free free buffer [ 69.366097][ C1] WARNING: CPU: 1 PID: 4794 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.367402][ C1] Modules linked in: [ 69.367984][ C1] CPU: 1 PID: 4794 Comm: syz.0.53 Tainted: G W syzkaller #0 [ 69.369349][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.371160][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.372512][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 69.373433][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 69.374526][ C1] sp : ffff800008017df0 [ 69.375299][ C1] x29: ffff800008017df0 x28: ffff0000db7c8000 x27: 1fffe000341d4a5c [ 69.376760][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 69.378171][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dda625d0 [ 69.379547][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 69.381025][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 69.382444][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 69.383840][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : ecb51683a2e78b00 [ 69.385254][ C1] x8 : ecb51683a2e78b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.386581][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.387926][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.389276][ C1] Call trace: [ 69.389777][ C1] invalidate_bh_lru+0x128/0x22c [ 69.390584][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 69.391572][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.392721][ C1] ipi_handler+0x10c/0x70c [ 69.393498][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 69.394421][ C1] handle_domain_irq+0x148/0x200 [ 69.395260][ C1] gic_handle_irq+0x78/0x1b8 [ 69.396073][ C1] call_on_irq_stack+0x30/0x48 [ 69.396917][ C1] do_interrupt_handler+0x6c/0x88 [ 69.397713][ C1] el1_interrupt+0x30/0x58 [ 69.398435][ C1] el1h_64_irq_handler+0x18/0x24 [ 69.399293][ C1] el1h_64_irq+0x78/0x7c [ 69.399953][ C1] memset+0x78/0x88 [ 69.400542][ C1] __alloc_pages+0xac/0x474 [ 69.401347][ C1] alloc_pages_vma+0x284/0x790 [ 69.402137][ C1] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 69.403161][ C1] handle_mm_fault+0x17f4/0x2aac [ 69.403963][ C1] do_page_fault+0x690/0xad0 [ 69.404745][ C1] do_translation_fault+0xe0/0x130 [ 69.405594][ C1] do_mem_abort+0x6c/0x1b0 [ 69.406325][ C1] el0_da+0x90/0x1ec [ 69.406952][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 69.407745][ C1] el0t_64_sync+0x1a0/0x1a4 [ 69.408510][ C1] irq event stamp: 298 [ 69.409165][ C1] hardirqs last enabled at (297): [] count_memcg_event_mm+0x1b0/0x300 [ 69.410775][ C1] hardirqs last disabled at (298): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.412281][ C1] softirqs last enabled at (50): [] local_bh_enable+0x10/0x34 [ 69.413710][ C1] softirqs last disabled at (48): [] local_bh_disable+0x10/0x34 [ 69.415064][ C1] ---[ end trace 9860002a16993f06 ]--- [ 69.441937][ T1604] bond0 (unregistering): Released all slaves [ 69.491296][ T4794] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.492878][ T4794] Bad inode number on dev loop0: 2 is out of range [ 69.493990][ T4794] SysV FS: get root inode failed [ 69.494795][ T4794] oldfs: cannot read superblock [ 69.501587][ T4713] ------------[ cut here ]------------ [ 69.502536][ T4713] VFS: brelse: Trying to free free buffer [ 69.503505][ T4713] WARNING: CPU: 0 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.504941][ T4713] Modules linked in: [ 69.505591][ T4713] CPU: 0 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 69.506935][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.508378][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.509624][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 69.510619][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 69.511581][ T4713] sp : ffff80001f2677d0 [ 69.512273][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 69.513844][ T4713] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 69.515386][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfaf7400 [ 69.516803][ T4713] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 69.518122][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 69.519649][ T4713] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.521008][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 69.522314][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.523716][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.525112][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.526463][ T4713] Call trace: [ 69.527036][ T4713] invalidate_bh_lru+0x128/0x22c [ 69.527783][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 69.528745][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.529680][ T4713] invalidate_bh_lrus+0x34/0x40 [ 69.530423][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 69.531283][ T4713] blkdev_put+0x444/0x6c4 [ 69.531975][ T4713] blkdev_close+0x74/0xb0 [ 69.532689][ T4713] __fput+0x1b8/0x7e8 [ 69.533453][ T4713] ____fput+0x20/0x30 [ 69.534171][ T4713] task_work_run+0x13c/0x1e8 [ 69.534950][ T4713] do_notify_resume+0x2488/0x30a8 [ 69.535901][ T4713] el0_svc+0xf0/0x1d0 [ 69.536657][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 69.537575][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 69.538395][ T4713] irq event stamp: 154454 [ 69.539150][ T4713] hardirqs last enabled at (154453): [] kasan_quarantine_put+0xc4/0x200 [ 69.540800][ T4713] hardirqs last disabled at (154454): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.542549][ T4713] softirqs last enabled at (154274): [] local_bh_enable+0x10/0x34 [ 69.544113][ T4713] softirqs last disabled at (154272): [] local_bh_disable+0x10/0x34 [ 69.545749][ T4713] ---[ end trace 9860002a16993f07 ]--- [ 69.572397][ T4796] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.573648][ T4796] Bad inode number on dev loop0: 2 is out of range [ 69.574776][ T4796] SysV FS: get root inode failed [ 69.575539][ T4796] oldfs: cannot read superblock [ 69.582396][ C0] ------------[ cut here ]------------ [ 69.583242][ C0] VFS: brelse: Trying to free free buffer [ 69.584177][ C0] WARNING: CPU: 0 PID: 4797 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.585495][ C0] Modules linked in: [ 69.586193][ C0] CPU: 0 PID: 4797 Comm: syz-executor Tainted: G W syzkaller #0 [ 69.587603][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.589238][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.590605][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.591583][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.592494][ C0] sp : ffff800008007df0 [ 69.593207][ C0] x29: ffff800008007df0 x28: ffff0000ca630000 x27: 1fffe000341d085c [ 69.594497][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 69.595907][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfaf77a0 [ 69.597155][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 69.598478][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 69.599857][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.601157][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : fc91065ca34cc200 [ 69.602592][ C0] x8 : fc91065ca34cc200 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.603909][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.605291][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.606538][ C0] Call trace: [ 69.607189][ C0] invalidate_bh_lru+0x128/0x22c [ 69.608105][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.609197][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.610431][ C0] ipi_handler+0x10c/0x70c [ 69.611243][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.612213][ C0] handle_domain_irq+0x148/0x200 [ 69.612997][ C0] gic_handle_irq+0x78/0x1b8 [ 69.613701][ C0] call_on_irq_stack+0x30/0x48 [ 69.614624][ C0] do_interrupt_handler+0x6c/0x88 [ 69.615643][ C0] el1_interrupt+0x30/0x58 [ 69.616400][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.617211][ C0] el1h_64_irq+0x78/0x7c [ 69.617965][ C0] xas_find+0x170/0x92c [ 69.618667][ C0] filemap_map_pages+0x1c8/0xc44 [ 69.619558][ C0] handle_mm_fault+0x18b0/0x2aac [ 69.620377][ C0] do_page_fault+0x690/0xad0 [ 69.621076][ C0] do_translation_fault+0xe0/0x130 [ 69.621915][ C0] do_mem_abort+0x6c/0x1b0 [ 69.622604][ C0] el0_ia+0xe0/0x2b8 [ 69.623248][ C0] el0t_64_sync_handler+0xc0/0xe4 [ 69.624071][ C0] el0t_64_sync+0x1a0/0x1a4 [ 69.624835][ C0] irq event stamp: 68 [ 69.625539][ C0] hardirqs last enabled at (67): [] count_memcg_event_mm+0x1b0/0x300 [ 69.627194][ C0] hardirqs last disabled at (68): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.628819][ C0] softirqs last enabled at (60): [] local_bh_enable+0x10/0x34 [ 69.630298][ C0] softirqs last disabled at (58): [] local_bh_disable+0x10/0x34 [ 69.631846][ C0] ---[ end trace 9860002a16993f08 ]--- [ 69.637247][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.638404][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.639567][ T1539] cfg80211: failed to load regulatory.db [ 69.733205][ T4798] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.734479][ T4798] Bad inode number on dev loop0: 2 is out of range [ 69.735508][ T4798] SysV FS: get root inode failed [ 69.736322][ T4798] oldfs: cannot read superblock [ 69.763373][ T4713] ------------[ cut here ]------------ [ 69.764280][ T4713] VFS: brelse: Trying to free free buffer [ 69.765167][ T4713] WARNING: CPU: 0 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.766683][ T4713] Modules linked in: [ 69.767324][ T4713] CPU: 0 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 69.768660][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.770368][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.771691][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 69.772574][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 69.773527][ T4713] sp : ffff80001f2677d0 [ 69.774260][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d085c [ 69.775766][ T4713] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 69.777236][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfaf7b40 [ 69.778620][ T4713] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 69.780130][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 69.781818][ T4713] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.783155][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 69.784735][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.786172][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.787570][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.788856][ T4713] Call trace: [ 69.789427][ T4713] invalidate_bh_lru+0x128/0x22c [ 69.790336][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 69.791311][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.792158][ T4713] invalidate_bh_lrus+0x34/0x40 [ 69.792897][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 69.793730][ T4713] blkdev_put+0x444/0x6c4 [ 69.794402][ T4713] blkdev_close+0x74/0xb0 [ 69.795127][ T4713] __fput+0x1b8/0x7e8 [ 69.795712][ T4713] ____fput+0x20/0x30 [ 69.796395][ T4713] task_work_run+0x13c/0x1e8 [ 69.797175][ T4713] do_notify_resume+0x2488/0x30a8 [ 69.798004][ T4713] el0_svc+0xf0/0x1d0 [ 69.798664][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 69.799519][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 69.800278][ T4713] irq event stamp: 163090 [ 69.800997][ T4713] hardirqs last enabled at (163089): [] kasan_quarantine_put+0xc4/0x200 [ 69.802617][ T4713] hardirqs last disabled at (163090): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.804289][ T4713] softirqs last enabled at (162908): [] local_bh_enable+0x10/0x34 [ 69.805763][ T4713] softirqs last disabled at (162906): [] local_bh_disable+0x10/0x34 [ 69.807321][ T4713] ---[ end trace 9860002a16993f09 ]--- [ 69.893609][ T4802] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.894879][ T4802] Bad inode number on dev loop0: 2 is out of range [ 69.895889][ T4802] SysV FS: get root inode failed [ 69.896685][ T4802] oldfs: cannot read superblock [ 69.897628][ T4802] ------------[ cut here ]------------ [ 69.898497][ T4802] VFS: brelse: Trying to free free buffer [ 69.899428][ T4802] WARNING: CPU: 0 PID: 4802 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.900905][ T4802] Modules linked in: [ 69.901554][ T4802] CPU: 0 PID: 4802 Comm: syz.0.57 Tainted: G W syzkaller #0 [ 69.902982][ T4802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.904548][ T4802] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.905826][ T4802] pc : invalidate_bh_lru+0x128/0x22c [ 69.906676][ T4802] lr : invalidate_bh_lru+0x128/0x22c [ 69.907710][ T4802] sp : ffff80001f8b7710 [ 69.908427][ T4802] x29: ffff80001f8b7710 x28: ffff80001438d000 x27: 1fffe000341d085b [ 69.909900][ T4802] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 69.911314][ T4802] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfaf7ee0 [ 69.912722][ T4802] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 69.914104][ T4802] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 69.915404][ T4802] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.916784][ T4802] x11: ff8080000830061c x10: 0000000000000000 x9 : 281c87742b4b0900 [ 69.918146][ T4802] x8 : 281c87742b4b0900 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.919663][ T4802] x5 : ffff80001f8b7018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.920926][ T4802] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.922318][ T4802] Call trace: [ 69.922868][ T4802] invalidate_bh_lru+0x128/0x22c [ 69.923853][ T4802] smp_call_function_many_cond+0xa5c/0xec0 [ 69.924954][ T4802] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.925890][ T4802] invalidate_bh_lrus+0x34/0x40 [ 69.926753][ T4802] blkdev_flush_mapping+0x16c/0x334 [ 69.927651][ T4802] blkdev_put+0x444/0x6c4 [ 69.928369][ T4802] kill_block_super+0xa0/0xe0 [ 69.929216][ T4802] deactivate_locked_super+0xc0/0x13c [ 69.930102][ T4802] mount_bdev+0x284/0x35c [ 69.930836][ T4802] sysv_mount+0x44/0x58 [ 69.931618][ T4802] legacy_get_tree+0xd8/0x174 [ 69.932456][ T4802] vfs_get_tree+0x90/0x278 [ 69.933204][ T4802] do_new_mount+0x228/0x804 [ 69.933951][ T4802] path_mount+0x57c/0xfe8 [ 69.934633][ T4802] __arm64_sys_mount+0x488/0x5f8 [ 69.935398][ T4802] invoke_syscall+0x98/0x28c [ 69.936122][ T4802] el0_svc_common+0x13c/0x258 [ 69.936823][ T4802] do_el0_svc+0x5c/0x140 [ 69.937513][ T4802] el0_svc+0x78/0x1d0 [ 69.938181][ T4802] el0t_64_sync_handler+0xcc/0xe4 [ 69.939111][ T4802] el0t_64_sync+0x1a0/0x1a4 [ 69.939893][ T4802] irq event stamp: 1272 [ 69.940584][ T4802] hardirqs last enabled at (1271): [] kasan_quarantine_put+0xc4/0x200 [ 69.942209][ T4802] hardirqs last disabled at (1272): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.943793][ T4802] softirqs last enabled at (1058): [] local_bh_enable+0x10/0x34 [ 69.945396][ T4802] softirqs last disabled at (1056): [] local_bh_disable+0x10/0x34 [ 69.946855][ T4802] ---[ end trace 9860002a16993f0a ]--- [ 70.078272][ T4804] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.079672][ T4804] Bad inode number on dev loop0: 2 is out of range [ 70.080759][ T4804] SysV FS: get root inode failed [ 70.081719][ T4804] oldfs: cannot read superblock [ 70.083489][ C0] ------------[ cut here ]------------ [ 70.084311][ C0] VFS: brelse: Trying to free free buffer [ 70.085239][ C0] WARNING: CPU: 0 PID: 4804 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.086642][ C0] Modules linked in: [ 70.087280][ C0] CPU: 0 PID: 4804 Comm: syz.0.58 Tainted: G W syzkaller #0 [ 70.088687][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.090284][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.091665][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.092525][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.093432][ C0] sp : ffff800008007df0 [ 70.094177][ C0] x29: ffff800008007df0 x28: ffff0000d8f10000 x27: 1fffe000341d085c [ 70.095510][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 70.096825][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb14318 [ 70.098302][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 70.099569][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 70.100831][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 70.102218][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 0782ece8d621a400 [ 70.103641][ C0] x8 : 0782ece8d621a400 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.104968][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.106357][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 70.107696][ C0] Call trace: [ 70.108276][ C0] invalidate_bh_lru+0x128/0x22c [ 70.109137][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.110183][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.111346][ C0] ipi_handler+0x10c/0x70c [ 70.112073][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.112914][ C0] handle_domain_irq+0x148/0x200 [ 70.113762][ C0] gic_handle_irq+0x78/0x1b8 [ 70.114586][ C0] call_on_irq_stack+0x30/0x48 [ 70.115374][ C0] do_interrupt_handler+0x6c/0x88 [ 70.116300][ C0] el1_interrupt+0x30/0x58 [ 70.117057][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.117878][ C0] el1h_64_irq+0x78/0x7c [ 70.118662][ C0] lock_page_memcg+0x120/0x22c [ 70.119457][ C0] page_remove_rmap+0x3c/0xfb4 [ 70.120287][ C0] unmap_page_range+0xa60/0x180c [ 70.121183][ C0] unmap_single_vma+0x13c/0x1e4 [ 70.122130][ C0] unmap_vmas+0x110/0x218 [ 70.122985][ C0] exit_mmap+0x2c4/0x510 [ 70.123763][ C0] __mmput+0xe8/0x3a0 [ 70.124468][ C0] mmput+0x80/0xc0 [ 70.125141][ C0] exit_mm+0x5dc/0x704 [ 70.125941][ C0] do_exit+0x4bc/0x1f54 [ 70.126616][ C0] do_group_exit+0x104/0x274 [ 70.127352][ C0] get_signal+0x638/0x13b0 [ 70.128073][ C0] do_notify_resume+0x344/0x30a8 [ 70.128932][ C0] el0_svc+0xf0/0x1d0 [ 70.129602][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 70.130376][ C0] el0t_64_sync+0x1a0/0x1a4 [ 70.131032][ C0] irq event stamp: 1938 [ 70.131773][ C0] hardirqs last enabled at (1937): [] lock_page_memcg+0x110/0x22c [ 70.133356][ C0] hardirqs last disabled at (1938): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.134936][ C0] softirqs last enabled at (1100): [] local_bh_enable+0x10/0x34 [ 70.136533][ C0] softirqs last disabled at (1098): [] local_bh_disable+0x10/0x34 [ 70.138208][ C0] ---[ end trace 9860002a16993f0b ]--- 1970/01/01 00:01:10 executed programs: 45 [ 70.192421][ T4806] set_capacity_and_notify: 27 callbacks suppressed [ 70.192429][ T4806] loop0: detected capacity change from 0 to 128 [ 70.195720][ T4806] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.197166][ T4806] Bad inode number on dev loop0: 2 is out of range [ 70.198283][ T4806] SysV FS: get root inode failed [ 70.199543][ T4806] oldfs: cannot read superblock [ 70.207989][ C1] ------------[ cut here ]------------ [ 70.208966][ C1] VFS: brelse: Trying to free free buffer [ 70.210032][ C1] WARNING: CPU: 1 PID: 4808 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.211613][ C1] Modules linked in: [ 70.212360][ C1] CPU: 1 PID: 4808 Comm: syz.0.60 Tainted: G W syzkaller #0 [ 70.213892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.215700][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.217059][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.217975][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.218869][ C1] sp : ffff800008017df0 [ 70.219630][ C1] x29: ffff800008017df0 x28: ffff0000d8f13680 x27: 1fffe000341d4a5c [ 70.221229][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 70.222753][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2a8f888 [ 70.224168][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 70.225512][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 70.226953][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.228398][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 1d90364a80832f00 [ 70.229815][ C1] x8 : 1d90364a80832f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.231259][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.232701][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.234030][ C1] Call trace: [ 70.234585][ C1] invalidate_bh_lru+0x128/0x22c [ 70.235417][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.236538][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.237736][ C1] ipi_handler+0x10c/0x70c [ 70.238527][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.239478][ C1] handle_domain_irq+0x148/0x200 [ 70.240279][ C1] gic_handle_irq+0x78/0x1b8 [ 70.240994][ C1] call_on_irq_stack+0x30/0x48 [ 70.241832][ C1] do_interrupt_handler+0x6c/0x88 [ 70.242779][ C1] el1_interrupt+0x30/0x58 [ 70.243551][ C1] el1h_64_irq_handler+0x18/0x24 [ 70.244424][ C1] el1h_64_irq+0x78/0x7c [ 70.245110][ C1] lock_release+0x4a8/0x8ec [ 70.245861][ C1] fs_reclaim_acquire+0x130/0x1c4 [ 70.246695][ C1] prepare_alloc_pages+0x134/0x460 [ 70.247602][ C1] __alloc_pages+0x108/0x474 [ 70.248414][ C1] alloc_pages_vma+0x284/0x790 [ 70.249269][ C1] shmem_alloc_and_acct_page+0x3ec/0xb64 [ 70.250271][ C1] shmem_getpage_gfp+0x108c/0x1f8c [ 70.251193][ C1] shmem_write_begin+0xe0/0x294 [ 70.252000][ C1] generic_perform_write+0x20c/0x490 [ 70.252903][ C1] __generic_file_write_iter+0x23c/0x44c [ 70.253873][ C1] generic_file_write_iter+0xb0/0x1b4 [ 70.254765][ C1] vfs_write+0x590/0xa64 [ 70.255544][ C1] ksys_write+0x12c/0x228 [ 70.256331][ C1] __arm64_sys_write+0x7c/0x90 [ 70.257178][ C1] invoke_syscall+0x98/0x28c [ 70.258035][ C1] el0_svc_common+0x13c/0x258 [ 70.258862][ C1] do_el0_svc+0x5c/0x140 [ 70.259560][ C1] el0_svc+0x78/0x1d0 [ 70.260246][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 70.261090][ C1] el0t_64_sync+0x1a0/0x1a4 [ 70.261842][ C1] irq event stamp: 376 [ 70.262595][ C1] hardirqs last enabled at (375): [] _raw_spin_unlock_irq+0x98/0x128 [ 70.264339][ C1] hardirqs last disabled at (376): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.266110][ C1] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 70.267767][ C1] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 70.269339][ C1] ---[ end trace 9860002a16993f0c ]--- [ 70.300659][ T4808] loop0: detected capacity change from 0 to 128 [ 70.339920][ T4808] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.341130][ T4808] Bad inode number on dev loop0: 2 is out of range [ 70.342216][ T4808] SysV FS: get root inode failed [ 70.342943][ T4808] oldfs: cannot read superblock [ 70.355995][ T4810] ------------[ cut here ]------------ [ 70.356926][ T4810] VFS: brelse: Trying to free free buffer [ 70.357921][ T4810] WARNING: CPU: 0 PID: 4810 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.359312][ T4810] Modules linked in: [ 70.359987][ T4810] CPU: 0 PID: 4810 Comm: syz.0.61 Tainted: G W syzkaller #0 [ 70.361470][ T4810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.363099][ T4810] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.364383][ T4810] pc : invalidate_bh_lru+0x128/0x22c [ 70.365360][ T4810] lr : invalidate_bh_lru+0x128/0x22c [ 70.366279][ T4810] sp : ffff80001f7077d0 [ 70.366991][ T4810] x29: ffff80001f7077d0 x28: ffff80001438d000 x27: 1fffe000341d085c [ 70.368257][ T4810] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 70.369598][ T4810] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb146b8 [ 70.371100][ T4810] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.372549][ T4810] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.373948][ T4810] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 70.375241][ T4810] x11: ff8080000830061c x10: 0000000000000000 x9 : 87793453a7128100 [ 70.376553][ T4810] x8 : 87793453a7128100 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.378182][ T4810] x5 : ffff80001f7070d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.379604][ T4810] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.380938][ T4810] Call trace: [ 70.381447][ T4810] invalidate_bh_lru+0x128/0x22c [ 70.382295][ T4810] smp_call_function_many_cond+0xa5c/0xec0 [ 70.383275][ T4810] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.384095][ T4810] invalidate_bh_lrus+0x34/0x40 [ 70.384983][ T4810] blkdev_flush_mapping+0x16c/0x334 [ 70.385940][ T4810] blkdev_put+0x444/0x6c4 [ 70.386729][ T4810] blkdev_close+0x74/0xb0 [ 70.387429][ T4810] __fput+0x1b8/0x7e8 [ 70.388131][ T4810] ____fput+0x20/0x30 [ 70.388840][ T4810] task_work_run+0x13c/0x1e8 [ 70.389657][ T4810] do_notify_resume+0x2488/0x30a8 [ 70.390541][ T4810] el0_svc+0xf0/0x1d0 [ 70.391201][ T4810] el0t_64_sync_handler+0xcc/0xe4 [ 70.392077][ T4810] el0t_64_sync+0x1a0/0x1a4 [ 70.392877][ T4810] irq event stamp: 710 [ 70.393624][ T4810] hardirqs last enabled at (709): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 70.395254][ T4810] hardirqs last disabled at (710): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.396964][ T4810] softirqs last enabled at (686): [] local_bh_enable+0x10/0x34 [ 70.398480][ T4810] softirqs last disabled at (684): [] local_bh_disable+0x10/0x34 [ 70.399873][ T4810] ---[ end trace 9860002a16993f0d ]--- [ 70.434452][ T4812] loop0: detected capacity change from 0 to 128 [ 70.436385][ T4812] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.437585][ T4812] Bad inode number on dev loop0: 2 is out of range [ 70.438999][ T4812] SysV FS: get root inode failed [ 70.439930][ T4812] oldfs: cannot read superblock [ 70.461284][ T4713] ------------[ cut here ]------------ [ 70.462066][ T4713] VFS: brelse: Trying to free free buffer [ 70.463081][ T4713] WARNING: CPU: 1 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.464434][ T4713] Modules linked in: [ 70.465125][ T4713] CPU: 1 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 70.466461][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.468019][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.469228][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 70.470231][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 70.471123][ T4713] sp : ffff80001f2677d0 [ 70.471825][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d4a5c [ 70.473342][ T4713] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 70.474630][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2a8fc28 [ 70.476162][ T4713] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.477445][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.478846][ T4713] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.480302][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 70.481670][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.483004][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.484406][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.485750][ T4713] Call trace: [ 70.486399][ T4713] invalidate_bh_lru+0x128/0x22c [ 70.487171][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 70.488085][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.488918][ T4713] invalidate_bh_lrus+0x34/0x40 [ 70.489653][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 70.490555][ T4713] blkdev_put+0x444/0x6c4 [ 70.491262][ T4713] blkdev_close+0x74/0xb0 [ 70.492007][ T4713] __fput+0x1b8/0x7e8 [ 70.492643][ T4713] ____fput+0x20/0x30 [ 70.493304][ T4713] task_work_run+0x13c/0x1e8 [ 70.494042][ T4713] do_notify_resume+0x2488/0x30a8 [ 70.494849][ T4713] el0_svc+0xf0/0x1d0 [ 70.495471][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 70.496298][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 70.497041][ T4713] irq event stamp: 190092 [ 70.497774][ T4713] hardirqs last enabled at (190091): [] kasan_quarantine_put+0xc4/0x200 [ 70.499444][ T4713] hardirqs last disabled at (190092): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.501176][ T4713] softirqs last enabled at (189896): [] local_bh_enable+0x10/0x34 [ 70.502968][ T4713] softirqs last disabled at (189894): [] local_bh_disable+0x10/0x34 [ 70.504840][ T4713] ---[ end trace 9860002a16993f0e ]--- [ 70.542303][ T4816] loop0: detected capacity change from 0 to 128 [ 70.544583][ T4816] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.546145][ T4816] Bad inode number on dev loop0: 2 is out of range [ 70.547203][ T4816] SysV FS: get root inode failed [ 70.548110][ T4816] oldfs: cannot read superblock [ 70.555077][ T4713] ------------[ cut here ]------------ [ 70.555896][ T4713] VFS: brelse: Trying to free free buffer [ 70.556805][ T4713] WARNING: CPU: 1 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.558202][ T4713] Modules linked in: [ 70.558790][ T4713] CPU: 1 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 70.560160][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.561704][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.562993][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 70.564043][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 70.565085][ T4713] sp : ffff80001f2677d0 [ 70.565909][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 70.567414][ T4713] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 70.568770][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2b01060 [ 70.570097][ T4713] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.571414][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.572968][ T4713] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.574271][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 70.575603][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.576908][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.578438][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.579785][ T4713] Call trace: [ 70.580335][ T4713] invalidate_bh_lru+0x128/0x22c [ 70.581163][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 70.582072][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.582901][ T4713] invalidate_bh_lrus+0x34/0x40 [ 70.583660][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 70.584535][ T4713] blkdev_put+0x444/0x6c4 [ 70.585309][ T4713] blkdev_close+0x74/0xb0 [ 70.586063][ T4713] __fput+0x1b8/0x7e8 [ 70.586665][ T4713] ____fput+0x20/0x30 [ 70.587321][ T4713] task_work_run+0x13c/0x1e8 [ 70.588013][ T4713] do_notify_resume+0x2488/0x30a8 [ 70.588794][ T4713] el0_svc+0xf0/0x1d0 [ 70.589467][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 70.590262][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 70.591010][ T4713] irq event stamp: 193256 [ 70.591673][ T4713] hardirqs last enabled at (193255): [] kasan_quarantine_put+0xc4/0x200 [ 70.593165][ T4713] hardirqs last disabled at (193256): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.594881][ T4713] softirqs last enabled at (193042): [] local_bh_enable+0x10/0x34 [ 70.596435][ T4713] softirqs last disabled at (193040): [] local_bh_disable+0x10/0x34 [ 70.598050][ T4713] ---[ end trace 9860002a16993f0f ]--- [ 70.657452][ T4818] loop0: detected capacity change from 0 to 128 [ 70.660173][ T4818] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.661293][ T4818] Bad inode number on dev loop0: 2 is out of range [ 70.662345][ T4818] SysV FS: get root inode failed [ 70.663060][ T4818] oldfs: cannot read superblock [ 70.676655][ C1] ------------[ cut here ]------------ [ 70.677463][ C1] VFS: brelse: Trying to free free buffer [ 70.678329][ C1] WARNING: CPU: 1 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.679733][ C1] Modules linked in: [ 70.680359][ C1] CPU: 1 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.681731][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.683216][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.684536][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.685375][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.686238][ C1] sp : ffff800008017df0 [ 70.686915][ C1] x29: ffff800008017df0 x28: ffff0000e8533680 x27: 1fffe000341d4a5c [ 70.688230][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 70.689577][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2b01400 [ 70.690879][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 70.692185][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 70.693467][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.694745][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 70.696037][ C1] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.697370][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.698679][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.700011][ C1] Call trace: [ 70.700524][ C1] invalidate_bh_lru+0x128/0x22c [ 70.701288][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.702299][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.703464][ C1] ipi_handler+0x10c/0x70c [ 70.704232][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.705152][ C1] handle_domain_irq+0x148/0x200 [ 70.705954][ C1] gic_handle_irq+0x78/0x1b8 [ 70.706692][ C1] call_on_irq_stack+0x30/0x48 [ 70.707493][ C1] do_interrupt_handler+0x6c/0x88 [ 70.708368][ C1] el1_interrupt+0x30/0x58 [ 70.709151][ C1] el1h_64_irq_handler+0x18/0x24 [ 70.710077][ C1] el1h_64_irq+0x78/0x7c [ 70.710801][ C1] seqcount_lockdep_reader_access+0x214/0x2b8 [ 70.711946][ C1] prepend_path+0xfc/0xab8 [ 70.712748][ C1] d_absolute_path+0xa0/0x148 [ 70.713544][ C1] tomoyo_realpath_from_path+0x2a4/0x540 [ 70.714497][ C1] tomoyo_path_perm+0x1e4/0x49c [ 70.715276][ C1] tomoyo_path_unlink+0xa8/0xf4 [ 70.716096][ C1] security_path_unlink+0xe4/0x134 [ 70.716954][ C1] do_unlinkat+0x27c/0x624 [ 70.717677][ C1] __arm64_sys_unlinkat+0xe0/0xfc [ 70.718511][ C1] invoke_syscall+0x98/0x28c [ 70.719212][ C1] el0_svc_common+0x13c/0x258 [ 70.719945][ C1] do_el0_svc+0x5c/0x140 [ 70.720643][ C1] el0_svc+0x78/0x1d0 [ 70.721254][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 70.722100][ C1] el0t_64_sync+0x1a0/0x1a4 [ 70.722845][ C1] irq event stamp: 241566 [ 70.723587][ C1] hardirqs last enabled at (241565): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 70.725352][ C1] hardirqs last disabled at (241566): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.726959][ C1] softirqs last enabled at (241506): [] local_bh_enable+0x10/0x34 [ 70.728525][ C1] softirqs last disabled at (241504): [] local_bh_disable+0x10/0x34 [ 70.730103][ C1] ---[ end trace 9860002a16993f10 ]--- [ 70.764846][ T4822] loop0: detected capacity change from 0 to 128 [ 70.766902][ T4822] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.768152][ T4822] Bad inode number on dev loop0: 2 is out of range [ 70.769271][ T4822] SysV FS: get root inode failed [ 70.770066][ T4822] oldfs: cannot read superblock [ 70.775342][ C0] ------------[ cut here ]------------ [ 70.776247][ C0] VFS: brelse: Trying to free free buffer [ 70.777123][ C0] WARNING: CPU: 0 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.778572][ C0] Modules linked in: [ 70.779287][ C0] CPU: 0 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.780850][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.782557][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.783927][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.784865][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.785759][ C0] sp : ffff800008007df0 [ 70.786444][ C0] x29: ffff800008007df0 x28: ffff0000e8533680 x27: 1fffe000341d085c [ 70.787686][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 70.788963][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb14a58 [ 70.790340][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010005 [ 70.791664][ C0] x17: 0000000000010005 x16: ffff80001134e478 x15: 0000000000000012 [ 70.792990][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 70.794225][ C0] x11: ff8080000830061c x10: 0000000000010004 x9 : 40e71f82f2236e00 [ 70.795488][ C0] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.796731][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.798083][ C0] x2 : 0000000000000001 x1 : 0000000100010004 x0 : 0000000000000027 [ 70.799406][ C0] Call trace: [ 70.799932][ C0] invalidate_bh_lru+0x128/0x22c [ 70.800734][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.801625][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.802791][ C0] ipi_handler+0x10c/0x70c [ 70.803495][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.804339][ C0] handle_domain_irq+0x148/0x200 [ 70.805054][ C0] gic_handle_irq+0x78/0x1b8 [ 70.805756][ C0] call_on_irq_stack+0x30/0x48 [ 70.806488][ C0] do_interrupt_handler+0x6c/0x88 [ 70.807357][ C0] el1_interrupt+0x30/0x58 [ 70.808098][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.808940][ C0] el1h_64_irq+0x78/0x7c [ 70.809658][ C0] check_preemption_disabled+0x28/0x164 [ 70.810554][ C0] debug_smp_processor_id+0x20/0x2c [ 70.811472][ C0] rcu_is_watching+0x50/0x134 [ 70.812262][ C0] lock_release+0xb4/0x8ec [ 70.812935][ C0] _raw_spin_unlock+0x8c/0x11c [ 70.813706][ C0] copy_page_range+0x1d04/0x2348 [ 70.814549][ C0] copy_mm+0x9f0/0x1070 [ 70.815227][ C0] copy_process+0x15fc/0x3734 [ 70.816003][ C0] kernel_clone+0x1ec/0xa10 [ 70.816710][ C0] __arm64_sys_clone+0x154/0x1c0 [ 70.817497][ C0] invoke_syscall+0x98/0x28c [ 70.818347][ C0] el0_svc_common+0x13c/0x258 [ 70.819080][ C0] do_el0_svc+0x5c/0x140 [ 70.819776][ C0] el0_svc+0x78/0x1d0 [ 70.820502][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 70.821373][ C0] el0t_64_sync+0x1a0/0x1a4 [ 70.822115][ C0] irq event stamp: 245408 [ 70.822857][ C0] hardirqs last enabled at (245407): [] mod_objcg_mlstate+0x13c/0x220 [ 70.824421][ C0] hardirqs last disabled at (245408): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.826082][ C0] softirqs last enabled at (245334): [] local_bh_enable+0x10/0x34 [ 70.827726][ C0] softirqs last disabled at (245332): [] local_bh_disable+0x10/0x34 [ 70.829297][ C0] ---[ end trace 9860002a16993f11 ]--- [ 70.872540][ T4824] loop0: detected capacity change from 0 to 128 [ 70.875621][ T4824] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.876762][ T4824] Bad inode number on dev loop0: 2 is out of range [ 70.877772][ T4824] SysV FS: get root inode failed [ 70.878491][ T4824] oldfs: cannot read superblock [ 70.888089][ T4713] ------------[ cut here ]------------ [ 70.888968][ T4713] VFS: brelse: Trying to free free buffer [ 70.889933][ T4713] WARNING: CPU: 1 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.891555][ T4713] Modules linked in: [ 70.892184][ T4713] CPU: 1 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 70.893657][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.895387][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.896682][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 70.897545][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 70.898381][ T4713] sp : ffff80001f2677d0 [ 70.899066][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 70.900380][ T4713] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 70.901748][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2b017a0 [ 70.903086][ T4713] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.904384][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.905882][ T4713] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.907257][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 70.908643][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.910030][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.911283][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.912582][ T4713] Call trace: [ 70.913089][ T4713] invalidate_bh_lru+0x128/0x22c [ 70.913870][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 70.914855][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.915744][ T4713] invalidate_bh_lrus+0x34/0x40 [ 70.916543][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 70.917467][ T4713] blkdev_put+0x444/0x6c4 [ 70.918219][ T4713] blkdev_close+0x74/0xb0 [ 70.918960][ T4713] __fput+0x1b8/0x7e8 [ 70.919636][ T4713] ____fput+0x20/0x30 [ 70.920292][ T4713] task_work_run+0x13c/0x1e8 [ 70.920995][ T4713] do_notify_resume+0x2488/0x30a8 [ 70.921797][ T4713] el0_svc+0xf0/0x1d0 [ 70.922422][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 70.923224][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 70.923941][ T4713] irq event stamp: 203950 [ 70.924659][ T4713] hardirqs last enabled at (203949): [] kasan_quarantine_put+0xc4/0x200 [ 70.926307][ T4713] hardirqs last disabled at (203950): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.927982][ T4713] softirqs last enabled at (203738): [] local_bh_enable+0x10/0x34 [ 70.929560][ T4713] softirqs last disabled at (203736): [] local_bh_disable+0x10/0x34 [ 70.931155][ T4713] ---[ end trace 9860002a16993f12 ]--- [ 70.962358][ T4826] loop0: detected capacity change from 0 to 128 [ 70.965760][ T4826] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.967284][ T4826] Bad inode number on dev loop0: 2 is out of range [ 70.968329][ T4826] SysV FS: get root inode failed [ 70.969515][ T4826] oldfs: cannot read superblock [ 70.977154][ C1] ------------[ cut here ]------------ [ 70.977988][ C1] VFS: brelse: Trying to free free buffer [ 70.978901][ C1] WARNING: CPU: 1 PID: 4827 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.980332][ C1] Modules linked in: [ 70.980974][ C1] CPU: 1 PID: 4827 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.982457][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.984136][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.985548][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.986325][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.987153][ C1] sp : ffff800008017df0 [ 70.987788][ C1] x29: ffff800008017df0 x28: ffff0000ed2fd1c0 x27: 1fffe000341d4a5b [ 70.989072][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 70.990306][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2b01b40 [ 70.991605][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 70.992922][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 70.994181][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.995467][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 70ee98c6c22bfe00 [ 70.996752][ C1] x8 : 70ee98c6c22bfe00 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.998092][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.999413][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.000764][ C1] Call trace: [ 71.001292][ C1] invalidate_bh_lru+0x128/0x22c [ 71.002098][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.003103][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.004153][ C1] ipi_handler+0x10c/0x70c [ 71.004918][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.005837][ C1] handle_domain_irq+0x148/0x200 [ 71.006649][ C1] gic_handle_irq+0x78/0x1b8 [ 71.007360][ C1] call_on_irq_stack+0x30/0x48 [ 71.008156][ C1] do_interrupt_handler+0x6c/0x88 [ 71.008920][ C1] el1_interrupt+0x30/0x58 [ 71.009661][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.010525][ C1] el1h_64_irq+0x78/0x7c [ 71.011194][ C1] el0_svc_common+0xac/0x258 [ 71.011949][ C1] do_el0_svc+0x5c/0x140 [ 71.012665][ C1] el0_svc+0x78/0x1d0 [ 71.013292][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.014132][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.014916][ C1] irq event stamp: 936 [ 71.015603][ C1] hardirqs last enabled at (935): [] el0_svc_common+0xa0/0x258 [ 71.017175][ C1] hardirqs last disabled at (936): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.018781][ C1] softirqs last enabled at (930): [] local_bh_enable+0x10/0x34 [ 71.020286][ C1] softirqs last disabled at (928): [] local_bh_disable+0x10/0x34 [ 71.021983][ C1] ---[ end trace 9860002a16993f13 ]--- [ 71.061428][ T4828] loop0: detected capacity change from 0 to 128 [ 71.101877][ T4828] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.102970][ T4828] Bad inode number on dev loop0: 2 is out of range [ 71.103936][ T4828] SysV FS: get root inode failed [ 71.104688][ T4828] oldfs: cannot read superblock [ 71.110581][ C0] ------------[ cut here ]------------ [ 71.111399][ C0] VFS: brelse: Trying to free free buffer [ 71.112263][ C0] WARNING: CPU: 0 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.113526][ C0] Modules linked in: [ 71.114140][ C0] CPU: 0 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.115506][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.116965][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.118000][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 71.118801][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 71.119616][ C0] sp : ffff800008007df0 [ 71.120254][ C0] x29: ffff800008007df0 x28: ffff0000e8533680 x27: 1fffe000341d085c [ 71.121542][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 71.122830][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb14df8 [ 71.124054][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 71.125325][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 71.126526][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.127850][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 71.129106][ C0] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.130371][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.131724][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.133037][ C0] Call trace: [ 71.133556][ C0] invalidate_bh_lru+0x128/0x22c [ 71.134307][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 71.135302][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.136521][ C0] ipi_handler+0x10c/0x70c [ 71.137188][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 71.138003][ C0] handle_domain_irq+0x148/0x200 [ 71.138756][ C0] gic_handle_irq+0x78/0x1b8 [ 71.139456][ C0] call_on_irq_stack+0x30/0x48 [ 71.140151][ C0] do_interrupt_handler+0x6c/0x88 [ 71.140934][ C0] el1_interrupt+0x30/0x58 [ 71.141603][ C0] el1h_64_irq_handler+0x18/0x24 [ 71.142392][ C0] el1h_64_irq+0x78/0x7c [ 71.143024][ C0] lock_acquire+0x20/0x618 [ 71.143721][ C0] percpu_ref_tryget+0x20/0x22c [ 71.144455][ C0] __memcg_kmem_charge_page+0x300/0x59c [ 71.145276][ C0] dup_task_struct+0x830/0xc24 [ 71.146009][ C0] copy_process+0x4e0/0x3734 [ 71.146702][ C0] kernel_clone+0x1ec/0xa10 [ 71.147410][ C0] __arm64_sys_clone+0x154/0x1c0 [ 71.148140][ C0] invoke_syscall+0x98/0x28c [ 71.148838][ C0] el0_svc_common+0x13c/0x258 [ 71.149574][ C0] do_el0_svc+0x5c/0x140 [ 71.150315][ C0] el0_svc+0x78/0x1d0 [ 71.150926][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 71.151708][ C0] el0t_64_sync+0x1a0/0x1a4 [ 71.152419][ C0] irq event stamp: 252674 [ 71.153045][ C0] hardirqs last enabled at (252673): [] try_charge_memcg+0x1c8/0x115c [ 71.154585][ C0] hardirqs last disabled at (252674): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.156188][ C0] softirqs last enabled at (252612): [] release_sock+0x1d0/0x258 [ 71.157577][ C0] softirqs last disabled at (252610): [] release_sock+0x34/0x258 [ 71.158989][ C0] ---[ end trace 9860002a16993f14 ]--- [ 71.191427][ T4830] loop0: detected capacity change from 0 to 128 [ 71.193879][ T4830] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.195384][ T4830] Bad inode number on dev loop0: 2 is out of range [ 71.196408][ T4830] SysV FS: get root inode failed [ 71.197276][ T4830] oldfs: cannot read superblock [ 71.204164][ C1] ------------[ cut here ]------------ [ 71.205067][ C1] VFS: brelse: Trying to free free buffer [ 71.206021][ C1] WARNING: CPU: 1 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.207372][ C1] Modules linked in: [ 71.207980][ C1] CPU: 1 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.209406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.211081][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.212413][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.213340][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.214283][ C1] sp : ffff800008017df0 [ 71.214965][ C1] x29: ffff800008017df0 x28: ffff0000e8533680 x27: 1fffe000341d4a5c [ 71.216230][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 71.217497][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2b01ee0 [ 71.218795][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 71.220081][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 71.221393][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 71.222753][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 71.224094][ C1] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.225334][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.226606][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.227994][ C1] Call trace: [ 71.228561][ C1] invalidate_bh_lru+0x128/0x22c [ 71.229385][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.230391][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.231525][ C1] ipi_handler+0x10c/0x70c [ 71.232281][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.233143][ C1] handle_domain_irq+0x148/0x200 [ 71.233922][ C1] gic_handle_irq+0x78/0x1b8 [ 71.234707][ C1] call_on_irq_stack+0x30/0x48 [ 71.235460][ C1] do_interrupt_handler+0x6c/0x88 [ 71.236222][ C1] el1_interrupt+0x30/0x58 [ 71.237013][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.237810][ C1] el1h_64_irq+0x78/0x7c [ 71.238537][ C1] __sanitizer_cov_trace_pc+0xa4/0xa8 [ 71.239337][ C1] arch_stack_walk+0x204/0x2c0 [ 71.240138][ C1] stack_trace_save+0x9c/0xf0 [ 71.240956][ C1] __kasan_kmalloc+0xb0/0xf0 [ 71.241742][ C1] __kmalloc_node+0x2b0/0x50c [ 71.242551][ C1] kvmalloc_node+0x88/0x200 [ 71.243335][ C1] xt_replace_table+0x1a4/0x774 [ 71.244129][ C1] __do_replace+0x12c/0x9c0 [ 71.244845][ C1] do_ip6t_set_ctl+0xadc/0xe38 [ 71.245651][ C1] nf_setsockopt+0x260/0x280 [ 71.246454][ C1] ipv6_setsockopt+0x1b64/0x392c [ 71.247280][ C1] tcp_setsockopt+0x1f4/0x1b8c [ 71.248052][ C1] sock_common_setsockopt+0xb0/0xcc [ 71.248908][ C1] __sys_setsockopt+0x260/0x36c [ 71.249696][ C1] __arm64_sys_setsockopt+0xc0/0xdc [ 71.250515][ C1] invoke_syscall+0x98/0x28c [ 71.251259][ C1] el0_svc_common+0x13c/0x258 [ 71.252110][ C1] do_el0_svc+0x5c/0x140 [ 71.252815][ C1] el0_svc+0x78/0x1d0 [ 71.253480][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.254330][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.255116][ C1] irq event stamp: 255012 [ 71.255822][ C1] hardirqs last enabled at (255011): [] ___slab_alloc+0xc10/0xd84 [ 71.257455][ C1] hardirqs last disabled at (255012): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.259084][ C1] softirqs last enabled at (254986): [] release_sock+0x1d0/0x258 [ 71.260747][ C1] softirqs last disabled at (254984): [] release_sock+0x34/0x258 [ 71.262306][ C1] ---[ end trace 9860002a16993f15 ]--- [ 71.390157][ T4832] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.391457][ T4832] Bad inode number on dev loop0: 2 is out of range [ 71.392592][ T4832] SysV FS: get root inode failed [ 71.393341][ T4832] oldfs: cannot read superblock [ 71.405117][ C0] ------------[ cut here ]------------ [ 71.406018][ C0] VFS: brelse: Trying to free free buffer [ 71.406987][ C0] WARNING: CPU: 0 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.408261][ C0] Modules linked in: [ 71.408899][ C0] CPU: 0 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.410358][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.412075][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.413334][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 71.414223][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 71.415030][ C0] sp : ffff800008007df0 [ 71.415684][ C0] x29: ffff800008007df0 x28: ffff0000e8533680 x27: 1fffe000341d085c [ 71.417006][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 71.418355][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfbd7230 [ 71.419663][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 71.420897][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 71.422194][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.423407][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 71.424648][ C0] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.425873][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.427112][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.428384][ C0] Call trace: [ 71.428876][ C0] invalidate_bh_lru+0x128/0x22c [ 71.429610][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 71.430608][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.431681][ C0] ipi_handler+0x10c/0x70c [ 71.432354][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 71.433192][ C0] handle_domain_irq+0x148/0x200 [ 71.434014][ C0] gic_handle_irq+0x78/0x1b8 [ 71.434818][ C0] call_on_irq_stack+0x30/0x48 [ 71.435517][ C0] do_interrupt_handler+0x6c/0x88 [ 71.436333][ C0] el1_interrupt+0x30/0x58 [ 71.437006][ C0] el1h_64_irq_handler+0x18/0x24 [ 71.437795][ C0] el1h_64_irq+0x78/0x7c [ 71.438427][ C0] __local_bh_enable_ip+0x200/0x37c [ 71.439165][ C0] local_bh_enable+0x28/0x34 [ 71.439839][ C0] xt_replace_table+0x31c/0x774 [ 71.440616][ C0] __do_replace+0x12c/0x9c0 [ 71.441277][ C0] do_ip6t_set_ctl+0xadc/0xe38 [ 71.442031][ C0] nf_setsockopt+0x260/0x280 [ 71.442726][ C0] ipv6_setsockopt+0x1b64/0x392c [ 71.443441][ C0] tcp_setsockopt+0x1f4/0x1b8c [ 71.444155][ C0] sock_common_setsockopt+0xb0/0xcc [ 71.445001][ C0] __sys_setsockopt+0x260/0x36c [ 71.445735][ C0] __arm64_sys_setsockopt+0xc0/0xdc [ 71.446520][ C0] invoke_syscall+0x98/0x28c [ 71.447201][ C0] el0_svc_common+0x13c/0x258 [ 71.447914][ C0] do_el0_svc+0x5c/0x140 [ 71.448572][ C0] el0_svc+0x78/0x1d0 [ 71.449189][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 71.449993][ C0] el0t_64_sync+0x1a0/0x1a4 [ 71.450661][ C0] irq event stamp: 257762 [ 71.451278][ C0] hardirqs last enabled at (257761): [] __local_bh_enable_ip+0x1f8/0x37c [ 71.452842][ C0] hardirqs last disabled at (257762): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.454366][ C0] softirqs last enabled at (257760): [] local_bh_enable+0x10/0x34 [ 71.455784][ C0] softirqs last disabled at (257758): [] local_bh_disable+0x10/0x34 [ 71.457232][ C0] ---[ end trace 9860002a16993f16 ]--- [ 71.560805][ T4834] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.562071][ T4834] Bad inode number on dev loop0: 2 is out of range [ 71.563078][ T4834] SysV FS: get root inode failed [ 71.563840][ T4834] oldfs: cannot read superblock [ 71.564548][ T4834] ------------[ cut here ]------------ [ 71.565370][ T4834] VFS: brelse: Trying to free free buffer [ 71.566266][ T4834] WARNING: CPU: 0 PID: 4834 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.567598][ T4834] Modules linked in: [ 71.568192][ T4834] CPU: 0 PID: 4834 Comm: syz.0.73 Tainted: G W syzkaller #0 [ 71.569713][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.571287][ T4834] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.572475][ T4834] pc : invalidate_bh_lru+0x128/0x22c [ 71.573489][ T4834] lr : invalidate_bh_lru+0x128/0x22c [ 71.574424][ T4834] sp : ffff80001f8b7710 [ 71.575068][ T4834] x29: ffff80001f8b7710 x28: ffff80001438d000 x27: 1fffe000341d085b [ 71.576320][ T4834] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 71.577601][ T4834] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfbd75d0 [ 71.578920][ T4834] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 71.580215][ T4834] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 71.581551][ T4834] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.582954][ T4834] x11: ff8080000830061c x10: 0000000000000000 x9 : c731dddd28392d00 [ 71.584387][ T4834] x8 : c731dddd28392d00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.585656][ T4834] x5 : ffff80001f8b7018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.586978][ T4834] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.588178][ T4834] Call trace: [ 71.588679][ T4834] invalidate_bh_lru+0x128/0x22c [ 71.589474][ T4834] smp_call_function_many_cond+0xa5c/0xec0 [ 71.590372][ T4834] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.591185][ T4834] invalidate_bh_lrus+0x34/0x40 [ 71.592042][ T4834] blkdev_flush_mapping+0x16c/0x334 [ 71.592879][ T4834] blkdev_put+0x444/0x6c4 [ 71.593616][ T4834] kill_block_super+0xa0/0xe0 [ 71.594342][ T4834] deactivate_locked_super+0xc0/0x13c [ 71.595175][ T4834] mount_bdev+0x284/0x35c [ 71.595865][ T4834] sysv_mount+0x44/0x58 [ 71.596593][ T4834] legacy_get_tree+0xd8/0x174 [ 71.597449][ T4834] vfs_get_tree+0x90/0x278 [ 71.598173][ T4834] do_new_mount+0x228/0x804 [ 71.598953][ T4834] path_mount+0x57c/0xfe8 [ 71.599601][ T4834] __arm64_sys_mount+0x488/0x5f8 [ 71.600358][ T4834] invoke_syscall+0x98/0x28c [ 71.601055][ T4834] el0_svc_common+0x13c/0x258 [ 71.601842][ T4834] do_el0_svc+0x5c/0x140 [ 71.602475][ T4834] el0_svc+0x78/0x1d0 [ 71.603090][ T4834] el0t_64_sync_handler+0xcc/0xe4 [ 71.603975][ T4834] el0t_64_sync+0x1a0/0x1a4 [ 71.604702][ T4834] irq event stamp: 1196 [ 71.605336][ T4834] hardirqs last enabled at (1195): [] kasan_quarantine_put+0xc4/0x200 [ 71.606864][ T4834] hardirqs last disabled at (1196): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.608559][ T4834] softirqs last enabled at (978): [] local_bh_enable+0x10/0x34 [ 71.610177][ T4834] softirqs last disabled at (976): [] local_bh_disable+0x10/0x34 [ 71.611683][ T4834] ---[ end trace 9860002a16993f17 ]--- [ 71.743912][ T4839] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.745248][ T4839] Bad inode number on dev loop0: 2 is out of range [ 71.746223][ T4839] SysV FS: get root inode failed [ 71.746992][ T4839] oldfs: cannot read superblock [ 71.750400][ C0] ------------[ cut here ]------------ [ 71.751159][ C0] VFS: brelse: Trying to free free buffer [ 71.752067][ C0] WARNING: CPU: 0 PID: 4399 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.753384][ C0] Modules linked in: [ 71.753929][ C0] CPU: 0 PID: 4399 Comm: syz-execprog Tainted: G W syzkaller #0 [ 71.755244][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.756672][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.757846][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 71.758608][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 71.759413][ C0] sp : ffff800008007df0 [ 71.759997][ C0] x29: ffff800008007df0 x28: ffff0000c66151c0 x27: 1fffe000341d085c [ 71.761215][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 71.762466][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfbd7970 [ 71.763713][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 71.764970][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 71.766224][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.767407][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 4d5eab0b36558900 [ 71.768622][ C0] x8 : 4d5eab0b36558900 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.769818][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.770980][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 71.772292][ C0] Call trace: [ 71.772758][ C0] invalidate_bh_lru+0x128/0x22c [ 71.773530][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 71.774481][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.775587][ C0] ipi_handler+0x10c/0x70c [ 71.776230][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 71.777053][ C0] handle_domain_irq+0x148/0x200 [ 71.777874][ C0] gic_handle_irq+0x78/0x1b8 [ 71.778553][ C0] call_on_irq_stack+0x30/0x48 [ 71.779292][ C0] do_interrupt_handler+0x6c/0x88 [ 71.780147][ C0] el1_interrupt+0x30/0x58 [ 71.780911][ C0] el1h_64_irq_handler+0x18/0x24 [ 71.781724][ C0] el1h_64_irq+0x78/0x7c [ 71.782398][ C0] _raw_write_unlock_irq+0xa0/0x128 [ 71.783247][ C0] ep_done_scan+0x3e8/0x40c [ 71.783955][ C0] ep_poll+0xebc/0x1650 [ 71.784602][ C0] do_epoll_wait+0x19c/0x204 [ 71.785276][ C0] do_epoll_pwait+0x70/0x194 [ 71.785957][ C0] __arm64_sys_epoll_pwait+0x200/0x258 [ 71.786785][ C0] invoke_syscall+0x98/0x28c [ 71.787519][ C0] el0_svc_common+0x13c/0x258 [ 71.788202][ C0] do_el0_svc+0x5c/0x140 [ 71.788852][ C0] el0_svc+0x78/0x1d0 [ 71.789453][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 71.790276][ C0] el0t_64_sync+0x1a0/0x1a4 [ 71.791001][ C0] irq event stamp: 91354 [ 71.791664][ C0] hardirqs last enabled at (91353): [] _raw_write_unlock_irq+0x98/0x128 [ 71.793144][ C0] hardirqs last disabled at (91354): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.794669][ C0] softirqs last enabled at (91324): [] release_sock+0x1d0/0x258 [ 71.796074][ C0] softirqs last disabled at (91322): [] release_sock+0x34/0x258 [ 71.797392][ C0] ---[ end trace 9860002a16993f18 ]--- [ 71.842077][ T4841] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.843254][ T4841] Bad inode number on dev loop0: 2 is out of range [ 71.844385][ T4841] SysV FS: get root inode failed [ 71.845153][ T4841] oldfs: cannot read superblock [ 71.850919][ C0] ------------[ cut here ]------------ [ 71.851787][ C0] VFS: brelse: Trying to free free buffer [ 71.852690][ C0] WARNING: CPU: 0 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.854031][ C0] Modules linked in: [ 71.854652][ C0] CPU: 0 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.856006][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.857547][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.858822][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 71.859619][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 71.860461][ C0] sp : ffff800008007df0 [ 71.861099][ C0] x29: ffff800008007df0 x28: ffff0000e8533680 x27: 1fffe000341d085c [ 71.862343][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 71.863611][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfbd7d10 [ 71.864866][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 71.866203][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 71.867522][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.868809][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 71.870111][ C0] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.871385][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.872696][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.873979][ C0] Call trace: [ 71.874473][ C0] invalidate_bh_lru+0x128/0x22c [ 71.875206][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 71.876123][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.877141][ C0] ipi_handler+0x10c/0x70c [ 71.877834][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 71.878693][ C0] handle_domain_irq+0x148/0x200 [ 71.879457][ C0] gic_handle_irq+0x78/0x1b8 [ 71.880212][ C0] call_on_irq_stack+0x30/0x48 [ 71.880981][ C0] do_interrupt_handler+0x6c/0x88 [ 71.881768][ C0] el1_interrupt+0x30/0x58 [ 71.882475][ C0] el1h_64_irq_handler+0x18/0x24 [ 71.883225][ C0] el1h_64_irq+0x78/0x7c [ 71.883853][ C0] __local_bh_enable_ip+0x200/0x37c [ 71.884665][ C0] local_bh_enable+0x28/0x34 [ 71.885342][ C0] fpsimd_preserve_current_state+0xa8/0x164 [ 71.886266][ C0] arch_dup_task_struct+0x54/0x164 [ 71.887028][ C0] dup_task_struct+0x358/0xc24 [ 71.887801][ C0] copy_process+0x4e0/0x3734 [ 71.888483][ C0] kernel_clone+0x1ec/0xa10 [ 71.889116][ C0] __arm64_sys_clone+0x154/0x1c0 [ 71.889910][ C0] invoke_syscall+0x98/0x28c [ 71.890569][ C0] el0_svc_common+0x13c/0x258 [ 71.891310][ C0] do_el0_svc+0x5c/0x140 [ 71.892026][ C0] el0_svc+0x78/0x1d0 [ 71.892676][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 71.893471][ C0] el0t_64_sync+0x1a0/0x1a4 [ 71.894156][ C0] irq event stamp: 267124 [ 71.894865][ C0] hardirqs last enabled at (267123): [] __local_bh_enable_ip+0x1f8/0x37c [ 71.896525][ C0] hardirqs last disabled at (267124): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.898066][ C0] softirqs last enabled at (267122): [] local_bh_enable+0x10/0x34 [ 71.899516][ C0] softirqs last disabled at (267120): [] local_bh_disable+0x10/0x34 [ 71.901039][ C0] ---[ end trace 9860002a16993f19 ]--- [ 71.960275][ T4843] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.961396][ T4843] Bad inode number on dev loop0: 2 is out of range [ 71.962367][ T4843] SysV FS: get root inode failed [ 71.963119][ T4843] oldfs: cannot read superblock [ 71.965093][ T4713] ------------[ cut here ]------------ [ 71.965990][ T4713] VFS: brelse: Trying to free free buffer [ 71.966794][ T4713] WARNING: CPU: 0 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.968020][ T4713] Modules linked in: [ 71.968559][ T4713] CPU: 0 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 71.969868][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.971409][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.972642][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 71.973520][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 71.974329][ T4713] sp : ffff80001f2677d0 [ 71.974953][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 71.976249][ T4713] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 71.977551][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb12148 [ 71.978847][ T4713] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 71.980112][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 71.981401][ T4713] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.982674][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 71.983903][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.985240][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.986611][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.988016][ T4713] Call trace: [ 71.988549][ T4713] invalidate_bh_lru+0x128/0x22c [ 71.989341][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 71.990269][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.991046][ T4713] invalidate_bh_lrus+0x34/0x40 [ 71.991722][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 71.992589][ T4713] blkdev_put+0x444/0x6c4 [ 71.993240][ T4713] blkdev_close+0x74/0xb0 [ 71.993978][ T4713] __fput+0x1b8/0x7e8 [ 71.994608][ T4713] ____fput+0x20/0x30 [ 71.995216][ T4713] task_work_run+0x13c/0x1e8 [ 71.995934][ T4713] do_notify_resume+0x2488/0x30a8 [ 71.996679][ T4713] el0_svc+0xf0/0x1d0 [ 71.997305][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 71.998124][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 71.998813][ T4713] irq event stamp: 237250 [ 71.999472][ T4713] hardirqs last enabled at (237249): [] kasan_quarantine_put+0xc4/0x200 [ 72.001044][ T4713] hardirqs last disabled at (237250): [] smp_call_function_many_cond+0xa50/0xec0 [ 72.002741][ T4713] softirqs last enabled at (237018): [] local_bh_enable+0x10/0x34 [ 72.004280][ T4713] softirqs last disabled at (237016): [] local_bh_disable+0x10/0x34 [ 72.005828][ T4713] ---[ end trace 9860002a16993f1a ]--- [ 72.028046][ T4846] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.032360][ T4846] Bad inode number on dev loop0: 2 is out of range [ 72.033400][ T4846] SysV FS: get root inode failed [ 72.034268][ T4846] oldfs: cannot read superblock [ 72.038620][ C1] ------------[ cut here ]------------ [ 72.039586][ C1] VFS: brelse: Trying to free free buffer [ 72.040513][ C1] WARNING: CPU: 1 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.041936][ C1] Modules linked in: [ 72.042603][ C1] CPU: 1 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.044018][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.045669][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.047097][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.048018][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.048839][ C1] sp : ffff800008017df0 [ 72.049568][ C1] x29: ffff800008017df0 x28: ffff0000e8533680 x27: 1fffe000341d4a5c [ 72.051012][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 72.052392][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2b02318 [ 72.053752][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 72.055071][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 72.056402][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.057756][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 72.059030][ C1] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.060279][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.061675][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.062980][ C1] Call trace: [ 72.063570][ C1] invalidate_bh_lru+0x128/0x22c [ 72.064348][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.065328][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.066421][ C1] ipi_handler+0x10c/0x70c [ 72.067142][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.068026][ C1] handle_domain_irq+0x148/0x200 [ 72.068798][ C1] gic_handle_irq+0x78/0x1b8 [ 72.069520][ C1] call_on_irq_stack+0x30/0x48 [ 72.070328][ C1] do_interrupt_handler+0x6c/0x88 [ 72.071110][ C1] el1_interrupt+0x30/0x58 [ 72.071842][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.072680][ C1] el1h_64_irq+0x78/0x7c [ 72.073370][ C1] lock_acquire+0x234/0x618 [ 72.074183][ C1] fs_reclaim_acquire+0xec/0x1c4 [ 72.075044][ C1] slab_pre_alloc_hook+0x38/0xe8 [ 72.075861][ C1] __kmalloc_node+0xb8/0x50c [ 72.076597][ C1] __vmalloc_node_range+0x2b4/0x8c0 [ 72.077450][ C1] vzalloc+0x110/0x188 [ 72.078098][ C1] alloc_counters+0x80/0x790 [ 72.078865][ C1] do_ipt_get_ctl+0xb58/0x1464 [ 72.079713][ C1] nf_getsockopt+0x254/0x274 [ 72.080629][ C1] ip_getsockopt+0x1218/0x1664 [ 72.081481][ C1] tcp_getsockopt+0x214/0x2d2c [ 72.082380][ C1] sock_common_getsockopt+0xa8/0xc4 [ 72.083338][ C1] __sys_getsockopt+0x1b8/0x250 [ 72.084308][ C1] __arm64_sys_getsockopt+0xc0/0xdc [ 72.085215][ C1] invoke_syscall+0x98/0x28c [ 72.085974][ C1] el0_svc_common+0x13c/0x258 [ 72.086774][ C1] do_el0_svc+0x5c/0x140 [ 72.087504][ C1] el0_svc+0x78/0x1d0 [ 72.088211][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 72.088990][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.089748][ C1] irq event stamp: 271576 [ 72.090466][ C1] hardirqs last enabled at (271575): [] ___slab_alloc+0xc10/0xd84 [ 72.092180][ C1] hardirqs last disabled at (271576): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.093749][ C1] softirqs last enabled at (271568): [] release_sock+0x1d0/0x258 [ 72.095247][ C1] softirqs last disabled at (271566): [] release_sock+0x34/0x258 [ 72.096775][ C1] ---[ end trace 9860002a16993f1b ]--- [ 72.152791][ T4848] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.154109][ T4848] Bad inode number on dev loop0: 2 is out of range [ 72.155117][ T4848] SysV FS: get root inode failed [ 72.155814][ T4848] oldfs: cannot read superblock [ 72.159859][ C0] ------------[ cut here ]------------ [ 72.160802][ C0] VFS: brelse: Trying to free free buffer [ 72.161683][ C0] WARNING: CPU: 0 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.162985][ C0] Modules linked in: [ 72.163548][ C0] CPU: 0 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.164830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.166284][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.167442][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.168212][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.169077][ C0] sp : ffff800008007df0 [ 72.169717][ C0] x29: ffff800008007df0 x28: ffff0000e8533680 x27: 1fffe000341d085c [ 72.170962][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 72.172217][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb124e8 [ 72.173510][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 72.174842][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 72.176082][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 72.177429][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 72.178720][ C0] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.180021][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.181272][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.182572][ C0] Call trace: [ 72.183076][ C0] invalidate_bh_lru+0x128/0x22c [ 72.183880][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.184799][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.185855][ C0] ipi_handler+0x10c/0x70c [ 72.186505][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.187321][ C0] handle_domain_irq+0x148/0x200 [ 72.188192][ C0] gic_handle_irq+0x78/0x1b8 [ 72.188889][ C0] call_on_irq_stack+0x30/0x48 [ 72.189692][ C0] do_interrupt_handler+0x6c/0x88 [ 72.190407][ C0] el1_interrupt+0x30/0x58 [ 72.191050][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.191830][ C0] el1h_64_irq+0x78/0x7c [ 72.192451][ C0] do_notify_resume+0x110/0x30a8 [ 72.193245][ C0] el0_svc+0xf0/0x1d0 [ 72.193890][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 72.194722][ C0] el0t_64_sync+0x1a0/0x1a4 [ 72.195486][ C0] irq event stamp: 273178 [ 72.196166][ C0] hardirqs last enabled at (273177): [] do_notify_resume+0x104/0x30a8 [ 72.197683][ C0] hardirqs last disabled at (273178): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.199269][ C0] softirqs last enabled at (272740): [] handle_softirqs+0xa70/0xc14 [ 72.200996][ C0] softirqs last disabled at (272723): [] __irq_exit_rcu+0x240/0x434 [ 72.202589][ C0] ---[ end trace 9860002a16993f1c ]--- [ 72.246262][ T4850] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.247439][ T4850] Bad inode number on dev loop0: 2 is out of range [ 72.248456][ T4850] SysV FS: get root inode failed [ 72.249725][ T4850] oldfs: cannot read superblock [ 72.257314][ C1] ------------[ cut here ]------------ [ 72.258202][ C1] VFS: brelse: Trying to free free buffer [ 72.259104][ C1] WARNING: CPU: 1 PID: 4851 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.260543][ C1] Modules linked in: [ 72.261197][ C1] CPU: 1 PID: 4851 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.262719][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.264591][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.265856][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.266733][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.267770][ C1] sp : ffff800008017df0 [ 72.268450][ C1] x29: ffff800008017df0 x28: ffff0000c16a9b40 x27: 1fffe000341d4a5c [ 72.269815][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 72.271132][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2b026b8 [ 72.272582][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 72.273976][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 72.275354][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.276744][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : ae081032e5200000 [ 72.278131][ C1] x8 : ae081032e5200000 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.279474][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.280709][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.281993][ C1] Call trace: [ 72.282497][ C1] invalidate_bh_lru+0x128/0x22c [ 72.283340][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.284352][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.285469][ C1] ipi_handler+0x10c/0x70c [ 72.286227][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.287161][ C1] handle_domain_irq+0x148/0x200 [ 72.287937][ C1] gic_handle_irq+0x78/0x1b8 [ 72.288709][ C1] call_on_irq_stack+0x30/0x48 [ 72.289501][ C1] do_interrupt_handler+0x6c/0x88 [ 72.290306][ C1] el1_interrupt+0x30/0x58 [ 72.290947][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.291720][ C1] el1h_64_irq+0x78/0x7c [ 72.292472][ C1] stack_depot_save+0x1d0/0x49c [ 72.293293][ C1] __kasan_kmalloc+0xcc/0xf0 [ 72.294065][ C1] __kmalloc_node+0x2b0/0x50c [ 72.294880][ C1] memcg_alloc_page_obj_cgroups+0x80/0x16c [ 72.295843][ C1] slab_post_alloc_hook+0xb8/0x3f8 [ 72.296728][ C1] kmem_cache_alloc+0x1dc/0x3d8 [ 72.297513][ C1] __d_alloc+0x3c/0x684 [ 72.298269][ C1] d_alloc_parallel+0x80/0x1184 [ 72.299070][ C1] path_openat+0x708/0x2808 [ 72.299801][ C1] do_filp_open+0x188/0x370 [ 72.300567][ C1] do_sys_openat2+0x134/0x3fc [ 72.301335][ C1] __arm64_sys_openat+0x11c/0x150 [ 72.302250][ C1] invoke_syscall+0x98/0x28c [ 72.302998][ C1] el0_svc_common+0x13c/0x258 [ 72.303795][ C1] do_el0_svc+0x5c/0x140 [ 72.304478][ C1] el0_svc+0x78/0x1d0 [ 72.305117][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 72.305923][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.306676][ C1] irq event stamp: 878 [ 72.307307][ C1] hardirqs last enabled at (877): [] ___slab_alloc+0xc10/0xd84 [ 72.308815][ C1] hardirqs last disabled at (878): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.310498][ C1] softirqs last enabled at (842): [] local_bh_enable+0x10/0x34 [ 72.312069][ C1] softirqs last disabled at (840): [] local_bh_disable+0x10/0x34 [ 72.313694][ C1] ---[ end trace 9860002a16993f1d ]--- [ 72.444305][ T4852] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.445525][ T4852] Bad inode number on dev loop0: 2 is out of range [ 72.446509][ T4852] SysV FS: get root inode failed [ 72.447355][ T4852] oldfs: cannot read superblock [ 72.455499][ C0] ------------[ cut here ]------------ [ 72.456368][ C0] VFS: brelse: Trying to free free buffer [ 72.457388][ C0] WARNING: CPU: 0 PID: 4853 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.458761][ C0] Modules linked in: [ 72.459364][ C0] CPU: 0 PID: 4853 Comm: syz.0.82 Tainted: G W syzkaller #0 [ 72.460835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.462446][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.463678][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.464472][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.465287][ C0] sp : ffff800008007df0 [ 72.465909][ C0] x29: ffff800008007df0 x28: ffff0000c1403680 x27: 1fffe000341d085c [ 72.467168][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 72.468350][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb12888 [ 72.469651][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 72.470917][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 72.472166][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 72.473410][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 4114bbef2fab0100 [ 72.474630][ C0] x8 : 4114bbef2fab0100 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.476028][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.477421][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.478835][ C0] Call trace: [ 72.479391][ C0] invalidate_bh_lru+0x128/0x22c [ 72.480210][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.481167][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.482355][ C0] ipi_handler+0x10c/0x70c [ 72.483039][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.483884][ C0] handle_domain_irq+0x148/0x200 [ 72.484670][ C0] gic_handle_irq+0x78/0x1b8 [ 72.485365][ C0] call_on_irq_stack+0x30/0x48 [ 72.486173][ C0] do_interrupt_handler+0x6c/0x88 [ 72.486939][ C0] el1_interrupt+0x30/0x58 [ 72.487629][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.488417][ C0] el1h_64_irq+0x78/0x7c [ 72.489129][ C0] arch_local_irq_restore+0x8/0x10 [ 72.489896][ C0] rcu_read_lock_sched_held+0x38/0xb4 [ 72.490717][ C0] mem_cgroup_from_task+0x50/0x120 [ 72.491487][ C0] get_mem_cgroup_from_mm+0xd4/0x330 [ 72.492291][ C0] __mem_cgroup_charge+0x24/0xa8 [ 72.493027][ C0] wp_page_copy+0x274/0x13dc [ 72.493733][ C0] do_wp_page+0x6d0/0x994 [ 72.494405][ C0] handle_mm_fault+0x1668/0x2aac [ 72.495182][ C0] do_page_fault+0x690/0xad0 [ 72.495900][ C0] do_mem_abort+0x6c/0x1b0 [ 72.496611][ C0] el0_da+0x90/0x1ec [ 72.497252][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 72.498058][ C0] el0t_64_sync+0x1a0/0x1a4 [ 72.498758][ C0] irq event stamp: 1834 [ 72.499406][ C0] hardirqs last enabled at (1833): [] seqcount_lockdep_reader_access+0x14c/0x22c [ 72.501097][ C0] hardirqs last disabled at (1834): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.502628][ C0] softirqs last enabled at (1164): [] local_bh_enable+0x10/0x34 [ 72.504066][ C0] softirqs last disabled at (1162): [] local_bh_disable+0x10/0x34 [ 72.505478][ C0] ---[ end trace 9860002a16993f1e ]--- [ 72.593182][ T4854] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.594355][ T4854] Bad inode number on dev loop0: 2 is out of range [ 72.595414][ T4854] SysV FS: get root inode failed [ 72.596192][ T4854] oldfs: cannot read superblock [ 72.597144][ C1] ------------[ cut here ]------------ [ 72.597949][ C1] VFS: brelse: Trying to free free buffer [ 72.598767][ C1] WARNING: CPU: 1 PID: 4854 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.600384][ C1] Modules linked in: [ 72.600993][ C1] CPU: 1 PID: 4854 Comm: syz.0.82 Tainted: G W syzkaller #0 [ 72.602489][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.604057][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.605487][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.606540][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.607436][ C1] sp : ffff800008017df0 [ 72.608165][ C1] x29: ffff800008017df0 x28: ffff0000daab3680 x27: 1fffe000341d4a5b [ 72.609497][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 72.611079][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2b02a58 [ 72.612475][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 72.613652][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 72.614936][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.616258][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 74570b237bd97400 [ 72.617577][ C1] x8 : 74570b237bd97400 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.618831][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.620040][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.621325][ C1] Call trace: [ 72.621914][ C1] invalidate_bh_lru+0x128/0x22c [ 72.622665][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.623639][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.624822][ C1] ipi_handler+0x10c/0x70c [ 72.625664][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.626563][ C1] handle_domain_irq+0x148/0x200 [ 72.627408][ C1] gic_handle_irq+0x78/0x1b8 [ 72.628161][ C1] call_on_irq_stack+0x30/0x48 [ 72.628927][ C1] do_interrupt_handler+0x6c/0x88 [ 72.629767][ C1] el1_interrupt+0x30/0x58 [ 72.630657][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.631517][ C1] el1h_64_irq+0x78/0x7c [ 72.632265][ C1] stack_depot_save+0x1d0/0x49c [ 72.633100][ C1] __kasan_kmalloc+0xcc/0xf0 [ 72.633831][ C1] __kmalloc_node+0x2b0/0x50c [ 72.634656][ C1] memcg_alloc_page_obj_cgroups+0x80/0x16c [ 72.635635][ C1] slab_post_alloc_hook+0xb8/0x3f8 [ 72.636463][ C1] kmem_cache_alloc+0x1dc/0x3d8 [ 72.637288][ C1] __alloc_file+0x30/0x244 [ 72.637989][ C1] alloc_empty_file+0xa0/0x184 [ 72.638740][ C1] path_openat+0xe0/0x2808 [ 72.639413][ C1] do_filp_open+0x188/0x370 [ 72.640121][ C1] do_sys_openat2+0x134/0x3fc [ 72.640881][ C1] __arm64_sys_openat+0x11c/0x150 [ 72.641644][ C1] invoke_syscall+0x98/0x28c [ 72.642434][ C1] el0_svc_common+0x13c/0x258 [ 72.643231][ C1] do_el0_svc+0x5c/0x140 [ 72.643894][ C1] el0_svc+0x78/0x1d0 [ 72.644538][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 72.645335][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.646036][ C1] irq event stamp: 1618 [ 72.646868][ C1] hardirqs last enabled at (1617): [] ___slab_alloc+0xc10/0xd84 [ 72.648367][ C1] hardirqs last disabled at (1618): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.649942][ C1] softirqs last enabled at (1606): [] local_bh_enable+0x10/0x34 [ 72.651411][ C1] softirqs last disabled at (1604): [] local_bh_disable+0x10/0x34 [ 72.652940][ C1] ---[ end trace 9860002a16993f1f ]--- [ 72.741183][ T4856] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.742382][ T4856] Bad inode number on dev loop0: 2 is out of range [ 72.743429][ T4856] SysV FS: get root inode failed [ 72.744241][ T4856] oldfs: cannot read superblock [ 72.748593][ T4713] ------------[ cut here ]------------ [ 72.749575][ T4713] VFS: brelse: Trying to free free buffer [ 72.750513][ T4713] WARNING: CPU: 0 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.751856][ T4713] Modules linked in: [ 72.752506][ T4713] CPU: 0 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 72.753836][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.755785][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.757312][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 72.758318][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 72.759215][ T4713] sp : ffff80001f2677d0 [ 72.759960][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 72.761471][ T4713] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 72.762779][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb12c28 [ 72.764260][ T4713] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 72.765636][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 72.766969][ T4713] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 72.768434][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 72.769923][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.771305][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.772736][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 72.774270][ T4713] Call trace: [ 72.774809][ T4713] invalidate_bh_lru+0x128/0x22c [ 72.775615][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 72.776539][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 72.777539][ T4713] invalidate_bh_lrus+0x34/0x40 [ 72.778391][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 72.779288][ T4713] blkdev_put+0x444/0x6c4 [ 72.780025][ T4713] blkdev_close+0x74/0xb0 [ 72.780734][ T4713] __fput+0x1b8/0x7e8 [ 72.781402][ T4713] ____fput+0x20/0x30 [ 72.782046][ T4713] task_work_run+0x13c/0x1e8 [ 72.782815][ T4713] do_notify_resume+0x2488/0x30a8 [ 72.783616][ T4713] el0_svc+0xf0/0x1d0 [ 72.784241][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 72.785104][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 72.785942][ T4713] irq event stamp: 267384 [ 72.786650][ T4713] hardirqs last enabled at (267383): [] kasan_quarantine_put+0xc4/0x200 [ 72.788229][ T4713] hardirqs last disabled at (267384): [] smp_call_function_many_cond+0xa50/0xec0 [ 72.789955][ T4713] softirqs last enabled at (267164): [] local_bh_enable+0x10/0x34 [ 72.791391][ T4713] softirqs last disabled at (267162): [] local_bh_disable+0x10/0x34 [ 72.792914][ T4713] ---[ end trace 9860002a16993f20 ]--- [ 72.874130][ T4858] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.875480][ T4858] Bad inode number on dev loop0: 2 is out of range [ 72.876456][ T4858] SysV FS: get root inode failed [ 72.877211][ T4858] oldfs: cannot read superblock [ 72.884697][ C1] ------------[ cut here ]------------ [ 72.885656][ C1] VFS: brelse: Trying to free free buffer [ 72.886679][ C1] WARNING: CPU: 1 PID: 4859 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.888069][ C1] Modules linked in: [ 72.888698][ C1] CPU: 1 PID: 4859 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.890446][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.892156][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.893604][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.894528][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.895471][ C1] sp : ffff800008017df0 [ 72.896149][ C1] x29: ffff800008017df0 x28: ffff0000c23b9b40 x27: 1fffe000341d4a5c [ 72.897564][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 72.899088][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2b02df8 [ 72.900477][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 72.901860][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 72.903296][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.904738][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 3dec1f1d1fcc9a00 [ 72.906180][ C1] x8 : 3dec1f1d1fcc9a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.907564][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.908884][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.910319][ C1] Call trace: [ 72.910902][ C1] invalidate_bh_lru+0x128/0x22c [ 72.911923][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.913122][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.914501][ C1] ipi_handler+0x10c/0x70c [ 72.915395][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.916489][ C1] handle_domain_irq+0x148/0x200 [ 72.917420][ C1] gic_handle_irq+0x78/0x1b8 [ 72.918293][ C1] call_on_irq_stack+0x30/0x48 [ 72.919211][ C1] do_interrupt_handler+0x6c/0x88 [ 72.920127][ C1] el1_interrupt+0x30/0x58 [ 72.920910][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.921871][ C1] el1h_64_irq+0x78/0x7c [ 72.922570][ C1] arch_local_irq_restore+0x8/0x10 [ 72.923457][ C1] rcu_read_lock_held+0x34/0x50 [ 72.924272][ C1] find_task_by_pid_ns+0x110/0x1d8 [ 72.925110][ C1] proc_pid_lookup+0x144/0x454 [ 72.925883][ C1] proc_root_lookup+0x30/0x68 [ 72.926670][ C1] __lookup_slow+0x25c/0x39c [ 72.927509][ C1] lookup_slow+0x60/0x84 [ 72.928277][ C1] walk_component+0x2b8/0x3b8 [ 72.929232][ C1] link_path_walk+0x5a0/0xbd4 [ 72.930120][ C1] path_openat+0x1c0/0x2808 [ 72.930981][ C1] do_filp_open+0x188/0x370 [ 72.931792][ C1] do_sys_openat2+0x134/0x3fc [ 72.932575][ C1] __arm64_sys_openat+0x11c/0x150 [ 72.933462][ C1] invoke_syscall+0x98/0x28c [ 72.934270][ C1] el0_svc_common+0x13c/0x258 [ 72.935027][ C1] do_el0_svc+0x5c/0x140 [ 72.935739][ C1] el0_svc+0x78/0x1d0 [ 72.936470][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 72.937320][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.938065][ C1] irq event stamp: 866 [ 72.938753][ C1] hardirqs last enabled at (865): [] read_seqbegin+0x1fc/0x300 [ 72.940639][ C1] hardirqs last disabled at (866): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.942690][ C1] softirqs last enabled at (852): [] local_bh_enable+0x10/0x34 [ 72.944378][ C1] softirqs last disabled at (850): [] local_bh_disable+0x10/0x34 [ 72.946018][ C1] ---[ end trace 9860002a16993f21 ]--- [ 73.055082][ T4860] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.056321][ T4860] Bad inode number on dev loop0: 2 is out of range [ 73.057321][ T4860] SysV FS: get root inode failed [ 73.058057][ T4860] oldfs: cannot read superblock [ 73.062388][ T4713] ------------[ cut here ]------------ [ 73.063230][ T4713] VFS: brelse: Trying to free free buffer [ 73.064178][ T4713] WARNING: CPU: 1 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.065648][ T4713] Modules linked in: [ 73.066268][ T4713] CPU: 1 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 73.067392][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.068773][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.069982][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 73.070837][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 73.071708][ T4713] sp : ffff80001f2677d0 [ 73.072424][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 73.073842][ T4713] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 73.075199][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfb5f230 [ 73.076590][ T4713] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 73.077944][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 73.079252][ T4713] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 73.080552][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 73.081930][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.083320][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.084604][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.086018][ T4713] Call trace: [ 73.086541][ T4713] invalidate_bh_lru+0x128/0x22c [ 73.087363][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 73.088349][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.089166][ T4713] invalidate_bh_lrus+0x34/0x40 [ 73.089904][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 73.090752][ T4713] blkdev_put+0x444/0x6c4 [ 73.091475][ T4713] blkdev_close+0x74/0xb0 [ 73.092233][ T4713] __fput+0x1b8/0x7e8 [ 73.092913][ T4713] ____fput+0x20/0x30 [ 73.093579][ T4713] task_work_run+0x13c/0x1e8 [ 73.094351][ T4713] do_notify_resume+0x2488/0x30a8 [ 73.095229][ T4713] el0_svc+0xf0/0x1d0 [ 73.095848][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 73.096608][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 73.097346][ T4713] irq event stamp: 276594 [ 73.097997][ T4713] hardirqs last enabled at (276593): [] kasan_quarantine_put+0xc4/0x200 [ 73.099699][ T4713] hardirqs last disabled at (276594): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.101466][ T4713] softirqs last enabled at (276496): [] local_bh_enable+0x10/0x34 [ 73.103072][ T4713] softirqs last disabled at (276494): [] local_bh_disable+0x10/0x34 [ 73.104631][ T4713] ---[ end trace 9860002a16993f22 ]--- [ 73.148648][ T4862] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.150775][ T4862] Bad inode number on dev loop0: 2 is out of range [ 73.151884][ T4862] SysV FS: get root inode failed [ 73.152665][ T4862] oldfs: cannot read superblock [ 73.160667][ T4713] ------------[ cut here ]------------ [ 73.161549][ T4713] VFS: brelse: Trying to free free buffer [ 73.162429][ T4713] WARNING: CPU: 0 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.163791][ T4713] Modules linked in: [ 73.164376][ T4713] CPU: 0 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 73.165470][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.167008][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.168153][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 73.168987][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 73.169838][ T4713] sp : ffff80001f2677d0 [ 73.170463][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d085c [ 73.171712][ T4713] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.172954][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddad3060 [ 73.174272][ T4713] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 73.175586][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 73.176788][ T4713] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.178098][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 73.179490][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.180857][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.182271][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.183647][ T4713] Call trace: [ 73.184201][ T4713] invalidate_bh_lru+0x128/0x22c [ 73.184955][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 73.185836][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.186619][ T4713] invalidate_bh_lrus+0x34/0x40 [ 73.187395][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 73.188219][ T4713] blkdev_put+0x444/0x6c4 [ 73.188886][ T4713] blkdev_close+0x74/0xb0 [ 73.189542][ T4713] __fput+0x1b8/0x7e8 [ 73.190180][ T4713] ____fput+0x20/0x30 [ 73.190752][ T4713] task_work_run+0x13c/0x1e8 [ 73.191516][ T4713] do_notify_resume+0x2488/0x30a8 [ 73.192304][ T4713] el0_svc+0xf0/0x1d0 [ 73.192904][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 73.193729][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 73.194474][ T4713] irq event stamp: 281872 [ 73.195177][ T4713] hardirqs last enabled at (281871): [] kasan_quarantine_put+0xc4/0x200 [ 73.196740][ T4713] hardirqs last disabled at (281872): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.198403][ T4713] softirqs last enabled at (281648): [] local_bh_enable+0x10/0x34 [ 73.199870][ T4713] softirqs last disabled at (281646): [] local_bh_disable+0x10/0x34 [ 73.201316][ T4713] ---[ end trace 9860002a16993f23 ]--- [ 73.300573][ T4864] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.302098][ T4864] Bad inode number on dev loop0: 2 is out of range [ 73.303143][ T4864] SysV FS: get root inode failed [ 73.303894][ T4864] oldfs: cannot read superblock [ 73.311168][ T4713] ------------[ cut here ]------------ [ 73.312030][ T4713] VFS: brelse: Trying to free free buffer [ 73.313068][ T4713] WARNING: CPU: 0 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.314395][ T4713] Modules linked in: [ 73.314991][ T4713] CPU: 0 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 73.316047][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.317454][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.318593][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 73.319451][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 73.320322][ T4713] sp : ffff80001f2677d0 [ 73.321023][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 73.322365][ T4713] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 73.323596][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddad3400 [ 73.324811][ T4713] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 73.326075][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 73.327355][ T4713] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.328636][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 73.329925][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.331132][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.332408][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.333616][ T4713] Call trace: [ 73.334098][ T4713] invalidate_bh_lru+0x128/0x22c [ 73.334845][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 73.335818][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.336583][ T4713] invalidate_bh_lrus+0x34/0x40 [ 73.337311][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 73.338082][ T4713] blkdev_put+0x444/0x6c4 [ 73.338746][ T4713] blkdev_close+0x74/0xb0 [ 73.339480][ T4713] __fput+0x1b8/0x7e8 [ 73.340107][ T4713] ____fput+0x20/0x30 [ 73.340820][ T4713] task_work_run+0x13c/0x1e8 [ 73.341747][ T4713] do_notify_resume+0x2488/0x30a8 [ 73.342680][ T4713] el0_svc+0xf0/0x1d0 [ 73.343271][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 73.344064][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 73.344790][ T4713] irq event stamp: 285758 [ 73.345500][ T4713] hardirqs last enabled at (285757): [] kasan_quarantine_put+0xc4/0x200 [ 73.347066][ T4713] hardirqs last disabled at (285758): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.348765][ T4713] softirqs last enabled at (285542): [] local_bh_enable+0x10/0x34 [ 73.350301][ T4713] softirqs last disabled at (285540): [] local_bh_disable+0x10/0x34 [ 73.351854][ T4713] ---[ end trace 9860002a16993f24 ]--- [ 73.394145][ T4866] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.395332][ T4866] Bad inode number on dev loop0: 2 is out of range [ 73.396344][ T4866] SysV FS: get root inode failed [ 73.397067][ T4866] oldfs: cannot read superblock [ 73.399633][ C0] ------------[ cut here ]------------ [ 73.400435][ C0] VFS: brelse: Trying to free free buffer [ 73.401241][ C0] WARNING: CPU: 0 PID: 4866 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.402617][ C0] Modules linked in: [ 73.403190][ C0] CPU: 0 PID: 4866 Comm: syz.0.88 Tainted: G W syzkaller #0 [ 73.404470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.405933][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.407085][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.407862][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.408658][ C0] sp : ffff800008007df0 [ 73.409340][ C0] x29: ffff800008007df0 x28: ffff0000ca8e3680 x27: 1fffe000341d085c [ 73.410583][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.411775][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddad37a0 [ 73.413043][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.414230][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.415505][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.416849][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 574823ebbebf3000 [ 73.418317][ C0] x8 : 574823ebbebf3000 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.419729][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.421091][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.422346][ C0] Call trace: [ 73.422900][ C0] invalidate_bh_lru+0x128/0x22c [ 73.423650][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.424523][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.425530][ C0] ipi_handler+0x10c/0x70c [ 73.426173][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.427041][ C0] handle_domain_irq+0x148/0x200 [ 73.427756][ C0] gic_handle_irq+0x78/0x1b8 [ 73.428399][ C0] call_on_irq_stack+0x30/0x48 [ 73.429112][ C0] do_interrupt_handler+0x6c/0x88 [ 73.429833][ C0] el1_interrupt+0x30/0x58 [ 73.430531][ C0] el1h_64_irq_handler+0x18/0x24 [ 73.431303][ C0] el1h_64_irq+0x78/0x7c [ 73.432004][ C0] stack_depot_save+0x6c/0x49c [ 73.432845][ C0] kasan_set_track+0x68/0x84 [ 73.433605][ C0] kasan_set_free_info+0x28/0x4c [ 73.434387][ C0] ____kasan_slab_free+0x118/0x164 [ 73.435247][ C0] __kasan_slab_free+0x18/0x28 [ 73.435994][ C0] slab_free_freelist_hook+0x128/0x1e4 [ 73.436841][ C0] kmem_cache_free+0xdc/0x3b4 [ 73.437590][ C0] pgtable_pte_page_dtor+0x58/0x1c8 [ 73.438476][ C0] free_pgd_range+0x4d0/0xb5c [ 73.439267][ C0] free_pgtables+0x244/0x280 [ 73.439986][ C0] exit_mmap+0x2d8/0x510 [ 73.440573][ C0] __mmput+0xe8/0x3a0 [ 73.441182][ C0] mmput+0x80/0xc0 [ 73.441668][ C0] exit_mm+0x5dc/0x704 [ 73.442311][ C0] do_exit+0x4bc/0x1f54 [ 73.442953][ C0] do_group_exit+0x104/0x274 [ 73.443664][ C0] get_signal+0x638/0x13b0 [ 73.444309][ C0] do_notify_resume+0x344/0x30a8 [ 73.445050][ C0] el0_svc+0xf0/0x1d0 [ 73.445667][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 73.446405][ C0] el0t_64_sync+0x1a0/0x1a4 [ 73.447075][ C0] irq event stamp: 2404 [ 73.447795][ C0] hardirqs last enabled at (2403): [] pgtable_pmd_page_dtor+0x144/0x200 [ 73.449311][ C0] hardirqs last disabled at (2404): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.450856][ C0] softirqs last enabled at (1476): [] handle_softirqs+0xa70/0xc14 [ 73.452423][ C0] softirqs last disabled at (1453): [] __irq_exit_rcu+0x240/0x434 [ 73.453816][ C0] ---[ end trace 9860002a16993f25 ]--- [ 73.488364][ T4868] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.489581][ T4868] Bad inode number on dev loop0: 2 is out of range [ 73.490530][ T4868] SysV FS: get root inode failed [ 73.491379][ T4868] oldfs: cannot read superblock [ 73.497094][ T4713] ------------[ cut here ]------------ [ 73.497953][ T4713] VFS: brelse: Trying to free free buffer [ 73.498872][ T4713] WARNING: CPU: 0 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.500209][ T4713] Modules linked in: [ 73.500812][ T4713] CPU: 0 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 73.502078][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.503718][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.504927][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 73.505733][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 73.506537][ T4713] sp : ffff80001f2677d0 [ 73.507185][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d085c [ 73.508422][ T4713] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.509639][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddad3b40 [ 73.510923][ T4713] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 73.512162][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 73.513365][ T4713] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.514587][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 73.515836][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.517083][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.518330][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.519608][ T4713] Call trace: [ 73.520084][ T4713] invalidate_bh_lru+0x128/0x22c [ 73.520808][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 73.521680][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.522492][ T4713] invalidate_bh_lrus+0x34/0x40 [ 73.523224][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 73.523998][ T4713] blkdev_put+0x444/0x6c4 [ 73.524727][ T4713] blkdev_close+0x74/0xb0 [ 73.525389][ T4713] __fput+0x1b8/0x7e8 [ 73.525995][ T4713] ____fput+0x20/0x30 [ 73.526605][ T4713] task_work_run+0x13c/0x1e8 [ 73.527312][ T4713] do_notify_resume+0x2488/0x30a8 [ 73.528077][ T4713] el0_svc+0xf0/0x1d0 [ 73.528678][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 73.529475][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 73.530177][ T4713] irq event stamp: 292326 [ 73.530859][ T4713] hardirqs last enabled at (292325): [] kasan_quarantine_put+0xc4/0x200 [ 73.532369][ T4713] hardirqs last disabled at (292326): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.534158][ T4713] softirqs last enabled at (292314): [] local_bh_enable+0x10/0x34 [ 73.535664][ T4713] softirqs last disabled at (292312): [] local_bh_disable+0x10/0x34 [ 73.537210][ T4713] ---[ end trace 9860002a16993f26 ]--- [ 73.624030][ T4870] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.625351][ T4870] Bad inode number on dev loop0: 2 is out of range [ 73.626391][ T4870] SysV FS: get root inode failed [ 73.627324][ T4870] oldfs: cannot read superblock [ 73.635932][ C1] ------------[ cut here ]------------ [ 73.636904][ C1] VFS: brelse: Trying to free free buffer [ 73.637915][ C1] WARNING: CPU: 1 PID: 4872 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.639468][ C1] Modules linked in: [ 73.640238][ C1] CPU: 1 PID: 4872 Comm: syz.0.91 Tainted: G W syzkaller #0 [ 73.641843][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.643677][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.645107][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.646044][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.646984][ C1] sp : ffff800008017df0 [ 73.647747][ C1] x29: ffff800008017df0 x28: ffff0000cb06b680 x27: 1fffe000341d4a5c [ 73.649162][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 73.650659][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfb5f5d0 [ 73.652235][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.653688][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.655135][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 73.656748][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 388c8ec933b07a00 [ 73.658196][ C1] x8 : 388c8ec933b07a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.659569][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.661049][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.662463][ C1] Call trace: [ 73.663026][ C1] invalidate_bh_lru+0x128/0x22c [ 73.663945][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.664971][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.666158][ C1] ipi_handler+0x10c/0x70c [ 73.666928][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.667909][ C1] handle_domain_irq+0x148/0x200 [ 73.668744][ C1] gic_handle_irq+0x78/0x1b8 [ 73.669525][ C1] call_on_irq_stack+0x30/0x48 [ 73.670354][ C1] do_interrupt_handler+0x6c/0x88 [ 73.671203][ C1] el1_interrupt+0x30/0x58 [ 73.671963][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.672801][ C1] el1h_64_irq+0x78/0x7c [ 73.673516][ C1] count_memcg_event_mm+0x1d0/0x300 [ 73.674409][ C1] handle_mm_fault+0x19c/0x2aac [ 73.675210][ C1] do_page_fault+0x690/0xad0 [ 73.675957][ C1] do_translation_fault+0xe0/0x130 [ 73.676831][ C1] do_mem_abort+0x6c/0x1b0 [ 73.677658][ C1] el0_da+0x90/0x1ec [ 73.678395][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 73.679303][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.680136][ C1] irq event stamp: 228 [ 73.680861][ C1] hardirqs last enabled at (227): [] count_memcg_event_mm+0x1b0/0x300 [ 73.682701][ C1] hardirqs last disabled at (228): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.684496][ C1] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 73.686115][ C1] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 73.687742][ C1] ---[ end trace 9860002a16993f27 ]--- [ 73.791072][ T4872] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.792244][ T4872] Bad inode number on dev loop0: 2 is out of range [ 73.793323][ T4872] SysV FS: get root inode failed [ 73.794122][ T4872] oldfs: cannot read superblock [ 73.802327][ C0] ------------[ cut here ]------------ [ 73.803156][ C0] VFS: brelse: Trying to free free buffer [ 73.804045][ C0] WARNING: CPU: 0 PID: 4873 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.805400][ C0] Modules linked in: [ 73.805964][ C0] CPU: 0 PID: 4873 Comm: syz.0.92 Tainted: G W syzkaller #0 [ 73.807224][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.808767][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.810026][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.810959][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.811793][ C0] sp : ffff800008007df0 [ 73.812466][ C0] x29: ffff800008007df0 x28: ffff0000ce869b40 x27: 1fffe000341d085c [ 73.813730][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.814894][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddad3ee0 [ 73.816217][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.817519][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.818806][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.820096][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 42b2b8febbce0300 [ 73.821370][ C0] x8 : 42b2b8febbce0300 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.822632][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.823919][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.825181][ C0] Call trace: [ 73.825688][ C0] invalidate_bh_lru+0x128/0x22c [ 73.826426][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.827422][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.828443][ C0] ipi_handler+0x10c/0x70c [ 73.829133][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.829985][ C0] handle_domain_irq+0x148/0x200 [ 73.830764][ C0] gic_handle_irq+0x78/0x1b8 [ 73.831435][ C0] call_on_irq_stack+0x30/0x48 [ 73.832191][ C0] do_interrupt_handler+0x6c/0x88 [ 73.832995][ C0] el0_interrupt+0x94/0x248 [ 73.833644][ C0] __el0_irq_handler_common+0x18/0x24 [ 73.834430][ C0] el0t_64_irq_handler+0x10/0x1c [ 73.835209][ C0] el0t_64_irq+0x1a0/0x1a4 [ 73.835949][ C0] irq event stamp: 1034 [ 73.836608][ C0] hardirqs last enabled at (1033): [] el0t_64_sync_handler+0xd8/0xe4 [ 73.838115][ C0] hardirqs last disabled at (1034): [] __el0_irq_handler_common+0x18/0x24 [ 73.839760][ C0] softirqs last enabled at (976): [] local_bh_enable+0x10/0x34 [ 73.841294][ C0] softirqs last disabled at (974): [] local_bh_disable+0x10/0x34 [ 73.842805][ C0] ---[ end trace 9860002a16993f28 ]--- [ 73.959937][ T4875] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.961159][ T4875] Bad inode number on dev loop0: 2 is out of range [ 73.962218][ T4875] SysV FS: get root inode failed [ 73.962947][ T4875] oldfs: cannot read superblock [ 73.972984][ T4713] ------------[ cut here ]------------ [ 73.973927][ T4713] VFS: brelse: Trying to free free buffer [ 73.974847][ T4713] WARNING: CPU: 1 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.976211][ T4713] Modules linked in: [ 73.976817][ T4713] CPU: 1 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 73.978223][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.979891][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.981321][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 73.982261][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 73.983196][ T4713] sp : ffff80001f2677d0 [ 73.983965][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 73.985384][ T4713] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 73.986851][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfb5f970 [ 73.988468][ T4713] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 73.990123][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 73.991694][ T4713] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 73.993083][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 73.994693][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.996280][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.997655][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.999039][ T4713] Call trace: [ 73.999647][ T4713] invalidate_bh_lru+0x128/0x22c [ 74.000504][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 74.001579][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.002468][ T4713] invalidate_bh_lrus+0x34/0x40 [ 74.003336][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 74.004363][ T4713] blkdev_put+0x444/0x6c4 [ 74.005099][ T4713] blkdev_close+0x74/0xb0 [ 74.005869][ T4713] __fput+0x1b8/0x7e8 [ 74.006583][ T4713] ____fput+0x20/0x30 [ 74.007283][ T4713] task_work_run+0x13c/0x1e8 [ 74.008041][ T4713] do_notify_resume+0x2488/0x30a8 [ 74.008880][ T4713] el0_svc+0xf0/0x1d0 [ 74.009637][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 74.010621][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 74.011468][ T4713] irq event stamp: 305306 [ 74.012257][ T4713] hardirqs last enabled at (305305): [] kasan_quarantine_put+0xc4/0x200 [ 74.014022][ T4713] hardirqs last disabled at (305306): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.015842][ T4713] softirqs last enabled at (305120): [] local_bh_enable+0x10/0x34 [ 74.017479][ T4713] softirqs last disabled at (305118): [] local_bh_disable+0x10/0x34 [ 74.019164][ T4713] ---[ end trace 9860002a16993f29 ]--- [ 74.101472][ T4877] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.102945][ T4877] Bad inode number on dev loop0: 2 is out of range [ 74.104141][ T4877] SysV FS: get root inode failed [ 74.105012][ T4877] oldfs: cannot read superblock [ 74.107960][ C1] ------------[ cut here ]------------ [ 74.108858][ C1] VFS: brelse: Trying to free free buffer [ 74.109932][ C1] WARNING: CPU: 1 PID: 3661 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.111581][ C1] Modules linked in: [ 74.112268][ C1] CPU: 1 PID: 3661 Comm: udevd Tainted: G W syzkaller #0 [ 74.113682][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.115356][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.116674][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.117628][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.118605][ C1] sp : ffff800008017df0 [ 74.119340][ C1] x29: ffff800008017df0 x28: ffff0000d723b680 x27: 1fffe000341d4a5b [ 74.120795][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 74.122222][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dfb5fd10 [ 74.123652][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 74.124960][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 74.126320][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.127614][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 2a8e883455a91600 [ 74.128896][ C1] x8 : 2a8e883455a91600 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.130228][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.131658][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 74.132927][ C1] Call trace: [ 74.133477][ C1] invalidate_bh_lru+0x128/0x22c [ 74.134316][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 74.135262][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.136436][ C1] ipi_handler+0x10c/0x70c [ 74.137160][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 74.137987][ C1] handle_domain_irq+0x148/0x200 [ 74.138832][ C1] gic_handle_irq+0x78/0x1b8 [ 74.139609][ C1] call_on_irq_stack+0x30/0x48 [ 74.140395][ C1] do_interrupt_handler+0x6c/0x88 [ 74.141240][ C1] el1_interrupt+0x30/0x58 [ 74.141977][ C1] el1h_64_irq_handler+0x18/0x24 [ 74.142754][ C1] el1h_64_irq+0x78/0x7c [ 74.143440][ C1] arch_local_irq_restore+0x8/0x10 [ 74.144335][ C1] ___might_sleep+0x98/0x4dc [ 74.145106][ C1] __might_sleep+0x98/0x124 [ 74.145835][ C1] down_read+0x3c/0x38c [ 74.146466][ C1] kernfs_iop_permission+0x64/0x2d8 [ 74.147302][ C1] inode_permission+0x1d0/0x3c0 [ 74.148104][ C1] link_path_walk+0x28c/0xbd4 [ 74.148934][ C1] path_openat+0x1c0/0x2808 [ 74.149748][ C1] do_filp_open+0x188/0x370 [ 74.150580][ C1] do_sys_openat2+0x134/0x3fc [ 74.151509][ C1] __arm64_sys_openat+0x11c/0x150 [ 74.152381][ C1] invoke_syscall+0x98/0x28c [ 74.153269][ C1] el0_svc_common+0x13c/0x258 [ 74.154058][ C1] do_el0_svc+0x5c/0x140 [ 74.154781][ C1] el0_svc+0x78/0x1d0 [ 74.155531][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 74.156472][ C1] el0t_64_sync+0x1a0/0x1a4 [ 74.157235][ C1] irq event stamp: 1157218 [ 74.157951][ C1] hardirqs last enabled at (1157217): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 74.159820][ C1] hardirqs last disabled at (1157218): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.161473][ C1] softirqs last enabled at (1157208): [] local_bh_enable+0x10/0x34 [ 74.163050][ C1] softirqs last disabled at (1157206): [] local_bh_disable+0x10/0x34 [ 74.164700][ C1] ---[ end trace 9860002a16993f2a ]--- [ 74.260085][ T4879] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.261363][ T4879] Bad inode number on dev loop0: 2 is out of range [ 74.262351][ T4879] SysV FS: get root inode failed [ 74.263222][ T4879] oldfs: cannot read superblock [ 74.271768][ C1] ------------[ cut here ]------------ [ 74.272734][ C1] VFS: brelse: Trying to free free buffer [ 74.273819][ C1] WARNING: CPU: 1 PID: 4880 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.275406][ C1] Modules linked in: [ 74.276053][ C1] CPU: 1 PID: 4880 Comm: syz.0.95 Tainted: G W syzkaller #0 [ 74.277419][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.278988][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.280327][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.281201][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.282105][ C1] sp : ffff800008017df0 [ 74.282794][ C1] x29: ffff800008017df0 x28: ffff0000c8ea3680 x27: 1fffe000341d4a5c [ 74.284159][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 74.285502][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52bc4e8 [ 74.287069][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 74.288729][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 74.290272][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.291671][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 0871c0fe7f273900 [ 74.293095][ C1] x8 : 0871c0fe7f273900 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.294521][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.295877][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 74.297277][ C1] Call trace: [ 74.297853][ C1] invalidate_bh_lru+0x128/0x22c [ 74.298670][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 74.299659][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.300826][ C1] ipi_handler+0x10c/0x70c [ 74.301520][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 74.302407][ C1] handle_domain_irq+0x148/0x200 [ 74.303289][ C1] gic_handle_irq+0x78/0x1b8 [ 74.304079][ C1] call_on_irq_stack+0x30/0x48 [ 74.304860][ C1] do_interrupt_handler+0x6c/0x88 [ 74.305677][ C1] el1_interrupt+0x30/0x58 [ 74.306433][ C1] el1h_64_irq_handler+0x18/0x24 [ 74.307198][ C1] el1h_64_irq+0x78/0x7c [ 74.307878][ C1] lock_page_memcg+0x120/0x22c [ 74.308594][ C1] __set_page_dirty_buffers+0x19c/0x454 [ 74.309471][ C1] ext4_set_page_dirty+0x1fc/0x2c8 [ 74.310295][ C1] set_page_dirty+0x23c/0x4e8 [ 74.311092][ C1] block_page_mkwrite+0x284/0x2cc [ 74.311875][ C1] ext4_page_mkwrite+0x90c/0x105c [ 74.312719][ C1] do_page_mkwrite+0x140/0x35c [ 74.313631][ C1] handle_mm_fault+0x1500/0x2aac [ 74.314481][ C1] do_page_fault+0x690/0xad0 [ 74.315243][ C1] do_translation_fault+0xe0/0x130 [ 74.316192][ C1] do_mem_abort+0x6c/0x1b0 [ 74.316955][ C1] el0_da+0x90/0x1ec [ 74.317664][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 74.318582][ C1] el0t_64_sync+0x1a0/0x1a4 [ 74.319410][ C1] irq event stamp: 1036 [ 74.320179][ C1] hardirqs last enabled at (1035): [] lock_page_memcg+0x110/0x22c [ 74.321901][ C1] hardirqs last disabled at (1036): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.323687][ C1] softirqs last enabled at (986): [] local_bh_enable+0x10/0x34 [ 74.325332][ C1] softirqs last disabled at (984): [] local_bh_disable+0x10/0x34 [ 74.327071][ C1] ---[ end trace 9860002a16993f2b ]--- [ 74.393282][ T4881] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.394516][ T4881] Bad inode number on dev loop0: 2 is out of range [ 74.395461][ T4881] SysV FS: get root inode failed [ 74.396311][ T4881] oldfs: cannot read superblock [ 74.408773][ C0] ------------[ cut here ]------------ [ 74.409692][ C0] VFS: brelse: Trying to free free buffer [ 74.410550][ C0] WARNING: CPU: 0 PID: 3661 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.411870][ C0] Modules linked in: [ 74.412421][ C0] CPU: 0 PID: 3661 Comm: udevd Tainted: G W syzkaller #0 [ 74.413607][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.414895][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.416046][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 74.416759][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 74.417565][ C0] sp : ffff800008007df0 [ 74.418204][ C0] x29: ffff800008007df0 x28: ffff0000d723b680 x27: 1fffe000341d085b [ 74.419514][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 74.420794][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb10318 [ 74.422054][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 74.423274][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 74.424460][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 74.425714][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 2a8e883455a91600 [ 74.426866][ C0] x8 : 2a8e883455a91600 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.428154][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.429356][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 74.430622][ C0] Call trace: [ 74.431119][ C0] invalidate_bh_lru+0x128/0x22c [ 74.431878][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 74.432882][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.434106][ C0] ipi_handler+0x10c/0x70c [ 74.434921][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 74.435711][ C0] handle_domain_irq+0x148/0x200 [ 74.436494][ C0] gic_handle_irq+0x78/0x1b8 [ 74.437220][ C0] call_on_irq_stack+0x30/0x48 [ 74.438013][ C0] do_interrupt_handler+0x6c/0x88 [ 74.438930][ C0] el1_interrupt+0x30/0x58 [ 74.439661][ C0] el1h_64_irq_handler+0x18/0x24 [ 74.440422][ C0] el1h_64_irq+0x78/0x7c [ 74.441098][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 74.442041][ C0] __skb_try_recv_datagram+0x148/0x40c [ 74.442878][ C0] skb_recv_datagram+0xd0/0x19c [ 74.443636][ C0] netlink_recvmsg+0x114/0xb38 [ 74.444415][ C0] ____sys_recvmsg+0x26c/0x7b0 [ 74.445202][ C0] ___sys_recvmsg+0x1c4/0x24c [ 74.445965][ C0] __arm64_sys_recvmsg+0x1b8/0x274 [ 74.446768][ C0] invoke_syscall+0x98/0x28c [ 74.447446][ C0] el0_svc_common+0x13c/0x258 [ 74.448196][ C0] do_el0_svc+0x5c/0x140 [ 74.448842][ C0] el0_svc+0x78/0x1d0 [ 74.449491][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 74.450254][ C0] el0t_64_sync+0x1a0/0x1a4 [ 74.450944][ C0] irq event stamp: 1165114 [ 74.451563][ C0] hardirqs last enabled at (1165113): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 74.453296][ C0] hardirqs last disabled at (1165114): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.454783][ C0] softirqs last enabled at (1165096): [] handle_softirqs+0xa70/0xc14 [ 74.456241][ C0] softirqs last disabled at (1165087): [] __irq_exit_rcu+0x240/0x434 [ 74.457700][ C0] ---[ end trace 9860002a16993f2c ]--- [ 74.498225][ T4883] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.499578][ T4883] Bad inode number on dev loop0: 2 is out of range [ 74.500664][ T4883] SysV FS: get root inode failed [ 74.501481][ T4883] oldfs: cannot read superblock [ 74.504651][ T4713] ------------[ cut here ]------------ [ 74.505509][ T4713] VFS: brelse: Trying to free free buffer [ 74.506324][ T4713] WARNING: CPU: 0 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.507611][ T4713] Modules linked in: [ 74.508233][ T4713] CPU: 0 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 74.509479][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.511088][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.512371][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 74.513209][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 74.513975][ T4713] sp : ffff80001f2677d0 [ 74.514599][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 74.515824][ T4713] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 74.516993][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb106b8 [ 74.518195][ T4713] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 74.519380][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 74.520663][ T4713] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 74.521985][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 74.523400][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.524679][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.525979][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.527273][ T4713] Call trace: [ 74.527788][ T4713] invalidate_bh_lru+0x128/0x22c [ 74.528582][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 74.529536][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.530344][ T4713] invalidate_bh_lrus+0x34/0x40 [ 74.531110][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 74.531981][ T4713] blkdev_put+0x444/0x6c4 [ 74.532684][ T4713] blkdev_close+0x74/0xb0 [ 74.533309][ T4713] __fput+0x1b8/0x7e8 [ 74.533934][ T4713] ____fput+0x20/0x30 [ 74.534556][ T4713] task_work_run+0x13c/0x1e8 [ 74.535242][ T4713] do_notify_resume+0x2488/0x30a8 [ 74.536017][ T4713] el0_svc+0xf0/0x1d0 [ 74.536591][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 74.537362][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 74.538058][ T4713] irq event stamp: 321188 [ 74.538759][ T4713] hardirqs last enabled at (321187): [] kasan_quarantine_put+0xc4/0x200 [ 74.540372][ T4713] hardirqs last disabled at (321188): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.541875][ T4713] softirqs last enabled at (320992): [] local_bh_enable+0x10/0x34 [ 74.543352][ T4713] softirqs last disabled at (320990): [] local_bh_disable+0x10/0x34 [ 74.544792][ T4713] ---[ end trace 9860002a16993f2d ]--- [ 74.591651][ T4885] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.592840][ T4885] Bad inode number on dev loop0: 2 is out of range [ 74.593917][ T4885] SysV FS: get root inode failed [ 74.594661][ T4885] oldfs: cannot read superblock [ 74.602427][ T4713] ------------[ cut here ]------------ [ 74.603303][ T4713] VFS: brelse: Trying to free free buffer [ 74.604316][ T4713] WARNING: CPU: 1 PID: 4713 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.605889][ T4713] Modules linked in: [ 74.606553][ T4713] CPU: 1 PID: 4713 Comm: udevd Tainted: G W syzkaller #0 [ 74.607817][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.609556][ T4713] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.610913][ T4713] pc : invalidate_bh_lru+0x128/0x22c [ 74.611838][ T4713] lr : invalidate_bh_lru+0x128/0x22c [ 74.612752][ T4713] sp : ffff80001f2677d0 [ 74.613462][ T4713] x29: ffff80001f2677d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 74.614899][ T4713] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 74.616224][ T4713] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52bc5d0 [ 74.617576][ T4713] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 74.619124][ T4713] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 74.620548][ T4713] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.621936][ T4713] x11: ff8080000830061c x10: 0000000000000000 x9 : c56021bd0c2d4200 [ 74.623322][ T4713] x8 : c56021bd0c2d4200 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.624747][ T4713] x5 : ffff80001f2670d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.626143][ T4713] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.627512][ T4713] Call trace: [ 74.628113][ T4713] invalidate_bh_lru+0x128/0x22c [ 74.628961][ T4713] smp_call_function_many_cond+0xa5c/0xec0 [ 74.629963][ T4713] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.630859][ T4713] invalidate_bh_lrus+0x34/0x40 [ 74.631651][ T4713] blkdev_flush_mapping+0x16c/0x334 [ 74.632458][ T4713] blkdev_put+0x444/0x6c4 [ 74.633164][ T4713] blkdev_close+0x74/0xb0 [ 74.633866][ T4713] __fput+0x1b8/0x7e8 [ 74.634542][ T4713] ____fput+0x20/0x30 [ 74.635213][ T4713] task_work_run+0x13c/0x1e8 [ 74.636002][ T4713] do_notify_resume+0x2488/0x30a8 [ 74.636799][ T4713] el0_svc+0xf0/0x1d0 [ 74.637453][ T4713] el0t_64_sync_handler+0xcc/0xe4 [ 74.638368][ T4713] el0t_64_sync+0x1a0/0x1a4 [ 74.639226][ T4713] irq event stamp: 326120 [ 74.639925][ T4713] hardirqs last enabled at (326119): [] kasan_quarantine_put+0xc4/0x200 [ 74.641617][ T4713] hardirqs last disabled at (326120): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.643659][ T4713] softirqs last enabled at (325924): [] local_bh_enable+0x10/0x34 [ 74.645433][ T4713] softirqs last disabled at (325922): [] local_bh_disable+0x10/0x34 [ 74.647228][ T4713] ---[ end trace 9860002a16993f2e ]--- [ 74.694794][ T4887] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.695939][ T4887] Bad inode number on dev loop0: 2 is out of range [ 74.696992][ T4887] SysV FS: get root inode failed [ 74.697690][ T4887] oldfs: cannot read superblock [ 74.700356][ C1] ------------[ cut here ]------------ [ 74.701250][ C1] VFS: brelse: Trying to free free buffer [ 74.702171][ C1] WARNING: CPU: 1 PID: 4887 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.703661][ C1] Modules linked in: [ 74.704310][ C1] CPU: 1 PID: 4887 Comm: syz.0.98 Tainted: G W syzkaller #0 [ 74.705814][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.707563][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.708927][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.709929][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.710865][ C1] sp : ffff800008017df0 [ 74.711649][ C1] x29: ffff800008017df0 x28: ffff0000c8459b40 x27: 1fffe000341d4a5c [ 74.713155][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 74.714573][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52bc148 [ 74.716035][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 74.717390][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 74.718790][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.720223][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 8598710508653b00 [ 74.721507][ C1] x8 : 8598710508653b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.722855][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.724191][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 74.725592][ C1] Call trace: [ 74.726170][ C1] invalidate_bh_lru+0x128/0x22c [ 74.726995][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 74.728032][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.729144][ C1] ipi_handler+0x10c/0x70c [ 74.729843][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 74.730848][ C1] handle_domain_irq+0x148/0x200 [ 74.731732][ C1] gic_handle_irq+0x78/0x1b8 [ 74.732536][ C1] call_on_irq_stack+0x30/0x48 [ 74.733353][ C1] do_interrupt_handler+0x6c/0x88 [ 74.734215][ C1] el1_interrupt+0x30/0x58 [ 74.734976][ C1] el1h_64_irq_handler+0x18/0x24 [ 74.735778][ C1] el1h_64_irq+0x78/0x7c [ 74.736625][ C1] __sanitizer_cov_trace_const_cmp8+0x74/0xbc [ 74.737766][ C1] free_pages_and_swap_cache+0x70/0xb4 [ 74.738708][ C1] tlb_finish_mmu+0x1a0/0x37c [ 74.739577][ C1] exit_mmap+0x2e0/0x510 [ 74.740338][ C1] __mmput+0xe8/0x3a0 [ 74.740970][ C1] mmput+0x80/0xc0 [ 74.741639][ C1] exit_mm+0x5dc/0x704 [ 74.742347][ C1] do_exit+0x4bc/0x1f54 [ 74.743003][ C1] do_group_exit+0x104/0x274 [ 74.743754][ C1] get_signal+0x638/0x13b0 [ 74.744500][ C1] do_notify_resume+0x344/0x30a8 [ 74.745323][ C1] el0_svc+0xf0/0x1d0 [ 74.745993][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 74.746848][ C1] el0t_64_sync+0x1a0/0x1a4 [ 74.747756][ C1] irq event stamp: 3068 [ 74.748514][ C1] hardirqs last enabled at (3067): [] free_unref_page_list+0x6b8/0x740 [ 74.750269][ C1] hardirqs last disabled at (3068): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.751984][ C1] softirqs last enabled at (1726): [] handle_softirqs+0xa70/0xc14 [ 74.753633][ C1] softirqs last disabled at (1717): [] __irq_exit_rcu+0x240/0x434 [ 74.755430][ C1] ---[ end trace 9860002a16993f2f ]--- [ 74.819641][ T4890] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.820823][ T4890] Bad inode number on dev loop0: 2 is out of range [ 74.821844][ T4890] SysV FS: get root inode failed [ 74.822653][ T4890] oldfs: cannot read superblock [ 74.828391][ C0] ------------[ cut here ]------------ [ 74.829338][ C0] VFS: brelse: Trying to free free buffer [ 74.830289][ C0] WARNING: CPU: 0 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.831709][ C0] Modules linked in: [ 74.832391][ C0] CPU: 0 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.833761][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.835262][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.836451][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 74.837296][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 74.838207][ C0] sp : ffff800008007df0 [ 74.838951][ C0] x29: ffff800008007df0 x28: ffff0000e8533680 x27: 1fffe000341d085c [ 74.840358][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 74.841642][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb10a58 [ 74.842967][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 74.844279][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 74.845773][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 74.847109][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 74.848487][ C0] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.849868][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.851258][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 74.852581][ C0] Call trace: [ 74.853125][ C0] invalidate_bh_lru+0x128/0x22c [ 74.853920][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 74.854886][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.856152][ C0] ipi_handler+0x10c/0x70c [ 74.856848][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 74.857780][ C0] handle_domain_irq+0x148/0x200 [ 74.858636][ C0] gic_handle_irq+0x78/0x1b8 [ 74.859380][ C0] call_on_irq_stack+0x30/0x48 [ 74.860190][ C0] do_interrupt_handler+0x6c/0x88 [ 74.861102][ C0] el1_interrupt+0x30/0x58 [ 74.861849][ C0] el1h_64_irq_handler+0x18/0x24 [ 74.862740][ C0] el1h_64_irq+0x78/0x7c [ 74.863429][ C0] filp_close+0x60/0x154 [ 74.864126][ C0] close_fd+0x74/0x84 [ 74.864819][ C0] __arm64_sys_close+0x3c/0x80 [ 74.865625][ C0] invoke_syscall+0x98/0x28c [ 74.866405][ C0] el0_svc_common+0x13c/0x258 [ 74.867204][ C0] do_el0_svc+0x5c/0x140 [ 74.867892][ C0] el0_svc+0x78/0x1d0 [ 74.868557][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 74.869365][ C0] el0t_64_sync+0x1a0/0x1a4 [ 74.870075][ C0] irq event stamp: 320288 [ 74.870731][ C0] hardirqs last enabled at (320287): [] el0_svc_common+0xa0/0x258 [ 74.872209][ C0] hardirqs last disabled at (320288): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.873806][ C0] softirqs last enabled at (320256): [] release_sock+0x1d0/0x258 [ 74.875395][ C0] softirqs last disabled at (320254): [] release_sock+0x34/0x258 [ 74.877020][ C0] ---[ end trace 9860002a16993f30 ]--- [ 74.953986][ T4892] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.955205][ T4892] Bad inode number on dev loop0: 2 is out of range [ 74.956258][ T4892] SysV FS: get root inode failed [ 74.957049][ T4892] oldfs: cannot read superblock [ 74.965928][ C0] ------------[ cut here ]------------ [ 74.966827][ C0] VFS: brelse: Trying to free free buffer [ 74.967785][ C0] WARNING: CPU: 0 PID: 4894 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.969224][ C0] Modules linked in: [ 74.969903][ C0] CPU: 0 PID: 4894 Comm: syz.0.101 Tainted: G W syzkaller #0 [ 74.971500][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.973252][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.974505][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 74.975357][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 74.976237][ C0] sp : ffff800008007df0 [ 74.976858][ C0] x29: ffff800008007df0 x28: ffff0000e7fa3680 x27: 1fffe000341d085c [ 74.978125][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 74.979448][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000ddb10df8 [ 74.980807][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 74.982122][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 74.983385][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 74.984673][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 96937d8f37770600 [ 74.986013][ C0] x8 : 96937d8f37770600 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.987366][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.988754][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 74.990200][ C0] Call trace: [ 74.990814][ C0] invalidate_bh_lru+0x128/0x22c [ 74.991712][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 74.992729][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.993956][ C0] ipi_handler+0x10c/0x70c [ 74.994683][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 74.995584][ C0] handle_domain_irq+0x148/0x200 [ 74.996457][ C0] gic_handle_irq+0x78/0x1b8 [ 74.997245][ C0] call_on_irq_stack+0x30/0x48 [ 74.998075][ C0] do_interrupt_handler+0x6c/0x88 [ 74.998931][ C0] el1_interrupt+0x30/0x58 [ 74.999707][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.000487][ C0] el1h_64_irq+0x78/0x7c [ 75.001165][ C0] get_page_from_freelist+0x20c0/0x2a5c [ 75.002258][ C0] __alloc_pages+0x1a4/0x474 [ 75.003166][ C0] alloc_pages_vma+0x284/0x790 [ 75.004063][ C0] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 75.005263][ C0] handle_mm_fault+0x17f4/0x2aac [ 75.006114][ C0] do_page_fault+0x690/0xad0 [ 75.006867][ C0] do_translation_fault+0xe0/0x130 [ 75.007726][ C0] do_mem_abort+0x6c/0x1b0 [ 75.008414][ C0] el0_da+0x90/0x1ec [ 75.009147][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 75.010073][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.010859][ C0] irq event stamp: 270 [ 75.011561][ C0] hardirqs last enabled at (269): [] get_page_from_freelist+0x20ac/0x2a5c [ 75.013272][ C0] hardirqs last disabled at (270): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.014824][ C0] softirqs last enabled at (48): [] local_bh_enable+0x10/0x34 [ 75.016403][ C0] softirqs last disabled at (46): [] local_bh_disable+0x10/0x34 [ 75.017879][ C0] ---[ end trace 9860002a16993f31 ]--- [ 75.101113][ T4894] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.102427][ T4894] Bad inode number on dev loop0: 2 is out of range [ 75.103554][ T4894] SysV FS: get root inode failed [ 75.104419][ T4894] oldfs: cannot read superblock [ 75.111220][ C1] ------------[ cut here ]------------ [ 75.112130][ C1] VFS: brelse: Trying to free free buffer [ 75.113028][ C1] WARNING: CPU: 1 PID: 4645 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.114386][ C1] Modules linked in: [ 75.114983][ C1] CPU: 1 PID: 4645 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.116214][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.117669][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.118913][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.119816][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.120712][ C1] sp : ffff800008017df0 [ 75.121375][ C1] x29: ffff800008017df0 x28: ffff0000e8533680 x27: 1fffe000341d4a5e [ 75.122634][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000003 [ 75.124037][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c52bbd10 [ 75.125397][ C1] x20: ffff0001a0ea52f0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.126702][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.128038][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 75.129356][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 40e71f82f2236e00 [ 75.130637][ C1] x8 : 40e71f82f2236e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.132006][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.133321][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.134702][ C1] Call trace: [ 75.135269][ C1] invalidate_bh_lru+0x128/0x22c [ 75.136108][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.137236][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.138509][ C1] ipi_handler+0x10c/0x70c [ 75.139297][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.140295][ C1] handle_domain_irq+0x148/0x200 [ 75.141205][ C1] gic_handle_irq+0x78/0x1b8 [ 75.142043][ C1] call_on_irq_stack+0x30/0x48 [ 75.142913][ C1] do_interrupt_handler+0x6c/0x88 [ 75.143815][ C1] el1_interrupt+0x30/0x58 [ 75.144620][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.145567][ C1] el1h_64_irq+0x78/0x7c [ 75.146372][ C1] rcu_read_lock_sched_held+0x74/0xb4 [ 75.147344][ C1] wp_page_copy+0x2b4/0x13dc [ 75.148255][ C1] do_wp_page+0x6d0/0x994 [ 75.149127][ C1] handle_mm_fault+0x1668/0x2aac [ 75.150028][ C1] do_page_fault+0x690/0xad0 [ 75.150842][ C1] do_mem_abort+0x6c/0x1b0 [ 75.151639][ C1] el0_da+0x90/0x1ec [ 75.152300][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 75.153154][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.153909][ C1] irq event stamp: 325374 [ 75.154644][ C1] hardirqs last enabled at (325373): [] charge_memcg+0x190/0x21c [ 75.156513][ C1] hardirqs last disabled at (325374): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.158303][ C1] softirqs last enabled at (325166): [] local_bh_enable+0x10/0x34 [ 75.159963][ C1] softirqs last disabled at (325164): [] local_bh_disable+0x10/0x34 [ 75.161571][ C1] ---[ end trace 9860002a16993f32 ]--- [ 75.201910][ T4897] set_capacity_and_notify: 29 callbacks suppressed [ 75.201918][ T4897] loop0: detected capacity change from 0 to 128