[ 52.684369][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.413062][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.463601][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.524221][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 56.557101][ T148] device hsr_slave_0 left promiscuous mode [ 56.590008][ T148] device hsr_slave_1 left promiscuous mode [ 56.679565][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.680868][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.682403][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.683639][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.685028][ T148] device bridge_slave_1 left promiscuous mode [ 56.686110][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.720186][ T148] device bridge_slave_0 left promiscuous mode [ 56.721347][ T148] bridge0: port 1(bridge_slave_0) entered disabled state 1970/01/01 00:00:56 parsed 1 programs [ 56.849988][ T148] device veth1_macvtap left promiscuous mode [ 56.851135][ T148] device veth0_macvtap left promiscuous mode [ 56.852192][ T148] device veth1_vlan left promiscuous mode [ 56.853157][ T148] device veth0_vlan left promiscuous mode [ 56.964260][ T148] team0 (unregistering): Port device team_slave_1 removed [ 56.968857][ T148] team0 (unregistering): Port device team_slave_0 removed [ 56.977594][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.015598][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.145537][ T148] bond0 (unregistering): Released all slaves [ 58.011421][ T4453] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 59.380862][ T1653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.382156][ T1653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.383446][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.393708][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.395096][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.396528][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.707587][ T4496] chnl_net:caif_netlink_parms(): no params data found [ 59.727763][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.728983][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.730651][ T4496] device bridge_slave_0 entered promiscuous mode [ 59.733236][ T4496] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.734525][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.736109][ T4496] device bridge_slave_1 entered promiscuous mode [ 59.746836][ T4496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.749432][ T4496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.757857][ T4496] team0: Port device team_slave_0 added [ 59.760066][ T4496] team0: Port device team_slave_1 added [ 59.767854][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.769009][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.773486][ T4496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.776242][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.777366][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.781938][ T4496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.820573][ T4496] device hsr_slave_0 entered promiscuous mode [ 59.859720][ T4496] device hsr_slave_1 entered promiscuous mode [ 60.491156][ T4496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.530737][ T4496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.580803][ T4496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.612475][ T4496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.664837][ T4496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.668716][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.670348][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.673522][ T4496] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.676043][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.677775][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.679293][ T1653] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.680606][ T1653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.682625][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.692694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.694425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.695950][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.697150][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.698600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.704117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.705801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.708044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.715139][ T4496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.716746][ T4496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.720164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.721779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.723816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.725395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.726982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.729024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.734566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.738409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.780077][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.781492][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.784875][ T4496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.794950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.796661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.803051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.804676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.806480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.808578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.824249][ T4496] device veth0_vlan entered promiscuous mode [ 60.827654][ T4496] device veth1_vlan entered promiscuous mode [ 60.837126][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.838696][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.841193][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.842967][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.847136][ T4496] device veth0_macvtap entered promiscuous mode [ 60.849753][ T4496] device veth1_macvtap entered promiscuous mode [ 60.855662][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.856898][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.858356][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.862644][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.864370][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.867787][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.870463][ T4496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.871888][ T4496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.873347][ T4496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.874718][ T4496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.881440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.883186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 1970/01/01 00:01:01 executed programs: 0 [ 61.357561][ T4667] chnl_net:caif_netlink_parms(): no params data found [ 61.390330][ T4667] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.391638][ T4667] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.393204][ T4667] device bridge_slave_0 entered promiscuous mode [ 61.395422][ T4667] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.396624][ T4667] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.398319][ T4667] device bridge_slave_1 entered promiscuous mode [ 61.411310][ T4667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.424968][ T4667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.435565][ T4667] team0: Port device team_slave_0 added [ 61.437526][ T4667] team0: Port device team_slave_1 added [ 61.444797][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.446045][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.451956][ T4667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.454845][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.456005][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.461183][ T4667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.511252][ T4667] device hsr_slave_0 entered promiscuous mode [ 61.549933][ T4667] device hsr_slave_1 entered promiscuous mode [ 61.589844][ T4667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.591066][ T4667] Cannot create hsr debugfs directory [ 61.625222][ T4667] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.369706][ T4316] Bluetooth: hci0: command 0x0409 tx timeout [ 64.564953][ T4667] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.459585][ T4786] Bluetooth: hci0: command 0x041b tx timeout [ 66.893906][ T4667] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.965117][ T4667] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.123792][ T4667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.171426][ T4667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.220314][ T4667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.292612][ T4667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.358200][ T4667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.362866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.364434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.367378][ T4667] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.370497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.372195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.373731][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.375044][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.376494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.379163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.382572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.384058][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.385107][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.397723][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.402446][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.405251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.407235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.408905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.412236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.413942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.416627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.418170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.422315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.423817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.426392][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.469304][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.471058][ T1653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.474524][ T4667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.481211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.482963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.489333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.491241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.492879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.494415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.496983][ T4667] device veth0_vlan entered promiscuous mode [ 67.501449][ T4667] device veth1_vlan entered promiscuous mode [ 67.511780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.513267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.514798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.516341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.530394][ T4785] Bluetooth: hci0: command 0x040f tx timeout [ 67.530803][ T4667] device veth0_macvtap entered promiscuous mode [ 67.534192][ T4667] device veth1_macvtap entered promiscuous mode [ 67.539176][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.541588][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.543715][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.545122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.546749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.548414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.551924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.554835][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.556517][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.558542][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.559876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.561623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.564337][ T4667] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.565679][ T4667] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.567044][ T4667] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.568335][ T4667] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.593669][ T1604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.595066][ T1604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.596395][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.603911][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.605170][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.606618][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:07 executed programs: 2 [ 67.624453][ T4793] loop0: detected capacity change from 0 to 128 [ 67.639617][ T4793] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.640987][ T4793] Bad inode number on dev loop0: 2 is out of range [ 67.642027][ T4793] SysV FS: get root inode failed [ 67.642952][ T4793] oldfs: cannot read superblock [ 67.643834][ T4793] ------------[ cut here ]------------ [ 67.644746][ T4793] VFS: brelse: Trying to free free buffer [ 67.645636][ T4793] WARNING: CPU: 0 PID: 4793 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.647018][ T4793] Modules linked in: [ 67.647591][ T4793] CPU: 0 PID: 4793 Comm: syz.0.15 Not tainted syzkaller #0 [ 67.648713][ T4793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.650281][ T4793] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.651499][ T4793] pc : invalidate_bh_lru+0x128/0x22c [ 67.652423][ T4793] lr : invalidate_bh_lru+0x128/0x22c [ 67.653378][ T4793] sp : ffff80001fdc7710 [ 67.654060][ T4793] x29: ffff80001fdc7710 x28: ffff80001438d000 x27: 1fffe000341d085b [ 67.655405][ T4793] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 67.656773][ T4793] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dee0b970 [ 67.658081][ T4793] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 67.659481][ T4793] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 67.660779][ T4793] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 67.662180][ T4793] x11: ff8080000830061c x10: 0000000000000000 x9 : 8524fc2f9e082700 [ 67.663572][ T4793] x8 : 8524fc2f9e082700 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.664982][ T4793] x5 : ffff80001fdc7018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.666298][ T4793] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 67.667608][ T4793] Call trace: [ 67.668112][ T4793] invalidate_bh_lru+0x128/0x22c [ 67.668929][ T4793] smp_call_function_many_cond+0xa5c/0xec0 [ 67.669895][ T4793] on_each_cpu_cond_mask+0x5c/0xc4 [ 67.670767][ T4793] invalidate_bh_lrus+0x34/0x40 [ 67.671588][ T4793] blkdev_flush_mapping+0x16c/0x334 [ 67.672435][ T4793] blkdev_put+0x444/0x6c4 [ 67.673116][ T4793] kill_block_super+0xa0/0xe0 [ 67.673883][ T4793] deactivate_locked_super+0xc0/0x13c [ 67.674899][ T4793] mount_bdev+0x284/0x35c [ 67.675657][ T4793] sysv_mount+0x44/0x58 [ 67.676353][ T4793] legacy_get_tree+0xd8/0x174 [ 67.677158][ T4793] vfs_get_tree+0x90/0x278 [ 67.677971][ T4793] do_new_mount+0x228/0x804 [ 67.678867][ T4793] path_mount+0x57c/0xfe8 [ 67.679594][ T4793] __arm64_sys_mount+0x488/0x5f8 [ 67.680550][ T4793] invoke_syscall+0x98/0x28c [ 67.681444][ T4793] el0_svc_common+0x13c/0x258 [ 67.682342][ T4793] do_el0_svc+0x5c/0x140 [ 67.683156][ T4793] el0_svc+0x78/0x1d0 [ 67.683823][ T4793] el0t_64_sync_handler+0xcc/0xe4 [ 67.684682][ T4793] el0t_64_sync+0x1a0/0x1a4 [ 67.685428][ T4793] irq event stamp: 1148 [ 67.686109][ T4793] hardirqs last enabled at (1147): [] kasan_quarantine_put+0xc4/0x200 [ 67.687994][ T4793] hardirqs last disabled at (1148): [] smp_call_function_many_cond+0xa50/0xec0 [ 67.689804][ T4793] softirqs last enabled at (950): [] local_bh_enable+0x10/0x34 [ 67.691419][ T4793] softirqs last disabled at (948): [] local_bh_disable+0x10/0x34 [ 67.692972][ T4793] ---[ end trace e2dde290653db3f6 ]--- [ 67.773968][ T4795] loop0: detected capacity change from 0 to 128 [ 67.776659][ T4795] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.777855][ T4795] Bad inode number on dev loop0: 2 is out of range [ 67.778908][ T4795] SysV FS: get root inode failed [ 67.780661][ T4795] oldfs: cannot read superblock [ 67.783310][ T4787] ------------[ cut here ]------------ [ 67.784275][ T4787] VFS: brelse: Trying to free free buffer [ 67.785239][ T4787] WARNING: CPU: 0 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.786600][ T4787] Modules linked in: [ 67.787206][ T4787] CPU: 0 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 67.788491][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.790179][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.791510][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 67.792397][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 67.793304][ T4787] sp : ffff80001bd177d0 [ 67.794025][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 67.795373][ T4787] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 67.796770][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dee0bd10 [ 67.798269][ T4787] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 67.799546][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 67.800926][ T4787] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 67.802283][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 67.803706][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.805312][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.806734][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 67.808121][ T4787] Call trace: [ 67.808741][ T4787] invalidate_bh_lru+0x128/0x22c [ 67.809697][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 67.810806][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 67.811727][ T4787] invalidate_bh_lrus+0x34/0x40 [ 67.812577][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 67.813473][ T4787] blkdev_put+0x444/0x6c4 [ 67.814221][ T4787] blkdev_close+0x74/0xb0 [ 67.814992][ T4787] __fput+0x1b8/0x7e8 [ 67.815712][ T4787] ____fput+0x20/0x30 [ 67.816407][ T4787] task_work_run+0x13c/0x1e8 [ 67.817219][ T4787] do_notify_resume+0x2488/0x30a8 [ 67.818096][ T4787] el0_svc+0xf0/0x1d0 [ 67.818868][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 67.819706][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 67.820430][ T4787] irq event stamp: 14918 [ 67.821176][ T4787] hardirqs last enabled at (14917): [] kasan_quarantine_put+0xc4/0x200 [ 67.823075][ T4787] hardirqs last disabled at (14918): [] smp_call_function_many_cond+0xa50/0xec0 [ 67.824874][ T4787] softirqs last enabled at (14666): [] local_bh_enable+0x10/0x34 [ 67.826424][ T4787] softirqs last disabled at (14664): [] local_bh_disable+0x10/0x34 [ 67.828116][ T4787] ---[ end trace e2dde290653db3f7 ]--- [ 67.874716][ T4797] loop0: detected capacity change from 0 to 128 [ 67.901075][ T4797] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 67.902360][ T4797] Bad inode number on dev loop0: 2 is out of range [ 67.903376][ T4797] SysV FS: get root inode failed [ 67.904181][ T4797] oldfs: cannot read superblock [ 67.913055][ C0] ------------[ cut here ]------------ [ 67.913997][ C0] VFS: brelse: Trying to free free buffer [ 67.914941][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 67.916355][ C0] Modules linked in: [ 67.916994][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 67.918431][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 67.920021][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.921365][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 67.922324][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 67.923181][ C0] sp : ffff800008007df0 [ 67.923852][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085b [ 67.925123][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 67.926414][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c89148 [ 67.928091][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 67.929554][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 67.930839][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 67.932153][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 67.933435][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 67.934697][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 67.935945][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 67.937314][ C0] Call trace: [ 67.937827][ C0] invalidate_bh_lru+0x128/0x22c [ 67.938648][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 67.939694][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 67.940878][ C0] ipi_handler+0x10c/0x70c [ 67.941644][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 67.942534][ C0] handle_domain_irq+0x148/0x200 [ 67.943336][ C0] gic_handle_irq+0x78/0x1b8 [ 67.944078][ C0] call_on_irq_stack+0x30/0x48 [ 67.944856][ C0] do_interrupt_handler+0x6c/0x88 [ 67.945694][ C0] el1_interrupt+0x30/0x58 [ 67.946509][ C0] el1h_64_irq_handler+0x18/0x24 [ 67.947310][ C0] el1h_64_irq+0x78/0x7c [ 67.947982][ C0] seqcount_lockdep_reader_access+0x15c/0x22c [ 67.948967][ C0] bad_range+0xa8/0x2a4 [ 67.949609][ C0] get_page_from_freelist+0x28dc/0x2a5c [ 67.950487][ C0] __alloc_pages+0x1a4/0x474 [ 67.951222][ C0] alloc_pages+0x34c/0x5c0 [ 67.951924][ C0] pte_alloc_one+0x2c/0x254 [ 67.952667][ C0] __pte_alloc+0x34/0x214 [ 67.953406][ C0] copy_page_range+0x1e44/0x2348 [ 67.954203][ C0] copy_mm+0x9f0/0x1070 [ 67.954888][ C0] copy_process+0x15fc/0x3734 [ 67.955659][ C0] kernel_clone+0x1ec/0xa10 [ 67.956404][ C0] __arm64_sys_clone+0x154/0x1c0 [ 67.957221][ C0] invoke_syscall+0x98/0x28c [ 67.957990][ C0] el0_svc_common+0x13c/0x258 [ 67.958751][ C0] do_el0_svc+0x5c/0x140 [ 67.959486][ C0] el0_svc+0x78/0x1d0 [ 67.960176][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 67.960969][ C0] el0t_64_sync+0x1a0/0x1a4 [ 67.961727][ C0] irq event stamp: 172948 [ 67.962402][ C0] hardirqs last enabled at (172947): [] seqcount_lockdep_reader_access+0x14c/0x22c [ 67.964246][ C0] hardirqs last disabled at (172948): [] enter_el1_irq_or_nmi+0x10/0x1c [ 67.965921][ C0] softirqs last enabled at (172294): [] local_bh_enable+0x10/0x34 [ 67.967585][ C0] softirqs last disabled at (172292): [] local_bh_disable+0x10/0x34 [ 67.969268][ C0] ---[ end trace e2dde290653db3f8 ]--- [ 68.015869][ T4799] loop0: detected capacity change from 0 to 128 [ 68.063176][ T4799] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.064465][ T4799] Bad inode number on dev loop0: 2 is out of range [ 68.065493][ T4799] SysV FS: get root inode failed [ 68.066263][ T4799] oldfs: cannot read superblock [ 68.070772][ C0] ------------[ cut here ]------------ [ 68.071657][ C0] VFS: brelse: Trying to free free buffer [ 68.072667][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.074050][ C0] Modules linked in: [ 68.074640][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.076082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.077662][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.078950][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.079785][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.080703][ C0] sp : ffff800008007df0 [ 68.081438][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085b [ 68.082811][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 68.084158][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c894e8 [ 68.085534][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.086869][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.088260][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.089588][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 68.090923][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.092361][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.093744][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.095156][ C0] Call trace: [ 68.095729][ C0] invalidate_bh_lru+0x128/0x22c [ 68.096554][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.097503][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.098605][ C0] ipi_handler+0x10c/0x70c [ 68.099358][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.100254][ C0] handle_domain_irq+0x148/0x200 [ 68.101062][ C0] gic_handle_irq+0x78/0x1b8 [ 68.101803][ C0] call_on_irq_stack+0x30/0x48 [ 68.102637][ C0] do_interrupt_handler+0x6c/0x88 [ 68.103506][ C0] el1_interrupt+0x30/0x58 [ 68.104237][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.105045][ C0] el1h_64_irq+0x78/0x7c [ 68.105747][ C0] get_page_from_freelist+0x20c0/0x2a5c [ 68.106653][ C0] __alloc_pages+0x1a4/0x474 [ 68.107384][ C0] alloc_pages+0x34c/0x5c0 [ 68.108085][ C0] __vmalloc_node_range+0x50c/0x8c0 [ 68.108909][ C0] vzalloc+0x110/0x188 [ 68.109634][ C0] alloc_counters+0x80/0x790 [ 68.110370][ C0] do_arpt_get_ctl+0xabc/0x133c [ 68.111162][ C0] nf_getsockopt+0x254/0x274 [ 68.111907][ C0] ip_getsockopt+0x1218/0x1664 [ 68.112714][ C0] tcp_getsockopt+0x214/0x2d2c [ 68.113525][ C0] sock_common_getsockopt+0xa8/0xc4 [ 68.114400][ C0] __sys_getsockopt+0x1b8/0x250 [ 68.115178][ C0] __arm64_sys_getsockopt+0xc0/0xdc [ 68.116034][ C0] invoke_syscall+0x98/0x28c [ 68.116789][ C0] el0_svc_common+0x13c/0x258 [ 68.117573][ C0] do_el0_svc+0x5c/0x140 [ 68.118278][ C0] el0_svc+0x78/0x1d0 [ 68.118977][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 68.119796][ C0] el0t_64_sync+0x1a0/0x1a4 [ 68.120559][ C0] irq event stamp: 174672 [ 68.121360][ C0] hardirqs last enabled at (174671): [] get_page_from_freelist+0x20ac/0x2a5c [ 68.123139][ C0] hardirqs last disabled at (174672): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.124758][ C0] softirqs last enabled at (174664): [] release_sock+0x1d0/0x258 [ 68.126305][ C0] softirqs last disabled at (174662): [] release_sock+0x34/0x258 [ 68.127901][ C0] ---[ end trace e2dde290653db3f9 ]--- [ 68.174461][ T4801] loop0: detected capacity change from 0 to 128 [ 68.222511][ T4801] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.223859][ T4801] Bad inode number on dev loop0: 2 is out of range [ 68.224904][ T4801] SysV FS: get root inode failed [ 68.225709][ T4801] oldfs: cannot read superblock [ 68.228561][ C0] ------------[ cut here ]------------ [ 68.229374][ C0] VFS: brelse: Trying to free free buffer [ 68.230352][ C0] WARNING: CPU: 0 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.231815][ C0] Modules linked in: [ 68.232428][ C0] CPU: 0 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 68.233726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.235367][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.236614][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.237462][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.238365][ C0] sp : ffff800008007df0 [ 68.239012][ C0] x29: ffff800008007df0 x28: ffff0000d6e01b40 x27: 1fffe000341d085c [ 68.240363][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 68.241749][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c89888 [ 68.243085][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.244443][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.245828][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.247180][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : ce93b0e62cf3f900 [ 68.248507][ C0] x8 : ce93b0e62cf3f900 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.249794][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.251185][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.252651][ C0] Call trace: [ 68.253218][ C0] invalidate_bh_lru+0x128/0x22c [ 68.254069][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.255149][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.256355][ C0] ipi_handler+0x10c/0x70c [ 68.257139][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.258036][ C0] handle_domain_irq+0x148/0x200 [ 68.258924][ C0] gic_handle_irq+0x78/0x1b8 [ 68.259711][ C0] call_on_irq_stack+0x30/0x48 [ 68.260483][ C0] do_interrupt_handler+0x6c/0x88 [ 68.261348][ C0] el1_interrupt+0x30/0x58 [ 68.262093][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.262964][ C0] el1h_64_irq+0x78/0x7c [ 68.263635][ C0] unwind_frame+0x474/0x684 [ 68.264356][ C0] arch_stack_walk+0x204/0x2c0 [ 68.265158][ C0] stack_trace_save+0x9c/0xf0 [ 68.265921][ C0] __kasan_kmalloc+0xb0/0xf0 [ 68.266733][ C0] __kmalloc+0x294/0x440 [ 68.267437][ C0] tomoyo_realpath_from_path+0xe8/0x540 [ 68.268338][ C0] tomoyo_path_perm+0x1e4/0x49c [ 68.269211][ C0] tomoyo_inode_getattr+0x28/0x38 [ 68.270153][ C0] security_inode_getattr+0xd8/0x124 [ 68.271171][ C0] __arm64_sys_newfstat+0x100/0x1fc [ 68.272060][ C0] invoke_syscall+0x98/0x28c [ 68.272898][ C0] el0_svc_common+0x13c/0x258 [ 68.273856][ C0] do_el0_svc+0x5c/0x140 [ 68.274633][ C0] el0_svc+0x78/0x1d0 [ 68.275350][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 68.276216][ C0] el0t_64_sync+0x1a0/0x1a4 [ 68.277035][ C0] irq event stamp: 1117364 [ 68.277808][ C0] hardirqs last enabled at (1117363): [] ___slab_alloc+0xc10/0xd84 [ 68.279342][ C0] hardirqs last disabled at (1117364): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.281019][ C0] softirqs last enabled at (1117288): [] local_bh_enable+0x10/0x34 [ 68.282675][ C0] softirqs last disabled at (1117286): [] local_bh_disable+0x10/0x34 [ 68.284272][ C0] ---[ end trace e2dde290653db3fa ]--- [ 68.342306][ T4803] loop0: detected capacity change from 0 to 128 [ 68.381086][ T4803] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.382366][ T4803] Bad inode number on dev loop0: 2 is out of range [ 68.383446][ T4803] SysV FS: get root inode failed [ 68.384210][ T4803] oldfs: cannot read superblock [ 68.384958][ T4803] ------------[ cut here ]------------ [ 68.385803][ T4803] VFS: brelse: Trying to free free buffer [ 68.386744][ T4803] WARNING: CPU: 1 PID: 4803 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.388118][ T4803] Modules linked in: [ 68.388729][ T4803] CPU: 1 PID: 4803 Comm: syz.0.20 Tainted: G W syzkaller #0 [ 68.390269][ T4803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.391948][ T4803] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.393271][ T4803] pc : invalidate_bh_lru+0x128/0x22c [ 68.394208][ T4803] lr : invalidate_bh_lru+0x128/0x22c [ 68.395062][ T4803] sp : ffff80001fdc7710 [ 68.395783][ T4803] x29: ffff80001fdc7710 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 68.397184][ T4803] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 68.398559][ T4803] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c0fd10 [ 68.399932][ T4803] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 68.401433][ T4803] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 68.402893][ T4803] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 68.404234][ T4803] x11: ff8080000830061c x10: 0000000000000000 x9 : 6e93fe48a471dc00 [ 68.405606][ T4803] x8 : 6e93fe48a471dc00 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.406890][ T4803] x5 : ffff80001fdc7018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.408374][ T4803] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.409839][ T4803] Call trace: [ 68.410402][ T4803] invalidate_bh_lru+0x128/0x22c [ 68.411261][ T4803] smp_call_function_many_cond+0xa5c/0xec0 [ 68.412354][ T4803] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.413351][ T4803] invalidate_bh_lrus+0x34/0x40 [ 68.414227][ T4803] blkdev_flush_mapping+0x16c/0x334 [ 68.415273][ T4803] blkdev_put+0x444/0x6c4 [ 68.416088][ T4803] kill_block_super+0xa0/0xe0 [ 68.416924][ T4803] deactivate_locked_super+0xc0/0x13c [ 68.417904][ T4803] mount_bdev+0x284/0x35c [ 68.418644][ T4803] sysv_mount+0x44/0x58 [ 68.419394][ T4803] legacy_get_tree+0xd8/0x174 [ 68.420213][ T4803] vfs_get_tree+0x90/0x278 [ 68.420996][ T4803] do_new_mount+0x228/0x804 [ 68.421836][ T4803] path_mount+0x57c/0xfe8 [ 68.422605][ T4803] __arm64_sys_mount+0x488/0x5f8 [ 68.423452][ T4803] invoke_syscall+0x98/0x28c [ 68.424243][ T4803] el0_svc_common+0x13c/0x258 [ 68.425123][ T4803] do_el0_svc+0x5c/0x140 [ 68.425883][ T4803] el0_svc+0x78/0x1d0 [ 68.426644][ T4803] el0t_64_sync_handler+0xcc/0xe4 [ 68.427547][ T4803] el0t_64_sync+0x1a0/0x1a4 [ 68.428328][ T4803] irq event stamp: 1092 [ 68.429091][ T4803] hardirqs last enabled at (1091): [] kasan_quarantine_put+0xc4/0x200 [ 68.430788][ T4803] hardirqs last disabled at (1092): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.432735][ T4803] softirqs last enabled at (920): [] local_bh_enable+0x10/0x34 [ 68.434344][ T4803] softirqs last disabled at (918): [] local_bh_disable+0x10/0x34 [ 68.436008][ T4803] ---[ end trace e2dde290653db3fb ]--- [ 68.513055][ T4807] loop0: detected capacity change from 0 to 128 [ 68.518045][ T4807] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.519281][ T4807] Bad inode number on dev loop0: 2 is out of range [ 68.521300][ T4807] SysV FS: get root inode failed [ 68.522278][ T4807] oldfs: cannot read superblock [ 68.528297][ T4787] ------------[ cut here ]------------ [ 68.529273][ T4787] VFS: brelse: Trying to free free buffer [ 68.530341][ T4787] WARNING: CPU: 1 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.531957][ T4787] Modules linked in: [ 68.532699][ T4787] CPU: 1 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 68.534219][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.535947][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.537225][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 68.538235][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 68.539174][ T4787] sp : ffff80001bd177d0 [ 68.539896][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 68.541337][ T4787] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 68.542687][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c0b148 [ 68.544307][ T4787] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 68.545743][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 68.547123][ T4787] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 68.548557][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 68.549980][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.551380][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.552804][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 68.554187][ T4787] Call trace: [ 68.554716][ T4787] invalidate_bh_lru+0x128/0x22c [ 68.555594][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 68.556587][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 68.557415][ T4787] invalidate_bh_lrus+0x34/0x40 [ 68.558200][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 68.559038][ T4787] blkdev_put+0x444/0x6c4 [ 68.559790][ T4787] blkdev_close+0x74/0xb0 [ 68.560581][ T4787] __fput+0x1b8/0x7e8 [ 68.561218][ T4787] ____fput+0x20/0x30 [ 68.561958][ T4787] task_work_run+0x13c/0x1e8 [ 68.562767][ T4787] do_notify_resume+0x2488/0x30a8 [ 68.563643][ T4787] el0_svc+0xf0/0x1d0 [ 68.564337][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 68.565172][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 68.565957][ T4787] irq event stamp: 43386 [ 68.566760][ T4787] hardirqs last enabled at (43385): [] kasan_quarantine_put+0xc4/0x200 [ 68.568456][ T4787] hardirqs last disabled at (43386): [] smp_call_function_many_cond+0xa50/0xec0 [ 68.570352][ T4787] softirqs last enabled at (43110): [] local_bh_enable+0x10/0x34 [ 68.571862][ T4787] softirqs last disabled at (43108): [] local_bh_disable+0x10/0x34 [ 68.573408][ T4787] ---[ end trace e2dde290653db3fc ]--- [ 68.619162][ T4809] loop0: detected capacity change from 0 to 128 [ 68.622626][ T4809] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.624065][ T4809] Bad inode number on dev loop0: 2 is out of range [ 68.625315][ T4809] SysV FS: get root inode failed [ 68.626213][ T4809] oldfs: cannot read superblock [ 68.636288][ C0] ------------[ cut here ]------------ [ 68.637183][ C0] VFS: brelse: Trying to free free buffer [ 68.638092][ C0] WARNING: CPU: 0 PID: 4811 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.639457][ C0] Modules linked in: [ 68.640139][ C0] CPU: 0 PID: 4811 Comm: syz.0.24 Tainted: G W syzkaller #0 [ 68.641596][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.643371][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.644662][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.645528][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.646336][ C0] sp : ffff800008007df0 [ 68.647036][ C0] x29: ffff800008007df0 x28: ffff0000d5fe0000 x27: 1fffe000341d085c [ 68.648258][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 68.649501][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c89c28 [ 68.650853][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.652200][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.653508][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.654773][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 408f217f77898700 [ 68.656003][ C0] x8 : 408f217f77898700 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.657304][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.658673][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.660004][ C0] Call trace: [ 68.660533][ C0] invalidate_bh_lru+0x128/0x22c [ 68.661400][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.662396][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.663483][ C0] ipi_handler+0x10c/0x70c [ 68.664141][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.665051][ C0] handle_domain_irq+0x148/0x200 [ 68.665840][ C0] gic_handle_irq+0x78/0x1b8 [ 68.666558][ C0] call_on_irq_stack+0x30/0x48 [ 68.667346][ C0] do_interrupt_handler+0x6c/0x88 [ 68.668259][ C0] el0_interrupt+0x94/0x248 [ 68.668982][ C0] __el0_irq_handler_common+0x18/0x24 [ 68.669806][ C0] el0t_64_irq_handler+0x10/0x1c [ 68.670622][ C0] el0t_64_irq+0x1a0/0x1a4 [ 68.671363][ C0] irq event stamp: 354 [ 68.672068][ C0] hardirqs last enabled at (353): [] el0t_64_sync_handler+0xd8/0xe4 [ 68.673658][ C0] hardirqs last disabled at (354): [] __el0_irq_handler_common+0x18/0x24 [ 68.675324][ C0] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 68.676784][ C0] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 68.678253][ C0] ---[ end trace e2dde290653db3fd ]--- [ 68.703051][ T4811] loop0: detected capacity change from 0 to 128 [ 68.705295][ T4811] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.706509][ T4811] Bad inode number on dev loop0: 2 is out of range [ 68.707600][ T4811] SysV FS: get root inode failed [ 68.708356][ T4811] oldfs: cannot read superblock [ 68.728464][ C1] ------------[ cut here ]------------ [ 68.729432][ C1] VFS: brelse: Trying to free free buffer [ 68.730623][ C1] WARNING: CPU: 1 PID: 4815 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.732189][ C1] Modules linked in: [ 68.732896][ C1] CPU: 1 PID: 4815 Comm: syz.0.26 Tainted: G W syzkaller #0 [ 68.734375][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.736048][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.737369][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 68.738238][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 68.739088][ C1] sp : ffff800008017df0 [ 68.739754][ C1] x29: ffff800008017df0 x28: ffff0000c80f3680 x27: 1fffe000341d4a5c [ 68.741120][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 68.742600][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c0b888 [ 68.744066][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 68.745446][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 68.746912][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 68.748452][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 236e6ed95624b000 [ 68.749758][ C1] x8 : 236e6ed95624b000 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.751107][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.752399][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 68.753653][ C1] Call trace: [ 68.754283][ C1] invalidate_bh_lru+0x128/0x22c [ 68.755134][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 68.756166][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.757346][ C1] ipi_handler+0x10c/0x70c [ 68.758231][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 68.759259][ C1] handle_domain_irq+0x148/0x200 [ 68.760141][ C1] gic_handle_irq+0x78/0x1b8 [ 68.760991][ C1] call_on_irq_stack+0x30/0x48 [ 68.761882][ C1] do_interrupt_handler+0x6c/0x88 [ 68.762757][ C1] el1_interrupt+0x30/0x58 [ 68.763544][ C1] el1h_64_irq_handler+0x18/0x24 [ 68.764379][ C1] el1h_64_irq+0x78/0x7c [ 68.765169][ C1] lock_acquire+0x234/0x618 [ 68.765900][ C1] fs_reclaim_acquire+0xec/0x1c4 [ 68.766775][ C1] prepare_alloc_pages+0x134/0x460 [ 68.767609][ C1] __alloc_pages+0x108/0x474 [ 68.768369][ C1] alloc_pages_vma+0x284/0x790 [ 68.769188][ C1] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 68.770182][ C1] handle_mm_fault+0x17f4/0x2aac [ 68.771013][ C1] do_page_fault+0x690/0xad0 [ 68.771764][ C1] do_translation_fault+0xe0/0x130 [ 68.772616][ C1] do_mem_abort+0x6c/0x1b0 [ 68.773371][ C1] el0_da+0x90/0x1ec [ 68.774033][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 68.774831][ C1] el0t_64_sync+0x1a0/0x1a4 [ 68.775542][ C1] irq event stamp: 268 [ 68.776164][ C1] hardirqs last enabled at (267): [] count_memcg_event_mm+0x1b0/0x300 [ 68.777807][ C1] hardirqs last disabled at (268): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.779422][ C1] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 68.781017][ C1] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 68.782612][ C1] ---[ end trace e2dde290653db3fe ]--- [ 68.821864][ T4815] loop0: detected capacity change from 0 to 128 [ 68.870842][ T4815] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.872199][ T4815] Bad inode number on dev loop0: 2 is out of range [ 68.873276][ T4815] SysV FS: get root inode failed [ 68.874024][ T4815] oldfs: cannot read superblock [ 68.882589][ C0] ------------[ cut here ]------------ [ 68.883423][ C0] VFS: brelse: Trying to free free buffer [ 68.884376][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.885763][ C0] Modules linked in: [ 68.886403][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 68.887720][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.889264][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.890575][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 68.891430][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 68.892273][ C0] sp : ffff800008007df0 [ 68.892957][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085b [ 68.894296][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 68.895681][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd7627a0 [ 68.897058][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 68.898377][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 68.899749][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 68.901041][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 2663d8ba4f118900 [ 68.902358][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 68.903685][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 68.904996][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 68.906333][ C0] Call trace: [ 68.906875][ C0] invalidate_bh_lru+0x128/0x22c [ 68.907779][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 68.908842][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 68.910070][ C0] ipi_handler+0x10c/0x70c [ 68.910798][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 68.911789][ C0] handle_domain_irq+0x148/0x200 [ 68.912619][ C0] gic_handle_irq+0x78/0x1b8 [ 68.913386][ C0] call_on_irq_stack+0x30/0x48 [ 68.914164][ C0] do_interrupt_handler+0x6c/0x88 [ 68.914990][ C0] el1_interrupt+0x30/0x58 [ 68.915733][ C0] el1h_64_irq_handler+0x18/0x24 [ 68.916514][ C0] el1h_64_irq+0x78/0x7c [ 68.917189][ C0] unwind_frame+0x214/0x684 [ 68.917974][ C0] walk_stackframe+0x6c/0xa8 [ 68.918693][ C0] return_address+0xd8/0x15c [ 68.919455][ C0] preempt_count_add+0x14c/0x41c [ 68.920402][ C0] _raw_spin_lock+0x24/0x10c [ 68.921225][ C0] remove_vm_area+0x44/0x1c4 [ 68.921917][ C0] __vunmap+0x310/0x9e4 [ 68.922574][ C0] vfree+0xbc/0x154 [ 68.923161][ C0] do_ip6t_get_ctl+0x11a8/0x1464 [ 68.923936][ C0] nf_getsockopt+0x254/0x274 [ 68.924678][ C0] ipv6_getsockopt+0x588/0x256c [ 68.925597][ C0] tcp_getsockopt+0x214/0x2d2c [ 68.926341][ C0] sock_common_getsockopt+0xa8/0xc4 [ 68.927183][ C0] __sys_getsockopt+0x1b8/0x250 [ 68.927989][ C0] __arm64_sys_getsockopt+0xc0/0xdc [ 68.928927][ C0] invoke_syscall+0x98/0x28c [ 68.929646][ C0] el0_svc_common+0x13c/0x258 [ 68.930460][ C0] do_el0_svc+0x5c/0x140 [ 68.931115][ C0] el0_svc+0x78/0x1d0 [ 68.931800][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 68.932612][ C0] el0t_64_sync+0x1a0/0x1a4 [ 68.933355][ C0] irq event stamp: 202782 [ 68.934026][ C0] hardirqs last enabled at (202781): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 68.935724][ C0] hardirqs last disabled at (202782): [] enter_el1_irq_or_nmi+0x10/0x1c [ 68.937582][ C0] softirqs last enabled at (202710): [] local_bh_enable+0x10/0x34 [ 68.939166][ C0] softirqs last disabled at (202708): [] local_bh_disable+0x10/0x34 [ 68.940704][ C0] ---[ end trace e2dde290653db3ff ]--- [ 68.975477][ T4817] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 68.976794][ T4817] Bad inode number on dev loop0: 2 is out of range [ 68.978038][ T4817] SysV FS: get root inode failed [ 68.978888][ T4817] oldfs: cannot read superblock [ 68.991087][ T4787] ------------[ cut here ]------------ [ 68.991952][ T4787] VFS: brelse: Trying to free free buffer [ 68.992887][ T4787] WARNING: CPU: 0 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 68.994276][ T4787] Modules linked in: [ 68.994955][ T4787] CPU: 0 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 68.996308][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 68.998013][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.999283][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 69.000133][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 69.000964][ T4787] sp : ffff80001bd177d0 [ 69.001634][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 69.002981][ T4787] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 69.004303][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd762b40 [ 69.005725][ T4787] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 69.007013][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 69.008290][ T4787] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.009637][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 69.010972][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.012366][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.013672][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.015068][ T4787] Call trace: [ 69.015631][ T4787] invalidate_bh_lru+0x128/0x22c [ 69.016528][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 69.017443][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.018280][ T4787] invalidate_bh_lrus+0x34/0x40 [ 69.019086][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 69.020077][ T4787] blkdev_put+0x444/0x6c4 [ 69.020829][ T4787] blkdev_close+0x74/0xb0 [ 69.021681][ T4787] __fput+0x1b8/0x7e8 [ 69.022348][ T4787] ____fput+0x20/0x30 [ 69.023005][ T4787] task_work_run+0x13c/0x1e8 [ 69.023772][ T4787] do_notify_resume+0x2488/0x30a8 [ 69.024581][ T4787] el0_svc+0xf0/0x1d0 [ 69.025411][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 69.026395][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 69.027188][ T4787] irq event stamp: 67634 [ 69.027902][ T4787] hardirqs last enabled at (67633): [] kasan_quarantine_put+0xc4/0x200 [ 69.029618][ T4787] hardirqs last disabled at (67634): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.031379][ T4787] softirqs last enabled at (67360): [] local_bh_enable+0x10/0x34 [ 69.033095][ T4787] softirqs last disabled at (67358): [] local_bh_disable+0x10/0x34 [ 69.034658][ T4787] ---[ end trace e2dde290653db400 ]--- [ 69.052990][ T148] device hsr_slave_0 left promiscuous mode [ 69.089816][ T148] device hsr_slave_1 left promiscuous mode [ 69.094512][ T4819] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.095957][ T4819] Bad inode number on dev loop0: 2 is out of range [ 69.097033][ T4819] SysV FS: get root inode failed [ 69.097764][ T4819] oldfs: cannot read superblock [ 69.106158][ T4787] ------------[ cut here ]------------ [ 69.106950][ T4787] VFS: brelse: Trying to free free buffer [ 69.107993][ T4787] WARNING: CPU: 0 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.109310][ T4787] Modules linked in: [ 69.109949][ T4787] CPU: 0 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 69.111320][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.112933][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.114248][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 69.115155][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 69.115979][ T4787] sp : ffff80001bd177d0 [ 69.116651][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 69.118072][ T4787] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 69.119375][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deee4148 [ 69.120772][ T4787] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 69.122098][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 69.123422][ T4787] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.124670][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 69.126003][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.127360][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.128664][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.130000][ T4787] Call trace: [ 69.130523][ T4787] invalidate_bh_lru+0x128/0x22c [ 69.131342][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 69.132251][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.133076][ T4787] invalidate_bh_lrus+0x34/0x40 [ 69.133893][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 69.134768][ T4787] blkdev_put+0x444/0x6c4 [ 69.135518][ T4787] blkdev_close+0x74/0xb0 [ 69.136230][ T4787] __fput+0x1b8/0x7e8 [ 69.136910][ T4787] ____fput+0x20/0x30 [ 69.137577][ T4787] task_work_run+0x13c/0x1e8 [ 69.138343][ T4787] do_notify_resume+0x2488/0x30a8 [ 69.139170][ T4787] el0_svc+0xf0/0x1d0 [ 69.139835][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 69.140707][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 69.141450][ T4787] irq event stamp: 71668 [ 69.142128][ T4787] hardirqs last enabled at (71667): [] kasan_quarantine_put+0xc4/0x200 [ 69.143750][ T4787] hardirqs last disabled at (71668): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.145509][ T4787] softirqs last enabled at (71404): [] local_bh_enable+0x10/0x34 [ 69.146999][ T4787] softirqs last disabled at (71402): [] local_bh_disable+0x10/0x34 [ 69.148617][ T4787] ---[ end trace e2dde290653db401 ]--- [ 69.189595][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.190894][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.192456][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.193643][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.195160][ T148] device bridge_slave_1 left promiscuous mode [ 69.196241][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.201139][ T4821] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.202309][ T4821] Bad inode number on dev loop0: 2 is out of range [ 69.203322][ T4821] SysV FS: get root inode failed [ 69.204084][ T4821] oldfs: cannot read superblock [ 69.211356][ T4787] ------------[ cut here ]------------ [ 69.212230][ T4787] VFS: brelse: Trying to free free buffer [ 69.213103][ T4787] WARNING: CPU: 0 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.214498][ T4787] Modules linked in: [ 69.215139][ T4787] CPU: 0 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 69.216449][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.217964][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.219131][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 69.219989][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 69.220906][ T4787] sp : ffff80001bd177d0 [ 69.221586][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 69.222942][ T4787] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 69.224234][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deee44e8 [ 69.225478][ T4787] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 69.226734][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 69.228118][ T4787] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.229632][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 69.231027][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.232310][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.233640][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 69.234844][ T4787] Call trace: [ 69.235343][ T4787] invalidate_bh_lru+0x128/0x22c [ 69.236139][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 69.237114][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 69.237991][ T4787] invalidate_bh_lrus+0x34/0x40 [ 69.238680][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 69.239502][ T4787] blkdev_put+0x444/0x6c4 [ 69.240228][ T4787] blkdev_close+0x74/0xb0 [ 69.240921][ T4787] __fput+0x1b8/0x7e8 [ 69.241592][ T4787] ____fput+0x20/0x30 [ 69.242247][ T4787] task_work_run+0x13c/0x1e8 [ 69.242970][ T4787] do_notify_resume+0x2488/0x30a8 [ 69.243752][ T4787] el0_svc+0xf0/0x1d0 [ 69.244409][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 69.245191][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 69.245960][ T4787] irq event stamp: 77452 [ 69.246618][ T4787] hardirqs last enabled at (77451): [] kasan_quarantine_put+0xc4/0x200 [ 69.248312][ T4787] hardirqs last disabled at (77452): [] smp_call_function_many_cond+0xa50/0xec0 [ 69.250035][ T4787] softirqs last enabled at (77188): [] local_bh_enable+0x10/0x34 [ 69.251623][ T4787] softirqs last disabled at (77186): [] local_bh_disable+0x10/0x34 [ 69.253299][ T4787] ---[ end trace e2dde290653db402 ]--- [ 69.270460][ T148] device bridge_slave_0 left promiscuous mode [ 69.271577][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.330563][ T4823] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.331673][ T4823] Bad inode number on dev loop0: 2 is out of range [ 69.332631][ T4823] SysV FS: get root inode failed [ 69.333339][ T4823] oldfs: cannot read superblock [ 69.344678][ C0] ------------[ cut here ]------------ [ 69.345515][ C0] VFS: brelse: Trying to free free buffer [ 69.346418][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.347775][ C0] Modules linked in: [ 69.348340][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 69.349718][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.351349][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.352613][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.353540][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.354439][ C0] sp : ffff800008007df0 [ 69.355075][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 69.356338][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 69.357672][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deee4888 [ 69.359004][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 69.360401][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 69.361720][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.363032][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 2663d8ba4f118900 [ 69.364324][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.365699][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.367027][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 69.368442][ C0] Call trace: [ 69.369000][ C0] invalidate_bh_lru+0x128/0x22c [ 69.369882][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.370886][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.371995][ C0] ipi_handler+0x10c/0x70c [ 69.372703][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.373604][ C0] handle_domain_irq+0x148/0x200 [ 69.374477][ C0] gic_handle_irq+0x78/0x1b8 [ 69.375245][ C0] call_on_irq_stack+0x30/0x48 [ 69.376034][ C0] do_interrupt_handler+0x6c/0x88 [ 69.376891][ C0] el1_interrupt+0x30/0x58 [ 69.377617][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.378461][ C0] el1h_64_irq+0x78/0x7c [ 69.379188][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 69.380134][ C0] pcpu_alloc+0x9fc/0x1640 [ 69.380911][ C0] __alloc_percpu+0x30/0x40 [ 69.381623][ C0] xt_percpu_counter_alloc+0x13c/0x1d4 [ 69.382454][ C0] translate_table+0xe84/0x1928 [ 69.383211][ C0] do_ip6t_set_ctl+0x9ec/0xe38 [ 69.384015][ C0] nf_setsockopt+0x260/0x280 [ 69.384822][ C0] ipv6_setsockopt+0x1b64/0x392c [ 69.385628][ C0] tcp_setsockopt+0x1f4/0x1b8c [ 69.386407][ C0] sock_common_setsockopt+0xb0/0xcc [ 69.387258][ C0] __sys_setsockopt+0x260/0x36c [ 69.388098][ C0] __arm64_sys_setsockopt+0xc0/0xdc [ 69.388954][ C0] invoke_syscall+0x98/0x28c [ 69.389684][ C0] el0_svc_common+0x13c/0x258 [ 69.390477][ C0] do_el0_svc+0x5c/0x140 [ 69.391158][ C0] el0_svc+0x78/0x1d0 [ 69.391808][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 69.392637][ C0] el0t_64_sync+0x1a0/0x1a4 [ 69.393435][ C0] irq event stamp: 214974 [ 69.394174][ C0] hardirqs last enabled at (214973): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 69.395965][ C0] hardirqs last disabled at (214974): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.397521][ C0] softirqs last enabled at (214952): [] release_sock+0x1d0/0x258 [ 69.399157][ C0] softirqs last disabled at (214950): [] release_sock+0x34/0x258 [ 69.400726][ C0] ---[ end trace e2dde290653db403 ]--- [ 69.439859][ T148] device veth1_macvtap left promiscuous mode [ 69.440996][ T148] device veth0_macvtap left promiscuous mode [ 69.442097][ T148] device veth1_vlan left promiscuous mode [ 69.443176][ T148] device veth0_vlan left promiscuous mode [ 69.504193][ T4825] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.505343][ T4825] Bad inode number on dev loop0: 2 is out of range [ 69.506572][ T4825] SysV FS: get root inode failed [ 69.507339][ T4825] oldfs: cannot read superblock [ 69.526695][ C0] ------------[ cut here ]------------ [ 69.527636][ C0] VFS: brelse: Trying to free free buffer [ 69.528530][ C0] WARNING: CPU: 0 PID: 4827 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.529905][ C0] Modules linked in: [ 69.530570][ C0] CPU: 0 PID: 4827 Comm: syz.0.32 Tainted: G W syzkaller #0 [ 69.531942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.533599][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.534944][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.535689][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.536531][ C0] sp : ffff800008007df0 [ 69.537204][ C0] x29: ffff800008007df0 x28: ffff0000ceb89b40 x27: 1fffe000341d085c [ 69.538529][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 69.539839][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deee4c28 [ 69.541099][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 69.542448][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 69.543720][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.544964][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 64a4012105744a00 [ 69.546220][ C0] x8 : 64a4012105744a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.547507][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.548826][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 69.550205][ C0] Call trace: [ 69.550779][ C0] invalidate_bh_lru+0x128/0x22c [ 69.551544][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.552544][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.553669][ C0] ipi_handler+0x10c/0x70c [ 69.554330][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.555240][ C0] handle_domain_irq+0x148/0x200 [ 69.556031][ C0] gic_handle_irq+0x78/0x1b8 [ 69.556807][ C0] call_on_irq_stack+0x30/0x48 [ 69.557548][ C0] do_interrupt_handler+0x6c/0x88 [ 69.558338][ C0] el1_interrupt+0x30/0x58 [ 69.559075][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.559866][ C0] el1h_64_irq+0x78/0x7c [ 69.560500][ C0] lock_page_memcg+0x120/0x22c [ 69.561249][ C0] page_remove_rmap+0x3c/0xfb4 [ 69.562074][ C0] unmap_page_range+0xa60/0x180c [ 69.562912][ C0] unmap_single_vma+0x13c/0x1e4 [ 69.563705][ C0] unmap_vmas+0x110/0x218 [ 69.564515][ C0] exit_mmap+0x2c4/0x510 [ 69.565260][ C0] __mmput+0xe8/0x3a0 [ 69.565930][ C0] mmput+0x80/0xc0 [ 69.566543][ C0] exit_mm+0x5dc/0x704 [ 69.567201][ C0] do_exit+0x4bc/0x1f54 [ 69.567891][ C0] do_group_exit+0x104/0x274 [ 69.568613][ C0] get_signal+0x638/0x13b0 [ 69.569355][ C0] do_notify_resume+0x344/0x30a8 [ 69.570117][ C0] el0_svc+0xf0/0x1d0 [ 69.570760][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 69.571566][ C0] el0t_64_sync+0x1a0/0x1a4 [ 69.572287][ C0] irq event stamp: 3318 [ 69.573010][ C0] hardirqs last enabled at (3317): [] lock_page_memcg+0x110/0x22c [ 69.574528][ C0] hardirqs last disabled at (3318): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.576098][ C0] softirqs last enabled at (2514): [] local_bh_enable+0x10/0x34 [ 69.577558][ C0] softirqs last disabled at (2512): [] local_bh_disable+0x10/0x34 [ 69.578982][ C0] ---[ end trace e2dde290653db404 ]--- [ 69.610962][ T3339] cfg80211: failed to load regulatory.db [ 69.611155][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.612228][ T4785] Bluetooth: hci0: command 0x0419 tx timeout [ 69.613081][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.655638][ T148] team0 (unregistering): Port device team_slave_1 removed [ 69.660526][ T148] team0 (unregistering): Port device team_slave_0 removed [ 69.664874][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.686683][ T4830] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.687900][ T4830] Bad inode number on dev loop0: 2 is out of range [ 69.688852][ T4830] SysV FS: get root inode failed [ 69.690010][ T4830] oldfs: cannot read superblock [ 69.694001][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.704847][ C0] ------------[ cut here ]------------ [ 69.705781][ C0] VFS: brelse: Trying to free free buffer [ 69.706706][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.708088][ C0] Modules linked in: [ 69.708673][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 69.710177][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.711900][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.713144][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.713973][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.714789][ C0] sp : ffff800008007df0 [ 69.715427][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 69.716750][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 69.718086][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deee1060 [ 69.719405][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 69.720738][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 69.722086][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 69.723402][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 69.724893][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.726466][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 69.727877][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 69.729326][ C0] Call trace: [ 69.729967][ C0] invalidate_bh_lru+0x128/0x22c [ 69.730829][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.731835][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.732938][ C0] ipi_handler+0x10c/0x70c [ 69.733646][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.734538][ C0] handle_domain_irq+0x148/0x200 [ 69.735453][ C0] gic_handle_irq+0x78/0x1b8 [ 69.736239][ C0] call_on_irq_stack+0x30/0x48 [ 69.737063][ C0] do_interrupt_handler+0x6c/0x88 [ 69.738024][ C0] el1_interrupt+0x30/0x58 [ 69.738850][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.739729][ C0] el1h_64_irq+0x78/0x7c [ 69.740431][ C0] seqcount_lockdep_reader_access+0x214/0x2b8 [ 69.741420][ C0] path_init+0x6e8/0xec0 [ 69.742095][ C0] path_lookupat+0x40/0x3f0 [ 69.742866][ C0] filename_lookup+0x1c8/0x478 [ 69.743688][ C0] user_path_at_empty+0x5c/0x1a0 [ 69.744511][ C0] __arm64_sys_umount+0xf8/0x184 [ 69.745305][ C0] invoke_syscall+0x98/0x28c [ 69.746064][ C0] el0_svc_common+0x13c/0x258 [ 69.746913][ C0] do_el0_svc+0x5c/0x140 [ 69.747653][ C0] el0_svc+0x78/0x1d0 [ 69.748329][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 69.749106][ C0] el0t_64_sync+0x1a0/0x1a4 [ 69.749853][ C0] irq event stamp: 226006 [ 69.750582][ C0] hardirqs last enabled at (226005): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 69.752388][ C0] hardirqs last disabled at (226006): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.754344][ C0] softirqs last enabled at (225998): [] local_bh_enable+0x10/0x34 [ 69.755973][ C0] softirqs last disabled at (225996): [] local_bh_disable+0x10/0x34 [ 69.757657][ C0] ---[ end trace e2dde290653db405 ]--- [ 69.813426][ T4834] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.814709][ T4834] Bad inode number on dev loop0: 2 is out of range [ 69.815689][ T4834] SysV FS: get root inode failed [ 69.816444][ T4834] oldfs: cannot read superblock [ 69.817984][ C0] ------------[ cut here ]------------ [ 69.818901][ C0] VFS: brelse: Trying to free free buffer [ 69.819808][ C0] WARNING: CPU: 0 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.821176][ C0] Modules linked in: [ 69.821803][ C0] CPU: 0 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 69.823252][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 69.824923][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.826283][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 69.827173][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 69.828081][ C0] sp : ffff800008007df0 [ 69.828750][ C0] x29: ffff800008007df0 x28: ffff0000d6e01b40 x27: 1fffe000341d085b [ 69.830086][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 69.831439][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deee1400 [ 69.832791][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 69.834180][ C0] x17: 0000000000010003 x16: ffff8000082dbd3c x15: 0000000000000012 [ 69.835541][ C0] x14: 0000000000000001 x13: 1ffff00001000edc x12: 0000000000000000 [ 69.836937][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : ce93b0e62cf3f900 [ 69.838274][ C0] x8 : ce93b0e62cf3f900 x7 : 0000000000000001 x6 : 0000000000000001 [ 69.839632][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff800008307f44 [ 69.841003][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 69.842381][ C0] Call trace: [ 69.842924][ C0] invalidate_bh_lru+0x128/0x22c [ 69.843683][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 69.844649][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 69.845804][ C0] ipi_handler+0x10c/0x70c [ 69.846543][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 69.847428][ C0] handle_domain_irq+0x148/0x200 [ 69.848236][ C0] gic_handle_irq+0x78/0x1b8 [ 69.848962][ C0] call_on_irq_stack+0x30/0x48 [ 69.849687][ C0] do_interrupt_handler+0x6c/0x88 [ 69.850511][ C0] el1_interrupt+0x30/0x58 [ 69.851285][ C0] el1h_64_irq_handler+0x18/0x24 [ 69.852057][ C0] el1h_64_irq+0x78/0x7c [ 69.852699][ C0] ___slab_alloc+0x2dc/0xd84 [ 69.853520][ C0] __slab_alloc+0x68/0xc0 [ 69.854237][ C0] kmem_cache_alloc+0x2a8/0x3d8 [ 69.855018][ C0] getname_flags+0xb8/0x44c [ 69.855789][ C0] getname+0x28/0x38 [ 69.856501][ C0] do_sys_openat2+0xdc/0x3fc [ 69.857273][ C0] __arm64_sys_openat+0x11c/0x150 [ 69.858122][ C0] invoke_syscall+0x98/0x28c [ 69.858896][ C0] el0_svc_common+0x13c/0x258 [ 69.859677][ C0] do_el0_svc+0x5c/0x140 [ 69.860347][ C0] el0_svc+0x78/0x1d0 [ 69.861021][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 69.861809][ C0] el0t_64_sync+0x1a0/0x1a4 [ 69.862548][ C0] irq event stamp: 1161804 [ 69.863250][ C0] hardirqs last enabled at (1161803): [] ___slab_alloc+0x2cc/0xd84 [ 69.864826][ C0] hardirqs last disabled at (1161804): [] enter_el1_irq_or_nmi+0x10/0x1c [ 69.866449][ C0] softirqs last enabled at (1161756): [] local_bh_enable+0x10/0x34 [ 69.867939][ C0] softirqs last disabled at (1161754): [] local_bh_disable+0x10/0x34 [ 69.869568][ C0] ---[ end trace e2dde290653db406 ]--- [ 69.905071][ T148] bond0 (unregistering): Released all slaves [ 69.990665][ T4836] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 69.991960][ T4836] Bad inode number on dev loop0: 2 is out of range [ 69.993072][ T4836] SysV FS: get root inode failed [ 69.993888][ T4836] oldfs: cannot read superblock [ 69.995484][ C1] ------------[ cut here ]------------ [ 69.996369][ C1] VFS: brelse: Trying to free free buffer [ 69.997335][ C1] WARNING: CPU: 1 PID: 4836 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 69.998763][ C1] Modules linked in: [ 69.999321][ C1] CPU: 1 PID: 4836 Comm: syz.0.36 Tainted: G W syzkaller #0 [ 70.000761][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.002592][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.003966][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.004850][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.005727][ C1] sp : ffff800008017df0 [ 70.006389][ C1] x29: ffff800008017df0 x28: ffff0000cedd51c0 x27: 1fffe000341d4a5c [ 70.007739][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 70.009111][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c0bc28 [ 70.010511][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 70.011956][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 70.013414][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.014782][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 374091ec50d81200 [ 70.016164][ C1] x8 : 374091ec50d81200 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.017628][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.018935][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 70.020369][ C1] Call trace: [ 70.020940][ C1] invalidate_bh_lru+0x128/0x22c [ 70.021786][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.022764][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.023937][ C1] ipi_handler+0x10c/0x70c [ 70.024665][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.025603][ C1] handle_domain_irq+0x148/0x200 [ 70.026372][ C1] gic_handle_irq+0x78/0x1b8 [ 70.027176][ C1] call_on_irq_stack+0x30/0x48 [ 70.027991][ C1] do_interrupt_handler+0x6c/0x88 [ 70.028816][ C1] el1_interrupt+0x30/0x58 [ 70.029554][ C1] el1h_64_irq_handler+0x18/0x24 [ 70.030356][ C1] el1h_64_irq+0x78/0x7c [ 70.031075][ C1] lock_page_memcg+0x120/0x22c [ 70.031837][ C1] page_remove_rmap+0x3c/0xfb4 [ 70.032667][ C1] unmap_page_range+0xa60/0x180c [ 70.033527][ C1] unmap_single_vma+0x13c/0x1e4 [ 70.034320][ C1] unmap_vmas+0x110/0x218 [ 70.035042][ C1] exit_mmap+0x2c4/0x510 [ 70.035696][ C1] __mmput+0xe8/0x3a0 [ 70.036383][ C1] mmput+0x80/0xc0 [ 70.036952][ C1] exit_mm+0x5dc/0x704 [ 70.037665][ C1] do_exit+0x4bc/0x1f54 [ 70.038319][ C1] do_group_exit+0x104/0x274 [ 70.039061][ C1] get_signal+0x638/0x13b0 [ 70.039784][ C1] do_notify_resume+0x344/0x30a8 [ 70.040615][ C1] el0_svc+0xf0/0x1d0 [ 70.041244][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 70.042014][ C1] el0t_64_sync+0x1a0/0x1a4 [ 70.042771][ C1] irq event stamp: 1432 [ 70.043432][ C1] hardirqs last enabled at (1431): [] lock_page_memcg+0x110/0x22c [ 70.044917][ C1] hardirqs last disabled at (1432): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.046533][ C1] softirqs last enabled at (940): [] local_bh_enable+0x10/0x34 [ 70.048056][ C1] softirqs last disabled at (938): [] local_bh_disable+0x10/0x34 [ 70.049599][ C1] ---[ end trace e2dde290653db407 ]--- [ 70.123355][ T4838] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.124594][ T4838] Bad inode number on dev loop0: 2 is out of range [ 70.125602][ T4838] SysV FS: get root inode failed [ 70.126355][ T4838] oldfs: cannot read superblock [ 70.127254][ T4838] ------------[ cut here ]------------ [ 70.128041][ T4838] VFS: brelse: Trying to free free buffer [ 70.128929][ T4838] WARNING: CPU: 0 PID: 4838 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.130327][ T4838] Modules linked in: [ 70.130950][ T4838] CPU: 0 PID: 4838 Comm: syz.0.37 Tainted: G W syzkaller #0 [ 70.132336][ T4838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.133881][ T4838] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.135240][ T4838] pc : invalidate_bh_lru+0x128/0x22c [ 70.136115][ T4838] lr : invalidate_bh_lru+0x128/0x22c [ 70.136936][ T4838] sp : ffff80001fd67710 [ 70.137626][ T4838] x29: ffff80001fd67710 x28: ffff80001438d000 x27: 1fffe000341d085b [ 70.138898][ T4838] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 70.140213][ T4838] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deee17a0 [ 70.141494][ T4838] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.142770][ T4838] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.144073][ T4838] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 70.145429][ T4838] x11: ff8080000830061c x10: 0000000000000000 x9 : fcf972edac4be800 [ 70.146793][ T4838] x8 : fcf972edac4be800 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.148033][ T4838] x5 : ffff80001fd67018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.149402][ T4838] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.150709][ T4838] Call trace: [ 70.151255][ T4838] invalidate_bh_lru+0x128/0x22c [ 70.152063][ T4838] smp_call_function_many_cond+0xa5c/0xec0 [ 70.152995][ T4838] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.153805][ T4838] invalidate_bh_lrus+0x34/0x40 [ 70.154557][ T4838] blkdev_flush_mapping+0x16c/0x334 [ 70.155363][ T4838] blkdev_put+0x444/0x6c4 [ 70.156074][ T4838] kill_block_super+0xa0/0xe0 [ 70.156831][ T4838] deactivate_locked_super+0xc0/0x13c [ 70.157679][ T4838] mount_bdev+0x284/0x35c [ 70.158409][ T4838] sysv_mount+0x44/0x58 [ 70.159076][ T4838] legacy_get_tree+0xd8/0x174 [ 70.159879][ T4838] vfs_get_tree+0x90/0x278 [ 70.160618][ T4838] do_new_mount+0x228/0x804 [ 70.161322][ T4838] path_mount+0x57c/0xfe8 [ 70.162039][ T4838] __arm64_sys_mount+0x488/0x5f8 [ 70.162821][ T4838] invoke_syscall+0x98/0x28c [ 70.163657][ T4838] el0_svc_common+0x13c/0x258 [ 70.164432][ T4838] do_el0_svc+0x5c/0x140 [ 70.165121][ T4838] el0_svc+0x78/0x1d0 [ 70.165784][ T4838] el0t_64_sync_handler+0xcc/0xe4 [ 70.166651][ T4838] el0t_64_sync+0x1a0/0x1a4 [ 70.167390][ T4838] irq event stamp: 1070 [ 70.168053][ T4838] hardirqs last enabled at (1069): [] kasan_quarantine_put+0xc4/0x200 [ 70.169645][ T4838] hardirqs last disabled at (1070): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.171413][ T4838] softirqs last enabled at (896): [] local_bh_enable+0x10/0x34 [ 70.172932][ T4838] softirqs last disabled at (894): [] local_bh_disable+0x10/0x34 [ 70.174473][ T4838] ---[ end trace e2dde290653db408 ]--- [ 70.294026][ T4841] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.295261][ T4841] Bad inode number on dev loop0: 2 is out of range [ 70.296286][ T4841] SysV FS: get root inode failed [ 70.297091][ T4841] oldfs: cannot read superblock [ 70.297987][ T4841] ------------[ cut here ]------------ [ 70.298791][ T4841] VFS: brelse: Trying to free free buffer [ 70.299807][ T4841] WARNING: CPU: 0 PID: 4841 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.301275][ T4841] Modules linked in: [ 70.301894][ T4841] CPU: 0 PID: 4841 Comm: syz.0.38 Tainted: G W syzkaller #0 [ 70.303342][ T4841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.304952][ T4841] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.306233][ T4841] pc : invalidate_bh_lru+0x128/0x22c [ 70.307043][ T4841] lr : invalidate_bh_lru+0x128/0x22c [ 70.307858][ T4841] sp : ffff80001fd67710 [ 70.308561][ T4841] x29: ffff80001fd67710 x28: ffff80001438d000 x27: 1fffe000341d085b [ 70.309819][ T4841] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 70.311063][ T4841] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deee1b40 [ 70.312467][ T4841] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.313872][ T4841] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.315126][ T4841] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 70.316364][ T4841] x11: ff8080000830061c x10: 0000000000000000 x9 : f70a3adb258ed400 [ 70.317568][ T4841] x8 : f70a3adb258ed400 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.318840][ T4841] x5 : ffff80001fd67018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.320141][ T4841] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.321413][ T4841] Call trace: [ 70.321966][ T4841] invalidate_bh_lru+0x128/0x22c [ 70.322738][ T4841] smp_call_function_many_cond+0xa5c/0xec0 [ 70.323687][ T4841] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.324565][ T4841] invalidate_bh_lrus+0x34/0x40 [ 70.325367][ T4841] blkdev_flush_mapping+0x16c/0x334 [ 70.326240][ T4841] blkdev_put+0x444/0x6c4 [ 70.326971][ T4841] kill_block_super+0xa0/0xe0 [ 70.327684][ T4841] deactivate_locked_super+0xc0/0x13c [ 70.328499][ T4841] mount_bdev+0x284/0x35c [ 70.329285][ T4841] sysv_mount+0x44/0x58 [ 70.330027][ T4841] legacy_get_tree+0xd8/0x174 [ 70.330798][ T4841] vfs_get_tree+0x90/0x278 [ 70.331451][ T4841] do_new_mount+0x228/0x804 [ 70.332172][ T4841] path_mount+0x57c/0xfe8 [ 70.332896][ T4841] __arm64_sys_mount+0x488/0x5f8 [ 70.333661][ T4841] invoke_syscall+0x98/0x28c [ 70.334510][ T4841] el0_svc_common+0x13c/0x258 [ 70.335398][ T4841] do_el0_svc+0x5c/0x140 [ 70.336163][ T4841] el0_svc+0x78/0x1d0 [ 70.336959][ T4841] el0t_64_sync_handler+0xcc/0xe4 [ 70.337844][ T4841] el0t_64_sync+0x1a0/0x1a4 [ 70.338621][ T4841] irq event stamp: 1116 [ 70.339235][ T4841] hardirqs last enabled at (1115): [] kasan_quarantine_put+0xc4/0x200 [ 70.340941][ T4841] hardirqs last disabled at (1116): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.342626][ T4841] softirqs last enabled at (920): [] local_bh_enable+0x10/0x34 [ 70.344167][ T4841] softirqs last disabled at (918): [] local_bh_disable+0x10/0x34 [ 70.345748][ T4841] ---[ end trace e2dde290653db409 ]--- [ 70.490983][ T4843] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.492202][ T4843] Bad inode number on dev loop0: 2 is out of range [ 70.493342][ T4843] SysV FS: get root inode failed [ 70.494038][ T4843] oldfs: cannot read superblock [ 70.494888][ T4843] ------------[ cut here ]------------ [ 70.495795][ T4843] VFS: brelse: Trying to free free buffer [ 70.496635][ T4843] WARNING: CPU: 1 PID: 4843 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.497922][ T4843] Modules linked in: [ 70.498535][ T4843] CPU: 1 PID: 4843 Comm: syz.0.39 Tainted: G W syzkaller #0 [ 70.499891][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.501428][ T4843] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.502722][ T4843] pc : invalidate_bh_lru+0x128/0x22c [ 70.503553][ T4843] lr : invalidate_bh_lru+0x128/0x22c [ 70.504403][ T4843] sp : ffff80001fd67710 [ 70.505026][ T4843] x29: ffff80001fd67710 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 70.506504][ T4843] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 70.507982][ T4843] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000defab060 [ 70.509442][ T4843] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.510697][ T4843] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.511983][ T4843] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.513312][ T4843] x11: ff8080000830061c x10: 0000000000000000 x9 : fde378b4e8df9800 [ 70.514616][ T4843] x8 : fde378b4e8df9800 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.515932][ T4843] x5 : ffff80001fd67018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.517294][ T4843] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.518590][ T4843] Call trace: [ 70.519117][ T4843] invalidate_bh_lru+0x128/0x22c [ 70.519869][ T4843] smp_call_function_many_cond+0xa5c/0xec0 [ 70.520747][ T4843] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.521576][ T4843] invalidate_bh_lrus+0x34/0x40 [ 70.522530][ T4843] blkdev_flush_mapping+0x16c/0x334 [ 70.523563][ T4843] blkdev_put+0x444/0x6c4 [ 70.524321][ T4843] kill_block_super+0xa0/0xe0 [ 70.525129][ T4843] deactivate_locked_super+0xc0/0x13c [ 70.526028][ T4843] mount_bdev+0x284/0x35c [ 70.526726][ T4843] sysv_mount+0x44/0x58 [ 70.527376][ T4843] legacy_get_tree+0xd8/0x174 [ 70.528127][ T4843] vfs_get_tree+0x90/0x278 [ 70.528872][ T4843] do_new_mount+0x228/0x804 [ 70.529604][ T4843] path_mount+0x57c/0xfe8 [ 70.530324][ T4843] __arm64_sys_mount+0x488/0x5f8 [ 70.531194][ T4843] invoke_syscall+0x98/0x28c [ 70.532046][ T4843] el0_svc_common+0x13c/0x258 [ 70.532850][ T4843] do_el0_svc+0x5c/0x140 [ 70.533534][ T4843] el0_svc+0x78/0x1d0 [ 70.534210][ T4843] el0t_64_sync_handler+0xcc/0xe4 [ 70.535033][ T4843] el0t_64_sync+0x1a0/0x1a4 [ 70.535813][ T4843] irq event stamp: 1142 [ 70.536485][ T4843] hardirqs last enabled at (1141): [] kasan_quarantine_put+0xc4/0x200 [ 70.537992][ T4843] hardirqs last disabled at (1142): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.539715][ T4843] softirqs last enabled at (940): [] local_bh_enable+0x10/0x34 [ 70.541189][ T4843] softirqs last disabled at (938): [] local_bh_disable+0x10/0x34 [ 70.542705][ T4843] ---[ end trace e2dde290653db40a ]--- [ 70.701703][ T4847] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.703207][ T4847] Bad inode number on dev loop0: 2 is out of range [ 70.704599][ T4847] SysV FS: get root inode failed [ 70.705349][ T4847] oldfs: cannot read superblock [ 70.715959][ T4787] ------------[ cut here ]------------ [ 70.716837][ T4787] VFS: brelse: Trying to free free buffer [ 70.717696][ T4787] WARNING: CPU: 1 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.718874][ T4787] Modules linked in: [ 70.719419][ T4787] CPU: 1 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 70.720766][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.722436][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.723713][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 70.724561][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 70.725436][ T4787] sp : ffff80001bd177d0 [ 70.726134][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 70.727518][ T4787] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 70.728795][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c6c230 [ 70.730171][ T4787] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 70.731506][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 70.732803][ T4787] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.734096][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 70.735311][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.736603][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.737760][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 70.739010][ T4787] Call trace: [ 70.739521][ T4787] invalidate_bh_lru+0x128/0x22c [ 70.740283][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 70.741197][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 70.741982][ T4787] invalidate_bh_lrus+0x34/0x40 [ 70.742756][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 70.743574][ T4787] blkdev_put+0x444/0x6c4 [ 70.744269][ T4787] blkdev_close+0x74/0xb0 [ 70.744982][ T4787] __fput+0x1b8/0x7e8 [ 70.745616][ T4787] ____fput+0x20/0x30 [ 70.746242][ T4787] task_work_run+0x13c/0x1e8 [ 70.746986][ T4787] do_notify_resume+0x2488/0x30a8 [ 70.747805][ T4787] el0_svc+0xf0/0x1d0 [ 70.748468][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 70.749306][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 70.750043][ T4787] irq event stamp: 119130 [ 70.750723][ T4787] hardirqs last enabled at (119129): [] kasan_quarantine_put+0xc4/0x200 [ 70.752237][ T4787] hardirqs last disabled at (119130): [] smp_call_function_many_cond+0xa50/0xec0 [ 70.754081][ T4787] softirqs last enabled at (118874): [] local_bh_enable+0x10/0x34 [ 70.755644][ T4787] softirqs last disabled at (118872): [] local_bh_disable+0x10/0x34 [ 70.757204][ T4787] ---[ end trace e2dde290653db40b ]--- [ 70.795581][ T4849] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.796843][ T4849] Bad inode number on dev loop0: 2 is out of range [ 70.797872][ T4849] SysV FS: get root inode failed [ 70.798605][ T4849] oldfs: cannot read superblock [ 70.803465][ C0] ------------[ cut here ]------------ [ 70.804311][ C0] VFS: brelse: Trying to free free buffer [ 70.805209][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.806667][ C0] Modules linked in: [ 70.807319][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.808549][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.810098][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.811406][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 70.812387][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 70.813321][ C0] sp : ffff800008007df0 [ 70.814032][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 70.815452][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 70.816800][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deee1ee0 [ 70.818172][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 70.819481][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 70.820900][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 70.822257][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 70.823679][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.825085][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.826529][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.827873][ C0] Call trace: [ 70.828467][ C0] invalidate_bh_lru+0x128/0x22c [ 70.829318][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 70.830257][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.831287][ C0] ipi_handler+0x10c/0x70c [ 70.832023][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 70.832920][ C0] handle_domain_irq+0x148/0x200 [ 70.833688][ C0] gic_handle_irq+0x78/0x1b8 [ 70.834439][ C0] call_on_irq_stack+0x30/0x48 [ 70.835259][ C0] do_interrupt_handler+0x6c/0x88 [ 70.836020][ C0] el1_interrupt+0x30/0x58 [ 70.836751][ C0] el1h_64_irq_handler+0x18/0x24 [ 70.837623][ C0] el1h_64_irq+0x78/0x7c [ 70.838330][ C0] el0_svc_common+0xac/0x258 [ 70.839052][ C0] do_el0_svc+0x5c/0x140 [ 70.839793][ C0] el0_svc+0x78/0x1d0 [ 70.840383][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 70.841215][ C0] el0t_64_sync+0x1a0/0x1a4 [ 70.841927][ C0] irq event stamp: 251624 [ 70.842627][ C0] hardirqs last enabled at (251623): [] el0_svc_common+0xa0/0x258 [ 70.844213][ C0] hardirqs last disabled at (251624): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.845713][ C0] softirqs last enabled at (251602): [] local_bh_enable+0x10/0x34 [ 70.847241][ C0] softirqs last disabled at (251600): [] local_bh_disable+0x10/0x34 [ 70.848773][ C0] ---[ end trace e2dde290653db40c ]--- [ 70.888818][ T4851] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.890438][ T4851] Bad inode number on dev loop0: 2 is out of range [ 70.891415][ T4851] SysV FS: get root inode failed [ 70.892205][ T4851] oldfs: cannot read superblock [ 70.897230][ C1] ------------[ cut here ]------------ [ 70.898168][ C1] VFS: brelse: Trying to free free buffer [ 70.899039][ C1] WARNING: CPU: 1 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.900606][ C1] Modules linked in: [ 70.901221][ C1] CPU: 1 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.902717][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.904386][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.905717][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.906554][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.907455][ C1] sp : ffff800008017df0 [ 70.908147][ C1] x29: ffff800008017df0 x28: ffff0000c0b88000 x27: 1fffe000341d4a5c [ 70.909406][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 70.910661][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c6c5d0 [ 70.912006][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 70.913268][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 70.914502][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 70.915773][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 70.917130][ C1] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 70.918394][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 70.919659][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 70.921012][ C1] Call trace: [ 70.921559][ C1] invalidate_bh_lru+0x128/0x22c [ 70.922325][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 70.923292][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 70.924390][ C1] ipi_handler+0x10c/0x70c [ 70.925152][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 70.926027][ C1] handle_domain_irq+0x148/0x200 [ 70.926814][ C1] gic_handle_irq+0x78/0x1b8 [ 70.927579][ C1] call_on_irq_stack+0x30/0x48 [ 70.928334][ C1] do_interrupt_handler+0x6c/0x88 [ 70.929145][ C1] el1_interrupt+0x30/0x58 [ 70.929839][ C1] el1h_64_irq_handler+0x18/0x24 [ 70.930621][ C1] el1h_64_irq+0x78/0x7c [ 70.931308][ C1] count_memcg_event_mm+0x1d0/0x300 [ 70.932145][ C1] handle_mm_fault+0x19c/0x2aac [ 70.932963][ C1] do_page_fault+0x690/0xad0 [ 70.933664][ C1] do_mem_abort+0x6c/0x1b0 [ 70.934479][ C1] el0_da+0x90/0x1ec [ 70.935126][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 70.935864][ C1] el0t_64_sync+0x1a0/0x1a4 [ 70.936620][ C1] irq event stamp: 255458 [ 70.937372][ C1] hardirqs last enabled at (255457): [] count_memcg_event_mm+0x1b0/0x300 [ 70.939071][ C1] hardirqs last disabled at (255458): [] enter_el1_irq_or_nmi+0x10/0x1c [ 70.940643][ C1] softirqs last enabled at (255412): [] release_sock+0x1d0/0x258 [ 70.942224][ C1] softirqs last disabled at (255410): [] release_sock+0x34/0x258 [ 70.943752][ C1] ---[ end trace e2dde290653db40d ]--- [ 70.976115][ T4853] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 70.977485][ T4853] Bad inode number on dev loop0: 2 is out of range [ 70.978494][ T4853] SysV FS: get root inode failed [ 70.979400][ T4853] oldfs: cannot read superblock [ 70.985060][ C1] ------------[ cut here ]------------ [ 70.985954][ C1] VFS: brelse: Trying to free free buffer [ 70.987047][ C1] WARNING: CPU: 1 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 70.988430][ C1] Modules linked in: [ 70.989039][ C1] CPU: 1 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 70.990693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 70.992541][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.993919][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 70.994848][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 70.995856][ C1] sp : ffff800008017df0 [ 70.996602][ C1] x29: ffff800008017df0 x28: ffff0000c0b88000 x27: 1fffe000341d4a5c [ 70.998082][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 70.999472][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c6c970 [ 71.000829][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 71.002166][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 71.003468][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 71.004891][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 2663d8ba4f118900 [ 71.006248][ C1] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.007633][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.009105][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 71.010632][ C1] Call trace: [ 71.011213][ C1] invalidate_bh_lru+0x128/0x22c [ 71.012090][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.013125][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.014287][ C1] ipi_handler+0x10c/0x70c [ 71.015054][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.015963][ C1] handle_domain_irq+0x148/0x200 [ 71.016849][ C1] gic_handle_irq+0x78/0x1b8 [ 71.017641][ C1] call_on_irq_stack+0x30/0x48 [ 71.018482][ C1] do_interrupt_handler+0x6c/0x88 [ 71.019368][ C1] el1_interrupt+0x30/0x58 [ 71.020074][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.020917][ C1] el1h_64_irq+0x78/0x7c [ 71.021614][ C1] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 71.022582][ C1] debug_object_active_state+0x16c/0x370 [ 71.023592][ C1] call_rcu+0x6c/0x8e4 [ 71.024331][ C1] security_inode_free+0xc0/0xdc [ 71.025164][ C1] __destroy_inode+0x2f0/0x7ec [ 71.025989][ C1] evict+0x6b0/0x824 [ 71.026646][ C1] iput+0x6b4/0x770 [ 71.027303][ C1] dentry_unlink_inode+0x360/0x438 [ 71.028138][ C1] __dentry_kill+0x318/0x590 [ 71.028952][ C1] dentry_kill+0xcc/0x24c [ 71.029785][ C1] dput+0x22c/0x448 [ 71.030453][ C1] __fput+0x494/0x7e8 [ 71.031142][ C1] ____fput+0x20/0x30 [ 71.031832][ C1] task_work_run+0x13c/0x1e8 [ 71.032603][ C1] do_notify_resume+0x2488/0x30a8 [ 71.033528][ C1] el0_svc+0xf0/0x1d0 [ 71.034223][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.035065][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.035791][ C1] irq event stamp: 259136 [ 71.036580][ C1] hardirqs last enabled at (259135): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 71.038299][ C1] hardirqs last disabled at (259136): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.039984][ C1] softirqs last enabled at (259122): [] release_sock+0x1d0/0x258 [ 71.041626][ C1] softirqs last disabled at (259120): [] release_sock+0x34/0x258 [ 71.043229][ C1] ---[ end trace e2dde290653db40e ]--- [ 71.171692][ T4855] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.172880][ T4855] Bad inode number on dev loop0: 2 is out of range [ 71.173833][ T4855] SysV FS: get root inode failed [ 71.174725][ T4855] oldfs: cannot read superblock [ 71.183923][ T4787] ------------[ cut here ]------------ [ 71.184791][ T4787] VFS: brelse: Trying to free free buffer [ 71.185754][ T4787] WARNING: CPU: 0 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.187058][ T4787] Modules linked in: [ 71.187681][ T4787] CPU: 0 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 71.189125][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.190911][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.192078][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 71.192905][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 71.193766][ T4787] sp : ffff80001bd177d0 [ 71.194451][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d085c [ 71.195705][ T4787] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 71.197037][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deedd318 [ 71.198404][ T4787] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 71.200009][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 71.201568][ T4787] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.202864][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 71.204267][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.205615][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.206925][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.208374][ T4787] Call trace: [ 71.208898][ T4787] invalidate_bh_lru+0x128/0x22c [ 71.209684][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 71.210566][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.211372][ T4787] invalidate_bh_lrus+0x34/0x40 [ 71.212183][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 71.213019][ T4787] blkdev_put+0x444/0x6c4 [ 71.213727][ T4787] blkdev_close+0x74/0xb0 [ 71.214483][ T4787] __fput+0x1b8/0x7e8 [ 71.215189][ T4787] ____fput+0x20/0x30 [ 71.215836][ T4787] task_work_run+0x13c/0x1e8 [ 71.216629][ T4787] do_notify_resume+0x2488/0x30a8 [ 71.217465][ T4787] el0_svc+0xf0/0x1d0 [ 71.218068][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 71.218843][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 71.219518][ T4787] irq event stamp: 137744 [ 71.220168][ T4787] hardirqs last enabled at (137743): [] kasan_quarantine_put+0xc4/0x200 [ 71.221717][ T4787] hardirqs last disabled at (137744): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.223502][ T4787] softirqs last enabled at (137472): [] local_bh_enable+0x10/0x34 [ 71.224949][ T4787] softirqs last disabled at (137470): [] local_bh_disable+0x10/0x34 [ 71.226346][ T4787] ---[ end trace e2dde290653db40f ]--- [ 71.360941][ T4857] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.362212][ T4857] Bad inode number on dev loop0: 2 is out of range [ 71.363187][ T4857] SysV FS: get root inode failed [ 71.363952][ T4857] oldfs: cannot read superblock [ 71.373456][ C0] ------------[ cut here ]------------ [ 71.374322][ C0] VFS: brelse: Trying to free free buffer [ 71.375206][ C0] WARNING: CPU: 0 PID: 4858 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.376467][ C0] Modules linked in: [ 71.376993][ C0] CPU: 0 PID: 4858 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.378328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.379872][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.381099][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 71.381896][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 71.382800][ C0] sp : ffff800008007df0 [ 71.383469][ C0] x29: ffff800008007df0 x28: ffff0000d6c03680 x27: 1fffe000341d085c [ 71.384815][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 71.386024][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deedd6b8 [ 71.387319][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 71.388538][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 71.389847][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.391158][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 786675d28aff7300 [ 71.392401][ C0] x8 : 786675d28aff7300 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.393644][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.394970][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.396376][ C0] Call trace: [ 71.396847][ C0] invalidate_bh_lru+0x128/0x22c [ 71.397681][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 71.398724][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.399861][ C0] ipi_handler+0x10c/0x70c [ 71.400661][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 71.401625][ C0] handle_domain_irq+0x148/0x200 [ 71.402415][ C0] gic_handle_irq+0x78/0x1b8 [ 71.403196][ C0] call_on_irq_stack+0x30/0x48 [ 71.404012][ C0] do_interrupt_handler+0x6c/0x88 [ 71.404918][ C0] el1_interrupt+0x30/0x58 [ 71.405645][ C0] el1h_64_irq_handler+0x18/0x24 [ 71.406476][ C0] el1h_64_irq+0x78/0x7c [ 71.407102][ C0] local_daif_restore+0x20/0x3c [ 71.407841][ C0] el0_ia+0xd0/0x2b8 [ 71.408387][ C0] el0t_64_sync_handler+0xc0/0xe4 [ 71.409226][ C0] el0t_64_sync+0x1a0/0x1a4 [ 71.409973][ C0] irq event stamp: 564 [ 71.410611][ C0] hardirqs last enabled at (563): [] local_daif_restore+0x1c/0x3c [ 71.412242][ C0] hardirqs last disabled at (564): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.413764][ C0] softirqs last enabled at (24): [] local_bh_enable+0x10/0x34 [ 71.415289][ C0] softirqs last disabled at (22): [] local_bh_disable+0x10/0x34 [ 71.416770][ C0] ---[ end trace e2dde290653db410 ]--- [ 71.502092][ T4859] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.503506][ T4859] Bad inode number on dev loop0: 2 is out of range [ 71.504480][ T4859] SysV FS: get root inode failed [ 71.505316][ T4859] oldfs: cannot read superblock [ 71.511830][ T4787] ------------[ cut here ]------------ [ 71.512701][ T4787] VFS: brelse: Trying to free free buffer [ 71.513619][ T4787] WARNING: CPU: 0 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.515058][ T4787] Modules linked in: [ 71.515671][ T4787] CPU: 0 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 71.516951][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.518496][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.519590][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 71.520581][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 71.521470][ T4787] sp : ffff80001bd177d0 [ 71.522219][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 71.523550][ T4787] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 71.524882][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deedda58 [ 71.526159][ T4787] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 71.527549][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 71.528857][ T4787] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.530249][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 71.531526][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.532906][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.534169][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.535448][ T4787] Call trace: [ 71.536000][ T4787] invalidate_bh_lru+0x128/0x22c [ 71.536827][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 71.537739][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.538627][ T4787] invalidate_bh_lrus+0x34/0x40 [ 71.539408][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 71.540234][ T4787] blkdev_put+0x444/0x6c4 [ 71.540913][ T4787] blkdev_close+0x74/0xb0 [ 71.541624][ T4787] __fput+0x1b8/0x7e8 [ 71.542226][ T4787] ____fput+0x20/0x30 [ 71.542832][ T4787] task_work_run+0x13c/0x1e8 [ 71.543524][ T4787] do_notify_resume+0x2488/0x30a8 [ 71.544286][ T4787] el0_svc+0xf0/0x1d0 [ 71.544921][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 71.545780][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 71.546502][ T4787] irq event stamp: 146828 [ 71.547133][ T4787] hardirqs last enabled at (146827): [] kasan_quarantine_put+0xc4/0x200 [ 71.548654][ T4787] hardirqs last disabled at (146828): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.550365][ T4787] softirqs last enabled at (146574): [] local_bh_enable+0x10/0x34 [ 71.551944][ T4787] softirqs last disabled at (146572): [] local_bh_disable+0x10/0x34 [ 71.553524][ T4787] ---[ end trace e2dde290653db411 ]--- [ 71.641334][ T4861] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.642493][ T4861] Bad inode number on dev loop0: 2 is out of range [ 71.643498][ T4861] SysV FS: get root inode failed [ 71.644271][ T4861] oldfs: cannot read superblock [ 71.645002][ T4861] ------------[ cut here ]------------ [ 71.645758][ T4861] VFS: brelse: Trying to free free buffer [ 71.646626][ T4861] WARNING: CPU: 0 PID: 4861 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.647918][ T4861] Modules linked in: [ 71.648490][ T4861] CPU: 0 PID: 4861 Comm: syz.0.48 Tainted: G W syzkaller #0 [ 71.649842][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.651467][ T4861] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.652725][ T4861] pc : invalidate_bh_lru+0x128/0x22c [ 71.653557][ T4861] lr : invalidate_bh_lru+0x128/0x22c [ 71.654365][ T4861] sp : ffff80001fd67710 [ 71.655032][ T4861] x29: ffff80001fd67710 x28: ffff80001438d000 x27: 1fffe000341d085b [ 71.656301][ T4861] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 71.657636][ T4861] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deedddf8 [ 71.659004][ T4861] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 71.660227][ T4861] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 71.661546][ T4861] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.662968][ T4861] x11: ff8080000830061c x10: 0000000000000000 x9 : 49e66d366f512b00 [ 71.664308][ T4861] x8 : 49e66d366f512b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.665660][ T4861] x5 : ffff80001fd67018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.667001][ T4861] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 71.668279][ T4861] Call trace: [ 71.668801][ T4861] invalidate_bh_lru+0x128/0x22c [ 71.669596][ T4861] smp_call_function_many_cond+0xa5c/0xec0 [ 71.670456][ T4861] on_each_cpu_cond_mask+0x5c/0xc4 [ 71.671284][ T4861] invalidate_bh_lrus+0x34/0x40 [ 71.672101][ T4861] blkdev_flush_mapping+0x16c/0x334 [ 71.673002][ T4861] blkdev_put+0x444/0x6c4 [ 71.673725][ T4861] kill_block_super+0xa0/0xe0 [ 71.674456][ T4861] deactivate_locked_super+0xc0/0x13c [ 71.675337][ T4861] mount_bdev+0x284/0x35c [ 71.676038][ T4861] sysv_mount+0x44/0x58 [ 71.676725][ T4861] legacy_get_tree+0xd8/0x174 [ 71.677512][ T4861] vfs_get_tree+0x90/0x278 [ 71.678214][ T4861] do_new_mount+0x228/0x804 [ 71.678946][ T4861] path_mount+0x57c/0xfe8 [ 71.679660][ T4861] __arm64_sys_mount+0x488/0x5f8 [ 71.680511][ T4861] invoke_syscall+0x98/0x28c [ 71.681279][ T4861] el0_svc_common+0x13c/0x258 [ 71.682062][ T4861] do_el0_svc+0x5c/0x140 [ 71.682720][ T4861] el0_svc+0x78/0x1d0 [ 71.683431][ T4861] el0t_64_sync_handler+0xcc/0xe4 [ 71.684260][ T4861] el0t_64_sync+0x1a0/0x1a4 [ 71.685020][ T4861] irq event stamp: 1228 [ 71.685621][ T4861] hardirqs last enabled at (1227): [] kasan_quarantine_put+0xc4/0x200 [ 71.687223][ T4861] hardirqs last disabled at (1228): [] smp_call_function_many_cond+0xa50/0xec0 [ 71.689127][ T4861] softirqs last enabled at (1012): [] local_bh_enable+0x10/0x34 [ 71.690685][ T4861] softirqs last disabled at (1010): [] local_bh_disable+0x10/0x34 [ 71.692174][ T4861] ---[ end trace e2dde290653db412 ]--- [ 71.821416][ T4863] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.822689][ T4863] Bad inode number on dev loop0: 2 is out of range [ 71.823752][ T4863] SysV FS: get root inode failed [ 71.824672][ T4863] oldfs: cannot read superblock [ 71.845855][ C0] ------------[ cut here ]------------ [ 71.846790][ C0] VFS: brelse: Trying to free free buffer [ 71.847678][ C0] WARNING: CPU: 0 PID: 3660 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.849076][ C0] Modules linked in: [ 71.849695][ C0] CPU: 0 PID: 3660 Comm: udevd Tainted: G W syzkaller #0 [ 71.851078][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.852859][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.854154][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 71.855005][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 71.855847][ C0] sp : ffff800008007df0 [ 71.856492][ C0] x29: ffff800008007df0 x28: ffff0000d6e01b40 x27: 1fffe000341d085c [ 71.857832][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 71.859099][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed9230 [ 71.860340][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 71.861605][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 71.862947][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 71.864248][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : ce93b0e62cf3f900 [ 71.865592][ C0] x8 : ce93b0e62cf3f900 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.866791][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.868075][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.869370][ C0] Call trace: [ 71.869928][ C0] invalidate_bh_lru+0x128/0x22c [ 71.870742][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 71.871797][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.872992][ C0] ipi_handler+0x10c/0x70c [ 71.873780][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 71.874659][ C0] handle_domain_irq+0x148/0x200 [ 71.875482][ C0] gic_handle_irq+0x78/0x1b8 [ 71.876200][ C0] call_on_irq_stack+0x30/0x48 [ 71.876912][ C0] do_interrupt_handler+0x6c/0x88 [ 71.877813][ C0] el1_interrupt+0x30/0x58 [ 71.878553][ C0] el1h_64_irq_handler+0x18/0x24 [ 71.879378][ C0] el1h_64_irq+0x78/0x7c [ 71.880078][ C0] security_socket_recvmsg+0xc8/0xcc [ 71.880898][ C0] ___sys_recvmsg+0x1c4/0x24c [ 71.881703][ C0] __arm64_sys_recvmsg+0x1b8/0x274 [ 71.882568][ C0] invoke_syscall+0x98/0x28c [ 71.883322][ C0] el0_svc_common+0x13c/0x258 [ 71.884074][ C0] do_el0_svc+0x5c/0x140 [ 71.884773][ C0] el0_svc+0x78/0x1d0 [ 71.885425][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 71.886238][ C0] el0t_64_sync+0x1a0/0x1a4 [ 71.886916][ C0] irq event stamp: 1219788 [ 71.887657][ C0] hardirqs last enabled at (1219787): [] el0_svc_common+0xa0/0x258 [ 71.889385][ C0] hardirqs last disabled at (1219788): [] enter_el1_irq_or_nmi+0x10/0x1c [ 71.891160][ C0] softirqs last enabled at (1219756): [] local_bh_enable+0x10/0x34 [ 71.892743][ C0] softirqs last disabled at (1219754): [] local_bh_disable+0x10/0x34 [ 71.894423][ C0] ---[ end trace e2dde290653db413 ]--- [ 71.938617][ T4867] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 71.940006][ T4867] Bad inode number on dev loop0: 2 is out of range [ 71.940979][ T4867] SysV FS: get root inode failed [ 71.941756][ T4867] oldfs: cannot read superblock [ 71.956777][ C1] ------------[ cut here ]------------ [ 71.957765][ C1] VFS: brelse: Trying to free free buffer [ 71.958715][ C1] WARNING: CPU: 1 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 71.960264][ C1] Modules linked in: [ 71.960901][ C1] CPU: 1 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 71.962480][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 71.964421][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.965754][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 71.966639][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 71.967498][ C1] sp : ffff800008017df0 [ 71.968166][ C1] x29: ffff800008017df0 x28: ffff0000c0b88000 x27: 1fffe000341d4a5c [ 71.969446][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 71.970680][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c6cd10 [ 71.972019][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 71.973431][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 71.974703][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 71.975968][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 71.977223][ C1] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 71.978562][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 71.979940][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 71.981219][ C1] Call trace: [ 71.981792][ C1] invalidate_bh_lru+0x128/0x22c [ 71.982647][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 71.983643][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 71.984771][ C1] ipi_handler+0x10c/0x70c [ 71.985416][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 71.986306][ C1] handle_domain_irq+0x148/0x200 [ 71.987076][ C1] gic_handle_irq+0x78/0x1b8 [ 71.987817][ C1] call_on_irq_stack+0x30/0x48 [ 71.988595][ C1] do_interrupt_handler+0x6c/0x88 [ 71.989492][ C1] el1_interrupt+0x30/0x58 [ 71.990210][ C1] el1h_64_irq_handler+0x18/0x24 [ 71.991052][ C1] el1h_64_irq+0x78/0x7c [ 71.991759][ C1] __tcp_close+0x324/0x1058 [ 71.992531][ C1] tcp_close+0x38/0x150 [ 71.993269][ C1] inet_release+0x120/0x16c [ 71.994016][ C1] sock_close+0xac/0x1ec [ 71.994680][ C1] __fput+0x1b8/0x7e8 [ 71.995339][ C1] ____fput+0x20/0x30 [ 71.996014][ C1] task_work_run+0x13c/0x1e8 [ 71.996780][ C1] do_notify_resume+0x2488/0x30a8 [ 71.997582][ C1] el0_svc+0xf0/0x1d0 [ 71.998254][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 71.999084][ C1] el0t_64_sync+0x1a0/0x1a4 [ 71.999811][ C1] irq event stamp: 284434 [ 72.000518][ C1] hardirqs last enabled at (284433): [] __local_bh_enable_ip+0x1f8/0x37c [ 72.002222][ C1] hardirqs last disabled at (284434): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.003875][ C1] softirqs last enabled at (284432): [] lock_sock_nested+0x14c/0x1d4 [ 72.005614][ C1] softirqs last disabled at (284430): [] lock_sock_nested+0xf4/0x1d4 [ 72.007138][ C1] ---[ end trace e2dde290653db414 ]--- [ 72.111410][ T4871] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.112589][ T4871] Bad inode number on dev loop0: 2 is out of range [ 72.113649][ T4871] SysV FS: get root inode failed [ 72.114465][ T4871] oldfs: cannot read superblock [ 72.115278][ T4871] ------------[ cut here ]------------ [ 72.116134][ T4871] VFS: brelse: Trying to free free buffer [ 72.117011][ T4871] WARNING: CPU: 0 PID: 4871 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.118373][ T4871] Modules linked in: [ 72.118969][ T4871] CPU: 0 PID: 4871 Comm: syz.0.53 Tainted: G W syzkaller #0 [ 72.120363][ T4871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.122151][ T4871] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.123413][ T4871] pc : invalidate_bh_lru+0x128/0x22c [ 72.124327][ T4871] lr : invalidate_bh_lru+0x128/0x22c [ 72.125211][ T4871] sp : ffff80001ff27710 [ 72.125920][ T4871] x29: ffff80001ff27710 x28: ffff80001438d000 x27: 1fffe000341d085b [ 72.127322][ T4871] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 72.128633][ T4871] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed95d0 [ 72.130074][ T4871] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 72.131414][ T4871] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 72.132704][ T4871] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 72.133980][ T4871] x11: ff8080000830061c x10: 0000000000000000 x9 : b57457c226292700 [ 72.135375][ T4871] x8 : b57457c226292700 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.136795][ T4871] x5 : ffff80001ff27018 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.138051][ T4871] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 72.139307][ T4871] Call trace: [ 72.139793][ T4871] invalidate_bh_lru+0x128/0x22c [ 72.140561][ T4871] smp_call_function_many_cond+0xa5c/0xec0 [ 72.141470][ T4871] on_each_cpu_cond_mask+0x5c/0xc4 [ 72.142311][ T4871] invalidate_bh_lrus+0x34/0x40 [ 72.143096][ T4871] blkdev_flush_mapping+0x16c/0x334 [ 72.143972][ T4871] blkdev_put+0x444/0x6c4 [ 72.144719][ T4871] kill_block_super+0xa0/0xe0 [ 72.145525][ T4871] deactivate_locked_super+0xc0/0x13c [ 72.146348][ T4871] mount_bdev+0x284/0x35c [ 72.147086][ T4871] sysv_mount+0x44/0x58 [ 72.147832][ T4871] legacy_get_tree+0xd8/0x174 [ 72.148687][ T4871] vfs_get_tree+0x90/0x278 [ 72.149449][ T4871] do_new_mount+0x228/0x804 [ 72.150197][ T4871] path_mount+0x57c/0xfe8 [ 72.150913][ T4871] __arm64_sys_mount+0x488/0x5f8 [ 72.151697][ T4871] invoke_syscall+0x98/0x28c [ 72.152423][ T4871] el0_svc_common+0x13c/0x258 [ 72.153203][ T4871] do_el0_svc+0x5c/0x140 [ 72.153870][ T4871] el0_svc+0x78/0x1d0 [ 72.154524][ T4871] el0t_64_sync_handler+0xcc/0xe4 [ 72.155322][ T4871] el0t_64_sync+0x1a0/0x1a4 [ 72.156095][ T4871] irq event stamp: 1088 [ 72.156811][ T4871] hardirqs last enabled at (1087): [] kasan_quarantine_put+0xc4/0x200 [ 72.158463][ T4871] hardirqs last disabled at (1088): [] smp_call_function_many_cond+0xa50/0xec0 [ 72.160201][ T4871] softirqs last enabled at (914): [] local_bh_enable+0x10/0x34 [ 72.161651][ T4871] softirqs last disabled at (912): [] local_bh_disable+0x10/0x34 [ 72.163326][ T4871] ---[ end trace e2dde290653db415 ]--- [ 72.313230][ T4875] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.319496][ T4875] Bad inode number on dev loop0: 2 is out of range [ 72.320603][ T4875] SysV FS: get root inode failed [ 72.321392][ T4875] oldfs: cannot read superblock [ 72.322271][ C0] ------------[ cut here ]------------ [ 72.323114][ C0] VFS: brelse: Trying to free free buffer [ 72.323978][ C0] WARNING: CPU: 0 PID: 148 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.325275][ C0] Modules linked in: [ 72.325887][ C0] CPU: 0 PID: 148 Comm: kworker/u4:2 Tainted: G W syzkaller #0 [ 72.327197][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.328779][ C0] Workqueue: netns cleanup_net [ 72.329475][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.330758][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.331617][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.332425][ C0] sp : ffff800008007df0 [ 72.333155][ C0] x29: ffff800008007df0 x28: ffff0000c2c08000 x27: 1fffe000341d085b [ 72.334436][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 72.335727][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed9970 [ 72.337157][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 72.338450][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 72.339741][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 72.341067][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2abc5fe008e96500 [ 72.342316][ C0] x8 : 2abc5fe008e96500 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.343499][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.344753][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.346041][ C0] Call trace: [ 72.346600][ C0] invalidate_bh_lru+0x128/0x22c [ 72.347470][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.348466][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.349595][ C0] ipi_handler+0x10c/0x70c [ 72.350334][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.351230][ C0] handle_domain_irq+0x148/0x200 [ 72.351981][ C0] gic_handle_irq+0x78/0x1b8 [ 72.352723][ C0] call_on_irq_stack+0x30/0x48 [ 72.353550][ C0] do_interrupt_handler+0x6c/0x88 [ 72.354309][ C0] el1_interrupt+0x30/0x58 [ 72.355011][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.355844][ C0] el1h_64_irq+0x78/0x7c [ 72.356574][ C0] __local_bh_enable_ip+0x200/0x37c [ 72.357427][ C0] _raw_spin_unlock_bh+0xec/0x174 [ 72.358217][ C0] tcp_metrics_flush_all+0x288/0x348 [ 72.359062][ C0] tcp_net_metrics_exit_batch+0x18/0x24 [ 72.359904][ C0] cleanup_net+0x650/0xab8 [ 72.360610][ C0] process_one_work+0x7a4/0x1178 [ 72.361332][ C0] worker_thread+0x8fc/0x103c [ 72.362075][ C0] kthread+0x37c/0x460 [ 72.362707][ C0] ret_from_fork+0x10/0x20 [ 72.363402][ C0] irq event stamp: 1777512 [ 72.364057][ C0] hardirqs last enabled at (1777511): [] __local_bh_enable_ip+0x1f8/0x37c [ 72.365681][ C0] hardirqs last disabled at (1777512): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.367254][ C0] softirqs last enabled at (1777510): [] tcp_metrics_flush_all+0x288/0x348 [ 72.368881][ C0] softirqs last disabled at (1777508): [] tcp_metrics_flush_all+0x80/0x348 [ 72.370501][ C0] ---[ end trace e2dde290653db416 ]--- [ 72.500927][ T4877] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.502196][ T4877] Bad inode number on dev loop0: 2 is out of range [ 72.503377][ T4877] SysV FS: get root inode failed [ 72.504213][ T4877] oldfs: cannot read superblock [ 72.514937][ C1] ------------[ cut here ]------------ [ 72.515789][ C1] VFS: brelse: Trying to free free buffer [ 72.516776][ C1] WARNING: CPU: 1 PID: 4879 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.518215][ C1] Modules linked in: [ 72.518921][ C1] CPU: 1 PID: 4879 Comm: syz.0.56 Tainted: G W syzkaller #0 [ 72.520395][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.522036][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.523319][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.524199][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.525057][ C1] sp : ffff800008017df0 [ 72.525709][ C1] x29: ffff800008017df0 x28: ffff0000da9851c0 x27: 1fffe000341d4a5d [ 72.526996][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000002 [ 72.528352][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c35148 [ 72.529680][ C1] x20: ffff0001a0ea52e8 x19: ffff80001155ade0 x18: 0000000000010002 [ 72.530962][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 72.532329][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.533875][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : a1d355cd7eebb800 [ 72.535319][ C1] x8 : a1d355cd7eebb800 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.536674][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.537993][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.539352][ C1] Call trace: [ 72.539896][ C1] invalidate_bh_lru+0x128/0x22c [ 72.540705][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.541687][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.542887][ C1] ipi_handler+0x10c/0x70c [ 72.543615][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.544534][ C1] handle_domain_irq+0x148/0x200 [ 72.545365][ C1] gic_handle_irq+0x78/0x1b8 [ 72.546206][ C1] call_on_irq_stack+0x30/0x48 [ 72.547022][ C1] do_interrupt_handler+0x6c/0x88 [ 72.547918][ C1] el1_interrupt+0x30/0x58 [ 72.548599][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.549415][ C1] el1h_64_irq+0x78/0x7c [ 72.550099][ C1] local_daif_restore+0x20/0x3c [ 72.550936][ C1] el0_da+0x80/0x1ec [ 72.551560][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 72.552442][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.553204][ C1] irq event stamp: 206 [ 72.553889][ C1] hardirqs last enabled at (205): [] local_daif_restore+0x1c/0x3c [ 72.555476][ C1] hardirqs last disabled at (206): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.557039][ C1] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 72.558432][ C1] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 72.560022][ C1] ---[ end trace e2dde290653db417 ]--- [ 72.632494][ T4879] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.633746][ T4879] Bad inode number on dev loop0: 2 is out of range [ 72.634738][ T4879] SysV FS: get root inode failed [ 72.635462][ T4879] oldfs: cannot read superblock [ 72.641996][ C0] ------------[ cut here ]------------ [ 72.642837][ C0] VFS: brelse: Trying to free free buffer [ 72.643797][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.645124][ C0] Modules linked in: [ 72.645737][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.647111][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.648674][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.649962][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.650819][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.651692][ C0] sp : ffff800008007df0 [ 72.652383][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 72.653813][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 72.655167][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed9df8 [ 72.656485][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 72.657737][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 72.659070][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 72.660540][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 72.662009][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.663414][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.664941][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.666504][ C0] Call trace: [ 72.667099][ C0] invalidate_bh_lru+0x128/0x22c [ 72.667961][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.669066][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.670322][ C0] ipi_handler+0x10c/0x70c [ 72.671032][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.671977][ C0] handle_domain_irq+0x148/0x200 [ 72.672799][ C0] gic_handle_irq+0x78/0x1b8 [ 72.673559][ C0] call_on_irq_stack+0x30/0x48 [ 72.674396][ C0] do_interrupt_handler+0x6c/0x88 [ 72.675280][ C0] el1_interrupt+0x30/0x58 [ 72.676118][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.676979][ C0] el1h_64_irq+0x78/0x7c [ 72.677712][ C0] arch_local_irq_restore+0x8/0x10 [ 72.678523][ C0] ___might_sleep+0x98/0x4dc [ 72.679280][ C0] alloc_counters+0x5c8/0x790 [ 72.680083][ C0] do_ip6t_get_ctl+0xb58/0x1464 [ 72.680909][ C0] nf_getsockopt+0x254/0x274 [ 72.681761][ C0] ipv6_getsockopt+0x588/0x256c [ 72.682668][ C0] tcp_getsockopt+0x214/0x2d2c [ 72.683567][ C0] sock_common_getsockopt+0xa8/0xc4 [ 72.684545][ C0] __sys_getsockopt+0x1b8/0x250 [ 72.685398][ C0] __arm64_sys_getsockopt+0xc0/0xdc [ 72.686315][ C0] invoke_syscall+0x98/0x28c [ 72.687059][ C0] el0_svc_common+0x13c/0x258 [ 72.687835][ C0] do_el0_svc+0x5c/0x140 [ 72.688541][ C0] el0_svc+0x78/0x1d0 [ 72.689165][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 72.690083][ C0] el0t_64_sync+0x1a0/0x1a4 [ 72.690913][ C0] irq event stamp: 297652 [ 72.691678][ C0] hardirqs last enabled at (297651): [] alloc_counters+0x3c4/0x790 [ 72.693465][ C0] hardirqs last disabled at (297652): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.695280][ C0] softirqs last enabled at (297544): [] local_bh_enable+0x10/0x34 [ 72.696977][ C0] softirqs last disabled at (297542): [] local_bh_disable+0x10/0x34 [ 72.698721][ C0] ---[ end trace e2dde290653db418 ]--- 1970/01/01 00:01:12 executed programs: 44 [ 72.724028][ T4881] set_capacity_and_notify: 25 callbacks suppressed [ 72.724035][ T4881] loop0: detected capacity change from 0 to 128 [ 72.727316][ T4881] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.728506][ T4881] Bad inode number on dev loop0: 2 is out of range [ 72.730090][ T4881] SysV FS: get root inode failed [ 72.730940][ T4881] oldfs: cannot read superblock [ 72.737901][ C1] ------------[ cut here ]------------ [ 72.738806][ C1] VFS: brelse: Trying to free free buffer [ 72.739817][ C1] WARNING: CPU: 1 PID: 4882 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.741335][ C1] Modules linked in: [ 72.741984][ C1] CPU: 1 PID: 4882 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.743426][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.745083][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.746592][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.747603][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.748588][ C1] sp : ffff800008017df0 [ 72.749392][ C1] x29: ffff800008017df0 x28: ffff0000c7a08000 x27: 1fffe000341d4a5c [ 72.750883][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 72.752305][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c36318 [ 72.753678][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 72.754992][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 72.756286][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.757663][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : a5355bd77e635300 [ 72.759157][ C1] x8 : a5355bd77e635300 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.760572][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.762010][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 72.763473][ C1] Call trace: [ 72.764066][ C1] invalidate_bh_lru+0x128/0x22c [ 72.764994][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.765998][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.767192][ C1] ipi_handler+0x10c/0x70c [ 72.767954][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.768891][ C1] handle_domain_irq+0x148/0x200 [ 72.769819][ C1] gic_handle_irq+0x78/0x1b8 [ 72.770659][ C1] call_on_irq_stack+0x30/0x48 [ 72.771592][ C1] do_interrupt_handler+0x6c/0x88 [ 72.772481][ C1] el1_interrupt+0x30/0x58 [ 72.773246][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.774052][ C1] el1h_64_irq+0x78/0x7c [ 72.774827][ C1] arch_local_irq_restore+0x8/0x10 [ 72.775666][ C1] rcu_read_lock_held+0x34/0x50 [ 72.776442][ C1] xas_next_entry+0x1d0/0x390 [ 72.777182][ C1] filemap_map_pages+0x954/0xc44 [ 72.778020][ C1] handle_mm_fault+0x18b0/0x2aac [ 72.778909][ C1] do_page_fault+0x690/0xad0 [ 72.779739][ C1] do_translation_fault+0xe0/0x130 [ 72.780582][ C1] do_mem_abort+0x6c/0x1b0 [ 72.781283][ C1] el0_ia+0xe0/0x2b8 [ 72.781954][ C1] el0t_64_sync_handler+0xc0/0xe4 [ 72.782806][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.783672][ C1] irq event stamp: 656 [ 72.784411][ C1] hardirqs last enabled at (655): [] lock_page_memcg+0x110/0x22c [ 72.786011][ C1] hardirqs last disabled at (656): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.787671][ C1] softirqs last enabled at (64): [] local_bh_enable+0x10/0x34 [ 72.789372][ C1] softirqs last disabled at (62): [] local_bh_disable+0x10/0x34 [ 72.791073][ C1] ---[ end trace e2dde290653db419 ]--- [ 72.821868][ T4883] loop0: detected capacity change from 0 to 128 [ 72.826028][ T4883] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.827226][ T4883] Bad inode number on dev loop0: 2 is out of range [ 72.828333][ T4883] SysV FS: get root inode failed [ 72.829207][ T4883] oldfs: cannot read superblock [ 72.836434][ C0] ------------[ cut here ]------------ [ 72.837359][ C0] VFS: brelse: Trying to free free buffer [ 72.838265][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.839853][ C0] Modules linked in: [ 72.840564][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.842249][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.843861][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.845188][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 72.846067][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 72.846963][ C0] sp : ffff800008007df0 [ 72.847656][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 72.848973][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 72.850280][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed6230 [ 72.851661][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 72.853009][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 72.854395][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 72.855727][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 2663d8ba4f118900 [ 72.857098][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.858455][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.859808][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 72.861238][ C0] Call trace: [ 72.861818][ C0] invalidate_bh_lru+0x128/0x22c [ 72.862640][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 72.863588][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.864709][ C0] ipi_handler+0x10c/0x70c [ 72.865572][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 72.866587][ C0] handle_domain_irq+0x148/0x200 [ 72.867512][ C0] gic_handle_irq+0x78/0x1b8 [ 72.868355][ C0] call_on_irq_stack+0x30/0x48 [ 72.869203][ C0] do_interrupt_handler+0x6c/0x88 [ 72.870115][ C0] el1_interrupt+0x30/0x58 [ 72.870887][ C0] el1h_64_irq_handler+0x18/0x24 [ 72.871752][ C0] el1h_64_irq+0x78/0x7c [ 72.872469][ C0] clear_page+0x1c/0x54 [ 72.873182][ C0] post_alloc_hook+0xe8/0x1fc [ 72.873975][ C0] get_page_from_freelist+0x28f0/0x2a5c [ 72.874918][ C0] __alloc_pages+0x1a4/0x474 [ 72.875701][ C0] alloc_pages+0x34c/0x5c0 [ 72.876446][ C0] get_zeroed_page+0x20/0x8c [ 72.877206][ C0] __pud_alloc+0x48/0x1c4 [ 72.877958][ C0] copy_page_range+0x2040/0x2348 [ 72.878787][ C0] copy_mm+0x9f0/0x1070 [ 72.879531][ C0] copy_process+0x15fc/0x3734 [ 72.880314][ C0] kernel_clone+0x1ec/0xa10 [ 72.881017][ C0] __arm64_sys_clone+0x154/0x1c0 [ 72.881843][ C0] invoke_syscall+0x98/0x28c [ 72.882572][ C0] el0_svc_common+0x13c/0x258 [ 72.883383][ C0] do_el0_svc+0x5c/0x140 [ 72.884154][ C0] el0_svc+0x78/0x1d0 [ 72.884825][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 72.885624][ C0] el0t_64_sync+0x1a0/0x1a4 [ 72.886384][ C0] irq event stamp: 304854 [ 72.887145][ C0] hardirqs last enabled at (304853): [] seqcount_lockdep_reader_access+0x14c/0x22c [ 72.889033][ C0] hardirqs last disabled at (304854): [] enter_el1_irq_or_nmi+0x10/0x1c [ 72.890757][ C0] softirqs last enabled at (304792): [] local_bh_enable+0x10/0x34 [ 72.892510][ C0] softirqs last disabled at (304790): [] local_bh_disable+0x10/0x34 [ 72.894263][ C0] ---[ end trace e2dde290653db41a ]--- [ 72.932282][ T4885] loop0: detected capacity change from 0 to 128 [ 72.935059][ T4885] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 72.936313][ T4885] Bad inode number on dev loop0: 2 is out of range [ 72.937306][ T4885] SysV FS: get root inode failed [ 72.938279][ T4885] oldfs: cannot read superblock [ 72.943991][ C1] ------------[ cut here ]------------ [ 72.944886][ C1] VFS: brelse: Trying to free free buffer [ 72.945857][ C1] WARNING: CPU: 1 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 72.947377][ C1] Modules linked in: [ 72.947972][ C1] CPU: 1 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.949376][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 72.951002][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.952514][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 72.953552][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 72.954579][ C1] sp : ffff800008017df0 [ 72.955301][ C1] x29: ffff800008017df0 x28: ffff0000c0b88000 x27: 1fffe000341d4a5c [ 72.956710][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 72.958080][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c366b8 [ 72.959523][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 72.961042][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 72.962358][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 72.963688][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 72.964999][ C1] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 72.966394][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 72.967809][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 72.969367][ C1] Call trace: [ 72.969973][ C1] invalidate_bh_lru+0x128/0x22c [ 72.970944][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 72.972123][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 72.973259][ C1] ipi_handler+0x10c/0x70c [ 72.974044][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 72.975078][ C1] handle_domain_irq+0x148/0x200 [ 72.975913][ C1] gic_handle_irq+0x78/0x1b8 [ 72.976698][ C1] call_on_irq_stack+0x30/0x48 [ 72.977513][ C1] do_interrupt_handler+0x6c/0x88 [ 72.978353][ C1] el1_interrupt+0x30/0x58 [ 72.979090][ C1] el1h_64_irq_handler+0x18/0x24 [ 72.979912][ C1] el1h_64_irq+0x78/0x7c [ 72.980646][ C1] __sanitizer_cov_trace_pc+0x10/0xa8 [ 72.981690][ C1] ____kasan_slab_free+0x48/0x164 [ 72.982593][ C1] __kasan_slab_free+0x18/0x28 [ 72.983471][ C1] slab_free_freelist_hook+0x128/0x1e4 [ 72.984557][ C1] kfree+0x16c/0x404 [ 72.985268][ C1] kvfree+0x40/0x50 [ 72.985936][ C1] xt_free_table_info+0x150/0x1b4 [ 72.986755][ C1] __do_replace+0x6ec/0x9c0 [ 72.987487][ C1] do_ip6t_set_ctl+0xadc/0xe38 [ 72.988265][ C1] nf_setsockopt+0x260/0x280 [ 72.989148][ C1] ipv6_setsockopt+0x1b64/0x392c [ 72.989881][ C1] tcp_setsockopt+0x1f4/0x1b8c [ 72.990633][ C1] sock_common_setsockopt+0xb0/0xcc [ 72.991476][ C1] __sys_setsockopt+0x260/0x36c [ 72.992273][ C1] __arm64_sys_setsockopt+0xc0/0xdc [ 72.993111][ C1] invoke_syscall+0x98/0x28c [ 72.993786][ C1] el0_svc_common+0x13c/0x258 [ 72.994569][ C1] do_el0_svc+0x5c/0x140 [ 72.995259][ C1] el0_svc+0x78/0x1d0 [ 72.995940][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 72.996822][ C1] el0t_64_sync+0x1a0/0x1a4 [ 72.997659][ C1] irq event stamp: 307784 [ 72.998450][ C1] hardirqs last enabled at (307783): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 73.000216][ C1] hardirqs last disabled at (307784): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.001823][ C1] softirqs last enabled at (307770): [] local_bh_enable+0x10/0x34 [ 73.003468][ C1] softirqs last disabled at (307768): [] local_bh_disable+0x10/0x34 [ 73.005111][ C1] ---[ end trace e2dde290653db41b ]--- [ 73.033272][ T4887] loop0: detected capacity change from 0 to 128 [ 73.120329][ T4887] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.121700][ T4887] Bad inode number on dev loop0: 2 is out of range [ 73.122760][ T4887] SysV FS: get root inode failed [ 73.123546][ T4887] oldfs: cannot read superblock [ 73.133659][ C0] ------------[ cut here ]------------ [ 73.134634][ C0] VFS: brelse: Trying to free free buffer [ 73.135601][ C0] WARNING: CPU: 0 PID: 4888 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.136966][ C0] Modules linked in: [ 73.137594][ C0] CPU: 0 PID: 4888 Comm: syz.0.61 Tainted: G W syzkaller #0 [ 73.138894][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.140507][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.141821][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.142688][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.143599][ C0] sp : ffff800008007df0 [ 73.144338][ C0] x29: ffff800008007df0 x28: ffff0000d6c00000 x27: 1fffe000341d085c [ 73.145681][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.146907][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed65d0 [ 73.148220][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.149648][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.151039][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.152555][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 9279763fdc8aad00 [ 73.153945][ C0] x8 : 9279763fdc8aad00 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.155262][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.156661][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.158081][ C0] Call trace: [ 73.158580][ C0] invalidate_bh_lru+0x128/0x22c [ 73.159406][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.160402][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.161625][ C0] ipi_handler+0x10c/0x70c [ 73.162455][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.163446][ C0] handle_domain_irq+0x148/0x200 [ 73.164298][ C0] gic_handle_irq+0x78/0x1b8 [ 73.165105][ C0] call_on_irq_stack+0x30/0x48 [ 73.165921][ C0] do_interrupt_handler+0x6c/0x88 [ 73.166723][ C0] el1_interrupt+0x30/0x58 [ 73.167470][ C0] el1h_64_irq_handler+0x18/0x24 [ 73.168444][ C0] el1h_64_irq+0x78/0x7c [ 73.169215][ C0] get_page_from_freelist+0x20c0/0x2a5c [ 73.170157][ C0] __alloc_pages+0x1a4/0x474 [ 73.170890][ C0] alloc_pages_vma+0x284/0x790 [ 73.171648][ C0] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 73.172687][ C0] handle_mm_fault+0x17f4/0x2aac [ 73.173611][ C0] do_page_fault+0x690/0xad0 [ 73.174391][ C0] do_translation_fault+0xe0/0x130 [ 73.175278][ C0] do_mem_abort+0x6c/0x1b0 [ 73.175980][ C0] el0_da+0x90/0x1ec [ 73.176604][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 73.177416][ C0] el0t_64_sync+0x1a0/0x1a4 [ 73.178137][ C0] irq event stamp: 1388 [ 73.178778][ C0] hardirqs last enabled at (1387): [] get_page_from_freelist+0x20ac/0x2a5c [ 73.180648][ C0] hardirqs last disabled at (1388): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.182290][ C0] softirqs last enabled at (1256): [] local_bh_enable+0x10/0x34 [ 73.183777][ C0] softirqs last disabled at (1254): [] local_bh_disable+0x10/0x34 [ 73.185396][ C0] ---[ end trace e2dde290653db41c ]--- [ 73.203419][ T4889] loop0: detected capacity change from 0 to 128 [ 73.320719][ T4889] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.322074][ T4889] Bad inode number on dev loop0: 2 is out of range [ 73.323045][ T4889] SysV FS: get root inode failed [ 73.323831][ T4889] oldfs: cannot read superblock [ 73.336821][ C0] ------------[ cut here ]------------ [ 73.337751][ C0] VFS: brelse: Trying to free free buffer [ 73.338693][ C0] WARNING: CPU: 0 PID: 4891 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.340239][ C0] Modules linked in: [ 73.340905][ C0] CPU: 0 PID: 4891 Comm: syz.0.62 Tainted: G W syzkaller #0 [ 73.342329][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.344101][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.345410][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.346371][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.347372][ C0] sp : ffff800008007df0 [ 73.348097][ C0] x29: ffff800008007df0 x28: ffff0000dd3c9b40 x27: 1fffe000341d085c [ 73.349399][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.350686][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed6970 [ 73.352009][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 73.353383][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 73.354821][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.356189][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 31740d001f1fb700 [ 73.357536][ C0] x8 : 31740d001f1fb700 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.358879][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.360243][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 73.361664][ C0] Call trace: [ 73.362186][ C0] invalidate_bh_lru+0x128/0x22c [ 73.363012][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.363981][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.365104][ C0] ipi_handler+0x10c/0x70c [ 73.365836][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.366702][ C0] handle_domain_irq+0x148/0x200 [ 73.367514][ C0] gic_handle_irq+0x78/0x1b8 [ 73.368289][ C0] call_on_irq_stack+0x30/0x48 [ 73.369015][ C0] do_interrupt_handler+0x6c/0x88 [ 73.369834][ C0] el1_interrupt+0x30/0x58 [ 73.370568][ C0] el1h_64_irq_handler+0x18/0x24 [ 73.371345][ C0] el1h_64_irq+0x78/0x7c [ 73.372024][ C0] __sanitizer_cov_trace_const_cmp4+0x0/0xc4 [ 73.373012][ C0] filemap_map_pages+0x954/0xc44 [ 73.373787][ C0] handle_mm_fault+0x18b0/0x2aac [ 73.374572][ C0] do_page_fault+0x690/0xad0 [ 73.375336][ C0] do_translation_fault+0xe0/0x130 [ 73.376166][ C0] do_mem_abort+0x6c/0x1b0 [ 73.376900][ C0] el0_da+0x90/0x1ec [ 73.377551][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 73.378349][ C0] el0t_64_sync+0x1a0/0x1a4 [ 73.379128][ C0] irq event stamp: 60 [ 73.379840][ C0] hardirqs last enabled at (59): [] lock_page_memcg+0x110/0x22c [ 73.381469][ C0] hardirqs last disabled at (60): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.383149][ C0] softirqs last enabled at (8): [] local_bh_enable+0x10/0x34 [ 73.384633][ C0] softirqs last disabled at (6): [] local_bh_disable+0x10/0x34 [ 73.386142][ C0] ---[ end trace e2dde290653db41d ]--- [ 73.413526][ T4891] loop0: detected capacity change from 0 to 128 [ 73.415924][ T4891] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.417418][ T4891] Bad inode number on dev loop0: 2 is out of range [ 73.418523][ T4891] SysV FS: get root inode failed [ 73.419389][ T4891] oldfs: cannot read superblock [ 73.425585][ C1] ------------[ cut here ]------------ [ 73.426502][ C1] VFS: brelse: Trying to free free buffer [ 73.427406][ C1] WARNING: CPU: 1 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.428812][ C1] Modules linked in: [ 73.429399][ C1] CPU: 1 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 73.430781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.432428][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.433689][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 73.434565][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 73.435500][ C1] sp : ffff800008017df0 [ 73.436225][ C1] x29: ffff800008017df0 x28: ffff0000c0b88000 x27: 1fffe000341d4a5c [ 73.437526][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 73.438942][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2c32400 [ 73.440355][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 73.441744][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 73.443087][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 73.444416][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 2663d8ba4f118900 [ 73.445699][ C1] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.446948][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.448213][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 73.449494][ C1] Call trace: [ 73.450035][ C1] invalidate_bh_lru+0x128/0x22c [ 73.450887][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 73.451972][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.453111][ C1] ipi_handler+0x10c/0x70c [ 73.453779][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 73.454715][ C1] handle_domain_irq+0x148/0x200 [ 73.455526][ C1] gic_handle_irq+0x78/0x1b8 [ 73.456250][ C1] call_on_irq_stack+0x30/0x48 [ 73.457038][ C1] do_interrupt_handler+0x6c/0x88 [ 73.457805][ C1] el1_interrupt+0x30/0x58 [ 73.458476][ C1] el1h_64_irq_handler+0x18/0x24 [ 73.459285][ C1] el1h_64_irq+0x78/0x7c [ 73.459935][ C1] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 73.460828][ C1] debug_check_no_obj_freed+0x39c/0x454 [ 73.461778][ C1] __vunmap+0x270/0x9e4 [ 73.462571][ C1] vfree+0xbc/0x154 [ 73.463223][ C1] __do_replace+0x85c/0x9c0 [ 73.463991][ C1] do_ip6t_set_ctl+0xadc/0xe38 [ 73.464738][ C1] nf_setsockopt+0x260/0x280 [ 73.465475][ C1] ipv6_setsockopt+0x1b64/0x392c [ 73.466276][ C1] tcp_setsockopt+0x1f4/0x1b8c [ 73.467003][ C1] sock_common_setsockopt+0xb0/0xcc [ 73.467822][ C1] __sys_setsockopt+0x260/0x36c [ 73.468637][ C1] __arm64_sys_setsockopt+0xc0/0xdc [ 73.469436][ C1] invoke_syscall+0x98/0x28c [ 73.470241][ C1] el0_svc_common+0x13c/0x258 [ 73.471042][ C1] do_el0_svc+0x5c/0x140 [ 73.471749][ C1] el0_svc+0x78/0x1d0 [ 73.472456][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 73.473313][ C1] el0t_64_sync+0x1a0/0x1a4 [ 73.474065][ C1] irq event stamp: 317332 [ 73.474841][ C1] hardirqs last enabled at (317331): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 73.476827][ C1] hardirqs last disabled at (317332): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.478552][ C1] softirqs last enabled at (317310): [] local_bh_enable+0x10/0x34 [ 73.480059][ C1] softirqs last disabled at (317308): [] local_bh_disable+0x10/0x34 [ 73.481609][ C1] ---[ end trace e2dde290653db41e ]--- [ 73.513027][ T4893] loop0: detected capacity change from 0 to 128 [ 73.518801][ T4893] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.520389][ T4893] Bad inode number on dev loop0: 2 is out of range [ 73.521508][ T4893] SysV FS: get root inode failed [ 73.522398][ T4893] oldfs: cannot read superblock [ 73.526232][ C0] ------------[ cut here ]------------ [ 73.527119][ C0] VFS: brelse: Trying to free free buffer [ 73.528007][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.529417][ C0] Modules linked in: [ 73.530195][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 73.531697][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.533440][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.534811][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.535865][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.536868][ C0] sp : ffff800008007df0 [ 73.537639][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 73.539244][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.540819][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed6d10 [ 73.542233][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.543635][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.544960][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.546415][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 73.547914][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.549436][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.550896][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.552301][ C0] Call trace: [ 73.552874][ C0] invalidate_bh_lru+0x128/0x22c [ 73.553852][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.555022][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.556344][ C0] ipi_handler+0x10c/0x70c [ 73.557067][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.558035][ C0] handle_domain_irq+0x148/0x200 [ 73.558978][ C0] gic_handle_irq+0x78/0x1b8 [ 73.559864][ C0] call_on_irq_stack+0x30/0x48 [ 73.560685][ C0] do_interrupt_handler+0x6c/0x88 [ 73.561681][ C0] el1_interrupt+0x30/0x58 [ 73.562473][ C0] el1h_64_irq_handler+0x18/0x24 [ 73.563319][ C0] el1h_64_irq+0x78/0x7c [ 73.564011][ C0] seqcount_lockdep_reader_access+0x214/0x2b8 [ 73.565013][ C0] prepend_path+0x274/0xab8 [ 73.565789][ C0] d_absolute_path+0xa0/0x148 [ 73.566617][ C0] tomoyo_realpath_from_path+0x2a4/0x540 [ 73.567629][ C0] tomoyo_check_open_permission+0x19c/0x35c [ 73.568776][ C0] tomoyo_file_open+0x130/0x1a8 [ 73.569675][ C0] security_file_open+0x6c/0xac [ 73.570523][ C0] do_dentry_open+0x2a4/0xea4 [ 73.571351][ C0] vfs_open+0x7c/0x90 [ 73.572098][ C0] path_openat+0x1ff8/0x2808 [ 73.572907][ C0] do_filp_open+0x188/0x370 [ 73.573685][ C0] do_sys_openat2+0x134/0x3fc [ 73.574423][ C0] __arm64_sys_openat+0x11c/0x150 [ 73.575262][ C0] invoke_syscall+0x98/0x28c [ 73.576016][ C0] el0_svc_common+0x13c/0x258 [ 73.576910][ C0] do_el0_svc+0x5c/0x140 [ 73.577807][ C0] el0_svc+0x78/0x1d0 [ 73.578527][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 73.579392][ C0] el0t_64_sync+0x1a0/0x1a4 [ 73.580295][ C0] irq event stamp: 318664 [ 73.581105][ C0] hardirqs last enabled at (318663): [] seqcount_lockdep_reader_access+0x1f4/0x2b8 [ 73.582926][ C0] hardirqs last disabled at (318664): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.584847][ C0] softirqs last enabled at (318594): [] local_bh_enable+0x10/0x34 [ 73.586564][ C0] softirqs last disabled at (318592): [] local_bh_disable+0x10/0x34 [ 73.588256][ C0] ---[ end trace e2dde290653db41f ]--- [ 73.617996][ T4896] loop0: detected capacity change from 0 to 128 [ 73.670732][ T4896] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.671962][ T4896] Bad inode number on dev loop0: 2 is out of range [ 73.672925][ T4896] SysV FS: get root inode failed [ 73.673664][ T4896] oldfs: cannot read superblock [ 73.680983][ C0] ------------[ cut here ]------------ [ 73.681814][ C0] VFS: brelse: Trying to free free buffer [ 73.682756][ C0] WARNING: CPU: 0 PID: 4897 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.684103][ C0] Modules linked in: [ 73.684634][ C0] CPU: 0 PID: 4897 Comm: syz-executor Tainted: G W syzkaller #0 [ 73.685881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.687326][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.688443][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.689193][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.690024][ C0] sp : ffff800008007df0 [ 73.690725][ C0] x29: ffff800008007df0 x28: ffff0000d3058000 x27: 1fffe000341d085c [ 73.691993][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.693301][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed2148 [ 73.694566][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.695819][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.697124][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.698425][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : feadba12f8ce2800 [ 73.699769][ C0] x8 : feadba12f8ce2800 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.701048][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.702361][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.703638][ C0] Call trace: [ 73.704137][ C0] invalidate_bh_lru+0x128/0x22c [ 73.704963][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.705921][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.706960][ C0] ipi_handler+0x10c/0x70c [ 73.707659][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.708582][ C0] handle_domain_irq+0x148/0x200 [ 73.709386][ C0] gic_handle_irq+0x78/0x1b8 [ 73.710114][ C0] call_on_irq_stack+0x30/0x48 [ 73.710851][ C0] do_interrupt_handler+0x6c/0x88 [ 73.711656][ C0] el1_interrupt+0x30/0x58 [ 73.712391][ C0] el1h_64_irq_handler+0x18/0x24 [ 73.713175][ C0] el1h_64_irq+0x78/0x7c [ 73.713801][ C0] arch_local_irq_restore+0x8/0x10 [ 73.714710][ C0] xas_reload+0xf4/0x448 [ 73.715426][ C0] next_uptodate_page+0x230/0x6f8 [ 73.716247][ C0] filemap_map_pages+0x1dc/0xc44 [ 73.717069][ C0] handle_mm_fault+0x18b0/0x2aac [ 73.717870][ C0] do_page_fault+0x690/0xad0 [ 73.718630][ C0] do_translation_fault+0xe0/0x130 [ 73.719474][ C0] do_mem_abort+0x6c/0x1b0 [ 73.720180][ C0] el0_ia+0xe0/0x2b8 [ 73.720857][ C0] el0t_64_sync_handler+0xc0/0xe4 [ 73.721745][ C0] el0t_64_sync+0x1a0/0x1a4 [ 73.722518][ C0] irq event stamp: 416 [ 73.723217][ C0] hardirqs last enabled at (415): [] count_memcg_event_mm+0x1b0/0x300 [ 73.724870][ C0] hardirqs last disabled at (416): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.726479][ C0] softirqs last enabled at (64): [] local_bh_enable+0x10/0x34 [ 73.727942][ C0] softirqs last disabled at (62): [] local_bh_disable+0x10/0x34 [ 73.729490][ C0] ---[ end trace e2dde290653db420 ]--- [ 73.773402][ T4898] loop0: detected capacity change from 0 to 128 [ 73.776113][ T4898] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.777261][ T4898] Bad inode number on dev loop0: 2 is out of range [ 73.778259][ T4898] SysV FS: get root inode failed [ 73.778964][ T4898] oldfs: cannot read superblock [ 73.788700][ C0] ------------[ cut here ]------------ [ 73.789575][ C0] VFS: brelse: Trying to free free buffer [ 73.790610][ C0] WARNING: CPU: 0 PID: 4900 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.792144][ C0] Modules linked in: [ 73.792803][ C0] CPU: 0 PID: 4900 Comm: syz-executor Tainted: G W syzkaller #0 [ 73.794307][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.795920][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.797126][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 73.797965][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 73.798834][ C0] sp : ffff800008007df0 [ 73.799506][ C0] x29: ffff800008007df0 x28: ffff0000db8a0000 x27: 1fffe000341d085c [ 73.800882][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 73.802221][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed24e8 [ 73.803719][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 73.805260][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 73.806741][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 73.808145][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 62829d84ccc0c300 [ 73.809592][ C0] x8 : 62829d84ccc0c300 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.810928][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.812159][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 73.813491][ C0] Call trace: [ 73.814037][ C0] invalidate_bh_lru+0x128/0x22c [ 73.814874][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 73.815859][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 73.817040][ C0] ipi_handler+0x10c/0x70c [ 73.817760][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 73.818702][ C0] handle_domain_irq+0x148/0x200 [ 73.819530][ C0] gic_handle_irq+0x78/0x1b8 [ 73.820315][ C0] call_on_irq_stack+0x30/0x48 [ 73.821130][ C0] do_interrupt_handler+0x6c/0x88 [ 73.821951][ C0] el1_interrupt+0x30/0x58 [ 73.822674][ C0] el1h_64_irq_handler+0x18/0x24 [ 73.823483][ C0] el1h_64_irq+0x78/0x7c [ 73.824120][ C0] full_name_hash+0xe0/0xe8 [ 73.824859][ C0] tomoyo_check_open_permission+0x1ac/0x35c [ 73.825866][ C0] tomoyo_file_open+0x130/0x1a8 [ 73.826659][ C0] security_file_open+0x6c/0xac [ 73.827433][ C0] do_dentry_open+0x2a4/0xea4 [ 73.828232][ C0] vfs_open+0x7c/0x90 [ 73.828892][ C0] path_openat+0x1ff8/0x2808 [ 73.829642][ C0] do_filp_open+0x188/0x370 [ 73.830403][ C0] do_sys_openat2+0x134/0x3fc [ 73.831098][ C0] __arm64_sys_openat+0x11c/0x150 [ 73.831845][ C0] invoke_syscall+0x98/0x28c [ 73.832590][ C0] el0_svc_common+0x13c/0x258 [ 73.833346][ C0] do_el0_svc+0x5c/0x140 [ 73.834038][ C0] el0_svc+0x78/0x1d0 [ 73.834673][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 73.835507][ C0] el0t_64_sync+0x1a0/0x1a4 [ 73.836230][ C0] irq event stamp: 862 [ 73.836971][ C0] hardirqs last enabled at (861): [] kasan_quarantine_put+0xc4/0x200 [ 73.838688][ C0] hardirqs last disabled at (862): [] enter_el1_irq_or_nmi+0x10/0x1c [ 73.840257][ C0] softirqs last enabled at (816): [] local_bh_enable+0x10/0x34 [ 73.841882][ C0] softirqs last disabled at (814): [] local_bh_disable+0x10/0x34 [ 73.843441][ C0] ---[ end trace e2dde290653db421 ]--- [ 73.883823][ T4901] loop0: detected capacity change from 0 to 128 [ 73.886131][ T4901] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 73.887552][ T4901] Bad inode number on dev loop0: 2 is out of range [ 73.889055][ T4901] SysV FS: get root inode failed [ 73.889932][ T4901] oldfs: cannot read superblock [ 73.895215][ T4787] ------------[ cut here ]------------ [ 73.896140][ T4787] VFS: brelse: Trying to free free buffer [ 73.897146][ T4787] WARNING: CPU: 1 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 73.898524][ T4787] Modules linked in: [ 73.899152][ T4787] CPU: 1 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 73.900569][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 73.902299][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.903576][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 73.904432][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 73.905248][ T4787] sp : ffff80001bd177d0 [ 73.905926][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 73.907217][ T4787] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 73.908591][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d03230 [ 73.909950][ T4787] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 73.911203][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 73.912653][ T4787] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 73.914079][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 73.915564][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 73.916912][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 73.918280][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 73.919601][ T4787] Call trace: [ 73.920147][ T4787] invalidate_bh_lru+0x128/0x22c [ 73.920939][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 73.921819][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 73.922658][ T4787] invalidate_bh_lrus+0x34/0x40 [ 73.923488][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 73.924260][ T4787] blkdev_put+0x444/0x6c4 [ 73.924939][ T4787] blkdev_close+0x74/0xb0 [ 73.925646][ T4787] __fput+0x1b8/0x7e8 [ 73.926334][ T4787] ____fput+0x20/0x30 [ 73.926958][ T4787] task_work_run+0x13c/0x1e8 [ 73.927675][ T4787] do_notify_resume+0x2488/0x30a8 [ 73.928497][ T4787] el0_svc+0xf0/0x1d0 [ 73.929152][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 73.929980][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 73.930701][ T4787] irq event stamp: 236506 [ 73.931346][ T4787] hardirqs last enabled at (236505): [] kasan_quarantine_put+0xc4/0x200 [ 73.932828][ T4787] hardirqs last disabled at (236506): [] smp_call_function_many_cond+0xa50/0xec0 [ 73.934484][ T4787] softirqs last enabled at (236250): [] local_bh_enable+0x10/0x34 [ 73.936090][ T4787] softirqs last disabled at (236248): [] local_bh_disable+0x10/0x34 [ 73.937607][ T4787] ---[ end trace e2dde290653db422 ]--- [ 74.022458][ T4903] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.023651][ T4903] Bad inode number on dev loop0: 2 is out of range [ 74.024672][ T4903] SysV FS: get root inode failed [ 74.025467][ T4903] oldfs: cannot read superblock [ 74.032016][ C1] ------------[ cut here ]------------ [ 74.032895][ C1] VFS: brelse: Trying to free free buffer [ 74.033748][ C1] WARNING: CPU: 1 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.035015][ C1] Modules linked in: [ 74.035559][ C1] CPU: 1 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.036822][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.038246][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.039482][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.040334][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.041181][ C1] sp : ffff800008017df0 [ 74.041857][ C1] x29: ffff800008017df0 x28: ffff0000c0b88000 x27: 1fffe000341d4a5b [ 74.043256][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 74.044484][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d035d0 [ 74.045851][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 74.047177][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 74.048449][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.049690][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 74.050998][ C1] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.052312][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.053613][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 74.054898][ C1] Call trace: [ 74.055473][ C1] invalidate_bh_lru+0x128/0x22c [ 74.056248][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 74.057188][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.058301][ C1] ipi_handler+0x10c/0x70c [ 74.059016][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 74.059890][ C1] handle_domain_irq+0x148/0x200 [ 74.060692][ C1] gic_handle_irq+0x78/0x1b8 [ 74.061464][ C1] call_on_irq_stack+0x30/0x48 [ 74.062314][ C1] do_interrupt_handler+0x6c/0x88 [ 74.063115][ C1] el1_interrupt+0x30/0x58 [ 74.063792][ C1] el1h_64_irq_handler+0x18/0x24 [ 74.064650][ C1] el1h_64_irq+0x78/0x7c [ 74.065331][ C1] __sanitizer_cov_trace_pc+0xa4/0xa8 [ 74.066378][ C1] unwind_frame+0x3c4/0x684 [ 74.067187][ C1] arch_stack_walk+0x204/0x2c0 [ 74.067927][ C1] stack_trace_save+0x9c/0xf0 [ 74.068634][ C1] __kasan_kmalloc+0xb0/0xf0 [ 74.069379][ C1] __kmalloc_node+0x2b0/0x50c [ 74.070049][ C1] kvmalloc_node+0x88/0x200 [ 74.070794][ C1] xt_alloc_entry_offsets+0x50/0x60 [ 74.071580][ C1] translate_table+0x158/0x18dc [ 74.072346][ C1] do_ipt_set_ctl+0x9ec/0xe38 [ 74.073024][ C1] nf_setsockopt+0x260/0x280 [ 74.073733][ C1] ip_setsockopt+0x1da0/0x29bc [ 74.074513][ C1] tcp_setsockopt+0x1f4/0x1b8c [ 74.075318][ C1] sock_common_setsockopt+0xb0/0xcc [ 74.076156][ C1] __sys_setsockopt+0x260/0x36c [ 74.077007][ C1] __arm64_sys_setsockopt+0xc0/0xdc [ 74.077941][ C1] invoke_syscall+0x98/0x28c [ 74.078667][ C1] el0_svc_common+0x13c/0x258 [ 74.079364][ C1] do_el0_svc+0x5c/0x140 [ 74.080049][ C1] el0_svc+0x78/0x1d0 [ 74.080703][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 74.081524][ C1] el0t_64_sync+0x1a0/0x1a4 [ 74.082260][ C1] irq event stamp: 333688 [ 74.082907][ C1] hardirqs last enabled at (333687): [] try_charge_memcg+0x1c8/0x115c [ 74.084396][ C1] hardirqs last disabled at (333688): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.085935][ C1] softirqs last enabled at (333684): [] release_sock+0x1d0/0x258 [ 74.087346][ C1] softirqs last disabled at (333682): [] release_sock+0x34/0x258 [ 74.088824][ C1] ---[ end trace e2dde290653db423 ]--- [ 74.133763][ T4905] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.134989][ T4905] Bad inode number on dev loop0: 2 is out of range [ 74.135972][ T4905] SysV FS: get root inode failed [ 74.136775][ T4905] oldfs: cannot read superblock [ 74.141431][ C0] ------------[ cut here ]------------ [ 74.142235][ C0] VFS: brelse: Trying to free free buffer [ 74.143160][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.144547][ C0] Modules linked in: [ 74.145196][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.146440][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.148006][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.149390][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 74.150302][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 74.151191][ C0] sp : ffff800008007df0 [ 74.151937][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 74.153454][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 74.154837][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed2888 [ 74.156298][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 74.157797][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 74.159214][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 74.160672][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 2663d8ba4f118900 [ 74.162054][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.163406][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.164780][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 74.166115][ C0] Call trace: [ 74.166667][ C0] invalidate_bh_lru+0x128/0x22c [ 74.167458][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 74.168444][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.169518][ C0] ipi_handler+0x10c/0x70c [ 74.170253][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 74.171183][ C0] handle_domain_irq+0x148/0x200 [ 74.171943][ C0] gic_handle_irq+0x78/0x1b8 [ 74.172740][ C0] call_on_irq_stack+0x30/0x48 [ 74.173578][ C0] do_interrupt_handler+0x6c/0x88 [ 74.174479][ C0] el1_interrupt+0x30/0x58 [ 74.175192][ C0] el1h_64_irq_handler+0x18/0x24 [ 74.176011][ C0] el1h_64_irq+0x78/0x7c [ 74.176742][ C0] _raw_spin_unlock_irq+0xa0/0x128 [ 74.177582][ C0] clear_inode+0x64/0x144 [ 74.178322][ C0] shmem_evict_inode+0x7cc/0x860 [ 74.179164][ C0] evict+0x3d8/0x824 [ 74.179817][ C0] iput+0x6b4/0x770 [ 74.180507][ C0] do_unlinkat+0x35c/0x624 [ 74.181289][ C0] __arm64_sys_unlinkat+0xe0/0xfc [ 74.182137][ C0] invoke_syscall+0x98/0x28c [ 74.182937][ C0] el0_svc_common+0x13c/0x258 [ 74.183783][ C0] do_el0_svc+0x5c/0x140 [ 74.184486][ C0] el0_svc+0x78/0x1d0 [ 74.185190][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 74.185981][ C0] el0t_64_sync+0x1a0/0x1a4 [ 74.186759][ C0] irq event stamp: 335824 [ 74.187541][ C0] hardirqs last enabled at (335823): [] _raw_spin_unlock_irq+0x98/0x128 [ 74.189165][ C0] hardirqs last disabled at (335824): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.190862][ C0] softirqs last enabled at (335728): [] local_bh_enable+0x10/0x34 [ 74.192392][ C0] softirqs last disabled at (335726): [] local_bh_disable+0x10/0x34 [ 74.193974][ C0] ---[ end trace e2dde290653db424 ]--- [ 74.228694][ T4907] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.230973][ T4907] Bad inode number on dev loop0: 2 is out of range [ 74.231991][ T4907] SysV FS: get root inode failed [ 74.232945][ T4907] oldfs: cannot read superblock [ 74.240147][ C1] ------------[ cut here ]------------ [ 74.241108][ C1] VFS: brelse: Trying to free free buffer [ 74.242051][ C1] WARNING: CPU: 1 PID: 4908 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.243319][ C1] Modules linked in: [ 74.244017][ C1] CPU: 1 PID: 4908 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.245408][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.246942][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.248063][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.248907][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.249785][ C1] sp : ffff800008017df0 [ 74.250473][ C1] x29: ffff800008017df0 x28: ffff0000ec5c8000 x27: 1fffe000341d4a5c [ 74.251818][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 74.253266][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d03970 [ 74.254635][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 74.255979][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 74.257280][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.258761][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 531dd37f5e396300 [ 74.260203][ C1] x8 : 531dd37f5e396300 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.261555][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.263086][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 74.264469][ C1] Call trace: [ 74.264973][ C1] invalidate_bh_lru+0x128/0x22c [ 74.265776][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 74.266755][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.267953][ C1] ipi_handler+0x10c/0x70c [ 74.268684][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 74.269616][ C1] handle_domain_irq+0x148/0x200 [ 74.270450][ C1] gic_handle_irq+0x78/0x1b8 [ 74.271215][ C1] call_on_irq_stack+0x30/0x48 [ 74.272075][ C1] do_interrupt_handler+0x6c/0x88 [ 74.272912][ C1] el1_interrupt+0x30/0x58 [ 74.273647][ C1] el1h_64_irq_handler+0x18/0x24 [ 74.274448][ C1] el1h_64_irq+0x78/0x7c [ 74.275169][ C1] __kasan_check_write+0x18/0x54 [ 74.275990][ C1] shmem_get_inode+0x3e0/0x97c [ 74.276830][ C1] shmem_symlink+0xa8/0x4ac [ 74.277574][ C1] vfs_symlink+0x238/0x3b0 [ 74.278308][ C1] do_symlinkat+0x188/0x5b4 [ 74.278998][ C1] __arm64_sys_symlinkat+0xa4/0xbc [ 74.279834][ C1] invoke_syscall+0x98/0x28c [ 74.280566][ C1] el0_svc_common+0x13c/0x258 [ 74.281381][ C1] do_el0_svc+0x5c/0x140 [ 74.282048][ C1] el0_svc+0x78/0x1d0 [ 74.282832][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 74.283781][ C1] el0t_64_sync+0x1a0/0x1a4 [ 74.284656][ C1] irq event stamp: 796 [ 74.285454][ C1] hardirqs last enabled at (795): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 74.287302][ C1] hardirqs last disabled at (796): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.289034][ C1] softirqs last enabled at (752): [] local_bh_enable+0x10/0x34 [ 74.290664][ C1] softirqs last disabled at (750): [] local_bh_disable+0x10/0x34 [ 74.292217][ C1] ---[ end trace e2dde290653db425 ]--- [ 74.352101][ T4909] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.353430][ T4909] Bad inode number on dev loop0: 2 is out of range [ 74.354632][ T4909] SysV FS: get root inode failed [ 74.355393][ T4909] oldfs: cannot read superblock [ 74.366664][ C0] ------------[ cut here ]------------ [ 74.367516][ C0] VFS: brelse: Trying to free free buffer [ 74.368412][ C0] WARNING: CPU: 0 PID: 4912 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.369724][ C0] Modules linked in: [ 74.370359][ C0] CPU: 0 PID: 4912 Comm: syz.0.71 Tainted: G W syzkaller #0 [ 74.371722][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.373514][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.374937][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 74.375849][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 74.376730][ C0] sp : ffff800008007df0 [ 74.377374][ C0] x29: ffff800008007df0 x28: ffff0000c8010000 x27: 1fffe000341d085c [ 74.378701][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 74.380027][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deed2c28 [ 74.381340][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 74.382689][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 74.384040][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 74.385328][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : a43bdf0344568d00 [ 74.386739][ C0] x8 : a43bdf0344568d00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.388047][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.389363][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 74.390638][ C0] Call trace: [ 74.391188][ C0] invalidate_bh_lru+0x128/0x22c [ 74.391932][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 74.392894][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.393986][ C0] ipi_handler+0x10c/0x70c [ 74.394703][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 74.395555][ C0] handle_domain_irq+0x148/0x200 [ 74.396375][ C0] gic_handle_irq+0x78/0x1b8 [ 74.397118][ C0] call_on_irq_stack+0x30/0x48 [ 74.397865][ C0] do_interrupt_handler+0x6c/0x88 [ 74.398704][ C0] el1_interrupt+0x30/0x58 [ 74.399448][ C0] el1h_64_irq_handler+0x18/0x24 [ 74.400246][ C0] el1h_64_irq+0x78/0x7c [ 74.400989][ C0] ___slab_alloc+0xc20/0xd84 [ 74.401721][ C0] __slab_alloc+0x68/0xc0 [ 74.402382][ C0] kmem_cache_alloc+0x2a8/0x3d8 [ 74.403196][ C0] __alloc_file+0x30/0x244 [ 74.403932][ C0] alloc_empty_file+0xa0/0x184 [ 74.404677][ C0] path_openat+0xe0/0x2808 [ 74.405424][ C0] do_filp_open+0x188/0x370 [ 74.406170][ C0] do_sys_openat2+0x134/0x3fc [ 74.407020][ C0] __arm64_sys_openat+0x11c/0x150 [ 74.407803][ C0] invoke_syscall+0x98/0x28c [ 74.408504][ C0] el0_svc_common+0x13c/0x258 [ 74.409211][ C0] do_el0_svc+0x5c/0x140 [ 74.409869][ C0] el0_svc+0x78/0x1d0 [ 74.410555][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 74.411420][ C0] el0t_64_sync+0x1a0/0x1a4 [ 74.412175][ C0] irq event stamp: 712 [ 74.412839][ C0] hardirqs last enabled at (711): [] ___slab_alloc+0xc10/0xd84 [ 74.414350][ C0] hardirqs last disabled at (712): [] enter_el1_irq_or_nmi+0x10/0x1c [ 74.415974][ C0] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 74.417512][ C0] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 74.419067][ C0] ---[ end trace e2dde290653db426 ]--- [ 74.580910][ T4912] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.582180][ T4912] Bad inode number on dev loop0: 2 is out of range [ 74.583239][ T4912] SysV FS: get root inode failed [ 74.584131][ T4912] oldfs: cannot read superblock [ 74.602410][ T4787] ------------[ cut here ]------------ [ 74.603319][ T4787] VFS: brelse: Trying to free free buffer [ 74.604276][ T4787] WARNING: CPU: 1 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.605658][ T4787] Modules linked in: [ 74.606283][ T4787] CPU: 1 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 74.607587][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.609122][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.610285][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 74.611138][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 74.611986][ T4787] sp : ffff80001bd177d0 [ 74.612685][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5c [ 74.614001][ T4787] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 74.615346][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d03d10 [ 74.616883][ T4787] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 74.618234][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 74.619614][ T4787] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.620994][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 74.622201][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.623593][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.624945][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.626246][ T4787] Call trace: [ 74.626772][ T4787] invalidate_bh_lru+0x128/0x22c [ 74.627538][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 74.628522][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.629479][ T4787] invalidate_bh_lrus+0x34/0x40 [ 74.630194][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 74.630999][ T4787] blkdev_put+0x444/0x6c4 [ 74.631692][ T4787] blkdev_close+0x74/0xb0 [ 74.632372][ T4787] __fput+0x1b8/0x7e8 [ 74.633009][ T4787] ____fput+0x20/0x30 [ 74.633577][ T4787] task_work_run+0x13c/0x1e8 [ 74.634451][ T4787] do_notify_resume+0x2488/0x30a8 [ 74.635281][ T4787] el0_svc+0xf0/0x1d0 [ 74.635943][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 74.636769][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 74.637466][ T4787] irq event stamp: 260126 [ 74.638225][ T4787] hardirqs last enabled at (260125): [] kasan_quarantine_put+0xc4/0x200 [ 74.639805][ T4787] hardirqs last disabled at (260126): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.641464][ T4787] softirqs last enabled at (259874): [] local_bh_enable+0x10/0x34 [ 74.642985][ T4787] softirqs last disabled at (259872): [] local_bh_disable+0x10/0x34 [ 74.644500][ T4787] ---[ end trace e2dde290653db427 ]--- [ 74.724633][ T4916] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.725775][ T4916] Bad inode number on dev loop0: 2 is out of range [ 74.726736][ T4916] SysV FS: get root inode failed [ 74.727499][ T4916] oldfs: cannot read superblock [ 74.736087][ C1] ------------[ cut here ]------------ [ 74.736879][ C1] VFS: brelse: Trying to free free buffer [ 74.737771][ C1] WARNING: CPU: 1 PID: 4917 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.739179][ C1] Modules linked in: [ 74.739859][ C1] CPU: 1 PID: 4917 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.741308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.743000][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.744236][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 74.745028][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 74.745928][ C1] sp : ffff800008017df0 [ 74.746625][ C1] x29: ffff800008017df0 x28: ffff0000edf48000 x27: 1fffe000341d4a5b [ 74.748104][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 74.749396][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d04148 [ 74.750796][ C1] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000010002 [ 74.752216][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 74.753574][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 74.754942][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 8912200b66b2ea00 [ 74.756262][ C1] x8 : 8912200b66b2ea00 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.757496][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.758839][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 74.760135][ C1] Call trace: [ 74.760653][ C1] invalidate_bh_lru+0x128/0x22c [ 74.761435][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 74.762407][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 74.763521][ C1] ipi_handler+0x10c/0x70c [ 74.764282][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 74.765222][ C1] handle_domain_irq+0x148/0x200 [ 74.765997][ C1] gic_handle_irq+0x78/0x1b8 [ 74.766795][ C1] call_on_irq_stack+0x30/0x48 [ 74.767515][ C1] do_interrupt_handler+0x6c/0x88 [ 74.768370][ C1] el0_interrupt+0x94/0x248 [ 74.769305][ C1] __el0_irq_handler_common+0x18/0x24 [ 74.770267][ C1] el0t_64_irq_handler+0x10/0x1c [ 74.771059][ C1] el0t_64_irq+0x1a0/0x1a4 [ 74.771857][ C1] irq event stamp: 206 [ 74.772490][ C1] hardirqs last enabled at (205): [] el0t_64_sync_handler+0xc0/0xe4 [ 74.774078][ C1] hardirqs last disabled at (206): [] __el0_irq_handler_common+0x18/0x24 [ 74.775764][ C1] softirqs last enabled at (24): [] local_bh_enable+0x10/0x34 [ 74.777249][ C1] softirqs last disabled at (22): [] local_bh_disable+0x10/0x34 [ 74.778849][ C1] ---[ end trace e2dde290653db428 ]--- [ 74.862323][ T4919] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.863533][ T4919] Bad inode number on dev loop0: 2 is out of range [ 74.864541][ T4919] SysV FS: get root inode failed [ 74.865252][ T4919] oldfs: cannot read superblock [ 74.874513][ T4787] ------------[ cut here ]------------ [ 74.875429][ T4787] VFS: brelse: Trying to free free buffer [ 74.876302][ T4787] WARNING: CPU: 0 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.877695][ T4787] Modules linked in: [ 74.878296][ T4787] CPU: 0 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 74.879569][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.881323][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.882560][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 74.883411][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 74.884268][ T4787] sp : ffff80001bd177d0 [ 74.884941][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d085b [ 74.886360][ T4787] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 74.887662][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deece060 [ 74.888972][ T4787] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 74.890401][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 74.891746][ T4787] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 74.893008][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 74.894260][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.895578][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 74.896855][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 74.898214][ T4787] Call trace: [ 74.898730][ T4787] invalidate_bh_lru+0x128/0x22c [ 74.899577][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 74.900615][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 74.901488][ T4787] invalidate_bh_lrus+0x34/0x40 [ 74.902247][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 74.903075][ T4787] blkdev_put+0x444/0x6c4 [ 74.903879][ T4787] blkdev_close+0x74/0xb0 [ 74.904556][ T4787] __fput+0x1b8/0x7e8 [ 74.905229][ T4787] ____fput+0x20/0x30 [ 74.905861][ T4787] task_work_run+0x13c/0x1e8 [ 74.906562][ T4787] do_notify_resume+0x2488/0x30a8 [ 74.907447][ T4787] el0_svc+0xf0/0x1d0 [ 74.908080][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 74.908865][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 74.909527][ T4787] irq event stamp: 267592 [ 74.910233][ T4787] hardirqs last enabled at (267591): [] kasan_quarantine_put+0xc4/0x200 [ 74.911939][ T4787] hardirqs last disabled at (267592): [] smp_call_function_many_cond+0xa50/0xec0 [ 74.913630][ T4787] softirqs last enabled at (267340): [] local_bh_enable+0x10/0x34 [ 74.915253][ T4787] softirqs last disabled at (267338): [] local_bh_disable+0x10/0x34 [ 74.916795][ T4787] ---[ end trace e2dde290653db429 ]--- [ 74.983275][ T4921] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 74.984383][ T4921] Bad inode number on dev loop0: 2 is out of range [ 74.985354][ T4921] SysV FS: get root inode failed [ 74.986181][ T4921] oldfs: cannot read superblock [ 74.992807][ C0] ------------[ cut here ]------------ [ 74.993762][ C0] VFS: brelse: Trying to free free buffer [ 74.994709][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 74.996196][ C0] Modules linked in: [ 74.996888][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 74.998292][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 74.999649][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.000953][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.001856][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.002707][ C0] sp : ffff800008007df0 [ 75.003388][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 75.004672][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 75.005939][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deece400 [ 75.007242][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.008626][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.009999][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 75.011382][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 75.012788][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.014062][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.015437][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.016784][ C0] Call trace: [ 75.017331][ C0] invalidate_bh_lru+0x128/0x22c [ 75.018155][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.019137][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.020311][ C0] ipi_handler+0x10c/0x70c [ 75.021024][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.021971][ C0] handle_domain_irq+0x148/0x200 [ 75.022849][ C0] gic_handle_irq+0x78/0x1b8 [ 75.023633][ C0] call_on_irq_stack+0x30/0x48 [ 75.024427][ C0] do_interrupt_handler+0x6c/0x88 [ 75.025215][ C0] el1_interrupt+0x30/0x58 [ 75.025961][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.026727][ C0] el1h_64_irq+0x78/0x7c [ 75.027456][ C0] __sanitizer_cov_trace_pc+0xa4/0xa8 [ 75.028370][ C0] arch_stack_walk+0x204/0x2c0 [ 75.029142][ C0] stack_trace_save+0x9c/0xf0 [ 75.029886][ C0] kasan_set_track+0x4c/0x84 [ 75.030666][ C0] kasan_set_free_info+0x28/0x4c [ 75.031508][ C0] ____kasan_slab_free+0x118/0x164 [ 75.032339][ C0] __kasan_slab_free+0x18/0x28 [ 75.033110][ C0] slab_free_freelist_hook+0x128/0x1e4 [ 75.033993][ C0] kfree+0x16c/0x404 [ 75.034673][ C0] kvfree+0x40/0x50 [ 75.035314][ C0] xt_free_table_info+0xe0/0x1b4 [ 75.036168][ C0] __do_replace+0x6ec/0x9c0 [ 75.036926][ C0] do_ip6t_set_ctl+0xadc/0xe38 [ 75.037724][ C0] nf_setsockopt+0x260/0x280 [ 75.038468][ C0] ipv6_setsockopt+0x1b64/0x392c [ 75.039233][ C0] tcp_setsockopt+0x1f4/0x1b8c [ 75.039971][ C0] sock_common_setsockopt+0xb0/0xcc [ 75.040840][ C0] __sys_setsockopt+0x260/0x36c [ 75.041647][ C0] __arm64_sys_setsockopt+0xc0/0xdc [ 75.042492][ C0] invoke_syscall+0x98/0x28c [ 75.043314][ C0] el0_svc_common+0x13c/0x258 [ 75.044106][ C0] do_el0_svc+0x5c/0x140 [ 75.044855][ C0] el0_svc+0x78/0x1d0 [ 75.045489][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 75.046330][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.047080][ C0] irq event stamp: 359444 [ 75.047790][ C0] hardirqs last enabled at (359443): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 75.049513][ C0] hardirqs last disabled at (359444): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.051078][ C0] softirqs last enabled at (359438): [] local_bh_enable+0x10/0x34 [ 75.052575][ C0] softirqs last disabled at (359436): [] local_bh_disable+0x10/0x34 [ 75.054134][ C0] ---[ end trace e2dde290653db42a ]--- [ 75.130909][ T4923] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.132498][ T4923] Bad inode number on dev loop0: 2 is out of range [ 75.133542][ T4923] SysV FS: get root inode failed [ 75.134312][ T4923] oldfs: cannot read superblock [ 75.143038][ C1] ------------[ cut here ]------------ [ 75.143874][ C1] VFS: brelse: Trying to free free buffer [ 75.144843][ C1] WARNING: CPU: 1 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.146207][ C1] Modules linked in: [ 75.146815][ C1] CPU: 1 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.148166][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.149707][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.150952][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.151849][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.152737][ C1] sp : ffff800008017df0 [ 75.153441][ C1] x29: ffff800008017df0 x28: ffff0000c0b88000 x27: 1fffe000341d4a5c [ 75.154665][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 75.155945][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d044e8 [ 75.157215][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.158445][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.159710][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 75.161105][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 75.162404][ C1] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.163688][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.164972][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.166443][ C1] Call trace: [ 75.167026][ C1] invalidate_bh_lru+0x128/0x22c [ 75.167834][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.168829][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.170006][ C1] ipi_handler+0x10c/0x70c [ 75.170745][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.171564][ C1] handle_domain_irq+0x148/0x200 [ 75.172421][ C1] gic_handle_irq+0x78/0x1b8 [ 75.173131][ C1] call_on_irq_stack+0x30/0x48 [ 75.173900][ C1] do_interrupt_handler+0x6c/0x88 [ 75.174719][ C1] el1_interrupt+0x30/0x58 [ 75.175423][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.176225][ C1] el1h_64_irq+0x78/0x7c [ 75.176932][ C1] vmacache_find+0x278/0x660 [ 75.177623][ C1] find_vma+0xc8/0x22c [ 75.178263][ C1] do_page_fault+0x610/0xad0 [ 75.179008][ C1] do_mem_abort+0x6c/0x1b0 [ 75.179798][ C1] el0_da+0x90/0x1ec [ 75.180386][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 75.181184][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.181927][ C1] irq event stamp: 363746 [ 75.182737][ C1] hardirqs last enabled at (363745): [] local_daif_restore+0x1c/0x3c [ 75.184296][ C1] hardirqs last disabled at (363746): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.185801][ C1] softirqs last enabled at (363466): [] local_bh_enable+0x10/0x34 [ 75.187307][ C1] softirqs last disabled at (363464): [] local_bh_disable+0x10/0x34 [ 75.188770][ C1] ---[ end trace e2dde290653db42b ]--- [ 75.262364][ T4925] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.263549][ T4925] Bad inode number on dev loop0: 2 is out of range [ 75.264511][ T4925] SysV FS: get root inode failed [ 75.265211][ T4925] oldfs: cannot read superblock [ 75.273217][ T4787] ------------[ cut here ]------------ [ 75.274101][ T4787] VFS: brelse: Trying to free free buffer [ 75.274985][ T4787] WARNING: CPU: 0 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.276330][ T4787] Modules linked in: [ 75.276844][ T4787] CPU: 0 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 75.278156][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.279684][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.280905][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 75.281741][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 75.282575][ T4787] sp : ffff80001bd177d0 [ 75.283246][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d085c [ 75.284539][ T4787] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 75.285946][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deece7a0 [ 75.287191][ T4787] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 75.288517][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 75.289903][ T4787] x14: 0000000000000001 x13: 1fffe000341d02d7 x12: 0000000000000000 [ 75.291158][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 75.292452][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.293761][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000a79dba8 [ 75.295031][ T4787] x2 : ffff0001a0e75d50 x1 : 0000000100000002 x0 : 0000000000000027 [ 75.296367][ T4787] Call trace: [ 75.296898][ T4787] invalidate_bh_lru+0x128/0x22c [ 75.297651][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 75.298604][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 75.299397][ T4787] invalidate_bh_lrus+0x34/0x40 [ 75.300248][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 75.301094][ T4787] blkdev_put+0x444/0x6c4 [ 75.301809][ T4787] blkdev_close+0x74/0xb0 [ 75.302501][ T4787] __fput+0x1b8/0x7e8 [ 75.303150][ T4787] ____fput+0x20/0x30 [ 75.303812][ T4787] task_work_run+0x13c/0x1e8 [ 75.304490][ T4787] do_notify_resume+0x2488/0x30a8 [ 75.305280][ T4787] el0_svc+0xf0/0x1d0 [ 75.305971][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 75.306817][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 75.307541][ T4787] irq event stamp: 280654 [ 75.308229][ T4787] hardirqs last enabled at (280653): [] kasan_quarantine_put+0xc4/0x200 [ 75.309794][ T4787] hardirqs last disabled at (280654): [] smp_call_function_many_cond+0xa50/0xec0 [ 75.311573][ T4787] softirqs last enabled at (280398): [] local_bh_enable+0x10/0x34 [ 75.313129][ T4787] softirqs last disabled at (280396): [] local_bh_disable+0x10/0x34 [ 75.314617][ T4787] ---[ end trace e2dde290653db42c ]--- [ 75.380612][ T4927] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.381787][ T4927] Bad inode number on dev loop0: 2 is out of range [ 75.382802][ T4927] SysV FS: get root inode failed [ 75.383538][ T4927] oldfs: cannot read superblock [ 75.392738][ T4787] ------------[ cut here ]------------ [ 75.393620][ T4787] VFS: brelse: Trying to free free buffer [ 75.394480][ T4787] WARNING: CPU: 1 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.395821][ T4787] Modules linked in: [ 75.396398][ T4787] CPU: 1 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 75.397691][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.399237][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.400559][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 75.401454][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 75.402377][ T4787] sp : ffff80001bd177d0 [ 75.403122][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 75.404460][ T4787] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 75.405849][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e2d04888 [ 75.407248][ T4787] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 75.408734][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 75.410250][ T4787] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 75.411647][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 75.413100][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.414394][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.415770][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 75.417181][ T4787] Call trace: [ 75.417687][ T4787] invalidate_bh_lru+0x128/0x22c [ 75.418460][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 75.419546][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 75.420350][ T4787] invalidate_bh_lrus+0x34/0x40 [ 75.421151][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 75.421937][ T4787] blkdev_put+0x444/0x6c4 [ 75.422607][ T4787] blkdev_close+0x74/0xb0 [ 75.423294][ T4787] __fput+0x1b8/0x7e8 [ 75.423893][ T4787] ____fput+0x20/0x30 [ 75.424488][ T4787] task_work_run+0x13c/0x1e8 [ 75.425155][ T4787] do_notify_resume+0x2488/0x30a8 [ 75.425873][ T4787] el0_svc+0xf0/0x1d0 [ 75.426567][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 75.427397][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 75.428164][ T4787] irq event stamp: 285016 [ 75.428782][ T4787] hardirqs last enabled at (285015): [] kasan_quarantine_put+0xc4/0x200 [ 75.430324][ T4787] hardirqs last disabled at (285016): [] smp_call_function_many_cond+0xa50/0xec0 [ 75.431896][ T4787] softirqs last enabled at (284758): [] local_bh_enable+0x10/0x34 [ 75.433363][ T4787] softirqs last disabled at (284756): [] local_bh_disable+0x10/0x34 [ 75.434838][ T4787] ---[ end trace e2dde290653db42d ]--- [ 75.458265][ T4929] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.459527][ T4929] Bad inode number on dev loop0: 2 is out of range [ 75.460606][ T4929] SysV FS: get root inode failed [ 75.461336][ T4929] oldfs: cannot read superblock [ 75.465589][ C0] ------------[ cut here ]------------ [ 75.466468][ C0] VFS: brelse: Trying to free free buffer [ 75.467318][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.468718][ C0] Modules linked in: [ 75.469268][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.470583][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.472270][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.473513][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.474338][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.475248][ C0] sp : ffff800008007df0 [ 75.475906][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 75.477148][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 75.478490][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeceb40 [ 75.479773][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.481095][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.482386][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 75.483610][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 75.484908][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.486141][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.487438][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.488738][ C0] Call trace: [ 75.489277][ C0] invalidate_bh_lru+0x128/0x22c [ 75.490106][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.491070][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.492177][ C0] ipi_handler+0x10c/0x70c [ 75.492874][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.493713][ C0] handle_domain_irq+0x148/0x200 [ 75.494541][ C0] gic_handle_irq+0x78/0x1b8 [ 75.495357][ C0] call_on_irq_stack+0x30/0x48 [ 75.496152][ C0] do_interrupt_handler+0x6c/0x88 [ 75.497069][ C0] el0_interrupt+0x94/0x248 [ 75.497860][ C0] __el0_irq_handler_common+0x18/0x24 [ 75.498737][ C0] el0t_64_irq_handler+0x10/0x1c [ 75.499597][ C0] el0t_64_irq+0x1a0/0x1a4 [ 75.500281][ C0] irq event stamp: 370340 [ 75.500943][ C0] hardirqs last enabled at (370339): [] el0t_64_sync_handler+0x6c/0xe4 [ 75.502582][ C0] hardirqs last disabled at (370340): [] __el0_irq_handler_common+0x18/0x24 [ 75.504285][ C0] softirqs last enabled at (370336): [] local_bh_enable+0x10/0x34 [ 75.505874][ C0] softirqs last disabled at (370334): [] local_bh_disable+0x10/0x34 [ 75.507464][ C0] ---[ end trace e2dde290653db42e ]--- [ 75.601004][ T4931] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.602541][ T4931] Bad inode number on dev loop0: 2 is out of range [ 75.603577][ T4931] SysV FS: get root inode failed [ 75.604333][ T4931] oldfs: cannot read superblock [ 75.622477][ C0] ------------[ cut here ]------------ [ 75.623346][ C0] VFS: brelse: Trying to free free buffer [ 75.624264][ C0] WARNING: CPU: 0 PID: 4934 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.625656][ C0] Modules linked in: [ 75.626258][ C0] CPU: 0 PID: 4934 Comm: syz.0.82 Tainted: G W syzkaller #0 [ 75.627615][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.629070][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.630245][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.631158][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.631987][ C0] sp : ffff800008007df0 [ 75.632687][ C0] x29: ffff800008007df0 x28: ffff0000d6919b40 x27: 1fffe000341d085c [ 75.634028][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 75.635453][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000deeceee0 [ 75.636768][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.638042][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.639319][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 75.640649][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 053bf47db6960700 [ 75.641946][ C0] x8 : 053bf47db6960700 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.643276][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.644487][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.645731][ C0] Call trace: [ 75.646239][ C0] invalidate_bh_lru+0x128/0x22c [ 75.647011][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.647989][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.649040][ C0] ipi_handler+0x10c/0x70c [ 75.649718][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.650596][ C0] handle_domain_irq+0x148/0x200 [ 75.651338][ C0] gic_handle_irq+0x78/0x1b8 [ 75.652102][ C0] call_on_irq_stack+0x30/0x48 [ 75.652893][ C0] do_interrupt_handler+0x6c/0x88 [ 75.653690][ C0] el1_interrupt+0x30/0x58 [ 75.654370][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.655193][ C0] el1h_64_irq+0x78/0x7c [ 75.655909][ C0] pte_alloc_one+0x1b4/0x254 [ 75.656694][ C0] __do_fault+0xbc/0x578 [ 75.657379][ C0] handle_mm_fault+0x14a0/0x2aac [ 75.658186][ C0] do_page_fault+0x690/0xad0 [ 75.658930][ C0] do_translation_fault+0xe0/0x130 [ 75.659755][ C0] do_mem_abort+0x6c/0x1b0 [ 75.660500][ C0] el0_da+0x90/0x1ec [ 75.661086][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 75.661874][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.662584][ C0] irq event stamp: 1134 [ 75.663211][ C0] hardirqs last enabled at (1133): [] pte_alloc_one+0x194/0x254 [ 75.664810][ C0] hardirqs last disabled at (1134): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.666358][ C0] softirqs last enabled at (1096): [] local_bh_enable+0x10/0x34 [ 75.667870][ C0] softirqs last disabled at (1094): [] local_bh_disable+0x10/0x34 [ 75.669412][ C0] ---[ end trace e2dde290653db42f ]--- [ 75.750697][ T4935] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.751859][ T4935] Bad inode number on dev loop0: 2 is out of range [ 75.752864][ T4935] SysV FS: get root inode failed [ 75.753808][ T4935] oldfs: cannot read superblock [ 75.763037][ C1] ------------[ cut here ]------------ [ 75.764017][ C1] VFS: brelse: Trying to free free buffer [ 75.764950][ C1] WARNING: CPU: 1 PID: 4937 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.766293][ C1] Modules linked in: [ 75.766930][ C1] CPU: 1 PID: 4937 Comm: syz.0.83 Tainted: G W syzkaller #0 [ 75.768290][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.769887][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.771051][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 75.771898][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 75.772725][ C1] sp : ffff800008017df0 [ 75.773359][ C1] x29: ffff800008017df0 x28: ffff0000cf000000 x27: 1fffe000341d4a5c [ 75.774740][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 75.776106][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd748060 [ 75.777548][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 75.779031][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 75.780453][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 75.781703][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 30f11f33553bbb00 [ 75.782982][ C1] x8 : 30f11f33553bbb00 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.784232][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.785533][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 75.786802][ C1] Call trace: [ 75.787346][ C1] invalidate_bh_lru+0x128/0x22c [ 75.788123][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 75.789096][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.790165][ C1] ipi_handler+0x10c/0x70c [ 75.790892][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 75.791674][ C1] handle_domain_irq+0x148/0x200 [ 75.792497][ C1] gic_handle_irq+0x78/0x1b8 [ 75.793253][ C1] call_on_irq_stack+0x30/0x48 [ 75.793969][ C1] do_interrupt_handler+0x6c/0x88 [ 75.794851][ C1] el1_interrupt+0x30/0x58 [ 75.795599][ C1] el1h_64_irq_handler+0x18/0x24 [ 75.796400][ C1] el1h_64_irq+0x78/0x7c [ 75.797102][ C1] el0_svc_common+0xac/0x258 [ 75.797802][ C1] do_el0_svc+0x5c/0x140 [ 75.798595][ C1] el0_svc+0x78/0x1d0 [ 75.799349][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 75.800201][ C1] el0t_64_sync+0x1a0/0x1a4 [ 75.800909][ C1] irq event stamp: 74 [ 75.801581][ C1] hardirqs last enabled at (73): [] el0_svc_common+0xa0/0x258 [ 75.803082][ C1] hardirqs last disabled at (74): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.804702][ C1] softirqs last enabled at (68): [] local_bh_enable+0x10/0x34 [ 75.806124][ C1] softirqs last disabled at (66): [] local_bh_disable+0x10/0x34 [ 75.807618][ C1] ---[ end trace e2dde290653db430 ]--- [ 75.854859][ T4937] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.856362][ T4937] Bad inode number on dev loop0: 2 is out of range [ 75.857393][ T4937] SysV FS: get root inode failed [ 75.858254][ T4937] oldfs: cannot read superblock [ 75.864380][ C0] ------------[ cut here ]------------ [ 75.865258][ C0] VFS: brelse: Trying to free free buffer [ 75.866212][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 75.867535][ C0] Modules linked in: [ 75.868208][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 75.869702][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 75.871484][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.872835][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 75.873730][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 75.874665][ C0] sp : ffff800008007df0 [ 75.875359][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 75.876743][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 75.878224][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd6a1318 [ 75.879703][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 75.881066][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 75.882369][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 75.883694][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : 2663d8ba4f118900 [ 75.884980][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 75.886246][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 75.887605][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 75.888900][ C0] Call trace: [ 75.889415][ C0] invalidate_bh_lru+0x128/0x22c [ 75.890202][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 75.891159][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 75.892296][ C0] ipi_handler+0x10c/0x70c [ 75.893053][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 75.893943][ C0] handle_domain_irq+0x148/0x200 [ 75.894748][ C0] gic_handle_irq+0x78/0x1b8 [ 75.895496][ C0] call_on_irq_stack+0x30/0x48 [ 75.896269][ C0] do_interrupt_handler+0x6c/0x88 [ 75.897085][ C0] el1_interrupt+0x30/0x58 [ 75.897809][ C0] el1h_64_irq_handler+0x18/0x24 [ 75.898614][ C0] el1h_64_irq+0x78/0x7c [ 75.899314][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 75.900248][ C0] debug_check_no_obj_freed+0x39c/0x454 [ 75.901172][ C0] __vunmap+0x270/0x9e4 [ 75.901857][ C0] vfree+0xbc/0x154 [ 75.902541][ C0] do_ipt_get_ctl+0x11a8/0x1464 [ 75.903336][ C0] nf_getsockopt+0x254/0x274 [ 75.904138][ C0] ip_getsockopt+0x1218/0x1664 [ 75.904884][ C0] tcp_getsockopt+0x214/0x2d2c [ 75.905623][ C0] sock_common_getsockopt+0xa8/0xc4 [ 75.906618][ C0] __sys_getsockopt+0x1b8/0x250 [ 75.907483][ C0] __arm64_sys_getsockopt+0xc0/0xdc [ 75.908427][ C0] invoke_syscall+0x98/0x28c [ 75.909238][ C0] el0_svc_common+0x13c/0x258 [ 75.910011][ C0] do_el0_svc+0x5c/0x140 [ 75.910726][ C0] el0_svc+0x78/0x1d0 [ 75.911395][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 75.912193][ C0] el0t_64_sync+0x1a0/0x1a4 [ 75.912927][ C0] irq event stamp: 382024 [ 75.913611][ C0] hardirqs last enabled at (382023): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 75.915423][ C0] hardirqs last disabled at (382024): [] enter_el1_irq_or_nmi+0x10/0x1c [ 75.917054][ C0] softirqs last enabled at (381988): [] release_sock+0x1d0/0x258 [ 75.918559][ C0] softirqs last disabled at (381986): [] release_sock+0x34/0x258 [ 75.920053][ C0] ---[ end trace e2dde290653db431 ]--- [ 75.994647][ T4939] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 75.995913][ T4939] Bad inode number on dev loop0: 2 is out of range [ 75.997132][ T4939] SysV FS: get root inode failed [ 75.997901][ T4939] oldfs: cannot read superblock [ 75.998777][ C0] ------------[ cut here ]------------ [ 75.999697][ C0] VFS: brelse: Trying to free free buffer [ 76.000722][ C0] WARNING: CPU: 0 PID: 4939 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.002183][ C0] Modules linked in: [ 76.002861][ C0] CPU: 0 PID: 4939 Comm: syz.0.84 Tainted: G W syzkaller #0 [ 76.004413][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.006239][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.007698][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 76.008635][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 76.009565][ C0] sp : ffff800008007df0 [ 76.010271][ C0] x29: ffff800008007df0 x28: ffff0000cf0051c0 x27: 1fffe000341d085b [ 76.011628][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000000 [ 76.012965][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd6a16b8 [ 76.014355][ C0] x20: ffff0001a0e842d8 x19: ffff80001155ade0 x18: 0000000000010003 [ 76.015805][ C0] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 76.017104][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 76.018426][ C0] x11: ff8080000830061c x10: 0000000000010002 x9 : dc3bff123f0f5100 [ 76.019857][ C0] x8 : dc3bff123f0f5100 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.021171][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.022616][ C0] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 76.023988][ C0] Call trace: [ 76.024589][ C0] invalidate_bh_lru+0x128/0x22c [ 76.025525][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 76.026584][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.027962][ C0] ipi_handler+0x10c/0x70c [ 76.028813][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 76.029784][ C0] handle_domain_irq+0x148/0x200 [ 76.030572][ C0] gic_handle_irq+0x78/0x1b8 [ 76.031345][ C0] call_on_irq_stack+0x30/0x48 [ 76.032091][ C0] do_interrupt_handler+0x6c/0x88 [ 76.032985][ C0] el1_interrupt+0x30/0x58 [ 76.033690][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.034561][ C0] el1h_64_irq+0x78/0x7c [ 76.035264][ C0] _raw_spin_unlock_irqrestore+0xb8/0x14c [ 76.036219][ C0] debug_check_no_obj_freed+0x39c/0x454 [ 76.037249][ C0] slab_free_freelist_hook+0x9c/0x1e4 [ 76.038336][ C0] kfree+0x16c/0x404 [ 76.039121][ C0] list_lru_destroy+0x234/0x3a4 [ 76.040003][ C0] deactivate_locked_super+0xc8/0x13c [ 76.040933][ C0] mount_bdev+0x284/0x35c [ 76.041715][ C0] sysv_mount+0x44/0x58 [ 76.042431][ C0] legacy_get_tree+0xd8/0x174 [ 76.043218][ C0] vfs_get_tree+0x90/0x278 [ 76.043989][ C0] do_new_mount+0x228/0x804 [ 76.044770][ C0] path_mount+0x57c/0xfe8 [ 76.045586][ C0] __arm64_sys_mount+0x488/0x5f8 [ 76.046550][ C0] invoke_syscall+0x98/0x28c [ 76.047485][ C0] el0_svc_common+0x13c/0x258 [ 76.048326][ C0] do_el0_svc+0x5c/0x140 [ 76.049086][ C0] el0_svc+0x78/0x1d0 [ 76.049729][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 76.050653][ C0] el0t_64_sync+0x1a0/0x1a4 [ 76.051437][ C0] irq event stamp: 1080 [ 76.052121][ C0] hardirqs last enabled at (1079): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 76.053908][ C0] hardirqs last disabled at (1080): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.055646][ C0] softirqs last enabled at (894): [] local_bh_enable+0x10/0x34 [ 76.057225][ C0] softirqs last disabled at (892): [] local_bh_disable+0x10/0x34 [ 76.058776][ C0] ---[ end trace e2dde290653db432 ]--- [ 76.155122][ T4941] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.156404][ T4941] Bad inode number on dev loop0: 2 is out of range [ 76.157380][ T4941] SysV FS: get root inode failed [ 76.158197][ T4941] oldfs: cannot read superblock [ 76.165586][ C1] ------------[ cut here ]------------ [ 76.166492][ C1] VFS: brelse: Trying to free free buffer [ 76.167376][ C1] WARNING: CPU: 1 PID: 4942 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.168707][ C1] Modules linked in: [ 76.169321][ C1] CPU: 1 PID: 4942 Comm: syz-executor Tainted: G W syzkaller #0 [ 76.170600][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.172211][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.173545][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 76.174448][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 76.175234][ C1] sp : ffff800008017df0 [ 76.175900][ C1] x29: ffff800008017df0 x28: ffff0000cf001b40 x27: 1fffe000341d4a5c [ 76.177180][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 76.178386][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd748400 [ 76.179713][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 76.181047][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 76.182262][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 76.183490][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : fe4897dd7d78ba00 [ 76.184677][ C1] x8 : fe4897dd7d78ba00 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.185953][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.187170][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 76.188466][ C1] Call trace: [ 76.189009][ C1] invalidate_bh_lru+0x128/0x22c [ 76.189874][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 76.190817][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.191923][ C1] ipi_handler+0x10c/0x70c [ 76.192662][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 76.193555][ C1] handle_domain_irq+0x148/0x200 [ 76.194359][ C1] gic_handle_irq+0x78/0x1b8 [ 76.195085][ C1] call_on_irq_stack+0x30/0x48 [ 76.195823][ C1] do_interrupt_handler+0x6c/0x88 [ 76.196614][ C1] el1_interrupt+0x30/0x58 [ 76.197261][ C1] el1h_64_irq_handler+0x18/0x24 [ 76.197996][ C1] el1h_64_irq+0x78/0x7c [ 76.198690][ C1] next_uptodate_page+0xc/0x6f8 [ 76.199498][ C1] handle_mm_fault+0x18b0/0x2aac [ 76.200333][ C1] do_page_fault+0x690/0xad0 [ 76.201081][ C1] do_translation_fault+0xe0/0x130 [ 76.201898][ C1] do_mem_abort+0x6c/0x1b0 [ 76.202625][ C1] el0_ia+0xe0/0x2b8 [ 76.203295][ C1] el0t_64_sync_handler+0xc0/0xe4 [ 76.204080][ C1] el0t_64_sync+0x1a0/0x1a4 [ 76.204821][ C1] irq event stamp: 32 [ 76.205504][ C1] hardirqs last enabled at (31): [] count_memcg_event_mm+0x1b0/0x300 [ 76.207234][ C1] hardirqs last disabled at (32): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.209177][ C1] softirqs last enabled at (24): [] local_bh_enable+0x10/0x34 [ 76.210924][ C1] softirqs last disabled at (22): [] local_bh_disable+0x10/0x34 [ 76.212509][ C1] ---[ end trace e2dde290653db433 ]--- [ 76.270966][ T4943] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.272329][ T4943] Bad inode number on dev loop0: 2 is out of range [ 76.273463][ T4943] SysV FS: get root inode failed [ 76.274519][ T4943] oldfs: cannot read superblock [ 76.283108][ T4787] ------------[ cut here ]------------ [ 76.284025][ T4787] VFS: brelse: Trying to free free buffer [ 76.284911][ T4787] WARNING: CPU: 1 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.286230][ T4787] Modules linked in: [ 76.286821][ T4787] CPU: 1 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 76.288100][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.289569][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.290749][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 76.291668][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 76.292545][ T4787] sp : ffff80001bd177d0 [ 76.293198][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d4a5b [ 76.294541][ T4787] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000000 [ 76.295924][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd7487a0 [ 76.297226][ T4787] x20: ffff0001a0ea52d8 x19: ffff80001155ade0 x18: 0000000000000003 [ 76.298595][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 76.299944][ T4787] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 76.301585][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 76.302929][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.304211][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.305541][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 76.306869][ T4787] Call trace: [ 76.307370][ T4787] invalidate_bh_lru+0x128/0x22c [ 76.308198][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 76.309165][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 76.310037][ T4787] invalidate_bh_lrus+0x34/0x40 [ 76.310837][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 76.311654][ T4787] blkdev_put+0x444/0x6c4 [ 76.312366][ T4787] blkdev_close+0x74/0xb0 [ 76.313083][ T4787] __fput+0x1b8/0x7e8 [ 76.313808][ T4787] ____fput+0x20/0x30 [ 76.314445][ T4787] task_work_run+0x13c/0x1e8 [ 76.315172][ T4787] do_notify_resume+0x2488/0x30a8 [ 76.315902][ T4787] el0_svc+0xf0/0x1d0 [ 76.316563][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 76.317372][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 76.318060][ T4787] irq event stamp: 327310 [ 76.318749][ T4787] hardirqs last enabled at (327309): [] kasan_quarantine_put+0xc4/0x200 [ 76.320353][ T4787] hardirqs last disabled at (327310): [] smp_call_function_many_cond+0xa50/0xec0 [ 76.322052][ T4787] softirqs last enabled at (327036): [] local_bh_enable+0x10/0x34 [ 76.323573][ T4787] softirqs last disabled at (327034): [] local_bh_disable+0x10/0x34 [ 76.325042][ T4787] ---[ end trace e2dde290653db434 ]--- [ 76.393527][ T4945] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.394767][ T4945] Bad inode number on dev loop0: 2 is out of range [ 76.395797][ T4945] SysV FS: get root inode failed [ 76.396524][ T4945] oldfs: cannot read superblock [ 76.406106][ C1] ------------[ cut here ]------------ [ 76.406934][ C1] VFS: brelse: Trying to free free buffer [ 76.407788][ C1] WARNING: CPU: 1 PID: 4947 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.409110][ C1] Modules linked in: [ 76.409670][ C1] CPU: 1 PID: 4947 Comm: syz.0.88 Tainted: G W syzkaller #0 [ 76.410999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.412645][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.413871][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 76.414711][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 76.415568][ C1] sp : ffff800008017df0 [ 76.416263][ C1] x29: ffff800008017df0 x28: ffff0000cf889b40 x27: 1fffe000341d4a5c [ 76.417522][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 76.418842][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd748b40 [ 76.420206][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 76.421469][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 76.422739][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 76.424042][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 7853e51f99ff7800 [ 76.425248][ C1] x8 : 7853e51f99ff7800 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.426511][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.427902][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 76.429134][ C1] Call trace: [ 76.429679][ C1] invalidate_bh_lru+0x128/0x22c [ 76.430473][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 76.431423][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.432616][ C1] ipi_handler+0x10c/0x70c [ 76.433369][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 76.434230][ C1] handle_domain_irq+0x148/0x200 [ 76.435051][ C1] gic_handle_irq+0x78/0x1b8 [ 76.435779][ C1] call_on_irq_stack+0x30/0x48 [ 76.436489][ C1] do_interrupt_handler+0x6c/0x88 [ 76.437249][ C1] el0_interrupt+0x94/0x248 [ 76.437960][ C1] __el0_irq_handler_common+0x18/0x24 [ 76.438814][ C1] el0t_64_irq_handler+0x10/0x1c [ 76.439576][ C1] el0t_64_irq+0x1a0/0x1a4 [ 76.440279][ C1] irq event stamp: 246 [ 76.440960][ C1] hardirqs last enabled at (245): [] el0t_64_sync_handler+0xd8/0xe4 [ 76.442454][ C1] hardirqs last disabled at (246): [] __el0_irq_handler_common+0x18/0x24 [ 76.444021][ C1] softirqs last enabled at (86): [] local_bh_enable+0x10/0x34 [ 76.445515][ C1] softirqs last disabled at (84): [] local_bh_disable+0x10/0x34 [ 76.447018][ C1] ---[ end trace e2dde290653db435 ]--- [ 76.580989][ T4947] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.582130][ T4947] Bad inode number on dev loop0: 2 is out of range [ 76.583211][ T4947] SysV FS: get root inode failed [ 76.583934][ T4947] oldfs: cannot read superblock [ 76.592957][ C1] ------------[ cut here ]------------ [ 76.593843][ C1] VFS: brelse: Trying to free free buffer [ 76.594740][ C1] WARNING: CPU: 1 PID: 4948 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.596072][ C1] Modules linked in: [ 76.596632][ C1] CPU: 1 PID: 4948 Comm: syz.0.89 Tainted: G W syzkaller #0 [ 76.597899][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.599389][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.600632][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 76.601469][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 76.602254][ C1] sp : ffff800008017df0 [ 76.602911][ C1] x29: ffff800008017df0 x28: ffff0000cf88b680 x27: 1fffe000341d4a5c [ 76.604178][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 76.605486][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd748ee0 [ 76.606803][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 76.608006][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 76.609255][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 76.610521][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : f89b9f2aecf7b800 [ 76.611758][ C1] x8 : f89b9f2aecf7b800 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.613087][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.614348][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 76.615531][ C1] Call trace: [ 76.616080][ C1] invalidate_bh_lru+0x128/0x22c [ 76.616839][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 76.617770][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.618847][ C1] ipi_handler+0x10c/0x70c [ 76.619603][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 76.620476][ C1] handle_domain_irq+0x148/0x200 [ 76.621235][ C1] gic_handle_irq+0x78/0x1b8 [ 76.621994][ C1] call_on_irq_stack+0x30/0x48 [ 76.622831][ C1] do_interrupt_handler+0x6c/0x88 [ 76.623641][ C1] el1_interrupt+0x30/0x58 [ 76.624336][ C1] el1h_64_irq_handler+0x18/0x24 [ 76.625201][ C1] el1h_64_irq+0x78/0x7c [ 76.625811][ C1] ext4_mark_iloc_dirty+0x103c/0x37dc [ 76.626641][ C1] __ext4_mark_inode_dirty+0x484/0x7ec [ 76.627476][ C1] ext4_dirty_inode+0xd4/0x110 [ 76.628188][ C1] __mark_inode_dirty+0x2b0/0xfac [ 76.628984][ C1] generic_update_time+0x208/0x230 [ 76.629786][ C1] file_update_time+0x31c/0x39c [ 76.630518][ C1] ext4_page_mkwrite+0x180/0x105c [ 76.631299][ C1] do_page_mkwrite+0x140/0x35c [ 76.632107][ C1] handle_mm_fault+0x1500/0x2aac [ 76.632934][ C1] do_page_fault+0x690/0xad0 [ 76.633754][ C1] do_translation_fault+0xe0/0x130 [ 76.634710][ C1] do_mem_abort+0x6c/0x1b0 [ 76.635385][ C1] el0_da+0x90/0x1ec [ 76.636028][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 76.636841][ C1] el0t_64_sync+0x1a0/0x1a4 [ 76.637589][ C1] irq event stamp: 1086 [ 76.638330][ C1] hardirqs last enabled at (1085): [] __find_get_block+0x1c4/0xcb8 [ 76.640027][ C1] hardirqs last disabled at (1086): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.641583][ C1] softirqs last enabled at (1044): [] local_bh_enable+0x10/0x34 [ 76.643095][ C1] softirqs last disabled at (1042): [] local_bh_disable+0x10/0x34 [ 76.644627][ C1] ---[ end trace e2dde290653db436 ]--- [ 76.741699][ T4949] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.742999][ T4949] Bad inode number on dev loop0: 2 is out of range [ 76.744010][ T4949] SysV FS: get root inode failed [ 76.744917][ T4949] oldfs: cannot read superblock [ 76.753360][ C0] ------------[ cut here ]------------ [ 76.754317][ C0] VFS: brelse: Trying to free free buffer [ 76.755291][ C0] WARNING: CPU: 0 PID: 4950 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.756649][ C0] Modules linked in: [ 76.757283][ C0] CPU: 0 PID: 4950 Comm: syz.0.90 Tainted: G W syzkaller #0 [ 76.758584][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.760137][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.761606][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 76.762507][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 76.763393][ C0] sp : ffff800008007df0 [ 76.764100][ C0] x29: ffff800008007df0 x28: ffff0000ce7d9b40 x27: 1fffe000341d085c [ 76.765527][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 76.766891][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd6a1a58 [ 76.768172][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 76.769488][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 76.771044][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 76.772436][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 3018ac26bcd82a00 [ 76.773710][ C0] x8 : 3018ac26bcd82a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.775062][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.776280][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 76.777777][ C0] Call trace: [ 76.778365][ C0] invalidate_bh_lru+0x128/0x22c [ 76.779337][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 76.780363][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.781535][ C0] ipi_handler+0x10c/0x70c [ 76.782211][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 76.783120][ C0] handle_domain_irq+0x148/0x200 [ 76.783918][ C0] gic_handle_irq+0x78/0x1b8 [ 76.784738][ C0] call_on_irq_stack+0x30/0x48 [ 76.785570][ C0] do_interrupt_handler+0x6c/0x88 [ 76.786489][ C0] el1_interrupt+0x30/0x58 [ 76.787211][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.788082][ C0] el1h_64_irq+0x78/0x7c [ 76.788786][ C0] local_daif_restore+0x20/0x3c [ 76.789662][ C0] el0_da+0x80/0x1ec [ 76.790411][ C0] el0t_64_sync_handler+0xd8/0xe4 [ 76.791367][ C0] el0t_64_sync+0x1a0/0x1a4 [ 76.792137][ C0] irq event stamp: 1308 [ 76.792789][ C0] hardirqs last enabled at (1307): [] local_daif_restore+0x1c/0x3c [ 76.794408][ C0] hardirqs last disabled at (1308): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.796255][ C0] softirqs last enabled at (1154): [] local_bh_enable+0x10/0x34 [ 76.798055][ C0] softirqs last disabled at (1152): [] local_bh_disable+0x10/0x34 [ 76.799723][ C0] ---[ end trace e2dde290653db437 ]--- [ 76.824709][ T4951] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.825938][ T4951] Bad inode number on dev loop0: 2 is out of range [ 76.826893][ T4951] SysV FS: get root inode failed [ 76.827649][ T4951] oldfs: cannot read superblock [ 76.837767][ C1] ------------[ cut here ]------------ [ 76.838633][ C1] VFS: brelse: Trying to free free buffer [ 76.839618][ C1] WARNING: CPU: 1 PID: 4953 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.841034][ C1] Modules linked in: [ 76.841650][ C1] CPU: 1 PID: 4953 Comm: syz.0.91 Tainted: G W syzkaller #0 [ 76.842991][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.844533][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.845802][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 76.846615][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 76.847551][ C1] sp : ffff800008017df0 [ 76.848179][ C1] x29: ffff800008017df0 x28: ffff0000d8d83680 x27: 1fffe000341d4a5c [ 76.849536][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 76.850986][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c0697b40 [ 76.852334][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 76.853551][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 76.854799][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 76.856141][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 31a32c0c5564f300 [ 76.857382][ C1] x8 : 31a32c0c5564f300 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.858653][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.859936][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 76.861305][ C1] Call trace: [ 76.861844][ C1] invalidate_bh_lru+0x128/0x22c [ 76.862710][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 76.863686][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.864925][ C1] ipi_handler+0x10c/0x70c [ 76.865685][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 76.866578][ C1] handle_domain_irq+0x148/0x200 [ 76.867386][ C1] gic_handle_irq+0x78/0x1b8 [ 76.868120][ C1] call_on_irq_stack+0x30/0x48 [ 76.868924][ C1] do_interrupt_handler+0x6c/0x88 [ 76.869725][ C1] el1_interrupt+0x30/0x58 [ 76.870517][ C1] el1h_64_irq_handler+0x18/0x24 [ 76.871308][ C1] el1h_64_irq+0x78/0x7c [ 76.871962][ C1] ___slab_alloc+0xc20/0xd84 [ 76.872735][ C1] __slab_alloc+0x68/0xc0 [ 76.873437][ C1] kmem_cache_alloc+0x2a8/0x3d8 [ 76.874305][ C1] getname_flags+0xb8/0x44c [ 76.875024][ C1] getname+0x28/0x38 [ 76.875673][ C1] do_sys_openat2+0xdc/0x3fc [ 76.876380][ C1] __arm64_sys_openat+0x11c/0x150 [ 76.877142][ C1] invoke_syscall+0x98/0x28c [ 76.877873][ C1] el0_svc_common+0x13c/0x258 [ 76.878651][ C1] do_el0_svc+0x5c/0x140 [ 76.879341][ C1] el0_svc+0x78/0x1d0 [ 76.879965][ C1] el0t_64_sync_handler+0xcc/0xe4 [ 76.880798][ C1] el0t_64_sync+0x1a0/0x1a4 [ 76.881573][ C1] irq event stamp: 696 [ 76.882269][ C1] hardirqs last enabled at (695): [] ___slab_alloc+0xc10/0xd84 [ 76.883671][ C1] hardirqs last disabled at (696): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.885217][ C1] softirqs last enabled at (92): [] local_bh_enable+0x10/0x34 [ 76.886744][ C1] softirqs last disabled at (90): [] local_bh_disable+0x10/0x34 [ 76.888188][ C1] ---[ end trace e2dde290653db438 ]--- [ 76.934048][ T4953] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 76.935403][ T4953] Bad inode number on dev loop0: 2 is out of range [ 76.936588][ T4953] SysV FS: get root inode failed [ 76.937335][ T4953] oldfs: cannot read superblock [ 76.943964][ C0] ------------[ cut here ]------------ [ 76.944839][ C0] VFS: brelse: Trying to free free buffer [ 76.945856][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 76.947345][ C0] Modules linked in: [ 76.947942][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 76.949423][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 76.951078][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.952376][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 76.953268][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 76.954160][ C0] sp : ffff800008007df0 [ 76.954973][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 76.956436][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 76.957905][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dd6a1df8 [ 76.959407][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 76.960870][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 76.962267][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 76.963764][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 76.965152][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 76.966642][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 76.968109][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 76.969613][ C0] Call trace: [ 76.970233][ C0] invalidate_bh_lru+0x128/0x22c [ 76.971183][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 76.972338][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 76.973494][ C0] ipi_handler+0x10c/0x70c [ 76.974228][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 76.975164][ C0] handle_domain_irq+0x148/0x200 [ 76.976090][ C0] gic_handle_irq+0x78/0x1b8 [ 76.976980][ C0] call_on_irq_stack+0x30/0x48 [ 76.977813][ C0] do_interrupt_handler+0x6c/0x88 [ 76.978709][ C0] el1_interrupt+0x30/0x58 [ 76.979513][ C0] el1h_64_irq_handler+0x18/0x24 [ 76.980479][ C0] el1h_64_irq+0x78/0x7c [ 76.981255][ C0] __virt_to_phys+0x64/0x15c [ 76.982069][ C0] memcg_slab_free_hook+0xa8/0x1f4 [ 76.982899][ C0] ___cache_free+0x78/0x1bc [ 76.983697][ C0] qlink_free+0x5c/0xa0 [ 76.984439][ C0] qlist_free_all+0x40/0xa8 [ 76.985273][ C0] kasan_quarantine_reduce+0x124/0x130 [ 76.986230][ C0] __kasan_slab_alloc+0x34/0xcc [ 76.987114][ C0] slab_post_alloc_hook+0x74/0x3f8 [ 76.988008][ C0] kmem_cache_alloc+0x1dc/0x3d8 [ 76.988820][ C0] getname_flags+0xb8/0x44c [ 76.989545][ C0] user_path_at_empty+0x40/0x1a0 [ 76.990364][ C0] __arm64_sys_umount+0xf8/0x184 [ 76.991166][ C0] invoke_syscall+0x98/0x28c [ 76.991913][ C0] el0_svc_common+0x13c/0x258 [ 76.992709][ C0] do_el0_svc+0x5c/0x140 [ 76.993471][ C0] el0_svc+0x78/0x1d0 [ 76.994189][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 76.994984][ C0] el0t_64_sync+0x1a0/0x1a4 [ 76.995712][ C0] irq event stamp: 407086 [ 76.996366][ C0] hardirqs last enabled at (407085): [] _raw_spin_unlock_irqrestore+0xa8/0x14c [ 76.998182][ C0] hardirqs last disabled at (407086): [] enter_el1_irq_or_nmi+0x10/0x1c [ 76.999919][ C0] softirqs last enabled at (406438): [] local_bh_enable+0x10/0x34 [ 77.001608][ C0] softirqs last disabled at (406436): [] local_bh_disable+0x10/0x34 [ 77.003359][ C0] ---[ end trace e2dde290653db439 ]--- [ 77.073046][ T4955] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.074385][ T4955] Bad inode number on dev loop0: 2 is out of range [ 77.075481][ T4955] SysV FS: get root inode failed [ 77.076451][ T4955] oldfs: cannot read superblock [ 77.083347][ C0] ------------[ cut here ]------------ [ 77.084312][ C0] VFS: brelse: Trying to free free buffer [ 77.085241][ C0] WARNING: CPU: 0 PID: 4667 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.086647][ C0] Modules linked in: [ 77.087259][ C0] CPU: 0 PID: 4667 Comm: syz-executor Tainted: G W syzkaller #0 [ 77.088650][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 77.090290][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.091610][ C0] pc : invalidate_bh_lru+0x128/0x22c [ 77.092492][ C0] lr : invalidate_bh_lru+0x128/0x22c [ 77.093554][ C0] sp : ffff800008007df0 [ 77.094259][ C0] x29: ffff800008007df0 x28: ffff0000c0b88000 x27: 1fffe000341d085c [ 77.095590][ C0] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 77.096986][ C0] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dee2f230 [ 77.098352][ C0] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000010002 [ 77.099988][ C0] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 77.101505][ C0] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 77.102965][ C0] x11: ff8080000830061c x10: 0000000000010001 x9 : 2663d8ba4f118900 [ 77.104321][ C0] x8 : 2663d8ba4f118900 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.105739][ C0] x5 : ffff8000080076f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 77.107138][ C0] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 77.108600][ C0] Call trace: [ 77.109192][ C0] invalidate_bh_lru+0x128/0x22c [ 77.110001][ C0] flush_smp_call_function_queue+0x38c/0x814 [ 77.111002][ C0] generic_smp_call_function_single_interrupt+0x18/0x24 [ 77.112191][ C0] ipi_handler+0x10c/0x70c [ 77.112941][ C0] handle_percpu_devid_irq+0x2a4/0x770 [ 77.113857][ C0] handle_domain_irq+0x148/0x200 [ 77.114669][ C0] gic_handle_irq+0x78/0x1b8 [ 77.115468][ C0] call_on_irq_stack+0x30/0x48 [ 77.116260][ C0] do_interrupt_handler+0x6c/0x88 [ 77.117133][ C0] el1_interrupt+0x30/0x58 [ 77.117885][ C0] el1h_64_irq_handler+0x18/0x24 [ 77.118662][ C0] el1h_64_irq+0x78/0x7c [ 77.119414][ C0] arch_local_irq_restore+0x8/0x10 [ 77.120248][ C0] rcu_read_lock_held+0x34/0x50 [ 77.121009][ C0] mem_cgroup_from_task+0x98/0x120 [ 77.121802][ C0] get_obj_cgroup_from_current+0x27c/0x524 [ 77.122750][ C0] slab_pre_alloc_hook+0xa4/0xe8 [ 77.123560][ C0] kmem_cache_alloc+0x94/0x3d8 [ 77.124320][ C0] anon_vma_clone+0x8c/0x44c [ 77.125086][ C0] anon_vma_fork+0x7c/0x478 [ 77.125863][ C0] copy_mm+0x7bc/0x1070 [ 77.126632][ C0] copy_process+0x15fc/0x3734 [ 77.127518][ C0] kernel_clone+0x1ec/0xa10 [ 77.128364][ C0] __arm64_sys_clone+0x154/0x1c0 [ 77.129251][ C0] invoke_syscall+0x98/0x28c [ 77.130083][ C0] el0_svc_common+0x13c/0x258 [ 77.130883][ C0] do_el0_svc+0x5c/0x140 [ 77.131659][ C0] el0_svc+0x78/0x1d0 [ 77.132392][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 77.133241][ C0] el0t_64_sync+0x1a0/0x1a4 [ 77.134015][ C0] irq event stamp: 412140 [ 77.134746][ C0] hardirqs last enabled at (412139): [] pte_alloc_one+0x194/0x254 [ 77.136367][ C0] hardirqs last disabled at (412140): [] enter_el1_irq_or_nmi+0x10/0x1c [ 77.138048][ C0] softirqs last enabled at (411998): [] local_bh_enable+0x10/0x34 [ 77.139745][ C0] softirqs last disabled at (411996): [] local_bh_disable+0x10/0x34 [ 77.141486][ C0] ---[ end trace e2dde290653db43a ]--- [ 77.242602][ T4957] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.243788][ T4957] Bad inode number on dev loop0: 2 is out of range [ 77.244740][ T4957] SysV FS: get root inode failed [ 77.245770][ T4957] oldfs: cannot read superblock [ 77.252495][ C1] ------------[ cut here ]------------ [ 77.253385][ C1] VFS: brelse: Trying to free free buffer [ 77.254325][ C1] WARNING: CPU: 1 PID: 4958 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.255674][ C1] Modules linked in: [ 77.256228][ C1] CPU: 1 PID: 4958 Comm: syz-executor Tainted: G W syzkaller #0 [ 77.257506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 77.258975][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.260213][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 77.261074][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 77.261862][ C1] sp : ffff800008017df0 [ 77.262554][ C1] x29: ffff800008017df0 x28: ffff0000c72751c0 x27: 1fffe000341d4a5c [ 77.263718][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000001 [ 77.265032][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c0697a58 [ 77.266367][ C1] x20: ffff0001a0ea52e0 x19: ffff80001155ade0 x18: 0000000000010003 [ 77.267581][ C1] x17: 0000000000010003 x16: ffff80001134e478 x15: 0000000000000012 [ 77.268800][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 77.270043][ C1] x11: ff8080000830061c x10: 0000000000010002 x9 : 07d0ed8424a6fd00 [ 77.271268][ C1] x8 : 07d0ed8424a6fd00 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.272446][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 77.273704][ C1] x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000027 [ 77.274966][ C1] Call trace: [ 77.275443][ C1] invalidate_bh_lru+0x128/0x22c [ 77.276149][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 77.277087][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 77.278148][ C1] ipi_handler+0x10c/0x70c [ 77.278824][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 77.279687][ C1] handle_domain_irq+0x148/0x200 [ 77.280529][ C1] gic_handle_irq+0x78/0x1b8 [ 77.281300][ C1] call_on_irq_stack+0x30/0x48 [ 77.282047][ C1] do_interrupt_handler+0x6c/0x88 [ 77.282874][ C1] el1_interrupt+0x30/0x58 [ 77.283522][ C1] el1h_64_irq_handler+0x18/0x24 [ 77.284369][ C1] el1h_64_irq+0x78/0x7c [ 77.285075][ C1] lock_page_memcg+0x120/0x22c [ 77.285884][ C1] page_add_file_rmap+0x148/0x8c4 [ 77.286714][ C1] do_set_pte+0x390/0x4e4 [ 77.287369][ C1] filemap_map_pages+0x9c4/0xc44 [ 77.288117][ C1] handle_mm_fault+0x18b0/0x2aac [ 77.289152][ C1] do_page_fault+0x690/0xad0 [ 77.289863][ C1] do_translation_fault+0xe0/0x130 [ 77.290641][ C1] do_mem_abort+0x6c/0x1b0 [ 77.291365][ C1] el0_ia+0xe0/0x2b8 [ 77.291981][ C1] el0t_64_sync_handler+0xc0/0xe4 [ 77.292752][ C1] el0t_64_sync+0x1a0/0x1a4 [ 77.293454][ C1] irq event stamp: 440 [ 77.294033][ C1] hardirqs last enabled at (439): [] lock_page_memcg+0x110/0x22c [ 77.295615][ C1] hardirqs last disabled at (440): [] enter_el1_irq_or_nmi+0x10/0x1c [ 77.297176][ C1] softirqs last enabled at (64): [] local_bh_enable+0x10/0x34 [ 77.298634][ C1] softirqs last disabled at (62): [] local_bh_disable+0x10/0x34 [ 77.300103][ C1] ---[ end trace e2dde290653db43b ]--- [ 77.375345][ T4959] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.376706][ T4959] Bad inode number on dev loop0: 2 is out of range [ 77.377808][ T4959] SysV FS: get root inode failed [ 77.378672][ T4959] oldfs: cannot read superblock [ 77.386167][ T4787] ------------[ cut here ]------------ [ 77.387016][ T4787] VFS: brelse: Trying to free free buffer [ 77.387939][ T4787] WARNING: CPU: 0 PID: 4787 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.389264][ T4787] Modules linked in: [ 77.389993][ T4787] CPU: 0 PID: 4787 Comm: udevd Tainted: G W syzkaller #0 [ 77.391636][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 77.393346][ T4787] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.394690][ T4787] pc : invalidate_bh_lru+0x128/0x22c [ 77.395596][ T4787] lr : invalidate_bh_lru+0x128/0x22c [ 77.396592][ T4787] sp : ffff80001bd177d0 [ 77.397351][ T4787] x29: ffff80001bd177d0 x28: ffff80001438d000 x27: 1fffe000341d085c [ 77.398701][ T4787] x26: 0000000000000001 x25: ffff0001a0e842d8 x24: 0000000000000001 [ 77.400092][ T4787] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000dee2f5d0 [ 77.401359][ T4787] x20: ffff0001a0e842e0 x19: ffff80001155ade0 x18: 0000000000000003 [ 77.402955][ T4787] x17: 0000000000000000 x16: ffff80001134e478 x15: 0000000000000012 [ 77.404495][ T4787] x14: 0000000000000001 x13: 1fffe000341cebab x12: 0000000000000000 [ 77.405914][ T4787] x11: ff8080000830061c x10: 0000000000000000 x9 : 3a37e6e326cba500 [ 77.407471][ T4787] x8 : 3a37e6e326cba500 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.408954][ T4787] x5 : ffff80001bd170d8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 77.410370][ T4787] x2 : 0000000000000001 x1 : 0000000100000002 x0 : 0000000000000027 [ 77.411818][ T4787] Call trace: [ 77.412408][ T4787] invalidate_bh_lru+0x128/0x22c [ 77.413237][ T4787] smp_call_function_many_cond+0xa5c/0xec0 [ 77.414268][ T4787] on_each_cpu_cond_mask+0x5c/0xc4 [ 77.415151][ T4787] invalidate_bh_lrus+0x34/0x40 [ 77.415987][ T4787] blkdev_flush_mapping+0x16c/0x334 [ 77.416906][ T4787] blkdev_put+0x444/0x6c4 [ 77.417615][ T4787] blkdev_close+0x74/0xb0 [ 77.418320][ T4787] __fput+0x1b8/0x7e8 [ 77.418905][ T4787] ____fput+0x20/0x30 [ 77.419541][ T4787] task_work_run+0x13c/0x1e8 [ 77.420332][ T4787] do_notify_resume+0x2488/0x30a8 [ 77.421215][ T4787] el0_svc+0xf0/0x1d0 [ 77.421847][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 77.422679][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 77.423499][ T4787] irq event stamp: 364308 [ 77.424291][ T4787] hardirqs last enabled at (364307): [] kasan_quarantine_put+0xc4/0x200 [ 77.426182][ T4787] hardirqs last disabled at (364308): [] smp_call_function_many_cond+0xa50/0xec0 [ 77.428025][ T4787] softirqs last enabled at (364042): [] local_bh_enable+0x10/0x34 [ 77.429587][ T4787] softirqs last disabled at (364040): [] local_bh_disable+0x10/0x34 [ 77.431275][ T4787] ---[ end trace e2dde290653db43c ]--- [ 77.516621][ T4961] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.517813][ T4961] Bad inode number on dev loop0: 2 is out of range [ 77.518765][ T4961] SysV FS: get root inode failed [ 77.519894][ T4961] oldfs: cannot read superblock [ 77.527746][ C1] ------------[ cut here ]------------ [ 77.528566][ C1] VFS: brelse: Trying to free free buffer [ 77.529516][ C1] WARNING: CPU: 1 PID: 4962 at fs/buffer.c:1148 invalidate_bh_lru+0x128/0x22c [ 77.531054][ C1] Modules linked in: [ 77.531747][ C1] CPU: 1 PID: 4962 Comm: syz-executor Tainted: G W syzkaller #0 [ 77.533256][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 77.534970][ C1] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.536285][ C1] pc : invalidate_bh_lru+0x128/0x22c [ 77.537124][ C1] lr : invalidate_bh_lru+0x128/0x22c [ 77.538070][ C1] sp : ffff800008017df0 [ 77.538777][ C1] x29: ffff800008017df0 x28: ffff0000cb3351c0 x27: 1fffe000341d4a5e [ 77.540078][ C1] x26: 0000000000000001 x25: ffff0001a0ea52d8 x24: 0000000000000003 [ 77.541327][ C1] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c06977a0 [ 77.542623][ C1] x20: ffff0001a0ea52f0 x19: ffff80001155ade0 x18: 0000000000010002 [ 77.543959][ C1] x17: 0000000000010002 x16: ffff80001134e478 x15: 0000000000000012 [ 77.545299][ C1] x14: 0000000000000001 x13: 1fffe000341d2dab x12: 0000000000000000 [ 77.546678][ C1] x11: ff8080000830061c x10: 0000000000010001 x9 : 4733ebc3cbdd9600 [ 77.548237][ C1] x8 : 4733ebc3cbdd9600 x7 : 0000000000000001 x6 : 0000000000000001 [ 77.549552][ C1] x5 : ffff8000080176f8 x4 : ffff80001446f500 x3 : ffff80000850f688 [ 77.550980][ C1] x2 : 0000000000000001 x1 : 0000000100010001 x0 : 0000000000000027 [ 77.552404][ C1] Call trace: [ 77.552984][ C1] invalidate_bh_lru+0x128/0x22c [ 77.553903][ C1] flush_smp_call_function_queue+0x38c/0x814 [ 77.554899][ C1] generic_smp_call_function_single_interrupt+0x18/0x24 [ 77.556130][ C1] ipi_handler+0x10c/0x70c [ 77.556842][ C1] handle_percpu_devid_irq+0x2a4/0x770 [ 77.557674][ C1] handle_domain_irq+0x148/0x200 [ 77.558504][ C1] gic_handle_irq+0x78/0x1b8 [ 77.559244][ C1] call_on_irq_stack+0x30/0x48 [ 77.560045][ C1] do_interrupt_handler+0x6c/0x88 [ 77.560851][ C1] el1_interrupt+0x30/0x58 [ 77.561655][ C1] el1h_64_irq_handler+0x18/0x24 [ 77.562554][ C1] el1h_64_irq+0x78/0x7c [ 77.563234][ C1] local_daif_restore+0x20/0x3c [ 77.564020][ C1] el0_da+0x80/0x1ec [ 77.564717][ C1] el0t_64_sync_handler+0xd8/0xe4 [ 77.565687][ C1] el0t_64_sync+0x1a0/0x1a4 [ 77.566566][ C1] irq event stamp: 302 [ 77.567273][ C1] hardirqs last enabled at (301): [] local_daif_restore+0x1c/0x3c [ 77.569014][ C1] hardirqs last disabled at (302): [] enter_el1_irq_or_nmi+0x10/0x1c [ 77.570651][ C1] softirqs last enabled at (64): [] local_bh_enable+0x10/0x34 [ 77.572063][ C1] softirqs last disabled at (62): [] local_bh_disable+0x10/0x34 [ 77.573630][ C1] ---[ end trace e2dde290653db43d ]---