------------[ cut here ]------------
VFS: brelse: Trying to free free buffer
WARNING: CPU: 0 PID: 0 at fs/buffer.c:1235 __brelse fs/buffer.c:1235 [inline]
WARNING: CPU: 0 PID: 0 at fs/buffer.c:1235 brelse include/linux/buffer_head.h:324 [inline]
WARNING: CPU: 0 PID: 0 at fs/buffer.c:1235 __invalidate_bh_lrus fs/buffer.c:1504 [inline]
WARNING: CPU: 0 PID: 0 at fs/buffer.c:1235 invalidate_bh_lru+0x102/0x1b0 fs/buffer.c:1517
Modules linked in:
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:__brelse fs/buffer.c:1235 [inline]
RIP: 0010:brelse include/linux/buffer_head.h:324 [inline]
RIP: 0010:__invalidate_bh_lrus fs/buffer.c:1504 [inline]
RIP: 0010:invalidate_bh_lru+0x102/0x1b0 fs/buffer.c:1517
Code: 84 5b db ff f0 ff 0b eb 25 e8 ca bd 74 ff 41 80 3c 2e 00 75 2a eb 30 e8 bc bd 74 ff 90 48 c7 c7 60 7a 19 8c e8 bf b2 35 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c
RSP: 0018:ffffc90000007f30 EFLAGS: 00010046
RAX: e0258bce072ecc00 RBX: ffff8880773d2230 RCX: ffffffff8e694640
RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff8155d162 R09: 1ffff110170c519a
R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff8880b8639940
R13: 0000000000000000 R14: 1ffff110170c7328 R15: ffff8880b8639940
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055f045bd3fd8 CR3: 0000000032f1c000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
csd_do_func kernel/smp.c:134 [inline]
__flush_smp_call_function_queue+0x3fc/0x1690 kernel/smp.c:540
__sysvec_call_function_single+0xb8/0x430 arch/x86/kernel/smp.c:271
instr_sysvec_call_function_single arch/x86/kernel/smp.c:266 [inline]
sysvec_call_function_single+0x9e/0xc0 arch/x86/kernel/smp.c:266
asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:709
RIP: 0010:finish_task_switch+0x1ea/0x870 kernel/sched/core.c:5202
Code: c9 50 e8 f9 00 0c 00 48 83 c4 08 4c 89 f7 e8 4d 39 00 00 0f 1f 44 00 00 4c 89 f7 e8 20 09 64 0a e8 9b 5a 38 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc
RSP: 0018:ffffffff8e607ae8 EFLAGS: 00000282
RAX: e0258bce072ecc00 RBX: ffffffff8e694640 RCX: ffffffff9a39e903
RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: ffffffff8c603460
RBP: ffffffff8e607b30 R08: ffffffff901bdd2f R09: 1ffffffff2037ba5
R10: dffffc0000000000 R11: fffffbfff2037ba6 R12: 1ffff110170c7f0c
R13: dffffc0000000000 R14: ffff8880b863ea40 R15: ffff8880b863f860
context_switch kernel/sched/core.c:5331 [inline]
__schedule+0x1862/0x4b70 kernel/sched/core.c:6690
schedule_idle+0x56/0x90 kernel/sched/core.c:6808
do_idle+0x56a/0x5d0 kernel/sched/idle.c:354
cpu_startup_entry+0x42/0x60 kernel/sched/idle.c:424
rest_init+0x2dc/0x300 init/main.c:747
start_kernel+0x47f/0x500 init/main.c:1105
x86_64_start_reservations+0x2a/0x30 arch/x86/kernel/head64.c:507
x86_64_start_kernel+0x9f/0xa0 arch/x86/kernel/head64.c:488
common_startup_64+0x13e/0x147
----------------
Code disassembly (best guess):
0: c9 leave
1: 50 push %rax
2: e8 f9 00 0c 00 call 0xc0100
7: 48 83 c4 08 add $0x8,%rsp
b: 4c 89 f7 mov %r14,%rdi
e: e8 4d 39 00 00 call 0x3960
13: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
18: 4c 89 f7 mov %r14,%rdi
1b: e8 20 09 64 0a call 0xa640940
20: e8 9b 5a 38 00 call 0x385ac0
25: fb sti
26: 48 8b 5d c0 mov -0x40(%rbp),%rbx
* 2a: 48 8d bb f8 15 00 00 lea 0x15f8(%rbx),%rdi <-- trapping instruction
31: 48 89 f8 mov %rdi,%rax
34: 48 c1 e8 03 shr $0x3,%rax
38: 49 rex.WB
39: be 00 00 00 00 mov $0x0,%esi
3e: 00 fc add %bh,%ah