------------[ cut here ]------------
VFS: brelse: Trying to free free buffer
WARNING: CPU: 0 PID: 4432 at fs/buffer.c:1145 __brelse fs/buffer.c:1145 [inline]
WARNING: CPU: 0 PID: 4432 at fs/buffer.c:1145 brelse include/linux/buffer_head.h:326 [inline]
WARNING: CPU: 0 PID: 4432 at fs/buffer.c:1145 __invalidate_bh_lrus fs/buffer.c:1380 [inline]
WARNING: CPU: 0 PID: 4432 at fs/buffer.c:1145 invalidate_bh_lru+0x130/0x220 fs/buffer.c:1393
Modules linked in:
CPU: 0 PID: 4432 Comm: syz-executor Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __brelse fs/buffer.c:1145 [inline]
pc : brelse include/linux/buffer_head.h:326 [inline]
pc : __invalidate_bh_lrus fs/buffer.c:1380 [inline]
pc : invalidate_bh_lru+0x130/0x220 fs/buffer.c:1393
lr : __brelse fs/buffer.c:1145 [inline]
lr : brelse include/linux/buffer_head.h:326 [inline]
lr : __invalidate_bh_lrus fs/buffer.c:1380 [inline]
lr : invalidate_bh_lru+0x130/0x220 fs/buffer.c:1393
sp : ffff800008007de0
x29: ffff800008007de0 x28: 1fffe00033e744dc x27: 0000000000000001
x26: 00000000ffffffff x25: ffff00019f3a26d8 x24: 0000000000000001
x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000e17565d0
x20: ffff00019f3a26e0 x19: ffff800011db31a0 x18: 1fffe00033e7277e
x17: 0000000000000000 x16: ffff800011b90080 x15: 0000000000010004
x14: 0000000000000001 x13: 1fffe00033e727a3 x12: 0000000000000000
x11: ff00800008195f70 x10: 0000000000010002 x9 : 4c670c79e5e53900
x8 : 4c670c79e5e53900 x7 : 0000000000000001 x6 : 0000000000000001
x5 : ffff800008007878 x4 : ffff800015464e80 x3 : ffff800008540904
x2 : 0000000000000001 x1 : 0000000100010002 x0 : 0000000000000000
Call trace:
 __brelse fs/buffer.c:1145 [inline]
 brelse include/linux/buffer_head.h:326 [inline]
 __invalidate_bh_lrus fs/buffer.c:1380 [inline]
 invalidate_bh_lru+0x130/0x220 fs/buffer.c:1393
 __flush_smp_call_function_queue+0x3c8/0xfc4 kernel/smp.c:641
 generic_smp_call_function_single_interrupt+0x28/0x160 kernel/smp.c:557
 do_handle_IPI arch/arm64/kernel/smp.c:878 [inline]
 ipi_handler+0x10c/0x79c arch/arm64/kernel/smp.c:924
 handle_percpu_devid_irq+0x17c/0x358 kernel/irq/chip.c:930
 generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
 handle_irq_desc kernel/irq/irqdesc.c:652 [inline]
 generic_handle_domain_irq+0xe4/0x154 kernel/irq/irqdesc.c:708
 __gic_handle_irq drivers/irqchip/irq-gic-v3.c:744 [inline]
 __gic_handle_irq_from_irqson drivers/irqchip/irq-gic-v3.c:795 [inline]
 gic_handle_irq+0x70/0x1d8 drivers/irqchip/irq-gic-v3.c:839
 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:897
 do_interrupt_handler+0xd4/0x138 arch/arm64/kernel/entry-common.c:274
 __el1_irq arch/arm64/kernel/entry-common.c:471 [inline]
 el1_interrupt+0x34/0x54 arch/arm64/kernel/entry-common.c:486
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:491
 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:581
 __sanitizer_cov_trace_pc+0xc/0x90 kernel/kcov.c:212
 unmap_single_vma mm/memory.c:1689 [inline]
 unmap_vmas+0x244/0x364 mm/memory.c:1728
 exit_mmap+0x170/0x944 mm/mmap.c:3250
 __mmput+0xe8/0x38c kernel/fork.c:1206
 mmput+0x70/0xa8 kernel/fork.c:1228
 exit_mm+0x20c/0x290 kernel/exit.c:572
 do_exit+0x4d0/0x19ac kernel/exit.c:874
 do_group_exit+0x198/0x238 kernel/exit.c:1030
 get_signal+0x11f4/0x133c kernel/signal.c:2880
 do_signal arch/arm64/kernel/signal.c:1095 [inline]
 do_notify_resume+0x364/0x2c84 arch/arm64/kernel/signal.c:1148
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
irq event stamp: 155116
hardirqs last  enabled at (155115): [<ffff8000089451b4>] folio_memcg_lock+0xe8/0x1f8 mm/memcontrol.c:2113
hardirqs last disabled at (155116): [<ffff800011b8c3ac>] __el1_irq arch/arm64/kernel/entry-common.c:468 [inline]
hardirqs last disabled at (155116): [<ffff800011b8c3ac>] el1_interrupt+0x24/0x54 arch/arm64/kernel/entry-common.c:486
softirqs last  enabled at (154116): [<ffff800008031254>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (154114): [<ffff800008031220>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---