loop5: detected capacity change from 0 to 32768
BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2745 (19466)
------------[ cut here ]------------
VFS: brelse: Trying to free free buffer
WARNING: CPU: 0 PID: 19466 at fs/buffer.c:1229 __brelse fs/buffer.c:1229 [inline]
WARNING: CPU: 0 PID: 19466 at fs/buffer.c:1229 __brelse+0x6d/0xb0 fs/buffer.c:1223
Modules linked in:
CPU: 0 UID: 0 PID: 19466 Comm: syz.5.2745 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:__brelse fs/buffer.c:1229 [inline]
RIP: 0010:__brelse+0x6d/0xb0 fs/buffer.c:1223
Code: 84 d2 75 52 44 8b 63 60 31 ff 44 89 e6 e8 fb d5 79 ff 45 85 e4 75 20 e8 b1 d3 79 ff 90 48 c7 c7 e0 24 7f 8b e8 b4 0d 3a ff 90 <0f> 0b 90 90 5b 5d 41 5c e9 96 d3 79 ff e8 91 d3 79 ff be 04 00 00
RSP: 0018:ffffc9000e317840 EFLAGS: 00010082
RAX: 0000000000000000 RBX: ffff8880629d1910 RCX: ffffc9000d52c000
RDX: 0000000000080000 RSI: ffffffff815a5146 RDI: 0000000000000001
RBP: ffff8880629d1970 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
R13: ffff8880629d1910 R14: dffffc0000000000 R15: ffff8880b863ff80
FS:  00007f21f73f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005638677e3950 CR3: 000000004dc8e000 CR4: 0000000000350ef0
Call Trace:
 <TASK>
 brelse include/linux/buffer_head.h:324 [inline]
 __invalidate_bh_lrus fs/buffer.c:1498 [inline]
 invalidate_bh_lru+0xa2/0x190 fs/buffer.c:1511
 csd_do_func kernel/smp.c:134 [inline]
 smp_call_function_many_cond+0xf2d/0x1300 kernel/smp.c:875
 on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1051
 invalidate_bdev+0x72/0xa0 block/bdev.c:100
 btrfs_get_bdev_and_sb+0xf2/0x280 fs/btrfs/volumes.c:494
 btrfs_open_one_device fs/btrfs/volumes.c:659 [inline]
 open_fs_devices+0x85e/0x1250 fs/btrfs/volumes.c:1307
 btrfs_open_devices+0x122/0x160 fs/btrfs/volumes.c:1369
 btrfs_get_tree_super fs/btrfs/super.c:1857 [inline]
 btrfs_get_tree+0x484/0x1b80 fs/btrfs/super.c:2093
 vfs_get_tree+0x92/0x380 fs/super.c:1814
 fc_mount+0x16/0xc0 fs/namespace.c:1231
 btrfs_get_tree_subvol fs/btrfs/super.c:2051 [inline]
 btrfs_get_tree+0xa43/0x1b80 fs/btrfs/super.c:2094
 vfs_get_tree+0x92/0x380 fs/super.c:1814
 do_new_mount fs/namespace.c:3507 [inline]
 path_mount+0x14e6/0x1f20 fs/namespace.c:3834
 do_mount fs/namespace.c:3847 [inline]
 __do_sys_mount fs/namespace.c:4057 [inline]
 __se_sys_mount fs/namespace.c:4034 [inline]
 __x64_sys_mount+0x294/0x320 fs/namespace.c:4034
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f21f95874ca
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f21f73f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f21f73f5ef0 RCX: 00007f21f95874ca
RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 00007f21f73f5eb0
RBP: 00000000200002c0 R08: 00007f21f73f5ef0 R09: 0000000000000810
R10: 0000000000000810 R11: 0000000000000246 R12: 0000000020000280
R13: 00007f21f73f5eb0 R14: 00000000000050f3 R15: 0000000020000400
 </TASK>