------------[ cut here ]------------
VFS: brelse: Trying to free free buffer
WARNING: CPU: 0 PID: 11 at fs/buffer.c:1229 __brelse fs/buffer.c:1229 [inline]
WARNING: CPU: 0 PID: 11 at fs/buffer.c:1229 brelse include/linux/buffer_head.h:324 [inline]
WARNING: CPU: 0 PID: 11 at fs/buffer.c:1229 __invalidate_bh_lrus fs/buffer.c:1498 [inline]
WARNING: CPU: 0 PID: 11 at fs/buffer.c:1229 invalidate_bh_lru+0x102/0x1b0 fs/buffer.c:1511
Modules linked in:
CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
Workqueue: netns cleanup_net
RIP: 0010:__brelse fs/buffer.c:1229 [inline]
RIP: 0010:brelse include/linux/buffer_head.h:324 [inline]
RIP: 0010:__invalidate_bh_lrus fs/buffer.c:1498 [inline]
RIP: 0010:invalidate_bh_lru+0x102/0x1b0 fs/buffer.c:1511
Code: a4 30 dc ff f0 ff 0b eb 25 e8 5a 50 78 ff 41 80 3c 2e 00 75 2a eb 30 e8 4c 50 78 ff 90 48 c7 c7 20 ee 18 8c e8 6f f3 38 ff 90 <0f> 0b 90 90 48 bd 00 00 00 00 00 fc ff df 41 80 3c 2e 00 74 08 4c
RSP: 0018:ffffc90000007f30 EFLAGS: 00010046
RAX: 20ecb62e1389cf00 RBX: ffff88807206a4e8 RCX: ffff88801bee3c00
RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffff81601962 R09: 1ffff110170c519a
R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff8880b8639838
R13: 0000000000000000 R14: 1ffff110170c7307 R15: ffff8880b8639838
FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fade2ca7130 CR3: 0000000035aa0000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
csd_do_func kernel/smp.c:134 [inline]
__flush_smp_call_function_queue+0x3fc/0x1620 kernel/smp.c:540
__sysvec_call_function_single+0xb8/0x430 arch/x86/kernel/smp.c:271
instr_sysvec_call_function_single arch/x86/kernel/smp.c:266 [inline]
sysvec_call_function_single+0x9e/0xc0 arch/x86/kernel/smp.c:266
asm_sysvec_call_function_single+0x1a/0x20 arch/x86/include/asm/idtentry.h:709
RIP: 0010:should_failslab+0x0/0x100 mm/failslab.c:20
Code: ff 4c 89 ff e8 c1 74 ff ff e9 1e fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 41 57 41 56 41 54 53 89 f3 49 89 fe 48 c7 c0 88 da
RSP: 0018:ffffc90000107520 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000cc0 RCX: ffff88801bee3c00
RDX: dffffc0000000000 RSI: 0000000000000cc0 RDI: ffff88801d6858c0
RBP: 00000000ffffffff R08: ffffffff90184fb7 R09: 1ffffffff20309f6
R10: dffffc0000000000 R11: fffffbfff20309f7 R12: 0000000000000000
R13: dffffc0000000000 R14: ffff88801d6858c0 R15: 0000000000000cc0
slab_pre_alloc_hook mm/slub.c:4072 [inline]
slab_alloc_node mm/slub.c:4148 [inline]
kmem_cache_alloc_node_noprof+0x77/0x380 mm/slub.c:4220
__alloc_skb+0x1c3/0x440 net/core/skbuff.c:668
alloc_skb include/linux/skbuff.h:1323 [inline]
nlmsg_new include/net/netlink.h:1018 [inline]
inet6_netconf_notify_devconf+0xfc/0x1c0 net/ipv6/addrconf.c:589
__addrconf_sysctl_unregister net/ipv6/addrconf.c:7273 [inline]
addrconf_sysctl_unregister net/ipv6/addrconf.c:7297 [inline]
addrconf_ifdown+0x1887/0x1bd0 net/ipv6/addrconf.c:4030
addrconf_notify+0x3cb/0x1020
notifier_call_chain+0x1a5/0x3f0 kernel/notifier.c:85
call_netdevice_notifiers_extack net/core/dev.c:2034 [inline]
call_netdevice_notifiers net/core/dev.c:2048 [inline]
unregister_netdevice_many_notify+0xedd/0x1da0 net/core/dev.c:11526
cleanup_net+0x75d/0xd50 net/core/net_namespace.c:643
process_one_work kernel/workqueue.c:3229 [inline]
process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310
worker_thread+0x870/0xd30 kernel/workqueue.c:3391
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
----------------
Code disassembly (best guess):
0: ff 4c 89 ff decl -0x1(%rcx,%rcx,4)
4: e8 c1 74 ff ff call 0xffff74ca
9: e9 1e fd ff ff jmp 0xfffffd2c
e: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1)
15: 00 00 00
18: 66 90 xchg %ax,%ax
1a: 90 nop
1b: 90 nop
1c: 90 nop
1d: 90 nop
1e: 90 nop
1f: 90 nop
20: 90 nop
21: 90 nop
22: 90 nop
23: 90 nop
24: 90 nop
25: 90 nop
26: 90 nop
27: 90 nop
28: 90 nop
29: 90 nop
* 2a: 66 0f 1f 00 nopw (%rax) <-- trapping instruction
2e: 55 push %rbp
2f: 41 57 push %r15
31: 41 56 push %r14
33: 41 54 push %r12
35: 53 push %rbx
36: 89 f3 mov %esi,%ebx
38: 49 89 fe mov %rdi,%r14
3b: 48 rex.W
3c: c7 .byte 0xc7
3d: c0 .byte 0xc0
3e: 88 da mov %bl,%dl