------------[ cut here ]------------ VFS: brelse: Trying to free free buffer VFS: brelse: Trying to free free buffer WARNING: CPU: 0 PID: 3593 at fs/buffer.c:1144 __brelse fs/buffer.c:1144 [inline] WARNING: CPU: 0 PID: 3593 at fs/buffer.c:1144 __brelse+0x67/0xa0 fs/buffer.c:1138 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 3593 Comm: kworker/u4:4 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Workqueue: writeback wb_workfn (flush-8:0) Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 panic+0x26a/0x50e kernel/panic.c:186 __warn.cold+0x20/0x5a kernel/panic.c:541 report_bug+0x262/0x2b0 lib/bug.c:183 fixup_bug arch/x86/kernel/traps.c:178 [inline] fixup_bug arch/x86/kernel/traps.c:173 [inline] do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038 RIP: 0010:__brelse fs/buffer.c:1144 [inline] RIP: 0010:__brelse+0x67/0xa0 fs/buffer.c:1138 Code: 7c 04 84 d2 75 4e 44 8b 63 60 31 ff 44 89 e6 e8 bf 16 b2 ff 45 85 e4 75 1c e8 45 15 b2 ff 48 c7 c7 e0 1c 75 88 e8 1e 4d 42 06 <0f> 0b 5b 5d 41 5c e9 2e 15 b2 ff e8 29 15 b2 ff be 04 00 00 00 48 RSP: 0018:ffff8880a8e8ec58 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff88803a4ac3f0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed10151d1d7d UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) RBP: ffff88803a4ac450 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8880ba128860 R14: ffff88803ac30b28 R15: ffff8880ba1287e0 WARNING: CPU: 1 PID: 21830 at fs/buffer.c:1144 __brelse fs/buffer.c:1144 [inline] WARNING: CPU: 1 PID: 21830 at fs/buffer.c:1144 __brelse+0x67/0xa0 fs/buffer.c:1138 brelse include/linux/buffer_head.h:297 [inline] bh_lru_install fs/buffer.c:1247 [inline] __find_get_block+0xa28/0xde0 fs/buffer.c:1297 Modules linked in: __getblk_gfp+0x28/0x70 fs/buffer.c:1317 CPU: 1 PID: 21830 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 sb_getblk include/linux/buffer_head.h:333 [inline] ext4_read_block_bitmap_nowait+0x29f/0x1db0 fs/ext4/balloc.c:435 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:__brelse fs/buffer.c:1144 [inline] RIP: 0010:__brelse+0x67/0xa0 fs/buffer.c:1138 Code: 7c 04 84 d2 75 4e 44 8b 63 60 31 ff 44 89 e6 e8 bf 16 b2 ff 45 85 e4 75 1c e8 45 15 b2 ff 48 c7 c7 e0 1c 75 88 e8 1e 4d 42 06 <0f> 0b 5b 5d 41 5c e9 2e 15 b2 ff e8 29 15 b2 ff be 04 00 00 00 48 RSP: 0018:ffff8880b3f3faa0 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff888042536000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed10167e7f46 RBP: ffff888042536060 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8880ba128860 R14: ffff88803a4ac3f0 R15: ffff8880ba1287e0 FS: 0000555555c75400(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055c92c671757 CR3: 00000000a8cd4000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: brelse include/linux/buffer_head.h:297 [inline] bh_lru_install fs/buffer.c:1247 [inline] __find_get_block+0xa28/0xde0 fs/buffer.c:1297 sb_find_get_block include/linux/buffer_head.h:346 [inline] recently_deleted fs/ext4/ialloc.c:684 [inline] find_inode_bit+0x213/0x520 fs/ext4/ialloc.c:724 ext4_read_block_bitmap+0x1c/0xe0 fs/ext4/balloc.c:535 __ext4_new_inode+0x160c/0x5a20 fs/ext4/ialloc.c:916 ext4_mb_mark_diskspace_used+0x190/0x1750 fs/ext4/mballoc.c:2966 ext4_mb_new_blocks+0xc25/0x4370 fs/ext4/mballoc.c:4584 ext4_symlink+0x3f5/0xc00 fs/ext4/namei.c:3176 vfs_symlink+0x453/0x6c0 fs/namei.c:4129 ext4_ext_map_blocks+0x2aa2/0x7390 fs/ext4/extents.c:4493 do_symlinkat+0x258/0x2c0 fs/namei.c:4156 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f076ccd6a17 Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc03779108 EFLAGS: 00000202 ORIG_RAX: 000000000000010a ext4_map_blocks+0x7a2/0x1a50 fs/ext4/inode.c:657 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f076ccd6a17 RDX: 00007f076cd32b9e RSI: 00000000ffffff9c RDI: 00007ffc037791d0 mpage_map_one_extent fs/ext4/inode.c:2477 [inline] mpage_map_and_submit_extent fs/ext4/inode.c:2530 [inline] ext4_writepages+0x1d1d/0x37f0 fs/ext4/inode.c:2882 RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc03778fa0 R10: 00007ffc03778e57 R11: 0000000000000202 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc037791d0 irq event stamp: 3228 hardirqs last enabled at (3227): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:168 [inline] hardirqs last enabled at (3227): [] _raw_spin_unlock_irq+0x24/0x80 kernel/locking/spinlock.c:192 hardirqs last disabled at (3228): [] trace_hardirqs_off_thunk+0x1a/0x1c softirqs last enabled at (3222): [] __do_softirq+0x678/0x980 kernel/softirq.c:318 softirqs last disabled at (3103): [] invoke_softirq kernel/softirq.c:372 [inline] softirqs last disabled at (3103): [] irq_exit+0x215/0x260 kernel/softirq.c:412 ---[ end trace 6db7bd3b358430b6 ]--- do_writepages+0xe5/0x290 mm/page-writeback.c:2344 __writeback_single_inode+0x10c/0x11d0 fs/fs-writeback.c:1385 writeback_sb_inodes+0x537/0xef0 fs/fs-writeback.c:1647 __writeback_inodes_wb+0xc6/0x280 fs/fs-writeback.c:1716 wb_writeback+0x841/0xcc0 fs/fs-writeback.c:1822 wb_check_old_data_flush fs/fs-writeback.c:1924 [inline] wb_do_writeback fs/fs-writeback.c:1977 [inline] wb_workfn+0x8ba/0x1250 fs/fs-writeback.c:2006 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 Kernel Offset: disabled Rebooting in 86400 seconds..