loop0: detected capacity change from 0 to 128 oldfs: cannot read superblock ------------[ cut here ]------------ VFS: brelse: Trying to free free buffer WARNING: CPU: 3 PID: 5475 at fs/buffer.c:1235 __brelse fs/buffer.c:1235 [inline] WARNING: CPU: 3 PID: 5475 at fs/buffer.c:1235 __brelse+0x6d/0xb0 fs/buffer.c:1229 Modules linked in: CPU: 3 PID: 5475 Comm: syz-executor.0 Not tainted 6.9.0-rc3-syzkaller-gfec50db7033e #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 RIP: 0010:__brelse fs/buffer.c:1235 [inline] RIP: 0010:__brelse+0x6d/0xb0 fs/buffer.c:1229 Code: 84 d2 75 52 44 8b 63 60 31 ff 44 89 e6 e8 9b 95 82 ff 45 85 e4 75 20 e8 b1 9a 82 ff 90 48 c7 c7 20 12 3e 8b e8 34 07 45 ff 90 <0f> 0b 90 90 5b 5d 41 5c e9 96 9a 82 ff e8 91 9a 82 ff be 04 00 00 RSP: 0018:ffffc90003557b68 EFLAGS: 00010086 RAX: 0000000000000000 RBX: ffff88803470cae0 RCX: ffffffff814fe349 RDX: ffff88801c1a4880 RSI: ffffffff814fe356 RDI: 0000000000000001 RBP: ffff88803470cb40 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 R13: ffff88803470cae0 R14: dffffc0000000000 R15: ffff88806b33fc00 FS: 00007f457a3a46c0(0000) GS:ffff88806b300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f457040f000 CR3: 000000001ed46000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: brelse include/linux/buffer_head.h:309 [inline] __invalidate_bh_lrus fs/buffer.c:1487 [inline] invalidate_bh_lru+0xa2/0x190 fs/buffer.c:1500 csd_do_func kernel/smp.c:133 [inline] smp_call_function_many_cond+0x10af/0x1420 kernel/smp.c:846 on_each_cpu_cond_mask+0x40/0x90 kernel/smp.c:1023 kill_bdev block/bdev.c:84 [inline] blkdev_flush_mapping+0x13a/0x310 block/bdev.c:644 blkdev_put_whole+0xc4/0xf0 block/bdev.c:675 bdev_release+0x487/0x710 block/bdev.c:1066 blkdev_release+0x15/0x20 block/fops.c:628 __fput+0x270/0xb80 fs/file_table.c:422 task_work_run+0x14e/0x250 kernel/task_work.c:180 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x275/0x2a0 kernel/entry/common.c:218 do_syscall_64+0xe2/0x260 arch/x86/entry/common.c:89 entry_SYSCALL_64_after_hwframe+0x72/0x7a RIP: 0033:0x7f457967f4aa Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f457a3a3ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffea RBX: 00007f457a3a3f80 RCX: 00007f457967f4aa RDX: 0000000020009e00 RSI: 0000000020009e40 RDI: 00007f457a3a3f40 RBP: 0000000020009e00 R08: 00007f457a3a3f80 R09: 0000000000008003 R10: 0000000000008003 R11: 0000000000000246 R12: 0000000020009e40 R13: 00007f457a3a3f40 R14: 0000000000009dfc R15: 0000000020000000