program: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220c52ebd4687636457b9822766c1bfea4e81ff23c6a4caeaf049a582a9774d3b882ef0600000000000000025d"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000009c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000008c0), 0xfecc) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) [ 75.426270][ T5334] Bluetooth: hci0: command tx timeout [ 75.502525][ T5356] loop0: detected capacity change from 0 to 64 [ 75.590588][ T5362] ------------[ cut here ]------------ [ 75.593199][ T5362] WARNING: CPU: 0 PID: 5362 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410 [ 75.597231][ T5362] Modules linked in: [ 75.599201][ T5362] CPU: 0 UID: 0 PID: 5362 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.602898][ T5362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.607127][ T5362] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 75.609520][ T5362] Code: 4c 89 f7 e8 f9 48 dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 df 4c 78 ff eb 8c e8 d8 4c 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 ca 4c 78 ff 90 0f 0b 90 e9 bf fd ff ff [ 75.617147][ T5362] RSP: 0018:ffffc9000f4ff608 EFLAGS: 00010293 [ 75.619842][ T5362] RAX: ffffffff82477068 RBX: ffff8880440eb740 RCX: ffff88801a72c880 [ 75.623143][ T5362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 75.626551][ T5362] RBP: ffff888033652001 R08: ffff8880440eb747 R09: 1ffff1100881d6e8 [ 75.629974][ T5362] R10: dffffc0000000000 R11: ffffed100881d6e9 R12: ffff88804d299000 [ 75.633306][ T5362] R13: ffff8880440e7828 R14: ffff8880440eb740 R15: 0000000000000010 [ 75.637002][ T5362] FS: 00007f0ef48336c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 75.640863][ T5362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.643523][ T5362] CR2: 0000200000001000 CR3: 000000004482a000 CR4: 0000000000352ef0 [ 75.646728][ T5362] Call Trace: [ 75.648387][ T5362] [ 75.649659][ T5362] bfs_get_block+0x5da/0xae0 [ 75.651750][ T5362] __block_write_begin_int+0x6b2/0x1900 [ 75.654122][ T5362] ? __pfx_bfs_get_block+0x10/0x10 [ 75.656200][ T5362] ? __pfx___block_write_begin_int+0x10/0x10 [ 75.659020][ T5362] ? __filemap_get_folio+0x79f/0xaf0 [ 75.661379][ T5362] ? __pfx_bfs_get_block+0x10/0x10 [ 75.663531][ T5362] block_write_begin+0x8a/0x120 [ 75.665557][ T5362] ? bfs_write_begin+0x1e/0xd0 [ 75.667787][ T5362] bfs_write_begin+0x35/0xd0 [ 75.669760][ T5362] generic_perform_write+0x2c2/0x900 [ 75.672210][ T5362] ? __pfx_generic_perform_write+0x10/0x10 [ 75.674621][ T5362] ? file_update_time+0x2da/0x490 [ 75.676687][ T5362] ? __generic_file_write_iter+0xf9/0x230 [ 75.679137][ T5362] ? generic_file_write_iter+0x103/0x550 [ 75.681508][ T5362] generic_file_write_iter+0x117/0x550 [ 75.684157][ T5362] ? __pfx_generic_file_write_iter+0x10/0x10 [ 75.686666][ T5362] ? __lock_acquire+0xab9/0xd20 [ 75.689103][ T5362] ? rcu_read_lock_any_held+0xb3/0x120 [ 75.691360][ T5362] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 75.693766][ T5362] vfs_write+0x5c9/0xb30 [ 75.695530][ T5362] ? __pfx_generic_file_write_iter+0x10/0x10 [ 75.698125][ T5362] ? __pfx_vfs_write+0x10/0x10 [ 75.700131][ T5362] ? __fget_files+0x2a/0x420 [ 75.702026][ T5362] ksys_write+0x145/0x250 [ 75.703849][ T5362] ? __pfx_ksys_write+0x10/0x10 [ 75.705773][ T5362] ? rcu_is_watching+0x15/0xb0 [ 75.707901][ T5362] ? do_syscall_64+0xbe/0x3b0 [ 75.709912][ T5362] do_syscall_64+0xfa/0x3b0 [ 75.711701][ T5362] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.713605][ T5362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.716178][ T5362] ? clear_bhb_loop+0x60/0xb0 [ 75.718389][ T5362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.720733][ T5362] RIP: 0033:0x7f0ef398ec29 [ 75.722577][ T5362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.730854][ T5362] RSP: 002b:00007f0ef4833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.734505][ T5362] RAX: ffffffffffffffda RBX: 00007f0ef3bd6180 RCX: 00007f0ef398ec29 [ 75.738196][ T5362] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000007 [ 75.741699][ T5362] RBP: 00007f0ef3a11e41 R08: 0000000000000000 R09: 0000000000000000 [ 75.745139][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.748630][ T5362] R13: 00007f0ef3bd6218 R14: 00007f0ef3bd6180 R15: 00007ffc242f2538 [ 75.751948][ T5362] [ 75.753299][ T5362] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.756380][ T5362] CPU: 0 UID: 0 PID: 5362 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.760173][ T5362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.764544][ T5362] Call Trace: [ 75.765758][ T5362] [ 75.766881][ T5362] dump_stack_lvl+0x99/0x250 [ 75.768783][ T5362] ? __asan_memcpy+0x40/0x70 [ 75.770634][ T5362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.772794][ T5362] ? __pfx__printk+0x10/0x10 [ 75.774665][ T5362] vpanic+0x281/0x750 [ 75.776323][ T5362] ? __pfx__printk+0x10/0x10 [ 75.778104][ T5362] ? __pfx_vpanic+0x10/0x10 [ 75.779922][ T5362] ? is_bpf_text_address+0x26/0x2b0 [ 75.782131][ T5362] panic+0xb9/0xc0 [ 75.783876][ T5362] ? __pfx_panic+0x10/0x10 [ 75.785826][ T5362] __warn+0x31b/0x4b0 [ 75.787591][ T5362] ? mark_buffer_dirty+0x2a9/0x410 [ 75.789740][ T5362] ? mark_buffer_dirty+0x2a9/0x410 [ 75.791972][ T5362] report_bug+0x2be/0x4f0 [ 75.794018][ T5362] ? mark_buffer_dirty+0x2a9/0x410 [ 75.796216][ T5362] ? mark_buffer_dirty+0x2a9/0x410 [ 75.798425][ T5362] ? mark_buffer_dirty+0x2ab/0x410 [ 75.800836][ T5362] handle_bug+0x84/0x160 [ 75.802589][ T5362] exc_invalid_op+0x1a/0x50 [ 75.804604][ T5362] asm_exc_invalid_op+0x1a/0x20 [ 75.806741][ T5362] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 75.809167][ T5362] Code: 4c 89 f7 e8 f9 48 dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 df 4c 78 ff eb 8c e8 d8 4c 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 ca 4c 78 ff 90 0f 0b 90 e9 bf fd ff ff [ 75.817034][ T5362] RSP: 0018:ffffc9000f4ff608 EFLAGS: 00010293 [ 75.819659][ T5362] RAX: ffffffff82477068 RBX: ffff8880440eb740 RCX: ffff88801a72c880 [ 75.822897][ T5362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 75.826594][ T5362] RBP: ffff888033652001 R08: ffff8880440eb747 R09: 1ffff1100881d6e8 [ 75.829820][ T5362] R10: dffffc0000000000 R11: ffffed100881d6e9 R12: ffff88804d299000 [ 75.833141][ T5362] R13: ffff8880440e7828 R14: ffff8880440eb740 R15: 0000000000000010 [ 75.836506][ T5362] ? mark_buffer_dirty+0x2a8/0x410 [ 75.838690][ T5362] ? mark_buffer_dirty+0x2a8/0x410 [ 75.840887][ T5362] bfs_get_block+0x5da/0xae0 [ 75.842852][ T5362] __block_write_begin_int+0x6b2/0x1900 [ 75.845228][ T5362] ? __pfx_bfs_get_block+0x10/0x10 [ 75.847347][ T5362] ? __pfx___block_write_begin_int+0x10/0x10 [ 75.849790][ T5362] ? __filemap_get_folio+0x79f/0xaf0 [ 75.852032][ T5362] ? __pfx_bfs_get_block+0x10/0x10 [ 75.854132][ T5362] block_write_begin+0x8a/0x120 [ 75.856199][ T5362] ? bfs_write_begin+0x1e/0xd0 [ 75.858165][ T5362] bfs_write_begin+0x35/0xd0 [ 75.860116][ T5362] generic_perform_write+0x2c2/0x900 [ 75.862345][ T5362] ? __pfx_generic_perform_write+0x10/0x10 [ 75.864861][ T5362] ? file_update_time+0x2da/0x490 [ 75.867113][ T5362] ? __generic_file_write_iter+0xf9/0x230 [ 75.869614][ T5362] ? generic_file_write_iter+0x103/0x550 [ 75.872028][ T5362] generic_file_write_iter+0x117/0x550 [ 75.874393][ T5362] ? __pfx_generic_file_write_iter+0x10/0x10 [ 75.876958][ T5362] ? __lock_acquire+0xab9/0xd20 [ 75.878976][ T5362] ? rcu_read_lock_any_held+0xb3/0x120 [ 75.881191][ T5362] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 75.883821][ T5362] vfs_write+0x5c9/0xb30 [ 75.885726][ T5362] ? __pfx_generic_file_write_iter+0x10/0x10 [ 75.888372][ T5362] ? __pfx_vfs_write+0x10/0x10 [ 75.890327][ T5362] ? __fget_files+0x2a/0x420 [ 75.892403][ T5362] ksys_write+0x145/0x250 [ 75.894388][ T5362] ? __pfx_ksys_write+0x10/0x10 [ 75.896569][ T5362] ? rcu_is_watching+0x15/0xb0 [ 75.898712][ T5362] ? do_syscall_64+0xbe/0x3b0 [ 75.900862][ T5362] do_syscall_64+0xfa/0x3b0 [ 75.902852][ T5362] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.905243][ T5362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.907930][ T5362] ? clear_bhb_loop+0x60/0xb0 [ 75.909862][ T5362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.912353][ T5362] RIP: 0033:0x7f0ef398ec29 [ 75.914347][ T5362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.922305][ T5362] RSP: 002b:00007f0ef4833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.925874][ T5362] RAX: ffffffffffffffda RBX: 00007f0ef3bd6180 RCX: 00007f0ef398ec29 [ 75.929228][ T5362] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000007 [ 75.932526][ T5362] RBP: 00007f0ef3a11e41 R08: 0000000000000000 R09: 0000000000000000 [ 75.935914][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.939238][ T5362] R13: 00007f0ef3bd6218 R14: 00007f0ef3bd6180 R15: 00007ffc242f2538 [ 75.942553][ T5362] [ 75.944241][ T5362] Kernel Offset: disabled [ 75.946118][ T5362] Rebooting in 86400 seconds..