program:
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000008c0), 0xfecc) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [], 0xa, "415303b7811c"}, 0xa)
[ 85.771042][ T5344] Bluetooth: hci0: command tx timeout
[ 85.802523][ T5366] loop0: detected capacity change from 0 to 64
[ 85.876717][ T5367] ------------[ cut here ]------------
[ 85.879090][ T5367] WARNING: CPU: 0 PID: 5367 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410
[ 85.882894][ T5367] Modules linked in:
[ 85.885056][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.888927][ T5367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.894279][ T5367] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 85.897556][ T5367] Code: 4c 89 f7 e8 69 4a dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 1f 59 78 ff eb 8c e8 18 59 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 0a 59 78 ff 90 0f 0b 90 e9 bf fd ff ff
[ 85.906126][ T5367] RSP: 0018:ffffc9000d357608 EFLAGS: 00010293
[ 85.908606][ T5367] RAX: ffffffff82477598 RBX: ffff888044138658 RCX: ffff888000e94880
[ 85.911895][ T5367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 85.915416][ T5367] RBP: ffff888030ffc001 R08: ffff88804413865f R09: 1ffff110088270cb
[ 85.918582][ T5367] R10: dffffc0000000000 R11: ffffed10088270cc R12: ffff88804d151000
[ 85.921700][ T5367] R13: ffff88804412fcb0 R14: ffff888044138658 R15: 000000000000000f
[ 85.925430][ T5367] FS: 00007fa81f9b16c0(0000) GS:ffff88808d20a000(0000) knlGS:0000000000000000
[ 85.929341][ T5367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.932371][ T5367] CR2: 0000200000002000 CR3: 0000000043524000 CR4: 0000000000352ef0
[ 85.936264][ T5367] Call Trace:
[ 85.937640][ T5367]
[ 85.938933][ T5367] bfs_get_block+0x5da/0xae0
[ 85.940825][ T5367] __block_write_begin_int+0x6b2/0x1900
[ 85.943115][ T5367] ? __pfx_bfs_get_block+0x10/0x10
[ 85.945481][ T5367] ? __pfx___block_write_begin_int+0x10/0x10
[ 85.947935][ T5367] ? __filemap_get_folio+0x79f/0xaf0
[ 85.950273][ T5367] ? __pfx_bfs_get_block+0x10/0x10
[ 85.952349][ T5367] block_write_begin+0x8a/0x120
[ 85.954336][ T5367] ? bfs_write_begin+0x1e/0xd0
[ 85.956367][ T5367] bfs_write_begin+0x35/0xd0
[ 85.958204][ T5367] generic_perform_write+0x2c5/0x900
[ 85.960337][ T5367] ? __pfx_generic_perform_write+0x10/0x10
[ 85.962714][ T5367] ? file_update_time+0x2da/0x490
[ 85.964889][ T5367] ? __generic_file_write_iter+0xf9/0x230
[ 85.967266][ T5367] ? generic_file_write_iter+0x103/0x550
[ 85.969521][ T5367] generic_file_write_iter+0x117/0x550
[ 85.971837][ T5367] ? __pfx_generic_file_write_iter+0x10/0x10
[ 85.974330][ T5367] ? __lock_acquire+0xab9/0xd20
[ 85.976537][ T5367] ? rcu_read_lock_any_held+0xb3/0x120
[ 85.978988][ T5367] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 85.981419][ T5367] vfs_write+0x5c6/0xb30
[ 85.983201][ T5367] ? __pfx_generic_file_write_iter+0x10/0x10
[ 85.985875][ T5367] ? __pfx_vfs_write+0x10/0x10
[ 85.987891][ T5367] ? __fget_files+0x2a/0x420
[ 85.989841][ T5367] ksys_write+0x145/0x250
[ 85.991635][ T5367] ? __pfx_ksys_write+0x10/0x10
[ 85.993647][ T5367] ? rcu_is_watching+0x15/0xb0
[ 85.995976][ T5367] ? do_syscall_64+0xbe/0x3b0
[ 85.998030][ T5367] do_syscall_64+0xfa/0x3b0
[ 85.999908][ T5367] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.002113][ T5367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.005386][ T5367] ? clear_bhb_loop+0x60/0xb0
[ 86.007285][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.009731][ T5367] RIP: 0033:0x7fa81eb8eba9
[ 86.011602][ T5367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.019614][ T5367] RSP: 002b:00007fa81f9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 86.023304][ T5367] RAX: ffffffffffffffda RBX: 00007fa81edd6090 RCX: 00007fa81eb8eba9
[ 86.026759][ T5367] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000004
[ 86.029970][ T5367] RBP: 00007fa81ec11e19 R08: 0000000000000000 R09: 0000000000000000
[ 86.033247][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.036784][ T5367] R13: 00007fa81edd6128 R14: 00007fa81edd6090 R15: 00007ffca05ac128
[ 86.040128][ T5367]
[ 86.041454][ T5367] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.044403][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.047683][ T5367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.052166][ T5367] Call Trace:
[ 86.053934][ T5367]
[ 86.055450][ T5367] dump_stack_lvl+0x99/0x250
[ 86.057828][ T5367] ? __asan_memcpy+0x40/0x70
[ 86.060218][ T5367] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.062845][ T5367] ? __pfx__printk+0x10/0x10
[ 86.064978][ T5367] vpanic+0x281/0x750
[ 86.066690][ T5367] ? __pfx__printk+0x10/0x10
[ 86.068803][ T5367] ? __pfx_vpanic+0x10/0x10
[ 86.070719][ T5367] ? is_bpf_text_address+0x26/0x2b0
[ 86.072922][ T5367] panic+0xb9/0xc0
[ 86.074550][ T5367] ? __pfx_panic+0x10/0x10
[ 86.076497][ T5367] __warn+0x31b/0x4b0
[ 86.078273][ T5367] ? mark_buffer_dirty+0x2a9/0x410
[ 86.080494][ T5367] ? mark_buffer_dirty+0x2a9/0x410
[ 86.082748][ T5367] report_bug+0x2be/0x4f0
[ 86.084651][ T5367] ? mark_buffer_dirty+0x2a9/0x410
[ 86.086880][ T5367] ? mark_buffer_dirty+0x2a9/0x410
[ 86.089050][ T5367] ? mark_buffer_dirty+0x2ab/0x410
[ 86.091270][ T5367] handle_bug+0x84/0x160
[ 86.093029][ T5367] exc_invalid_op+0x1a/0x50
[ 86.094934][ T5367] asm_exc_invalid_op+0x1a/0x20
[ 86.096925][ T5367] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 86.099238][ T5367] Code: 4c 89 f7 e8 69 4a dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 1f 59 78 ff eb 8c e8 18 59 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 0a 59 78 ff 90 0f 0b 90 e9 bf fd ff ff
[ 86.107487][ T5367] RSP: 0018:ffffc9000d357608 EFLAGS: 00010293
[ 86.110224][ T5367] RAX: ffffffff82477598 RBX: ffff888044138658 RCX: ffff888000e94880
[ 86.113590][ T5367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 86.116747][ T5367] RBP: ffff888030ffc001 R08: ffff88804413865f R09: 1ffff110088270cb
[ 86.120096][ T5367] R10: dffffc0000000000 R11: ffffed10088270cc R12: ffff88804d151000
[ 86.123407][ T5367] R13: ffff88804412fcb0 R14: ffff888044138658 R15: 000000000000000f
[ 86.126777][ T5367] ? mark_buffer_dirty+0x2a8/0x410
[ 86.128772][ T5367] ? mark_buffer_dirty+0x2a8/0x410
[ 86.130870][ T5367] bfs_get_block+0x5da/0xae0
[ 86.132831][ T5367] __block_write_begin_int+0x6b2/0x1900
[ 86.135177][ T5367] ? __pfx_bfs_get_block+0x10/0x10
[ 86.137391][ T5367] ? __pfx___block_write_begin_int+0x10/0x10
[ 86.140005][ T5367] ? __filemap_get_folio+0x79f/0xaf0
[ 86.142206][ T5367] ? __pfx_bfs_get_block+0x10/0x10
[ 86.144324][ T5367] block_write_begin+0x8a/0x120
[ 86.146566][ T5367] ? bfs_write_begin+0x1e/0xd0
[ 86.148655][ T5367] bfs_write_begin+0x35/0xd0
[ 86.150613][ T5367] generic_perform_write+0x2c5/0x900
[ 86.152853][ T5367] ? __pfx_generic_perform_write+0x10/0x10
[ 86.155207][ T5367] ? file_update_time+0x2da/0x490
[ 86.157230][ T5367] ? __generic_file_write_iter+0xf9/0x230
[ 86.159670][ T5367] ? generic_file_write_iter+0x103/0x550
[ 86.162122][ T5367] generic_file_write_iter+0x117/0x550
[ 86.164434][ T5367] ? __pfx_generic_file_write_iter+0x10/0x10
[ 86.167158][ T5367] ? __lock_acquire+0xab9/0xd20
[ 86.169340][ T5367] ? rcu_read_lock_any_held+0xb3/0x120
[ 86.171676][ T5367] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 86.174206][ T5367] vfs_write+0x5c6/0xb30
[ 86.176081][ T5367] ? __pfx_generic_file_write_iter+0x10/0x10
[ 86.178647][ T5367] ? __pfx_vfs_write+0x10/0x10
[ 86.180625][ T5367] ? __fget_files+0x2a/0x420
[ 86.182632][ T5367] ksys_write+0x145/0x250
[ 86.184415][ T5367] ? __pfx_ksys_write+0x10/0x10
[ 86.186448][ T5367] ? rcu_is_watching+0x15/0xb0
[ 86.188419][ T5367] ? do_syscall_64+0xbe/0x3b0
[ 86.190349][ T5367] do_syscall_64+0xfa/0x3b0
[ 86.192270][ T5367] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.194324][ T5367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.196953][ T5367] ? clear_bhb_loop+0x60/0xb0
[ 86.198962][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.201344][ T5367] RIP: 0033:0x7fa81eb8eba9
[ 86.203116][ T5367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.210946][ T5367] RSP: 002b:00007fa81f9b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 86.214476][ T5367] RAX: ffffffffffffffda RBX: 00007fa81edd6090 RCX: 00007fa81eb8eba9
[ 86.217605][ T5367] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000004
[ 86.220806][ T5367] RBP: 00007fa81ec11e19 R08: 0000000000000000 R09: 0000000000000000
[ 86.224035][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.227215][ T5367] R13: 00007fa81edd6128 R14: 00007fa81edd6090 R15: 00007ffca05ac128
[ 86.230424][ T5367]
[ 86.231992][ T5367] Kernel Offset: disabled
[ 86.233574][ T5367] Rebooting in 86400 seconds..