program: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption}, {@jqfmt_vfsv1}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8979) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x180) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x2}}, 0x10) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x1a, 0x0, "ef359f413bb93852f7d6a4ae6dddfb01005d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6e246cd454b926ede000000001ce1a311ef54ec32d71e14ef3dc177e90000000000000000070100", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) [ 84.890568][ T5308] Bluetooth: hci0: command tx timeout [ 84.922493][ T5331] loop0: detected capacity change from 0 to 128 [ 84.964929][ T5331] ======================================================= [ 84.964929][ T5331] WARNING: The mand mount option has been deprecated and [ 84.964929][ T5331] and is ignored by this kernel. Remove the mand [ 84.964929][ T5331] option from the mount to silence this warning. [ 84.964929][ T5331] ======================================================= [ 85.026765][ T5331] EXT4-fs (loop0): Test dummy encryption mode enabled [ 85.048233][ T5331] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.077732][ T5331] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.090793][ T5331] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 85.156774][ T5331] loop0: detected capacity change from 128 to 64 [ 85.160315][ T1042] kworker/u4:6: attempt to access beyond end of device [ 85.160315][ T1042] loop0: rw=12288, sector=72, nr_sectors = 2 limit=64 [ 85.195135][ T1042] EXT4-fs error (device loop0): ext4_get_inode_loc:4970: inode #12: block 36: comm kworker/u4:6: unable to read itable block [ 85.231421][ T1042] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: IO failure [ 85.239099][ T1042] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm kworker/u4:6: mark_inode_dirty error [ 85.244759][ T5331] syz.0.0: attempt to access beyond end of device [ 85.244759][ T5331] loop0: rw=12288, sector=72, nr_sectors = 2 limit=64 [ 85.250945][ T1042] EXT4-fs (loop0): Delayed block allocation failed for inode 12 at logical offset 0 with max blocks 4 with error 5 [ 85.257367][ T5331] EXT4-fs error (device loop0): ext4_get_inode_loc:4970: inode #12: block 36: comm syz.0.0: unable to read itable block [ 85.263371][ T1042] EXT4-fs (loop0): This should not happen!! Data will be lost [ 85.263371][ T1042] [ 85.269576][ T1042] kworker/u4:6: attempt to access beyond end of device [ 85.269576][ T1042] loop0: rw=12288, sector=72, nr_sectors = 2 limit=64 [ 85.275697][ T5331] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: IO failure [ 85.279725][ T5331] EXT4-fs error (device loop0): ext4_setattr:5991: inode #12: comm syz.0.0: mark_inode_dirty error [ 85.284939][ T1042] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4955: inode #12: block 36: comm kworker/u4:6: unable to read itable block [ 85.292345][ T5330] ------------[ cut here ]------------ [ 85.295058][ T5330] WARNING: CPU: 0 PID: 5330 at mm/page-writeback.c:2716 __folio_mark_dirty+0x202/0xe30 [ 85.299329][ T5330] Modules linked in: [ 85.301324][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.305219][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.310041][ T5330] RIP: 0010:__folio_mark_dirty+0x202/0xe30 [ 85.312526][ T5330] Code: 3c 20 00 74 08 48 89 df e8 9b bb 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 ea 88 c3 ff 49 83 e6 08 75 20 e8 ff 83 c3 ff 90 <0f> 0b 90 eb 1a e8 f4 83 c3 ff 48 8b 2c 24 e9 74 07 00 00 e8 e6 83 [ 85.320768][ T5330] RSP: 0018:ffffc9000d3ff7d0 EFLAGS: 00010093 [ 85.323409][ T5330] RAX: ffffffff81fc1fa1 RBX: ffffea0001330600 RCX: ffff88803ee34900 [ 85.326886][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.330270][ T5330] RBP: ffff88804c922168 R08: ffffea0001330607 R09: 1ffffd40002660c0 [ 85.333632][ T5330] R10: dffffc0000000000 R11: fffff940002660c1 R12: dffffc0000000000 [ 85.337153][ T5330] R13: ffff88804c922170 R14: 0000000000000000 R15: 0000000000000001 [ 85.340666][ T5330] FS: 0000555572012500(0000) GS:ffff88808d304000(0000) knlGS:0000000000000000 [ 85.345275][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.348166][ T5330] CR2: 0000200000000140 CR3: 000000001f50e000 CR4: 0000000000352ef0 [ 85.351764][ T5330] Call Trace: [ 85.353335][ T5330] [ 85.354700][ T5330] ? do_raw_spin_unlock+0x4d/0x240 [ 85.357095][ T5330] block_dirty_folio+0x17a/0x1d0 [ 85.359358][ T5330] ext4_page_mkwrite+0xf07/0x1190 [ 85.362038][ T5330] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 85.365293][ T5330] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 85.367803][ T5330] ? futex_unqueue+0x22/0x240 [ 85.370096][ T5330] do_page_mkwrite+0x14a/0x310 [ 85.372045][ T5330] do_wp_page+0x268d/0x5800 [ 85.374050][ T5330] ? __pfx_do_wp_page+0x10/0x10 [ 85.376154][ T5330] ? do_raw_spin_lock+0x121/0x290 [ 85.378237][ T5330] ? __handle_mm_fault+0xf87/0x5400 [ 85.380251][ T5330] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.382453][ T5330] __handle_mm_fault+0x1033/0x5400 [ 85.384428][ T5330] ? lock_vma_under_rcu+0x1a3/0x450 [ 85.386512][ T5330] ? __pfx___handle_mm_fault+0x10/0x10 [ 85.388703][ T5330] ? lock_vma_under_rcu+0x3d2/0x450 [ 85.390713][ T5330] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 85.392999][ T5330] ? __rseq_handle_notify_resume+0x384/0x1220 [ 85.395709][ T5330] handle_mm_fault+0x40a/0x8e0 [ 85.397846][ T5330] do_user_addr_fault+0xa7c/0x1380 [ 85.400129][ T5330] ? rcu_is_watching+0x15/0xb0 [ 85.402256][ T5330] ? trace_page_fault_user+0x84/0x1e0 [ 85.404619][ T5330] exc_page_fault+0x82/0x100 [ 85.406794][ T5330] asm_exc_page_fault+0x26/0x30 [ 85.409021][ T5330] RIP: 0033:0x7f16f7855263 [ 85.411057][ T5330] Code: 8b 44 24 08 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 7a 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 d2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 44 24 08 48 [ 85.419442][ T5330] RSP: 002b:00007fff88d0ecb0 EFLAGS: 00010246 [ 85.422151][ T5330] RAX: 0000200000000140 RBX: 0000000000000008 RCX: 0000000000000000 [ 85.425664][ T5330] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 00005555720123c8 [ 85.429146][ T5330] RBP: 00007fff88d0edb8 R08: 0000000000000000 R09: 0000000000000000 [ 85.432640][ T5330] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f16f7be5fac [ 85.436058][ T5330] R13: 00007fff88d0ede0 R14: fffffffffffffffe R15: 00007fff88d0ee00 [ 85.439585][ T5330] [ 85.441103][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.444237][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.448258][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.452851][ T5330] Call Trace: [ 85.454329][ T5330] [ 85.455677][ T5330] dump_stack_lvl+0x99/0x250 [ 85.457739][ T5330] ? __asan_memcpy+0x40/0x70 [ 85.459704][ T5330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.462133][ T5330] ? __pfx__printk+0x10/0x10 [ 85.464195][ T5330] vpanic+0x237/0x6d0 [ 85.465970][ T5330] ? __pfx_vpanic+0x10/0x10 [ 85.467939][ T5330] panic+0xb9/0xc0 [ 85.469803][ T5330] ? __pfx_panic+0x10/0x10 [ 85.471810][ T5330] __warn+0x31b/0x4b0 [ 85.473559][ T5330] ? __folio_mark_dirty+0x202/0xe30 [ 85.475825][ T5330] ? __folio_mark_dirty+0x202/0xe30 [ 85.478034][ T5330] report_bug+0x2be/0x4f0 [ 85.479962][ T5330] ? __folio_mark_dirty+0x202/0xe30 [ 85.482202][ T5330] ? __folio_mark_dirty+0x202/0xe30 [ 85.484449][ T5330] ? __folio_mark_dirty+0x204/0xe30 [ 85.486715][ T5330] handle_bug+0x84/0x160 [ 85.488596][ T5330] exc_invalid_op+0x1a/0x50 [ 85.490513][ T5330] asm_exc_invalid_op+0x1a/0x20 [ 85.492650][ T5330] RIP: 0010:__folio_mark_dirty+0x202/0xe30 [ 85.494985][ T5330] Code: 3c 20 00 74 08 48 89 df e8 9b bb 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 ea 88 c3 ff 49 83 e6 08 75 20 e8 ff 83 c3 ff 90 <0f> 0b 90 eb 1a e8 f4 83 c3 ff 48 8b 2c 24 e9 74 07 00 00 e8 e6 83 [ 85.503032][ T5330] RSP: 0018:ffffc9000d3ff7d0 EFLAGS: 00010093 [ 85.505570][ T5330] RAX: ffffffff81fc1fa1 RBX: ffffea0001330600 RCX: ffff88803ee34900 [ 85.508889][ T5330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.512362][ T5330] RBP: ffff88804c922168 R08: ffffea0001330607 R09: 1ffffd40002660c0 [ 85.515863][ T5330] R10: dffffc0000000000 R11: fffff940002660c1 R12: dffffc0000000000 [ 85.519243][ T5330] R13: ffff88804c922170 R14: 0000000000000000 R15: 0000000000000001 [ 85.522812][ T5330] ? __folio_mark_dirty+0x201/0xe30 [ 85.525099][ T5330] ? do_raw_spin_unlock+0x4d/0x240 [ 85.527366][ T5330] block_dirty_folio+0x17a/0x1d0 [ 85.529723][ T5330] ext4_page_mkwrite+0xf07/0x1190 [ 85.532139][ T5330] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 85.534876][ T5330] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 85.537046][ T5330] ? futex_unqueue+0x22/0x240 [ 85.538995][ T5330] do_page_mkwrite+0x14a/0x310 [ 85.541005][ T5330] do_wp_page+0x268d/0x5800 [ 85.542863][ T5330] ? __pfx_do_wp_page+0x10/0x10 [ 85.545005][ T5330] ? do_raw_spin_lock+0x121/0x290 [ 85.547147][ T5330] ? __handle_mm_fault+0xf87/0x5400 [ 85.549425][ T5330] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.551736][ T5330] __handle_mm_fault+0x1033/0x5400 [ 85.553993][ T5330] ? lock_vma_under_rcu+0x1a3/0x450 [ 85.556230][ T5330] ? __pfx___handle_mm_fault+0x10/0x10 [ 85.558528][ T5330] ? lock_vma_under_rcu+0x3d2/0x450 [ 85.560725][ T5330] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 85.563210][ T5330] ? __rseq_handle_notify_resume+0x384/0x1220 [ 85.565791][ T5330] handle_mm_fault+0x40a/0x8e0 [ 85.567887][ T5330] do_user_addr_fault+0xa7c/0x1380 [ 85.570249][ T5330] ? rcu_is_watching+0x15/0xb0 [ 85.572391][ T5330] ? trace_page_fault_user+0x84/0x1e0 [ 85.574773][ T5330] exc_page_fault+0x82/0x100 [ 85.576774][ T5330] asm_exc_page_fault+0x26/0x30 [ 85.578931][ T5330] RIP: 0033:0x7f16f7855263 [ 85.580988][ T5330] Code: 8b 44 24 08 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 7a 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 d2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 44 24 08 48 [ 85.589393][ T5330] RSP: 002b:00007fff88d0ecb0 EFLAGS: 00010246 [ 85.591969][ T5330] RAX: 0000200000000140 RBX: 0000000000000008 RCX: 0000000000000000 [ 85.595467][ T5330] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 00005555720123c8 [ 85.598925][ T5330] RBP: 00007fff88d0edb8 R08: 0000000000000000 R09: 0000000000000000 [ 85.602396][ T5330] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f16f7be5fac [ 85.605964][ T5330] R13: 00007fff88d0ede0 R14: fffffffffffffffe R15: 00007fff88d0ee00 [ 85.609567][ T5330] [ 85.611345][ T5330] Kernel Offset: disabled [ 85.613317][ T5330] Rebooting in 86400 seconds..