program:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
splice(r0, &(0x7f0000000080)=0x100, r1, &(0x7f0000000180)=0x4, 0x8001, 0xa) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}}, 0x4) (async)
dup(0xffffffffffffffff)
r3 = socket(0x11, 0x3, 0x0) (async)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0)
ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000240)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1}, 0x30, {0x2, 0x4e22, @empty}, 'veth0_vlan\x00'})
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000008c0), 0xfecc) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async)
r8 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0)
sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) (async)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0)
sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x1}) (async)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) (async)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0xaf})
getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000200)=0x2c) (async)
ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x128})
[ 68.250201][ T4658] Bluetooth: hci0: command tx timeout
[ 68.304397][ T5319] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 68.333594][ T5318] loop0: detected capacity change from 0 to 64
[ 68.389025][ T5318] ------------[ cut here ]------------
[ 68.391627][ T5318] WARNING: CPU: 0 PID: 5318 at fs/buffer.c:1186 mark_buffer_dirty+0x2a9/0x410
[ 68.395573][ T5318] Modules linked in:
[ 68.397308][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full)
[ 68.401602][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.405399][ T5318] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 68.407479][ T5318] Code: 4c 89 f7 e8 79 0d de ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 34 fc ff e8 5f 18 7c ff eb 8c e8 58 18 7c ff 90 <0f> 0b 90 e9 95 fd ff ff e8 4a 18 7c ff 90 0f 0b 90 e9 bf fd ff ff
[ 68.415205][ T5318] RSP: 0018:ffffc9000d547628 EFLAGS: 00010293
[ 68.417709][ T5318] RAX: ffffffff8243a678 RBX: ffff8880450e1828 RCX: ffff88801e788000
[ 68.420972][ T5318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 68.424143][ T5318] RBP: ffff88801f8c4001 R08: ffff8880450e182f R09: 1ffff11008a1c305
[ 68.427248][ T5318] R10: dffffc0000000000 R11: ffffed1008a1c306 R12: ffff88804c57d400
[ 68.430450][ T5318] R13: ffff8880450d6488 R14: ffff8880450e1828 R15: 000000000000000a
[ 68.433477][ T5318] FS: 00007f4d905f56c0(0000) GS:ffff88808d6cc000(0000) knlGS:0000000000000000
[ 68.436954][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.439530][ T5318] CR2: 00007f4d90592d58 CR3: 000000003e185000 CR4: 0000000000352ef0
[ 68.442843][ T5318] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 68.445975][ T5318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 68.448983][ T5318] Call Trace:
[ 68.450363][ T5318]
[ 68.451460][ T5318] bfs_get_block+0x5da/0xae0
[ 68.453281][ T5318] __block_write_begin_int+0x6b2/0x1900
[ 68.455444][ T5318] ? __pfx_bfs_get_block+0x10/0x10
[ 68.457481][ T5318] ? __pfx___block_write_begin_int+0x10/0x10
[ 68.459790][ T5318] ? __filemap_get_folio+0x79f/0xaf0
[ 68.461774][ T5318] ? __pfx_bfs_get_block+0x10/0x10
[ 68.463738][ T5318] block_write_begin+0x8a/0x120
[ 68.465629][ T5318] ? bfs_write_begin+0x1e/0xd0
[ 68.467431][ T5318] bfs_write_begin+0x35/0xd0
[ 68.469276][ T5318] generic_perform_write+0x2c4/0x910
[ 68.471600][ T5318] ? __pfx_generic_perform_write+0x10/0x10
[ 68.473631][ T5318] ? file_update_time+0x2da/0x490
[ 68.475677][ T5318] ? __generic_file_write_iter+0xf9/0x230
[ 68.477916][ T5318] ? generic_file_write_iter+0xfb/0x540
[ 68.480251][ T5318] generic_file_write_iter+0x10f/0x540
[ 68.482187][ T5318] ? __pfx_generic_file_write_iter+0x10/0x10
[ 68.484388][ T5318] ? __lock_acquire+0xaac/0xd20
[ 68.486286][ T5318] ? rcu_read_lock_any_held+0xb3/0x120
[ 68.488307][ T5318] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 68.490545][ T5318] vfs_write+0x548/0xa90
[ 68.492121][ T5318] ? __pfx_generic_file_write_iter+0x10/0x10
[ 68.494287][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 68.496029][ T5318] ? __fget_files+0x2a/0x420
[ 68.497689][ T5318] ksys_write+0x145/0x250
[ 68.499274][ T5318] ? rcu_is_watching+0x15/0xb0
[ 68.501734][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 68.503584][ T5318] ? do_syscall_64+0xba/0x210
[ 68.505382][ T5318] do_syscall_64+0xf6/0x210
[ 68.507037][ T5318] ? clear_bhb_loop+0x45/0xa0
[ 68.509222][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.511951][ T5318] RIP: 0033:0x7f4d9418e969
[ 68.513736][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.521322][ T5318] RSP: 002b:00007f4d905f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 68.524607][ T5318] RAX: ffffffffffffffda RBX: 00007f4d943b5fa0 RCX: 00007f4d9418e969
[ 68.527794][ T5318] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 000000000000000a
[ 68.531088][ T5318] RBP: 00007f4d94210ab1 R08: 0000000000000000 R09: 0000000000000000
[ 68.534232][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.537335][ T5318] R13: 0000000000000000 R14: 00007f4d943b5fa0 R15: 00007fffb05ebd58
[ 68.542323][ T5318]
[ 68.543733][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 68.546492][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full)
[ 68.550234][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.554278][ T5318] Call Trace:
[ 68.555659][ T5318]
[ 68.556890][ T5318] dump_stack_lvl+0x99/0x250
[ 68.559038][ T5318] ? __asan_memcpy+0x40/0x70
[ 68.560906][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.562992][ T5318] ? __pfx__printk+0x10/0x10
[ 68.564858][ T5318] panic+0x2db/0x790
[ 68.566404][ T5318] ? __pfx_panic+0x10/0x10
[ 68.568137][ T5318] ? show_trace_log_lvl+0x4fb/0x550
[ 68.570269][ T5318] __warn+0x31b/0x4b0
[ 68.571881][ T5318] ? mark_buffer_dirty+0x2a9/0x410
[ 68.573944][ T5318] ? mark_buffer_dirty+0x2a9/0x410
[ 68.576001][ T5318] report_bug+0x2be/0x4f0
[ 68.577747][ T5318] ? mark_buffer_dirty+0x2a9/0x410
[ 68.579766][ T5318] ? mark_buffer_dirty+0x2a9/0x410
[ 68.581902][ T5318] ? mark_buffer_dirty+0x2ab/0x410
[ 68.583985][ T5318] handle_bug+0x84/0x160
[ 68.585723][ T5318] exc_invalid_op+0x1a/0x50
[ 68.587569][ T5318] asm_exc_invalid_op+0x1a/0x20
[ 68.589378][ T5318] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 68.591734][ T5318] Code: 4c 89 f7 e8 79 0d de ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 34 fc ff e8 5f 18 7c ff eb 8c e8 58 18 7c ff 90 <0f> 0b 90 e9 95 fd ff ff e8 4a 18 7c ff 90 0f 0b 90 e9 bf fd ff ff
[ 68.600281][ T5318] RSP: 0018:ffffc9000d547628 EFLAGS: 00010293
[ 68.603276][ T5318] RAX: ffffffff8243a678 RBX: ffff8880450e1828 RCX: ffff88801e788000
[ 68.607205][ T5318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 68.611199][ T5318] RBP: ffff88801f8c4001 R08: ffff8880450e182f R09: 1ffff11008a1c305
[ 68.614464][ T5318] R10: dffffc0000000000 R11: ffffed1008a1c306 R12: ffff88804c57d400
[ 68.617333][ T5318] R13: ffff8880450d6488 R14: ffff8880450e1828 R15: 000000000000000a
[ 68.620588][ T5318] ? mark_buffer_dirty+0x2a8/0x410
[ 68.622632][ T5318] ? mark_buffer_dirty+0x2a8/0x410
[ 68.624689][ T5318] bfs_get_block+0x5da/0xae0
[ 68.626518][ T5318] __block_write_begin_int+0x6b2/0x1900
[ 68.628691][ T5318] ? __pfx_bfs_get_block+0x10/0x10
[ 68.630765][ T5318] ? __pfx___block_write_begin_int+0x10/0x10
[ 68.633290][ T5318] ? __filemap_get_folio+0x79f/0xaf0
[ 68.635482][ T5318] ? __pfx_bfs_get_block+0x10/0x10
[ 68.637584][ T5318] block_write_begin+0x8a/0x120
[ 68.639564][ T5318] ? bfs_write_begin+0x1e/0xd0
[ 68.641404][ T5318] bfs_write_begin+0x35/0xd0
[ 68.643375][ T5318] generic_perform_write+0x2c4/0x910
[ 68.645581][ T5318] ? __pfx_generic_perform_write+0x10/0x10
[ 68.647939][ T5318] ? file_update_time+0x2da/0x490
[ 68.649973][ T5318] ? __generic_file_write_iter+0xf9/0x230
[ 68.652148][ T5318] ? generic_file_write_iter+0xfb/0x540
[ 68.654253][ T5318] generic_file_write_iter+0x10f/0x540
[ 68.656424][ T5318] ? __pfx_generic_file_write_iter+0x10/0x10
[ 68.658857][ T5318] ? __lock_acquire+0xaac/0xd20
[ 68.660865][ T5318] ? rcu_read_lock_any_held+0xb3/0x120
[ 68.662979][ T5318] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 68.665257][ T5318] vfs_write+0x548/0xa90
[ 68.666994][ T5318] ? __pfx_generic_file_write_iter+0x10/0x10
[ 68.669433][ T5318] ? __pfx_vfs_write+0x10/0x10
[ 68.671433][ T5318] ? __fget_files+0x2a/0x420
[ 68.673247][ T5318] ksys_write+0x145/0x250
[ 68.674892][ T5318] ? rcu_is_watching+0x15/0xb0
[ 68.676786][ T5318] ? __pfx_ksys_write+0x10/0x10
[ 68.678598][ T5318] ? do_syscall_64+0xba/0x210
[ 68.680424][ T5318] do_syscall_64+0xf6/0x210
[ 68.682191][ T5318] ? clear_bhb_loop+0x45/0xa0
[ 68.684081][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.686416][ T5318] RIP: 0033:0x7f4d9418e969
[ 68.688308][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.695953][ T5318] RSP: 002b:00007f4d905f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 68.699360][ T5318] RAX: ffffffffffffffda RBX: 00007f4d943b5fa0 RCX: 00007f4d9418e969
[ 68.702607][ T5318] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 000000000000000a
[ 68.705815][ T5318] RBP: 00007f4d94210ab1 R08: 0000000000000000 R09: 0000000000000000
[ 68.708936][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.711972][ T5318] R13: 0000000000000000 R14: 00007f4d943b5fa0 R15: 00007fffb05ebd58
[ 68.715039][ T5318]
[ 68.716510][ T5318] Kernel Offset: disabled
[ 68.718143][ T5318] Rebooting in 86400 seconds..