program: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './bus'}, 0x9) (async) splice(r0, &(0x7f00000001c0), r0, &(0x7f0000000140)=0x4, 0x40, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) [ 75.510495][ T4684] Bluetooth: hci0: command tx timeout [ 75.583733][ T5336] loop0: detected capacity change from 0 to 64 [ 75.651910][ T5337] ------------[ cut here ]------------ [ 75.654526][ T5337] WARNING: CPU: 0 PID: 5337 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410 [ 75.658913][ T5337] Modules linked in: [ 75.660623][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.664691][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.669453][ T5337] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 75.671937][ T5337] Code: 4c 89 f7 e8 d9 2a dd ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 e4 f1 fb ff e8 df f6 76 ff eb 8c e8 d8 f6 76 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 ca f6 76 ff 90 0f 0b 90 e9 bf fd ff ff [ 75.680504][ T5337] RSP: 0018:ffffc9000d3e7608 EFLAGS: 00010293 [ 75.683057][ T5337] RAX: ffffffff82478f48 RBX: ffff888042bc4e80 RCX: ffff8880331f4900 [ 75.686497][ T5337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 75.690031][ T5337] RBP: ffff888033f52001 R08: ffff888042bc4e87 R09: 1ffff110085789d0 [ 75.693393][ T5337] R10: dffffc0000000000 R11: ffffed10085789d1 R12: ffff88804c214600 [ 75.696913][ T5337] R13: ffff888042bbbe80 R14: ffff888042bc4e80 R15: 000000000000000a [ 75.700286][ T5337] FS: 00007fa0436bf6c0(0000) GS:ffff88808d969000(0000) knlGS:0000000000000000 [ 75.704442][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.707297][ T5337] CR2: 0000200000003000 CR3: 0000000011318000 CR4: 0000000000352ef0 [ 75.710911][ T5337] Call Trace: [ 75.712346][ T5337] [ 75.713669][ T5337] bfs_get_block+0x5da/0xae0 [ 75.715609][ T5337] __block_write_begin_int+0x6b5/0x1900 [ 75.718012][ T5337] ? __pfx_bfs_get_block+0x10/0x10 [ 75.720140][ T5337] ? __pfx___block_write_begin_int+0x10/0x10 [ 75.722768][ T5337] ? __filemap_get_folio+0x79f/0xaf0 [ 75.724950][ T5337] ? __pfx_bfs_get_block+0x10/0x10 [ 75.727422][ T5337] block_write_begin+0x8a/0x120 [ 75.729737][ T5337] ? bfs_write_begin+0x1e/0xd0 [ 75.731758][ T5337] bfs_write_begin+0x35/0xd0 [ 75.733649][ T5337] generic_perform_write+0x2c5/0x900 [ 75.735972][ T5337] ? __pfx_generic_perform_write+0x10/0x10 [ 75.738520][ T5337] ? file_update_time+0x2da/0x490 [ 75.740752][ T5337] ? __generic_file_write_iter+0xf9/0x230 [ 75.743228][ T5337] ? generic_file_write_iter+0x103/0x550 [ 75.745699][ T5337] generic_file_write_iter+0x117/0x550 [ 75.748167][ T5337] ? __pfx_generic_file_write_iter+0x10/0x10 [ 75.750744][ T5337] ? __lock_acquire+0xab9/0xd20 [ 75.752828][ T5337] ? rcu_read_lock_any_held+0xb3/0x120 [ 75.755165][ T5337] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 75.758100][ T5337] vfs_write+0x5c9/0xb30 [ 75.759991][ T5337] ? __pfx_generic_file_write_iter+0x10/0x10 [ 75.762601][ T5337] ? __pfx_vfs_write+0x10/0x10 [ 75.764682][ T5337] ? __fget_files+0x2a/0x420 [ 75.766764][ T5337] ksys_write+0x145/0x250 [ 75.768906][ T5337] ? __pfx_ksys_write+0x10/0x10 [ 75.771036][ T5337] ? rcu_is_watching+0x15/0xb0 [ 75.773127][ T5337] ? do_syscall_64+0xbe/0x3b0 [ 75.775223][ T5337] do_syscall_64+0xfa/0x3b0 [ 75.777272][ T5337] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.779542][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.782045][ T5337] ? clear_bhb_loop+0x60/0xb0 [ 75.784146][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.786749][ T5337] RIP: 0033:0x7fa04278eec9 [ 75.788828][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.796797][ T5337] RSP: 002b:00007fa0436bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.800522][ T5337] RAX: ffffffffffffffda RBX: 00007fa0429e6090 RCX: 00007fa04278eec9 [ 75.803931][ T5337] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 75.807694][ T5337] RBP: 00007fa042811f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.811437][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.814780][ T5337] R13: 00007fa0429e6128 R14: 00007fa0429e6090 R15: 00007fff85731e78 [ 75.818475][ T5337] [ 75.819852][ T5337] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.822916][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.826826][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.831218][ T5337] Call Trace: [ 75.832631][ T5337] [ 75.833904][ T5337] dump_stack_lvl+0x99/0x250 [ 75.836030][ T5337] ? __asan_memcpy+0x40/0x70 [ 75.838079][ T5337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.840343][ T5337] ? __pfx__printk+0x10/0x10 [ 75.842415][ T5337] vpanic+0x281/0x750 [ 75.844278][ T5337] ? __pfx__printk+0x10/0x10 [ 75.846367][ T5337] ? __pfx_vpanic+0x10/0x10 [ 75.848389][ T5337] ? is_bpf_text_address+0x26/0x2b0 [ 75.850864][ T5337] panic+0xb9/0xc0 [ 75.852674][ T5337] ? __pfx_panic+0x10/0x10 [ 75.854777][ T5337] __warn+0x31b/0x4b0 [ 75.856587][ T5337] ? mark_buffer_dirty+0x2a9/0x410 [ 75.858908][ T5337] ? mark_buffer_dirty+0x2a9/0x410 [ 75.861030][ T5337] report_bug+0x2be/0x4f0 [ 75.862849][ T5337] ? mark_buffer_dirty+0x2a9/0x410 [ 75.864993][ T5337] ? mark_buffer_dirty+0x2a9/0x410 [ 75.867211][ T5337] ? mark_buffer_dirty+0x2ab/0x410 [ 75.869504][ T5337] handle_bug+0x84/0x160 [ 75.871406][ T5337] exc_invalid_op+0x1a/0x50 [ 75.873452][ T5337] asm_exc_invalid_op+0x1a/0x20 [ 75.875629][ T5337] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 75.878170][ T5337] Code: 4c 89 f7 e8 d9 2a dd ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 e4 f1 fb ff e8 df f6 76 ff eb 8c e8 d8 f6 76 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 ca f6 76 ff 90 0f 0b 90 e9 bf fd ff ff [ 75.886571][ T5337] RSP: 0018:ffffc9000d3e7608 EFLAGS: 00010293 [ 75.889428][ T5337] RAX: ffffffff82478f48 RBX: ffff888042bc4e80 RCX: ffff8880331f4900 [ 75.892842][ T5337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 75.896309][ T5337] RBP: ffff888033f52001 R08: ffff888042bc4e87 R09: 1ffff110085789d0 [ 75.899724][ T5337] R10: dffffc0000000000 R11: ffffed10085789d1 R12: ffff88804c214600 [ 75.904205][ T5337] R13: ffff888042bbbe80 R14: ffff888042bc4e80 R15: 000000000000000a [ 75.907709][ T5337] ? mark_buffer_dirty+0x2a8/0x410 [ 75.909737][ T5337] ? mark_buffer_dirty+0x2a8/0x410 [ 75.911758][ T5337] bfs_get_block+0x5da/0xae0 [ 75.913467][ T5337] __block_write_begin_int+0x6b5/0x1900 [ 75.915411][ T5337] ? __pfx_bfs_get_block+0x10/0x10 [ 75.917356][ T5337] ? __pfx___block_write_begin_int+0x10/0x10 [ 75.919679][ T5337] ? __filemap_get_folio+0x79f/0xaf0 [ 75.921940][ T5337] ? __pfx_bfs_get_block+0x10/0x10 [ 75.924147][ T5337] block_write_begin+0x8a/0x120 [ 75.926259][ T5337] ? bfs_write_begin+0x1e/0xd0 [ 75.928330][ T5337] bfs_write_begin+0x35/0xd0 [ 75.930315][ T5337] generic_perform_write+0x2c5/0x900 [ 75.932664][ T5337] ? __pfx_generic_perform_write+0x10/0x10 [ 75.935069][ T5337] ? file_update_time+0x2da/0x490 [ 75.937298][ T5337] ? __generic_file_write_iter+0xf9/0x230 [ 75.939796][ T5337] ? generic_file_write_iter+0x103/0x550 [ 75.942195][ T5337] generic_file_write_iter+0x117/0x550 [ 75.944582][ T5337] ? __pfx_generic_file_write_iter+0x10/0x10 [ 75.947198][ T5337] ? __lock_acquire+0xab9/0xd20 [ 75.949274][ T5337] ? rcu_read_lock_any_held+0xb3/0x120 [ 75.951637][ T5337] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 75.954228][ T5337] vfs_write+0x5c9/0xb30 [ 75.956109][ T5337] ? __pfx_generic_file_write_iter+0x10/0x10 [ 75.958816][ T5337] ? __pfx_vfs_write+0x10/0x10 [ 75.960886][ T5337] ? __fget_files+0x2a/0x420 [ 75.962969][ T5337] ksys_write+0x145/0x250 [ 75.964874][ T5337] ? __pfx_ksys_write+0x10/0x10 [ 75.967045][ T5337] ? rcu_is_watching+0x15/0xb0 [ 75.969145][ T5337] ? do_syscall_64+0xbe/0x3b0 [ 75.971227][ T5337] do_syscall_64+0xfa/0x3b0 [ 75.973262][ T5337] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.975574][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.978134][ T5337] ? clear_bhb_loop+0x60/0xb0 [ 75.980147][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.982710][ T5337] RIP: 0033:0x7fa04278eec9 [ 75.984670][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.992434][ T5337] RSP: 002b:00007fa0436bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.996044][ T5337] RAX: ffffffffffffffda RBX: 00007fa0429e6090 RCX: 00007fa04278eec9 [ 75.999254][ T5337] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 76.002653][ T5337] RBP: 00007fa042811f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.006079][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.009652][ T5337] R13: 00007fa0429e6128 R14: 00007fa0429e6090 R15: 00007fff85731e78 [ 76.013192][ T5337] [ 76.014924][ T5337] Kernel Offset: disabled [ 76.016844][ T5337] Rebooting in 86400 seconds..