program: r0 = socket$inet6(0xa, 0x4, 0x40003a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x10007, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xc}, 0x1c) (async) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x5, 0x3, 0x8, {0x8, 0xffffffff}, 0xfff, 0x8}) (async) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000008c0), 0xfecc) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) ftruncate(r1, 0xfe5) (async) write$rfkill(r2, &(0x7f0000000040)={0x8, 0x0, 0x3, 0x1, 0x1}, 0x8) io_uring_setup(0x2b8d, &(0x7f0000000140)={0x0, 0xdf05, 0x8, 0xfffffffe, 0x37d, 0x0, r1}) (async) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) [ 68.569005][ T5339] Bluetooth: hci0: command tx timeout [ 68.609195][ T5358] loop0: detected capacity change from 0 to 64 [ 68.674454][ T5359] ------------[ cut here ]------------ [ 68.677415][ T5359] WARNING: CPU: 0 PID: 5359 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410 [ 68.681153][ T5359] Modules linked in: [ 68.682917][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 68.686738][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.691214][ T5359] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 68.693679][ T5359] Code: 4c 89 f7 e8 f9 4b dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 ef 5b 78 ff eb 8c e8 e8 5b 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 da 5b 78 ff 90 0f 0b 90 e9 bf fd ff ff [ 68.701920][ T5359] RSP: 0018:ffffc9000d527608 EFLAGS: 00010293 [ 68.704499][ T5359] RAX: ffffffff82476218 RBX: ffff888043b5d910 RCX: ffff88803e780000 [ 68.707959][ T5359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 68.711523][ T5359] RBP: ffff888033356001 R08: ffff888043b5d917 R09: 1ffff1100876bb22 [ 68.714712][ T5359] R10: dffffc0000000000 R11: ffffed100876bb23 R12: ffff88804cde8000 [ 68.718062][ T5359] R13: ffff8880004adbc8 R14: ffff888043b5d910 R15: 0000000000000010 [ 68.721420][ T5359] FS: 00007f57202a46c0(0000) GS:ffff88808d20c000(0000) knlGS:0000000000000000 [ 68.725058][ T5359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.728025][ T5359] CR2: 0000200000001000 CR3: 0000000042caf000 CR4: 0000000000352ef0 [ 68.731635][ T5359] Call Trace: [ 68.732987][ T5359] [ 68.734255][ T5359] bfs_get_block+0x5da/0xae0 [ 68.736442][ T5359] __block_write_begin_int+0x6b2/0x1900 [ 68.738965][ T5359] ? __pfx_bfs_get_block+0x10/0x10 [ 68.741104][ T5359] ? __pfx___block_write_begin_int+0x10/0x10 [ 68.743912][ T5359] ? __filemap_get_folio+0x79f/0xaf0 [ 68.746887][ T5359] ? __pfx_bfs_get_block+0x10/0x10 [ 68.749591][ T5359] block_write_begin+0x8a/0x120 [ 68.751648][ T5359] ? bfs_write_begin+0x1e/0xd0 [ 68.753595][ T5359] bfs_write_begin+0x35/0xd0 [ 68.755912][ T5359] generic_perform_write+0x2c5/0x900 [ 68.758229][ T5359] ? __pfx_generic_perform_write+0x10/0x10 [ 68.760761][ T5359] ? file_update_time+0x2da/0x490 [ 68.762797][ T5359] ? __generic_file_write_iter+0xf9/0x230 [ 68.765142][ T5359] ? generic_file_write_iter+0x103/0x550 [ 68.767593][ T5359] generic_file_write_iter+0x117/0x550 [ 68.769972][ T5359] ? __pfx_generic_file_write_iter+0x10/0x10 [ 68.772538][ T5359] ? __lock_acquire+0xab9/0xd20 [ 68.774675][ T5359] ? rcu_read_lock_any_held+0xb3/0x120 [ 68.776949][ T5359] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 68.779440][ T5359] vfs_write+0x5c6/0xb30 [ 68.781282][ T5359] ? __pfx_generic_file_write_iter+0x10/0x10 [ 68.783730][ T5359] ? __pfx_vfs_write+0x10/0x10 [ 68.786044][ T5359] ? __fget_files+0x2a/0x420 [ 68.788103][ T5359] ksys_write+0x145/0x250 [ 68.790027][ T5359] ? __pfx_ksys_write+0x10/0x10 [ 68.792194][ T5359] ? rcu_is_watching+0x15/0xb0 [ 68.794460][ T5359] ? do_syscall_64+0xbe/0x3b0 [ 68.796742][ T5359] do_syscall_64+0xfa/0x3b0 [ 68.798848][ T5359] ? lockdep_hardirqs_on+0x9c/0x150 [ 68.801247][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.803948][ T5359] ? clear_bhb_loop+0x60/0xb0 [ 68.806235][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.808940][ T5359] RIP: 0033:0x7f571f38ebe9 [ 68.810935][ T5359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.820163][ T5359] RSP: 002b:00007f57202a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.823857][ T5359] RAX: ffffffffffffffda RBX: 00007f571f5c6090 RCX: 00007f571f38ebe9 [ 68.827380][ T5359] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 68.831067][ T5359] RBP: 00007f571f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 68.834676][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.838020][ T5359] R13: 00007f571f5c6128 R14: 00007f571f5c6090 R15: 00007fff98bbd9e8 [ 68.841468][ T5359] [ 68.842900][ T5359] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.846193][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 68.850218][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.854739][ T5359] Call Trace: [ 68.856263][ T5359] [ 68.857510][ T5359] dump_stack_lvl+0x99/0x250 [ 68.859483][ T5359] ? __asan_memcpy+0x40/0x70 [ 68.861396][ T5359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.863414][ T5359] ? __pfx__printk+0x10/0x10 [ 68.865371][ T5359] vpanic+0x281/0x750 [ 68.866888][ T5359] ? __pfx__printk+0x10/0x10 [ 68.868824][ T5359] ? __pfx_vpanic+0x10/0x10 [ 68.870822][ T5359] ? is_bpf_text_address+0x26/0x2b0 [ 68.873129][ T5359] panic+0xb9/0xc0 [ 68.874724][ T5359] ? __pfx_panic+0x10/0x10 [ 68.876603][ T5359] __warn+0x31b/0x4b0 [ 68.878262][ T5359] ? mark_buffer_dirty+0x2a9/0x410 [ 68.880402][ T5359] ? mark_buffer_dirty+0x2a9/0x410 [ 68.882407][ T5359] report_bug+0x2be/0x4f0 [ 68.884271][ T5359] ? mark_buffer_dirty+0x2a9/0x410 [ 68.886547][ T5359] ? mark_buffer_dirty+0x2a9/0x410 [ 68.888848][ T5359] ? mark_buffer_dirty+0x2ab/0x410 [ 68.891050][ T5359] handle_bug+0x84/0x160 [ 68.892931][ T5359] exc_invalid_op+0x1a/0x50 [ 68.894902][ T5359] asm_exc_invalid_op+0x1a/0x20 [ 68.897043][ T5359] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 68.899477][ T5359] Code: 4c 89 f7 e8 f9 4b dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 ef 5b 78 ff eb 8c e8 e8 5b 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 da 5b 78 ff 90 0f 0b 90 e9 bf fd ff ff [ 68.908003][ T5359] RSP: 0018:ffffc9000d527608 EFLAGS: 00010293 [ 68.910749][ T5359] RAX: ffffffff82476218 RBX: ffff888043b5d910 RCX: ffff88803e780000 [ 68.914144][ T5359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 68.917435][ T5359] RBP: ffff888033356001 R08: ffff888043b5d917 R09: 1ffff1100876bb22 [ 68.920792][ T5359] R10: dffffc0000000000 R11: ffffed100876bb23 R12: ffff88804cde8000 [ 68.924087][ T5359] R13: ffff8880004adbc8 R14: ffff888043b5d910 R15: 0000000000000010 [ 68.927539][ T5359] ? mark_buffer_dirty+0x2a8/0x410 [ 68.929734][ T5359] ? mark_buffer_dirty+0x2a8/0x410 [ 68.931933][ T5359] bfs_get_block+0x5da/0xae0 [ 68.933960][ T5359] __block_write_begin_int+0x6b2/0x1900 [ 68.936401][ T5359] ? __pfx_bfs_get_block+0x10/0x10 [ 68.938574][ T5359] ? __pfx___block_write_begin_int+0x10/0x10 [ 68.941241][ T5359] ? __filemap_get_folio+0x79f/0xaf0 [ 68.943313][ T5359] ? __pfx_bfs_get_block+0x10/0x10 [ 68.945397][ T5359] block_write_begin+0x8a/0x120 [ 68.947414][ T5359] ? bfs_write_begin+0x1e/0xd0 [ 68.949375][ T5359] bfs_write_begin+0x35/0xd0 [ 68.951295][ T5359] generic_perform_write+0x2c5/0x900 [ 68.953445][ T5359] ? __pfx_generic_perform_write+0x10/0x10 [ 68.955827][ T5359] ? file_update_time+0x2da/0x490 [ 68.957878][ T5359] ? __generic_file_write_iter+0xf9/0x230 [ 68.960188][ T5359] ? generic_file_write_iter+0x103/0x550 [ 68.962577][ T5359] generic_file_write_iter+0x117/0x550 [ 68.965008][ T5359] ? __pfx_generic_file_write_iter+0x10/0x10 [ 68.969142][ T5359] ? __lock_acquire+0xab9/0xd20 [ 68.971214][ T5359] ? rcu_read_lock_any_held+0xb3/0x120 [ 68.973521][ T5359] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 68.975996][ T5359] vfs_write+0x5c6/0xb30 [ 68.977733][ T5359] ? __pfx_generic_file_write_iter+0x10/0x10 [ 68.980275][ T5359] ? __pfx_vfs_write+0x10/0x10 [ 68.982408][ T5359] ? __fget_files+0x2a/0x420 [ 68.984485][ T5359] ksys_write+0x145/0x250 [ 68.986542][ T5359] ? __pfx_ksys_write+0x10/0x10 [ 68.988757][ T5359] ? rcu_is_watching+0x15/0xb0 [ 68.990812][ T5359] ? do_syscall_64+0xbe/0x3b0 [ 68.992768][ T5359] do_syscall_64+0xfa/0x3b0 [ 68.994621][ T5359] ? lockdep_hardirqs_on+0x9c/0x150 [ 68.996761][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.999347][ T5359] ? clear_bhb_loop+0x60/0xb0 [ 69.001465][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.003878][ T5359] RIP: 0033:0x7f571f38ebe9 [ 69.005828][ T5359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.013783][ T5359] RSP: 002b:00007f57202a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.017052][ T5359] RAX: ffffffffffffffda RBX: 00007f571f5c6090 RCX: 00007f571f38ebe9 [ 69.020361][ T5359] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 69.023700][ T5359] RBP: 00007f571f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 69.027276][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.030611][ T5359] R13: 00007f571f5c6128 R14: 00007f571f5c6090 R15: 00007fff98bbd9e8 [ 69.034262][ T5359] [ 69.035932][ T5359] Kernel Offset: disabled [ 69.037834][ T5359] Rebooting in 86400 seconds..