program:
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) (async)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000080)={0x6, 0x5, 0x6669})
[ 85.786673][ T4669] Bluetooth: hci0: command tx timeout
[ 85.834284][ T5330] loop0: detected capacity change from 0 to 64
[ 85.948823][ T5331] ------------[ cut here ]------------
[ 85.951399][ T5331] WARNING: CPU: 0 PID: 5331 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410
[ 85.955317][ T5331] Modules linked in:
[ 85.957486][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.961457][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.966474][ T5331] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 85.969071][ T5331] Code: 4c 89 f7 e8 69 08 dd ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 14 ea fb ff e8 bf bc 75 ff eb 8c e8 b8 bc 75 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 aa bc 75 ff 90 0f 0b 90 e9 bf fd ff ff
[ 85.977088][ T5331] RSP: 0018:ffffc9000d487608 EFLAGS: 00010293
[ 85.979384][ T5331] RAX: ffffffff824a56a8 RBX: ffff88804480f570 RCX: ffff88801f79a480
[ 85.982412][ T5331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 85.985697][ T5331] RBP: ffff88801e8f2001 R08: ffff88804480f577 R09: 1ffff11008901eae
[ 85.989247][ T5331] R10: dffffc0000000000 R11: ffffed1008901eaf R12: ffff88804cba0400
[ 85.992380][ T5331] R13: ffff888012009910 R14: ffff88804480f570 R15: 000000000000000a
[ 85.995673][ T5331] FS: 00007feb8a3476c0(0000) GS:ffff88808d730000(0000) knlGS:0000000000000000
[ 85.999770][ T5331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 86.002246][ T5331] CR2: 0000200000002000 CR3: 00000000423f8000 CR4: 0000000000352ef0
[ 86.005559][ T5331] Call Trace:
[ 86.007340][ T5331]
[ 86.008704][ T5331] bfs_get_block+0x5da/0xae0
[ 86.010808][ T5331] __block_write_begin_int+0x6b5/0x1900
[ 86.013106][ T5331] ? __pfx_bfs_get_block+0x10/0x10
[ 86.015312][ T5331] ? __pfx___block_write_begin_int+0x10/0x10
[ 86.018171][ T5331] ? __filemap_get_folio+0x79f/0xaf0
[ 86.020467][ T5331] ? __pfx_bfs_get_block+0x10/0x10
[ 86.022991][ T5331] block_write_begin+0x8a/0x120
[ 86.024955][ T5331] ? bfs_write_begin+0x1e/0xd0
[ 86.027220][ T5331] bfs_write_begin+0x35/0xd0
[ 86.029232][ T5331] generic_perform_write+0x2c5/0x900
[ 86.031549][ T5331] ? __pfx_generic_perform_write+0x10/0x10
[ 86.033929][ T5331] ? file_update_time+0x2da/0x490
[ 86.035790][ T5331] ? __generic_file_write_iter+0xf9/0x230
[ 86.038015][ T5331] ? generic_file_write_iter+0x103/0x550
[ 86.040482][ T5331] generic_file_write_iter+0x117/0x550
[ 86.042824][ T5331] ? __pfx_generic_file_write_iter+0x10/0x10
[ 86.045433][ T5331] ? __lock_acquire+0xab9/0xd20
[ 86.047566][ T5331] ? rcu_read_lock_any_held+0xb3/0x120
[ 86.049571][ T5331] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 86.051867][ T5331] vfs_write+0x5c9/0xb30
[ 86.053754][ T5331] ? __pfx_generic_file_write_iter+0x10/0x10
[ 86.056416][ T5331] ? __pfx_vfs_write+0x10/0x10
[ 86.058470][ T5331] ? __fget_files+0x2a/0x420
[ 86.060565][ T5331] ksys_write+0x145/0x250
[ 86.062323][ T5331] ? __pfx_ksys_write+0x10/0x10
[ 86.064214][ T5331] ? do_syscall_64+0xbe/0xfa0
[ 86.066558][ T5331] do_syscall_64+0xfa/0xfa0
[ 86.068280][ T5331] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.070469][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.073213][ T5331] ? clear_bhb_loop+0x60/0xb0
[ 86.075322][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.078072][ T5331] RIP: 0033:0x7feb8958f6c9
[ 86.080180][ T5331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.088564][ T5331] RSP: 002b:00007feb8a347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 86.092315][ T5331] RAX: ffffffffffffffda RBX: 00007feb897e6090 RCX: 00007feb8958f6c9
[ 86.095768][ T5331] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005
[ 86.099090][ T5331] RBP: 00007feb89611f91 R08: 0000000000000000 R09: 0000000000000000
[ 86.102851][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.107379][ T5331] R13: 00007feb897e6128 R14: 00007feb897e6090 R15: 00007ffdc8f2d0a8
[ 86.111906][ T5331]
[ 86.113772][ T5331] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.118354][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.123433][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.129294][ T5331] Call Trace:
[ 86.131095][ T5331]
[ 86.132586][ T5331] dump_stack_lvl+0x99/0x250
[ 86.134775][ T5331] ? __asan_memcpy+0x40/0x70
[ 86.136756][ T5331] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.139163][ T5331] ? __pfx__printk+0x10/0x10
[ 86.141038][ T5331] vpanic+0x237/0x6d0
[ 86.142716][ T5331] ? __pfx_vpanic+0x10/0x10
[ 86.144558][ T5331] panic+0xb9/0xc0
[ 86.146133][ T5331] ? __pfx_panic+0x10/0x10
[ 86.148033][ T5331] __warn+0x31b/0x4b0
[ 86.149774][ T5331] ? mark_buffer_dirty+0x2a9/0x410
[ 86.151897][ T5331] ? mark_buffer_dirty+0x2a9/0x410
[ 86.154025][ T5331] report_bug+0x2be/0x4f0
[ 86.155991][ T5331] ? mark_buffer_dirty+0x2a9/0x410
[ 86.158735][ T5331] ? mark_buffer_dirty+0x2a9/0x410
[ 86.161193][ T5331] ? mark_buffer_dirty+0x2ab/0x410
[ 86.163670][ T5331] handle_bug+0x84/0x160
[ 86.165451][ T5331] exc_invalid_op+0x1a/0x50
[ 86.167311][ T5331] asm_exc_invalid_op+0x1a/0x20
[ 86.169415][ T5331] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 86.171879][ T5331] Code: 4c 89 f7 e8 69 08 dd ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 14 ea fb ff e8 bf bc 75 ff eb 8c e8 b8 bc 75 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 aa bc 75 ff 90 0f 0b 90 e9 bf fd ff ff
[ 86.180323][ T5331] RSP: 0018:ffffc9000d487608 EFLAGS: 00010293
[ 86.182830][ T5331] RAX: ffffffff824a56a8 RBX: ffff88804480f570 RCX: ffff88801f79a480
[ 86.185972][ T5331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 86.189210][ T5331] RBP: ffff88801e8f2001 R08: ffff88804480f577 R09: 1ffff11008901eae
[ 86.192852][ T5331] R10: dffffc0000000000 R11: ffffed1008901eaf R12: ffff88804cba0400
[ 86.196521][ T5331] R13: ffff888012009910 R14: ffff88804480f570 R15: 000000000000000a
[ 86.200479][ T5331] ? mark_buffer_dirty+0x2a8/0x410
[ 86.203345][ T5331] ? mark_buffer_dirty+0x2a8/0x410
[ 86.206017][ T5331] bfs_get_block+0x5da/0xae0
[ 86.208302][ T5331] __block_write_begin_int+0x6b5/0x1900
[ 86.211040][ T5331] ? __pfx_bfs_get_block+0x10/0x10
[ 86.213409][ T5331] ? __pfx___block_write_begin_int+0x10/0x10
[ 86.215856][ T5331] ? __filemap_get_folio+0x79f/0xaf0
[ 86.218289][ T5331] ? __pfx_bfs_get_block+0x10/0x10
[ 86.220430][ T5331] block_write_begin+0x8a/0x120
[ 86.222359][ T5331] ? bfs_write_begin+0x1e/0xd0
[ 86.224272][ T5331] bfs_write_begin+0x35/0xd0
[ 86.226251][ T5331] generic_perform_write+0x2c5/0x900
[ 86.228569][ T5331] ? __pfx_generic_perform_write+0x10/0x10
[ 86.231099][ T5331] ? file_update_time+0x2da/0x490
[ 86.233187][ T5331] ? __generic_file_write_iter+0xf9/0x230
[ 86.235341][ T5331] ? generic_file_write_iter+0x103/0x550
[ 86.237775][ T5331] generic_file_write_iter+0x117/0x550
[ 86.240263][ T5331] ? __pfx_generic_file_write_iter+0x10/0x10
[ 86.242683][ T5331] ? __lock_acquire+0xab9/0xd20
[ 86.245113][ T5331] ? rcu_read_lock_any_held+0xb3/0x120
[ 86.247534][ T5331] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 86.250135][ T5331] vfs_write+0x5c9/0xb30
[ 86.251961][ T5331] ? __pfx_generic_file_write_iter+0x10/0x10
[ 86.254814][ T5331] ? __pfx_vfs_write+0x10/0x10
[ 86.257090][ T5331] ? __fget_files+0x2a/0x420
[ 86.259345][ T5331] ksys_write+0x145/0x250
[ 86.261215][ T5331] ? __pfx_ksys_write+0x10/0x10
[ 86.263441][ T5331] ? do_syscall_64+0xbe/0xfa0
[ 86.265415][ T5331] do_syscall_64+0xfa/0xfa0
[ 86.267623][ T5331] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.270112][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.273020][ T5331] ? clear_bhb_loop+0x60/0xb0
[ 86.275660][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.278658][ T5331] RIP: 0033:0x7feb8958f6c9
[ 86.280629][ T5331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.289379][ T5331] RSP: 002b:00007feb8a347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 86.293418][ T5331] RAX: ffffffffffffffda RBX: 00007feb897e6090 RCX: 00007feb8958f6c9
[ 86.297433][ T5331] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005
[ 86.301069][ T5331] RBP: 00007feb89611f91 R08: 0000000000000000 R09: 0000000000000000
[ 86.304262][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.307735][ T5331] R13: 00007feb897e6128 R14: 00007feb897e6090 R15: 00007ffdc8f2d0a8
[ 86.311999][ T5331]
[ 86.314335][ T5331] Kernel Offset: disabled
[ 86.316115][ T5331] Rebooting in 86400 seconds..