program: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x20, 0x10012, r0, 0x7000) write$dsp(r0, &(0x7f0000000300)="22af504976dc5015c2c83c4b6990c457ec06dfab2a37e337863296", 0x1b) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='tlb_flush\x00'}, 0x10) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r1, 0x32, 0x0, 0x9, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000cc0)='ext4\x00', &(0x7f0000000d00)='./file1\x00', 0x400, &(0x7f0000000d40), 0x2, 0x786, &(0x7f0000000d80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./file1\x00', 0x80342, 0x168) pwrite64(r3, &(0x7f0000001580)='2', 0xfdef, 0xfecc) r4 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000280)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000240)={0x208004, 0x21fffd, 0xe, 0x0, 0x2, 0x10000000}) writev(r5, &(0x7f0000000300), 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000001600)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004882, 0x0) io_setup(0x2, &(0x7f0000000340)=0x0) io_submit(r7, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) [ 94.495480][ T4646] Bluetooth: hci0: command tx timeout [ 94.789868][ T5321] loop0: detected capacity change from 0 to 2048 [ 94.881448][ T5321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.947752][ T5320] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 94.962703][ T5320] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 94.962725][ T5320] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.962725][ T5320] [ 94.962734][ T5320] EXT4-fs (loop0): Total free blocks count 0 [ 94.962742][ T5320] EXT4-fs (loop0): Free/Dirty block details [ 94.962768][ T5320] EXT4-fs (loop0): free_blocks=4096 [ 94.962788][ T5320] EXT4-fs (loop0): dirty_blocks=48 [ 94.962795][ T5320] EXT4-fs (loop0): Block reservation details [ 94.962802][ T5320] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 95.024007][ T184] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28 [ 95.058645][ T5321] ------------[ cut here ]------------ [ 95.058657][ T5321] !folio_buffers(folio) [ 95.058673][ T5321] WARNING: fs/ext4/inode.c:3937 at ext4_dirty_folio+0x167/0x1b0, CPU#0: syz.0.0/5321 [ 95.069762][ T5321] Modules linked in: [ 95.071490][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.075314][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.079668][ T5321] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 95.082062][ T5321] Code: 2f eb a4 ff 49 83 3f 00 74 1a e8 24 73 32 ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1f 19 cd ff e8 0a 73 32 ff 90 <0f> 0b 90 eb e0 e8 ff 72 32 ff 90 0f 0b 90 eb a7 e8 f4 72 32 ff 48 [ 95.090577][ T5321] RSP: 0018:ffffc9000f947528 EFLAGS: 00010287 [ 95.093160][ T5321] RAX: ffffffff8295b006 RBX: ffffea00007eb840 RCX: 0000000000100000 [ 95.096456][ T5321] RDX: ffffc9000ef69000 RSI: 000000000000399f RDI: 00000000000039a0 [ 95.099762][ T5321] RBP: 1ffffd40000fd708 R08: ffffea00007eb847 R09: 1ffffd40000fd708 [ 95.103170][ T5321] R10: dffffc0000000000 R11: fffff940000fd709 R12: ffff888044f39f88 [ 95.106794][ T5321] R13: 1ffffd40000fd709 R14: 0000000000000001 R15: ffffea00007eb868 [ 95.110230][ T5321] FS: 00007f77270d76c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 95.113803][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.116563][ T5321] CR2: 000055bb9e4c1d48 CR3: 000000001458e000 CR4: 0000000000352ef0 [ 95.119973][ T5321] Call Trace: [ 95.121492][ T5321] [ 95.122739][ T5321] bio_set_pages_dirty+0x372/0xa70 [ 95.125106][ T5321] __blkdev_direct_IO+0x821/0xf60 [ 95.127414][ T5321] ? __pfx_aio_complete_rw+0x10/0x10 [ 95.129853][ T5321] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 95.132173][ T5321] ? __lock_acquire+0x747/0x2de0 [ 95.134185][ T5321] blkdev_direct_IO+0x121e/0x17c0 [ 95.136181][ T5321] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 95.138547][ T5321] ? reacquire_held_locks+0x117/0x1a0 [ 95.140774][ T5321] ? __mark_inode_dirty+0x705/0x13b0 [ 95.142939][ T5321] ? blkdev_read_iter+0x200/0x420 [ 95.144979][ T5321] ? touch_atime+0x37c/0x670 [ 95.147752][ T5321] ? blkdev_read_iter+0x200/0x420 [ 95.150927][ T5321] blkdev_read_iter+0x223/0x420 [ 95.153188][ T5321] aio_read+0x33a/0x4d0 [ 95.155374][ T5321] ? __pfx_aio_read+0x10/0x10 [ 95.157182][ T5321] io_submit_one+0x774/0x13d0 [ 95.159653][ T5321] ? lockdep_hardirqs_on+0x7b/0x110 [ 95.161939][ T5321] ? irqentry_exit+0x2a0/0x9b0 [ 95.163698][ T5321] ? __pfx_io_submit_one+0x10/0x10 [ 95.165888][ T5321] ? lock_acquire+0x115/0x350 [ 95.168094][ T5321] ? __might_fault+0xaf/0x130 [ 95.170485][ T5321] __se_sys_io_submit+0x195/0x340 [ 95.172688][ T5321] ? __pfx___se_sys_io_submit+0x10/0x10 [ 95.175107][ T5321] do_syscall_64+0x166/0x520 [ 95.177367][ T5321] ? trace_irq_disable+0x3b/0x140 [ 95.180157][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.182910][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 95.185136][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.188143][ T5321] RIP: 0033:0x7f772619e559 [ 95.190704][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.199429][ T5321] RSP: 002b:00007f77270d6fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 95.203180][ T5321] RAX: ffffffffffffffda RBX: 00007f7726425fa0 RCX: 00007f772619e559 [ 95.206861][ T5321] RDX: 00002000000000c0 RSI: 00000000000000ca RDI: 00007f7727095000 [ 95.211982][ T5321] RBP: 00007f7726235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 95.215167][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.218583][ T5321] R13: 00007f7726426038 R14: 00007f7726425fa0 R15: 00007ffd0a640ca8 [ 95.222235][ T5321] [ 95.223605][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.226818][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.230606][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.234832][ T5321] Call Trace: [ 95.236379][ T5321] [ 95.237677][ T5321] vpanic+0x56d/0xa60 [ 95.239535][ T5321] ? __pfx__printk+0x10/0x10 [ 95.241544][ T5321] ? __pfx_vpanic+0x10/0x10 [ 95.243922][ T5321] ? is_bpf_text_address+0x292/0x2b0 [ 95.246523][ T5321] ? is_bpf_text_address+0x26/0x2b0 [ 95.248799][ T5321] panic+0xc5/0xd0 [ 95.250432][ T5321] ? __pfx_panic+0x10/0x10 [ 95.252454][ T5321] __warn+0x315/0x4c0 [ 95.254292][ T5321] ? ext4_dirty_folio+0x167/0x1b0 [ 95.256504][ T5321] ? ext4_dirty_folio+0x167/0x1b0 [ 95.258785][ T5321] __report_bug+0x276/0x570 [ 95.260864][ T5321] ? ext4_dirty_folio+0x167/0x1b0 [ 95.263058][ T5321] ? __pfx___report_bug+0x10/0x10 [ 95.265279][ T5321] ? irqentry_exit+0x2a0/0x9b0 [ 95.267435][ T5321] ? trace_irq_disable+0x3b/0x140 [ 95.269636][ T5321] ? ext4_dirty_folio+0x169/0x1b0 [ 95.271770][ T5321] ? ext4_dirty_folio+0x167/0x1b0 [ 95.273993][ T5321] ? ext4_dirty_folio+0x167/0x1b0 [ 95.276137][ T5321] report_bug+0x16b/0x220 [ 95.279722][ T5321] ? ext4_dirty_folio+0x167/0x1b0 [ 95.281852][ T5321] ? ext4_dirty_folio+0x169/0x1b0 [ 95.283998][ T5321] handle_bug+0x9c/0x200 [ 95.285778][ T5321] exc_invalid_op+0x1a/0x50 [ 95.287679][ T5321] asm_exc_invalid_op+0x1a/0x20 [ 95.289736][ T5321] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 95.292178][ T5321] Code: 2f eb a4 ff 49 83 3f 00 74 1a e8 24 73 32 ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1f 19 cd ff e8 0a 73 32 ff 90 <0f> 0b 90 eb e0 e8 ff 72 32 ff 90 0f 0b 90 eb a7 e8 f4 72 32 ff 48 [ 95.300356][ T5321] RSP: 0018:ffffc9000f947528 EFLAGS: 00010287 [ 95.303156][ T5321] RAX: ffffffff8295b006 RBX: ffffea00007eb840 RCX: 0000000000100000 [ 95.306929][ T5321] RDX: ffffc9000ef69000 RSI: 000000000000399f RDI: 00000000000039a0 [ 95.310511][ T5321] RBP: 1ffffd40000fd708 R08: ffffea00007eb847 R09: 1ffffd40000fd708 [ 95.314099][ T5321] R10: dffffc0000000000 R11: fffff940000fd709 R12: ffff888044f39f88 [ 95.317503][ T5321] R13: 1ffffd40000fd709 R14: 0000000000000001 R15: ffffea00007eb868 [ 95.320618][ T5321] ? ext4_dirty_folio+0x166/0x1b0 [ 95.322866][ T5321] ? ext4_dirty_folio+0x166/0x1b0 [ 95.325104][ T5321] bio_set_pages_dirty+0x372/0xa70 [ 95.327514][ T5321] __blkdev_direct_IO+0x821/0xf60 [ 95.329592][ T5321] ? __pfx_aio_complete_rw+0x10/0x10 [ 95.331637][ T5321] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 95.333814][ T5321] ? __lock_acquire+0x747/0x2de0 [ 95.335788][ T5321] blkdev_direct_IO+0x121e/0x17c0 [ 95.337937][ T5321] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 95.340032][ T5321] ? reacquire_held_locks+0x117/0x1a0 [ 95.342108][ T5321] ? __mark_inode_dirty+0x705/0x13b0 [ 95.344034][ T5321] ? blkdev_read_iter+0x200/0x420 [ 95.345776][ T5321] ? touch_atime+0x37c/0x670 [ 95.347382][ T5321] ? blkdev_read_iter+0x200/0x420 [ 95.349099][ T5321] blkdev_read_iter+0x223/0x420 [ 95.350778][ T5321] aio_read+0x33a/0x4d0 [ 95.352206][ T5321] ? __pfx_aio_read+0x10/0x10 [ 95.353888][ T5321] io_submit_one+0x774/0x13d0 [ 95.355901][ T5321] ? lockdep_hardirqs_on+0x7b/0x110 [ 95.358141][ T5321] ? irqentry_exit+0x2a0/0x9b0 [ 95.360186][ T5321] ? __pfx_io_submit_one+0x10/0x10 [ 95.362360][ T5321] ? lock_acquire+0x115/0x350 [ 95.364238][ T5321] ? __might_fault+0xaf/0x130 [ 95.366091][ T5321] __se_sys_io_submit+0x195/0x340 [ 95.368275][ T5321] ? __pfx___se_sys_io_submit+0x10/0x10 [ 95.370634][ T5321] do_syscall_64+0x166/0x520 [ 95.372723][ T5321] ? trace_irq_disable+0x3b/0x140 [ 95.374951][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.377403][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 95.379390][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.381957][ T5321] RIP: 0033:0x7f772619e559 [ 95.383833][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.391526][ T5321] RSP: 002b:00007f77270d6fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 95.394889][ T5321] RAX: ffffffffffffffda RBX: 00007f7726425fa0 RCX: 00007f772619e559 [ 95.398233][ T5321] RDX: 00002000000000c0 RSI: 00000000000000ca RDI: 00007f7727095000 [ 95.401345][ T5321] RBP: 00007f7726235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 95.404516][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.408056][ T5321] R13: 00007f7726426038 R14: 00007f7726425fa0 R15: 00007ffd0a640ca8 [ 95.411421][ T5321] [ 95.413103][ T5321] Kernel Offset: disabled [ 95.414949][ T5321] Rebooting in 86400 seconds..