program: r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xaf, &(0x7f0000000380)="$eJzs1zFKA0EABdDvCmprI4KF9TbewaOIpTZipQjeIOQiuUqOsH2KFNuGkAnJbgghqVKkWN4rBv58Bqb908XkaVwn5T8p9ePXrOx9//x+vH12ZxikKsltkrskz/ddnr923VXfN+3fe9NeHz++GV38vwAAwPmqvBzmVekvlv0K3E6Dh12/CTkxBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGah0AAP//ghMolg==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x96) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000008c0), 0xfecc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9000}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004052}, 0x400) [ 109.277368][ T5332] loop0: detected capacity change from 0 to 64 [ 109.289667][ T5290] Bluetooth: hci0: command tx timeout [ 109.424147][ T5333] ------------[ cut here ]------------ [ 109.427258][ T5333] !buffer_uptodate(bh) [ 109.427274][ T5333] WARNING: fs/buffer.c:1093 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5333 [ 109.435057][ T5333] Modules linked in: [ 109.437644][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 109.441573][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.445924][ T5333] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 109.448516][ T5333] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 2f ec 69 ff eb 8c e8 28 ec 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 1a ec 69 ff 90 0f 0b 90 e9 cf fd ff ff [ 109.457829][ T5333] RSP: 0018:ffffc9000eab7828 EFLAGS: 00010293 [ 109.460605][ T5333] RAX: ffffffff825c54c8 RBX: ffff888044217ee0 RCX: ffff88800022ca80 [ 109.464268][ T5333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 109.468201][ T5333] RBP: 0000000000000201 R08: ffff888044217ee7 R09: 1ffff11008842fdc [ 109.471593][ T5333] R10: dffffc0000000000 R11: ffffed1008842fdd R12: 0000000000000010 [ 109.474847][ T5333] R13: ffff888044217ee0 R14: ffff888044203c40 R15: dffffc0000000000 [ 109.478151][ T5333] FS: 00007fd5a01126c0(0000) GS:ffff88808c81f000(0000) knlGS:0000000000000000 [ 109.482886][ T5333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.485903][ T5333] CR2: 0000000000000000 CR3: 0000000043a7e000 CR4: 0000000000352ef0 [ 109.489381][ T5333] Call Trace: [ 109.490909][ T5333] [ 109.492126][ T5333] bfs_get_block+0x5c6/0xb50 [ 109.494362][ T5333] __block_write_begin_int+0x6c2/0x1900 [ 109.497169][ T5333] ? __pfx_bfs_get_block+0x10/0x10 [ 109.499826][ T5333] ? __pfx___block_write_begin_int+0x10/0x10 [ 109.502497][ T5333] ? __pfx_bfs_get_block+0x10/0x10 [ 109.504820][ T5333] block_write_begin+0x8d/0x120 [ 109.506854][ T5333] ? bfs_write_begin+0x1e/0xd0 [ 109.508940][ T5333] bfs_write_begin+0x35/0xd0 [ 109.511078][ T5333] generic_perform_write+0x2d5/0x8f0 [ 109.513633][ T5333] ? __pfx_generic_perform_write+0x10/0x10 [ 109.516538][ T5333] ? file_update_time_flags+0x219/0x4a0 [ 109.519314][ T5333] ? __generic_file_write_iter+0xf9/0x230 [ 109.521820][ T5333] ? generic_file_write_iter+0x9a/0x330 [ 109.524393][ T5333] generic_file_write_iter+0xae/0x330 [ 109.526743][ T5333] vfs_write+0x612/0xba0 [ 109.528748][ T5333] ? __pfx_vfs_write+0x10/0x10 [ 109.531267][ T5333] ? __fget_files+0x2a/0x420 [ 109.533960][ T5333] ksys_write+0x150/0x270 [ 109.536608][ T5333] ? __pfx_ksys_write+0x10/0x10 [ 109.538764][ T5333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.541695][ T5333] do_syscall_64+0x174/0x580 [ 109.543906][ T5333] ? trace_irq_disable+0x3b/0x140 [ 109.546119][ T5333] ? clear_bhb_loop+0x40/0x90 [ 109.548300][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.551692][ T5333] RIP: 0033:0x7fd59f19ce59 [ 109.554535][ T5333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.562899][ T5333] RSP: 002b:00007fd5a0111fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.566761][ T5333] RAX: ffffffffffffffda RBX: 00007fd59f416090 RCX: 00007fd59f19ce59 [ 109.570794][ T5333] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000006 [ 109.574861][ T5333] RBP: 00007fd59f232e6f R08: 0000000000000000 R09: 0000000000000000 [ 109.578226][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.581789][ T5333] R13: 00007fd59f416128 R14: 00007fd59f416090 R15: 00007ffd6e20cee8 [ 109.585751][ T5333] [ 109.587383][ T5333] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.590907][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 109.594983][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.599717][ T5333] Call Trace: [ 109.601554][ T5333] [ 109.603165][ T5333] vpanic+0x56c/0xa60 [ 109.604962][ T5333] ? __pfx__printk+0x10/0x10 [ 109.607063][ T5333] ? __pfx_vpanic+0x10/0x10 [ 109.609165][ T5333] ? is_bpf_text_address+0x292/0x2b0 [ 109.611506][ T5333] ? is_bpf_text_address+0x26/0x2b0 [ 109.613830][ T5333] panic+0xc5/0xd0 [ 109.615811][ T5333] ? __pfx_panic+0x10/0x10 [ 109.618119][ T5333] __warn+0x315/0x4c0 [ 109.620252][ T5333] ? mark_buffer_dirty+0x299/0x410 [ 109.622625][ T5333] ? mark_buffer_dirty+0x299/0x410 [ 109.624759][ T5333] __report_bug+0x331/0x530 [ 109.626771][ T5333] ? filemap_get_entry+0xcd/0x3f0 [ 109.629388][ T5333] ? filemap_get_entry+0xcd/0x3f0 [ 109.632149][ T5333] ? mark_buffer_dirty+0x299/0x410 [ 109.634690][ T5333] ? __pfx___report_bug+0x10/0x10 [ 109.636929][ T5333] ? __pfx_folio_mark_accessed+0x10/0x10 [ 109.639321][ T5333] ? mark_buffer_dirty+0x299/0x410 [ 109.641399][ T5333] report_bug+0x16a/0x220 [ 109.643219][ T5333] ? mark_buffer_dirty+0x299/0x410 [ 109.645639][ T5333] ? mark_buffer_dirty+0x29b/0x410 [ 109.648180][ T5333] handle_bug+0x9c/0x200 [ 109.650048][ T5333] exc_invalid_op+0x1a/0x50 [ 109.651932][ T5333] asm_exc_invalid_op+0x1a/0x20 [ 109.653958][ T5333] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 109.656742][ T5333] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 2f ec 69 ff eb 8c e8 28 ec 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 1a ec 69 ff 90 0f 0b 90 e9 cf fd ff ff [ 109.666263][ T5333] RSP: 0018:ffffc9000eab7828 EFLAGS: 00010293 [ 109.669039][ T5333] RAX: ffffffff825c54c8 RBX: ffff888044217ee0 RCX: ffff88800022ca80 [ 109.672577][ T5333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 109.676728][ T5333] RBP: 0000000000000201 R08: ffff888044217ee7 R09: 1ffff11008842fdc [ 109.680159][ T5333] R10: dffffc0000000000 R11: ffffed1008842fdd R12: 0000000000000010 [ 109.683545][ T5333] R13: ffff888044217ee0 R14: ffff888044203c40 R15: dffffc0000000000 [ 109.687481][ T5333] ? mark_buffer_dirty+0x298/0x410 [ 109.690289][ T5333] ? mark_buffer_dirty+0x298/0x410 [ 109.692735][ T5333] bfs_get_block+0x5c6/0xb50 [ 109.694818][ T5333] __block_write_begin_int+0x6c2/0x1900 [ 109.697196][ T5333] ? __pfx_bfs_get_block+0x10/0x10 [ 109.699518][ T5333] ? __pfx___block_write_begin_int+0x10/0x10 [ 109.702441][ T5333] ? __pfx_bfs_get_block+0x10/0x10 [ 109.705076][ T5333] block_write_begin+0x8d/0x120 [ 109.707208][ T5333] ? bfs_write_begin+0x1e/0xd0 [ 109.709346][ T5333] bfs_write_begin+0x35/0xd0 [ 109.711416][ T5333] generic_perform_write+0x2d5/0x8f0 [ 109.713592][ T5333] ? __pfx_generic_perform_write+0x10/0x10 [ 109.716307][ T5333] ? file_update_time_flags+0x219/0x4a0 [ 109.719521][ T5333] ? __generic_file_write_iter+0xf9/0x230 [ 109.722219][ T5333] ? generic_file_write_iter+0x9a/0x330 [ 109.724608][ T5333] generic_file_write_iter+0xae/0x330 [ 109.726937][ T5333] vfs_write+0x612/0xba0 [ 109.728790][ T5333] ? __pfx_vfs_write+0x10/0x10 [ 109.730937][ T5333] ? __fget_files+0x2a/0x420 [ 109.733292][ T5333] ksys_write+0x150/0x270 [ 109.735746][ T5333] ? __pfx_ksys_write+0x10/0x10 [ 109.738607][ T5333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.741788][ T5333] do_syscall_64+0x174/0x580 [ 109.744092][ T5333] ? trace_irq_disable+0x3b/0x140 [ 109.746843][ T5333] ? clear_bhb_loop+0x40/0x90 [ 109.749131][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.752300][ T5333] RIP: 0033:0x7fd59f19ce59 [ 109.754646][ T5333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.762923][ T5333] RSP: 002b:00007fd5a0111fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.768108][ T5333] RAX: ffffffffffffffda RBX: 00007fd59f416090 RCX: 00007fd59f19ce59 [ 109.771603][ T5333] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000006 [ 109.774898][ T5333] RBP: 00007fd59f232e6f R08: 0000000000000000 R09: 0000000000000000 [ 109.778079][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.781256][ T5333] R13: 00007fd59f416128 R14: 00007fd59f416090 R15: 00007ffd6e20cee8 [ 109.785391][ T5333] [ 109.787438][ T5333] Kernel Offset: disabled [ 109.789633][ T5333] Rebooting in 86400 seconds..