program: openat$tun(0xffffffffffffff9c, 0x0, 0x10040, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x16}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000440)=""/130, 0x82}], 0x3, &(0x7f0000000340)}, 0x40000062) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000008c0), 0xfecc) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) [ 57.506290][ T5352] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 57.523069][ T5352] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 57.546440][ T5350] loop0: detected capacity change from 0 to 64 [ 57.577052][ T5352] ------------[ cut here ]------------ [ 57.579594][ T5352] WARNING: CPU: 0 PID: 5352 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410 [ 57.584495][ T5352] Modules linked in: [ 57.586365][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.0.0 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 57.591354][ T5352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.596042][ T5352] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 57.598550][ T5352] Code: 4c 89 f7 e8 29 4f dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 04 04 fc ff e8 2f 67 78 ff eb 8c e8 28 67 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 1a 67 78 ff 90 0f 0b 90 e9 bf fd ff ff [ 57.606570][ T5352] RSP: 0018:ffffc9000d527608 EFLAGS: 00010293 [ 57.609244][ T5352] RAX: ffffffff82475418 RBX: ffff888042fe0bc8 RCX: ffff888000a8a440 [ 57.613080][ T5352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 57.616802][ T5352] RBP: ffff88803f10e001 R08: ffff888042fe0bcf R09: 1ffff110085fc179 [ 57.620106][ T5352] R10: dffffc0000000000 R11: ffffed10085fc17a R12: ffff88804cbf5400 [ 57.623611][ T5352] R13: ffff888032127000 R14: ffff888042fe0bc8 R15: 000000000000000a [ 57.627170][ T5352] FS: 00007f4a02f646c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 57.631114][ T5352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.634327][ T5352] CR2: 0000200000002000 CR3: 000000003f48c000 CR4: 0000000000352ef0 [ 57.637750][ T5352] Call Trace: [ 57.639116][ T5352] [ 57.640443][ T5352] bfs_get_block+0x5da/0xae0 [ 57.642357][ T5352] __block_write_begin_int+0x6b2/0x1900 [ 57.645007][ T5352] ? __pfx_bfs_get_block+0x10/0x10 [ 57.646905][ T5352] ? __pfx___block_write_begin_int+0x10/0x10 [ 57.649482][ T5352] ? __filemap_get_folio+0x79f/0xaf0 [ 57.651765][ T5352] ? __pfx_bfs_get_block+0x10/0x10 [ 57.654175][ T5352] block_write_begin+0x8a/0x120 [ 57.656290][ T5352] ? bfs_write_begin+0x1e/0xd0 [ 57.658513][ T5352] bfs_write_begin+0x35/0xd0 [ 57.660522][ T5352] generic_perform_write+0x2c5/0x900 [ 57.663029][ T5352] ? __pfx_generic_perform_write+0x10/0x10 [ 57.665589][ T5352] ? file_update_time+0x2da/0x490 [ 57.667658][ T5352] ? __generic_file_write_iter+0xf9/0x230 [ 57.670020][ T5352] ? generic_file_write_iter+0x103/0x550 [ 57.672552][ T5352] generic_file_write_iter+0x117/0x550 [ 57.674837][ T5352] ? __pfx_generic_file_write_iter+0x10/0x10 [ 57.677481][ T5352] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 57.679980][ T5352] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 57.682890][ T5352] ? __pfx_aa_file_perm+0x10/0x10 [ 57.685030][ T5352] ? futex_private_hash_put+0x4b/0x280 [ 57.687283][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.689248][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.691321][ T5352] ? vfs_write+0x211/0xb30 [ 57.693389][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.695499][ T5352] ? lock_acquire+0x5f/0x360 [ 57.697558][ T5352] ? security_file_permission+0x75/0x290 [ 57.699928][ T5352] vfs_write+0x5c6/0xb30 [ 57.701660][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.703841][ T5352] ? __pfx_generic_file_write_iter+0x10/0x10 [ 57.707004][ T5352] ? __pfx_vfs_write+0x10/0x10 [ 57.709599][ T5352] ? __fget_files+0x2a/0x420 [ 57.711614][ T5352] ksys_write+0x145/0x250 [ 57.713836][ T5352] ? __pfx_ksys_write+0x10/0x10 [ 57.715978][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.718075][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.720095][ T5352] do_syscall_64+0xfa/0x3b0 [ 57.722004][ T5352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.724804][ T5352] ? clear_bhb_loop+0x60/0xb0 [ 57.726944][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.729609][ T5352] RIP: 0033:0x7f4a0218ebe9 [ 57.731491][ T5352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.739744][ T5352] RSP: 002b:00007f4a02f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.743426][ T5352] RAX: ffffffffffffffda RBX: 00007f4a023b6180 RCX: 00007f4a0218ebe9 [ 57.746893][ T5352] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 000000000000000a [ 57.750486][ T5352] RBP: 00007f4a02211e19 R08: 0000000000000000 R09: 0000000000000000 [ 57.754189][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.758250][ T5352] R13: 00007f4a023b6218 R14: 00007f4a023b6180 R15: 00007ffdb0a920a8 [ 57.762335][ T5352] [ 57.764240][ T5352] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.767859][ T5352] CPU: 0 UID: 0 PID: 5352 Comm: syz.0.0 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 57.773099][ T5352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.778279][ T5352] Call Trace: [ 57.779484][ T5352] [ 57.780700][ T5352] dump_stack_lvl+0x99/0x250 [ 57.782357][ T5352] ? __asan_memcpy+0x40/0x70 [ 57.783932][ T5352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.786140][ T5352] ? __pfx__printk+0x10/0x10 [ 57.788338][ T5352] vpanic+0x281/0x750 [ 57.790105][ T5352] ? __pfx__printk+0x10/0x10 [ 57.792179][ T5352] ? __pfx_vpanic+0x10/0x10 [ 57.793960][ T5352] ? is_bpf_text_address+0x26/0x2b0 [ 57.796010][ T5352] panic+0xb9/0xc0 [ 57.797717][ T5352] ? __pfx_panic+0x10/0x10 [ 57.799843][ T5352] __warn+0x31b/0x4b0 [ 57.801559][ T5352] ? mark_buffer_dirty+0x2a9/0x410 [ 57.803859][ T5352] ? mark_buffer_dirty+0x2a9/0x410 [ 57.806084][ T5352] report_bug+0x2be/0x4f0 [ 57.807877][ T5352] ? mark_buffer_dirty+0x2a9/0x410 [ 57.810205][ T5352] ? mark_buffer_dirty+0x2a9/0x410 [ 57.812277][ T5352] ? mark_buffer_dirty+0x2ab/0x410 [ 57.814512][ T5352] handle_bug+0x84/0x160 [ 57.816336][ T5352] exc_invalid_op+0x1a/0x50 [ 57.818335][ T5352] asm_exc_invalid_op+0x1a/0x20 [ 57.820312][ T5352] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 57.822727][ T5352] Code: 4c 89 f7 e8 29 4f dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 04 04 fc ff e8 2f 67 78 ff eb 8c e8 28 67 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 1a 67 78 ff 90 0f 0b 90 e9 bf fd ff ff [ 57.830601][ T5352] RSP: 0018:ffffc9000d527608 EFLAGS: 00010293 [ 57.832902][ T5352] RAX: ffffffff82475418 RBX: ffff888042fe0bc8 RCX: ffff888000a8a440 [ 57.836392][ T5352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 57.839819][ T5352] RBP: ffff88803f10e001 R08: ffff888042fe0bcf R09: 1ffff110085fc179 [ 57.843393][ T5352] R10: dffffc0000000000 R11: ffffed10085fc17a R12: ffff88804cbf5400 [ 57.846808][ T5352] R13: ffff888032127000 R14: ffff888042fe0bc8 R15: 000000000000000a [ 57.850318][ T5352] ? mark_buffer_dirty+0x2a8/0x410 [ 57.852625][ T5352] ? mark_buffer_dirty+0x2a8/0x410 [ 57.854885][ T5352] bfs_get_block+0x5da/0xae0 [ 57.856973][ T5352] __block_write_begin_int+0x6b2/0x1900 [ 57.859432][ T5352] ? __pfx_bfs_get_block+0x10/0x10 [ 57.861822][ T5352] ? __pfx___block_write_begin_int+0x10/0x10 [ 57.864348][ T5352] ? __filemap_get_folio+0x79f/0xaf0 [ 57.866658][ T5352] ? __pfx_bfs_get_block+0x10/0x10 [ 57.868850][ T5352] block_write_begin+0x8a/0x120 [ 57.870926][ T5352] ? bfs_write_begin+0x1e/0xd0 [ 57.872902][ T5352] bfs_write_begin+0x35/0xd0 [ 57.874991][ T5352] generic_perform_write+0x2c5/0x900 [ 57.877256][ T5352] ? __pfx_generic_perform_write+0x10/0x10 [ 57.879581][ T5352] ? file_update_time+0x2da/0x490 [ 57.881809][ T5352] ? __generic_file_write_iter+0xf9/0x230 [ 57.884337][ T5352] ? generic_file_write_iter+0x103/0x550 [ 57.887094][ T5352] generic_file_write_iter+0x117/0x550 [ 57.889666][ T5352] ? __pfx_generic_file_write_iter+0x10/0x10 [ 57.892384][ T5352] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 57.895158][ T5352] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 57.898055][ T5352] ? __pfx_aa_file_perm+0x10/0x10 [ 57.900340][ T5352] ? futex_private_hash_put+0x4b/0x280 [ 57.902808][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.905052][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.907169][ T5352] ? vfs_write+0x211/0xb30 [ 57.909192][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.911411][ T5352] ? lock_acquire+0x5f/0x360 [ 57.913523][ T5352] ? security_file_permission+0x75/0x290 [ 57.916083][ T5352] vfs_write+0x5c6/0xb30 [ 57.917742][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.920032][ T5352] ? __pfx_generic_file_write_iter+0x10/0x10 [ 57.922787][ T5352] ? __pfx_vfs_write+0x10/0x10 [ 57.924961][ T5352] ? __fget_files+0x2a/0x420 [ 57.927107][ T5352] ksys_write+0x145/0x250 [ 57.929131][ T5352] ? __pfx_ksys_write+0x10/0x10 [ 57.931342][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.933525][ T5352] ? rcu_is_watching+0x15/0xb0 [ 57.935764][ T5352] do_syscall_64+0xfa/0x3b0 [ 57.937858][ T5352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.940503][ T5352] ? clear_bhb_loop+0x60/0xb0 [ 57.942603][ T5352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.945230][ T5352] RIP: 0033:0x7f4a0218ebe9 [ 57.947340][ T5352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.955873][ T5352] RSP: 002b:00007f4a02f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.959711][ T5352] RAX: ffffffffffffffda RBX: 00007f4a023b6180 RCX: 00007f4a0218ebe9 [ 57.963231][ T5352] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 000000000000000a [ 57.966897][ T5352] RBP: 00007f4a02211e19 R08: 0000000000000000 R09: 0000000000000000 [ 57.970325][ T5352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.973787][ T5352] R13: 00007f4a023b6218 R14: 00007f4a023b6180 R15: 00007ffdb0a920a8 [ 57.977248][ T5352] [ 57.978930][ T5352] Kernel Offset: disabled [ 57.980794][ T5352] Rebooting in 86400 seconds..