program:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYRES64=0x0], 0x1, 0x25a, &(0x7f0000000240)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9)
r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e53e8bd0c3718724", "8ec96d48101bb5f0081da6d66c86a8cb", "3bb36546", "fd13ba1594b9c95e"}, 0x28)
write$P9_RREADDIR(r1, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0xc, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'gre0\x00'})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0)
socket(0x2, 0x400000000002, 0x0)
[ 93.716286][ T46] Bluetooth: hci0: command tx timeout
[ 93.735132][ T1118] cfg80211: failed to load regulatory.db
[ 93.923945][ T5317] loop0: detected capacity change from 0 to 128
[ 94.112445][ T12] I/O error, dev loop0, sector 1 op 0x1:(WRITE) flags 0x800000 phys_seg 1 prio class 2
[ 94.112576][ T12] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[ 94.112951][ T5317] ------------[ cut here ]------------
[ 94.112959][ T5317] !buffer_uptodate(bh)
[ 94.112964][ T5317] WARNING: fs/buffer.c:991 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5317
[ 94.129033][ T5317] Modules linked in:
[ 94.131607][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.135782][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.140272][ T5317] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 94.142872][ T5317] Code: 4c 89 f7 e8 69 fa d7 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 af 58 66 ff eb 8c e8 a8 58 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 9a 58 66 ff 90 0f 0b 90 e9 cf fd ff ff
[ 94.150931][ T5317] RSP: 0018:ffffc9000de0f438 EFLAGS: 00010287
[ 94.153505][ T5317] RAX: ffffffff8261c6f8 RBX: ffff88801d06ad20 RCX: 0000000000100000
[ 94.156985][ T5317] RDX: ffffc9000f431000 RSI: 000000000002fafe RDI: 000000000002faff
[ 94.163462][ T5317] RBP: dffffc0000000001 R08: ffff88801d06ad27 R09: 1ffff11003a0d5a4
[ 94.166933][ T5317] R10: dffffc0000000000 R11: ffffed1003a0d5a5 R12: dffffc0000000000
[ 94.170365][ T5317] R13: 1ffff92001bc1ebe R14: ffffc9000de0f5f0 R15: ffff888042bc0788
[ 94.173749][ T5317] FS: 00007f48a8bf56c0(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000
[ 94.177434][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.181087][ T5317] CR2: 00007ffedfeb9f52 CR3: 00000000130ff000 CR4: 0000000000352ef0
[ 94.185274][ T5317] Call Trace:
[ 94.187100][ T5317]
[ 94.189251][ T5317] mmb_mark_buffer_dirty+0x2c/0x1f0
[ 94.192011][ T5317] fat12_ent_put+0x1b7/0x2f0
[ 94.194163][ T5317] fat_ent_write+0xb8/0x190
[ 94.196109][ T5317] fat_chain_add+0x409/0x8e0
[ 94.198330][ T5317] ? __pfx_fat_chain_add+0x10/0x10
[ 94.200666][ T5317] ? clean_bdev_aliases+0x62e/0x750
[ 94.202964][ T5317] ? fat_bmap+0x487/0x5a0
[ 94.204909][ T5317] fat_get_block+0x768/0xae0
[ 94.207239][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.210049][ T5317] ? do_raw_spin_unlock+0x4d/0x200
[ 94.212263][ T5317] ? _raw_spin_unlock+0x28/0x50
[ 94.214319][ T5317] ? create_empty_buffers+0x460/0x520
[ 94.217020][ T5317] __block_write_begin_int+0x6c2/0x1900
[ 94.219557][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.221649][ T5317] ? __pfx___block_write_begin_int+0x10/0x10
[ 94.224241][ T5317] cont_write_begin+0x71b/0xac0
[ 94.226356][ T5317] ? __pfx_cont_write_begin+0x10/0x10
[ 94.228897][ T5317] ? do_raw_spin_unlock+0x4d/0x200
[ 94.231175][ T5317] ? _raw_spin_unlock+0x28/0x50
[ 94.233524][ T5317] fat_write_begin+0x7a/0x150
[ 94.235636][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.238336][ T5317] generic_perform_write+0x2d5/0x8f0
[ 94.240807][ T5317] ? __pfx_generic_perform_write+0x10/0x10
[ 94.243508][ T5317] ? file_update_time_flags+0x3ab/0x440
[ 94.245943][ T5317] ? __generic_file_write_iter+0xf9/0x230
[ 94.249203][ T5317] ? generic_file_write_iter+0x9a/0x330
[ 94.251877][ T5317] generic_file_write_iter+0xae/0x330
[ 94.254116][ T5317] vfs_write+0x612/0xba0
[ 94.256033][ T5317] ? __pfx_vfs_write+0x10/0x10
[ 94.258354][ T5317] ? __fget_files+0x2a/0x420
[ 94.260440][ T5317] ksys_write+0x150/0x270
[ 94.262345][ T5317] ? __pfx_ksys_write+0x10/0x10
[ 94.264405][ T5317] do_syscall_64+0x166/0x520
[ 94.266428][ T5317] ? trace_irq_disable+0x3b/0x140
[ 94.268791][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.271542][ T5317] ? clear_bhb_loop+0x70/0xc0
[ 94.273727][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.276333][ T5317] RIP: 0033:0x7f48ac79e159
[ 94.278447][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.287139][ T5317] RSP: 002b:00007f48a8bf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.291194][ T5317] RAX: ffffffffffffffda RBX: 00007f48aca25fa0 RCX: 00007f48ac79e159
[ 94.294754][ T5317] RDX: 00000000fffffceb RSI: 00002000000001c0 RDI: 0000000000000005
[ 94.298312][ T5317] RBP: 00007f48ac83506b R08: 0000000000000000 R09: 0000000000000000
[ 94.301608][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.304998][ T5317] R13: 00007f48aca26038 R14: 00007f48aca25fa0 R15: 00007ffc4250dcc8
[ 94.308558][ T5317]
[ 94.310020][ T5317] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.313035][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.316916][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.321202][ T5317] Call Trace:
[ 94.322637][ T5317]
[ 94.323981][ T5317] vpanic+0x56d/0xa60
[ 94.325650][ T5317] ? __pfx__printk+0x10/0x10
[ 94.327591][ T5317] ? __pfx_vpanic+0x10/0x10
[ 94.329483][ T5317] ? is_bpf_text_address+0x292/0x2b0
[ 94.331787][ T5317] ? is_bpf_text_address+0x26/0x2b0
[ 94.334013][ T5317] panic+0xc5/0xd0
[ 94.335616][ T5317] ? __pfx_panic+0x10/0x10
[ 94.337529][ T5317] __warn+0x315/0x4c0
[ 94.339472][ T5317] ? mark_buffer_dirty+0x299/0x410
[ 94.341622][ T5317] ? mark_buffer_dirty+0x299/0x410
[ 94.343768][ T5317] __report_bug+0x276/0x570
[ 94.345713][ T5317] ? __pfx___schedule+0x10/0x10
[ 94.347730][ T5317] ? mark_buffer_dirty+0x299/0x410
[ 94.349890][ T5317] ? __pfx___report_bug+0x10/0x10
[ 94.351960][ T5317] ? schedule+0x90/0x2b0
[ 94.353701][ T5317] ? __lock_acquire+0x747/0x2de0
[ 94.355762][ T5317] ? mark_buffer_dirty+0x299/0x410
[ 94.357878][ T5317] report_bug+0x16b/0x220
[ 94.359691][ T5317] ? mark_buffer_dirty+0x299/0x410
[ 94.361858][ T5317] ? mark_buffer_dirty+0x29b/0x410
[ 94.364066][ T5317] handle_bug+0x9c/0x200
[ 94.365908][ T5317] exc_invalid_op+0x1a/0x50
[ 94.367820][ T5317] asm_exc_invalid_op+0x1a/0x20
[ 94.369904][ T5317] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 94.372322][ T5317] Code: 4c 89 f7 e8 69 fa d7 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 af 58 66 ff eb 8c e8 a8 58 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 9a 58 66 ff 90 0f 0b 90 e9 cf fd ff ff
[ 94.380323][ T5317] RSP: 0018:ffffc9000de0f438 EFLAGS: 00010287
[ 94.382875][ T5317] RAX: ffffffff8261c6f8 RBX: ffff88801d06ad20 RCX: 0000000000100000
[ 94.386159][ T5317] RDX: ffffc9000f431000 RSI: 000000000002fafe RDI: 000000000002faff
[ 94.389464][ T5317] RBP: dffffc0000000001 R08: ffff88801d06ad27 R09: 1ffff11003a0d5a4
[ 94.392724][ T5317] R10: dffffc0000000000 R11: ffffed1003a0d5a5 R12: dffffc0000000000
[ 94.395978][ T5317] R13: 1ffff92001bc1ebe R14: ffffc9000de0f5f0 R15: ffff888042bc0788
[ 94.399279][ T5317] ? mark_buffer_dirty+0x298/0x410
[ 94.401651][ T5317] ? mark_buffer_dirty+0x298/0x410
[ 94.403896][ T5317] mmb_mark_buffer_dirty+0x2c/0x1f0
[ 94.406168][ T5317] fat12_ent_put+0x1b7/0x2f0
[ 94.408166][ T5317] fat_ent_write+0xb8/0x190
[ 94.410091][ T5317] fat_chain_add+0x409/0x8e0
[ 94.412079][ T5317] ? __pfx_fat_chain_add+0x10/0x10
[ 94.414138][ T5317] ? clean_bdev_aliases+0x62e/0x750
[ 94.416268][ T5317] ? fat_bmap+0x487/0x5a0
[ 94.418070][ T5317] fat_get_block+0x768/0xae0
[ 94.420157][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.422397][ T5317] ? do_raw_spin_unlock+0x4d/0x200
[ 94.424570][ T5317] ? _raw_spin_unlock+0x28/0x50
[ 94.426616][ T5317] ? create_empty_buffers+0x460/0x520
[ 94.428837][ T5317] __block_write_begin_int+0x6c2/0x1900
[ 94.431229][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.433386][ T5317] ? __pfx___block_write_begin_int+0x10/0x10
[ 94.435925][ T5317] cont_write_begin+0x71b/0xac0
[ 94.438029][ T5317] ? __pfx_cont_write_begin+0x10/0x10
[ 94.440359][ T5317] ? do_raw_spin_unlock+0x4d/0x200
[ 94.442586][ T5317] ? _raw_spin_unlock+0x28/0x50
[ 94.444678][ T5317] fat_write_begin+0x7a/0x150
[ 94.446694][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.448872][ T5317] generic_perform_write+0x2d5/0x8f0
[ 94.451201][ T5317] ? __pfx_generic_perform_write+0x10/0x10
[ 94.455324][ T5317] ? file_update_time_flags+0x3ab/0x440
[ 94.457782][ T5317] ? __generic_file_write_iter+0xf9/0x230
[ 94.460236][ T5317] ? generic_file_write_iter+0x9a/0x330
[ 94.462638][ T5317] generic_file_write_iter+0xae/0x330
[ 94.464993][ T5317] vfs_write+0x612/0xba0
[ 94.466919][ T5317] ? __pfx_vfs_write+0x10/0x10
[ 94.469043][ T5317] ? __fget_files+0x2a/0x420
[ 94.471041][ T5317] ksys_write+0x150/0x270
[ 94.472917][ T5317] ? __pfx_ksys_write+0x10/0x10
[ 94.475012][ T5317] do_syscall_64+0x166/0x520
[ 94.477008][ T5317] ? trace_irq_disable+0x3b/0x140
[ 94.479171][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.481818][ T5317] ? clear_bhb_loop+0x70/0xc0
[ 94.483876][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.486365][ T5317] RIP: 0033:0x7f48ac79e159
[ 94.488336][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.496538][ T5317] RSP: 002b:00007f48a8bf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.500158][ T5317] RAX: ffffffffffffffda RBX: 00007f48aca25fa0 RCX: 00007f48ac79e159
[ 94.503412][ T5317] RDX: 00000000fffffceb RSI: 00002000000001c0 RDI: 0000000000000005
[ 94.506735][ T5317] RBP: 00007f48ac83506b R08: 0000000000000000 R09: 0000000000000000
[ 94.510121][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.513486][ T5317] R13: 00007f48aca26038 R14: 00007f48aca25fa0 R15: 00007ffc4250dcc8
[ 94.516761][ T5317]
[ 94.518345][ T5317] Kernel Offset: disabled
[ 94.520257][ T5317] Rebooting in 86400 seconds..