program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8008, &(0x7f0000001980)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRES16, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYBLOB="2fecfb2b47b99181063f4ea9a91ac6f65072f0152c20c39ac1fa3f98a9bf4519f1ddd806e46d4f97e3a0c06d3b224332dd177d91e19dbd12718934e5c33da190f134ef5de5cd25678f897b106a4bcc4956a5b987b8b305cec56493d8d526a15bc1359b9c7c18c1c9cf278f262b8d7fea7e8630bec974d1d44f316f6be8491fa5febafde1aece65252ae1609105a79749c16f8ef0593680b0ab39ae08bb", @ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRES8], 0xd, 0xb6, &(0x7f00000001c0)="$eJzs1zFKxEAYBeCXCDGtjQgW2qbxDp7F0kqsFEG8gRfxKh4hvYVFOhF1RJNlCdul2IXl+4qBN4+fmfZ//Xw5fe6S8piU7uTmrazd3t1fP+XvTJWZJuyHOslhkjbJ2dGY3y/Hrpr6fni46oeD843h5qOUsvDh7+WjAADAMnUu5vmnTBdf0xb4H45Xfbvl/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2m8AAAD//6ykLvo=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x0) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x1000001, 0x2, 0x4, 0x9, 0x7f}}, 0x50) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[], 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x6, 0x2, 0xa, 0x1d, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ec58d347f41be5a08", [0x4, 0x7]}) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x5, 0x0, 0x0, {{0x94}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) [ 58.508046][ T5323] loop0: detected capacity change from 0 to 64 [ 58.571643][ T5323] loop0: detected capacity change from 64 to 63 [ 58.591206][ T5306] Bluetooth: hci0: command tx timeout [ 58.599607][ T5324] ------------[ cut here ]------------ [ 58.602317][ T5324] WARNING: CPU: 0 PID: 5324 at fs/buffer.c:1177 mark_buffer_dirty+0x2e5/0x520 [ 58.605756][ T5324] Modules linked in: [ 58.607281][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 58.611374][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.615537][ T5324] RIP: 0010:mark_buffer_dirty+0x2e5/0x520 [ 58.617682][ T5324] Code: 89 df e8 ae 78 db ff 48 8b 3b be 20 00 00 00 5b 41 5e 41 5f 5d e9 fb e8 fb ff e8 a6 9a 71 ff e9 73 ff ff ff e8 9c 9a 71 ff 90 <0f> 0b 90 e9 61 fd ff ff e8 8e 9a 71 ff 90 0f 0b 90 e9 88 fd ff ff [ 58.624588][ T5324] RSP: 0018:ffffc9000d357848 EFLAGS: 00010283 [ 58.626784][ T5324] RAX: ffffffff82234f74 RBX: ffff88804505c001 RCX: 0000000000040000 [ 58.629620][ T5324] RDX: ffffc9000de03000 RSI: 000000000000236f RDI: 0000000000002370 [ 58.632544][ T5324] RBP: 0000000000000000 R08: ffffffff82234cd1 R09: 1ffff11008675d05 [ 58.635496][ T5324] R10: dffffc0000000000 R11: ffffed1008675d06 R12: dffffc0000000000 [ 58.638548][ T5324] R13: ffff8880433ae828 R14: ffff8880433ae828 R15: ffff88803fe02200 [ 58.641575][ T5324] FS: 00007fe482cbb6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 58.644981][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.647508][ T5324] CR2: 00007fe482cbaf98 CR3: 0000000042e3e000 CR4: 0000000000352ef0 [ 58.650421][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.653425][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.656319][ T5324] Call Trace: [ 58.657569][ T5324] [ 58.658674][ T5324] ? __warn+0x168/0x4e0 [ 58.660204][ T5324] ? mark_buffer_dirty+0x2e5/0x520 [ 58.662384][ T5324] ? report_bug+0x2b3/0x500 [ 58.664272][ T5324] ? mark_buffer_dirty+0x2e5/0x520 [ 58.666292][ T5324] ? handle_bug+0x60/0x90 [ 58.667945][ T5324] ? exc_invalid_op+0x1a/0x50 [ 58.669690][ T5324] ? asm_exc_invalid_op+0x1a/0x20 [ 58.671699][ T5324] ? mark_buffer_dirty+0x41/0x520 [ 58.673418][ T5324] ? mark_buffer_dirty+0x2e4/0x520 [ 58.675289][ T5324] ? mark_buffer_dirty+0x2e5/0x520 [ 58.677124][ T5324] ? mark_buffer_dirty+0x2e4/0x520 [ 58.679341][ T5324] bfs_get_block+0xadd/0xb70 [ 58.681259][ T5324] __block_write_begin_int+0x50c/0x1a70 [ 58.683338][ T5324] ? __pfx_bfs_get_block+0x10/0x10 [ 58.685203][ T5324] ? __pfx___block_write_begin_int+0x10/0x10 [ 58.687633][ T5324] ? __filemap_get_folio+0x90b/0xbd0 [ 58.689827][ T5324] ? __pfx_bfs_get_block+0x10/0x10 [ 58.692022][ T5324] block_write_begin+0x8f/0x120 [ 58.694019][ T5324] bfs_write_begin+0x35/0xd0 [ 58.695775][ T5324] generic_perform_write+0x344/0x6d0 [ 58.697952][ T5324] ? __pfx_generic_perform_write+0x10/0x10 [ 58.700097][ T5324] ? __generic_file_write_iter+0x102/0x230 [ 58.702525][ T5324] generic_file_write_iter+0xae/0x310 [ 58.704493][ T5324] vfs_write+0xaeb/0xd30 [ 58.706131][ T5324] ? __pfx_generic_file_write_iter+0x10/0x10 [ 58.708324][ T5324] ? __pfx_vfs_write+0x10/0x10 [ 58.710064][ T5324] ? fdget_pos+0x24e/0x320 [ 58.711935][ T5324] ksys_write+0x183/0x2b0 [ 58.713497][ T5324] ? __pfx_ksys_write+0x10/0x10 [ 58.715241][ T5324] ? exc_page_fault+0x590/0x8c0 [ 58.717041][ T5324] ? do_syscall_64+0xb6/0x230 [ 58.718847][ T5324] do_syscall_64+0xf3/0x230 [ 58.720773][ T5324] ? clear_bhb_loop+0x35/0x90 [ 58.722467][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.724393][ T5324] RIP: 0033:0x7fe481f7e719 [ 58.725898][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.732546][ T5324] RSP: 002b:00007fe482cbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.735521][ T5324] RAX: ffffffffffffffda RBX: 00007fe482136058 RCX: 00007fe481f7e719 [ 58.738551][ T5324] RDX: 000000000000fecc RSI: 0000000020000100 RDI: 0000000000000008 [ 58.741855][ T5324] RBP: 00007fe481ff175e R08: 0000000000000000 R09: 0000000000000000 [ 58.744964][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.747951][ T5324] R13: 0000000000000001 R14: 00007fe482136058 R15: 00007fff30c3c268 [ 58.751307][ T5324] [ 58.752516][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.755181][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 58.759224][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.763369][ T5324] Call Trace: [ 58.764617][ T5324] [ 58.765906][ T5324] dump_stack_lvl+0x241/0x360 [ 58.767844][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.769767][ T5324] ? __pfx__printk+0x10/0x10 [ 58.771601][ T5324] ? vscnprintf+0x5d/0x90 [ 58.773161][ T5324] panic+0x349/0x880 [ 58.774612][ T5324] ? __warn+0x177/0x4e0 [ 58.776051][ T5324] ? __pfx_panic+0x10/0x10 [ 58.777730][ T5324] __warn+0x34b/0x4e0 [ 58.779281][ T5324] ? mark_buffer_dirty+0x2e5/0x520 [ 58.781308][ T5324] report_bug+0x2b3/0x500 [ 58.782890][ T5324] ? mark_buffer_dirty+0x2e5/0x520 [ 58.784541][ T5324] handle_bug+0x60/0x90 [ 58.785973][ T5324] exc_invalid_op+0x1a/0x50 [ 58.787501][ T5324] asm_exc_invalid_op+0x1a/0x20 [ 58.789162][ T5324] RIP: 0010:mark_buffer_dirty+0x2e5/0x520 [ 58.791454][ T5324] Code: 89 df e8 ae 78 db ff 48 8b 3b be 20 00 00 00 5b 41 5e 41 5f 5d e9 fb e8 fb ff e8 a6 9a 71 ff e9 73 ff ff ff e8 9c 9a 71 ff 90 <0f> 0b 90 e9 61 fd ff ff e8 8e 9a 71 ff 90 0f 0b 90 e9 88 fd ff ff [ 58.798101][ T5324] RSP: 0018:ffffc9000d357848 EFLAGS: 00010283 [ 58.800492][ T5324] RAX: ffffffff82234f74 RBX: ffff88804505c001 RCX: 0000000000040000 [ 58.803411][ T5324] RDX: ffffc9000de03000 RSI: 000000000000236f RDI: 0000000000002370 [ 58.806362][ T5324] RBP: 0000000000000000 R08: ffffffff82234cd1 R09: 1ffff11008675d05 [ 58.809287][ T5324] R10: dffffc0000000000 R11: ffffed1008675d06 R12: dffffc0000000000 [ 58.812279][ T5324] R13: ffff8880433ae828 R14: ffff8880433ae828 R15: ffff88803fe02200 [ 58.815175][ T5324] ? mark_buffer_dirty+0x41/0x520 [ 58.817109][ T5324] ? mark_buffer_dirty+0x2e4/0x520 [ 58.819125][ T5324] ? mark_buffer_dirty+0x2e4/0x520 [ 58.821008][ T5324] bfs_get_block+0xadd/0xb70 [ 58.822835][ T5324] __block_write_begin_int+0x50c/0x1a70 [ 58.825054][ T5324] ? __pfx_bfs_get_block+0x10/0x10 [ 58.826886][ T5324] ? __pfx___block_write_begin_int+0x10/0x10 [ 58.829292][ T5324] ? __filemap_get_folio+0x90b/0xbd0 [ 58.831733][ T5324] ? __pfx_bfs_get_block+0x10/0x10 [ 58.833593][ T5324] block_write_begin+0x8f/0x120 [ 58.835423][ T5324] bfs_write_begin+0x35/0xd0 [ 58.837180][ T5324] generic_perform_write+0x344/0x6d0 [ 58.839190][ T5324] ? __pfx_generic_perform_write+0x10/0x10 [ 58.841254][ T5324] ? __generic_file_write_iter+0x102/0x230 [ 58.843440][ T5324] generic_file_write_iter+0xae/0x310 [ 58.845403][ T5324] vfs_write+0xaeb/0xd30 [ 58.847042][ T5324] ? __pfx_generic_file_write_iter+0x10/0x10 [ 58.849514][ T5324] ? __pfx_vfs_write+0x10/0x10 [ 58.851315][ T5324] ? fdget_pos+0x24e/0x320 [ 58.852971][ T5324] ksys_write+0x183/0x2b0 [ 58.854585][ T5324] ? __pfx_ksys_write+0x10/0x10 [ 58.856370][ T5324] ? exc_page_fault+0x590/0x8c0 [ 58.858121][ T5324] ? do_syscall_64+0xb6/0x230 [ 58.859840][ T5324] do_syscall_64+0xf3/0x230 [ 58.861519][ T5324] ? clear_bhb_loop+0x35/0x90 [ 58.863243][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.865451][ T5324] RIP: 0033:0x7fe481f7e719 [ 58.867204][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.874152][ T5324] RSP: 002b:00007fe482cbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.877094][ T5324] RAX: ffffffffffffffda RBX: 00007fe482136058 RCX: 00007fe481f7e719 [ 58.880050][ T5324] RDX: 000000000000fecc RSI: 0000000020000100 RDI: 0000000000000008 [ 58.882992][ T5324] RBP: 00007fe481ff175e R08: 0000000000000000 R09: 0000000000000000 [ 58.885963][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.888764][ T5324] R13: 0000000000000001 R14: 00007fe482136058 R15: 00007fff30c3c268 [ 58.891562][ T5324] [ 58.893020][ T5324] Kernel Offset: disabled [ 58.894751][ T5324] Rebooting in 86400 seconds..