program: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xaf, &(0x7f0000000380)="$eJzs1zFKA0EABdDvCmprI4KF9TbewaOIpTZipQjeIOQiuUqOsH2KFNuGkAnJbgghqVKkWN4rBv58Bqb908XkaVwn5T8p9ePXrOx9//x+vH12ZxikKsltkrskz/ddnr923VXfN+3fe9NeHz++GV38vwAAwPmqvBzmVekvlv0K3E6Dh12/CTkxBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGah0AAP//ghMolg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x96) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x4, 0x0, 0x0, 0x13, 0x0, 0x75f38df77c0cd03e}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x1, 0x7f}, 0x28) (async, rerun: 64) write$binfmt_script(r1, &(0x7f00000008c0), 0xfecc) (rerun: 64) [ 102.923048][ T5291] Bluetooth: hci0: command tx timeout [ 102.993314][ T5326] loop0: detected capacity change from 0 to 64 [ 103.143105][ T5326] ------------[ cut here ]------------ [ 103.146259][ T5326] !buffer_uptodate(bh) [ 103.146285][ T5326] WARNING: fs/buffer.c:1093 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5326 [ 103.154528][ T5326] Modules linked in: [ 103.157026][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.161495][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.166232][ T5326] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 103.168624][ T5326] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 9f f3 69 ff eb 8c e8 98 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 8a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff [ 103.176565][ T5326] RSP: 0018:ffffc9000d177828 EFLAGS: 00010293 [ 103.179762][ T5326] RAX: ffffffff825c7e78 RBX: ffff888043e5dc40 RCX: ffff88803628ca80 [ 103.185186][ T5326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 103.188410][ T5326] RBP: 0000000000000201 R08: ffff888043e5dc47 R09: 1ffff110087cbb88 [ 103.191901][ T5326] R10: dffffc0000000000 R11: ffffed10087cbb89 R12: 000000000000000a [ 103.195278][ T5326] R13: ffff888043e5dc40 R14: ffff888043e5c7e0 R15: dffffc0000000000 [ 103.198729][ T5326] FS: 00007f5186bfa6c0(0000) GS:ffff88808c815000(0000) knlGS:0000000000000000 [ 103.203962][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.209535][ T5326] CR2: 0000200000001000 CR3: 00000000121d7000 CR4: 0000000000352ef0 [ 103.213144][ T5326] Call Trace: [ 103.214695][ T5326] [ 103.216075][ T5326] bfs_get_block+0x5c6/0xb50 [ 103.218113][ T5326] __block_write_begin_int+0x6c2/0x1900 [ 103.220772][ T5326] ? __pfx_bfs_get_block+0x10/0x10 [ 103.223344][ T5326] ? __pfx___block_write_begin_int+0x10/0x10 [ 103.226617][ T5326] ? __pfx_bfs_get_block+0x10/0x10 [ 103.229225][ T5326] block_write_begin+0x8d/0x120 [ 103.231494][ T5326] ? bfs_write_begin+0x1e/0xd0 [ 103.233476][ T5326] bfs_write_begin+0x35/0xd0 [ 103.235631][ T5326] generic_perform_write+0x2d5/0x8f0 [ 103.237836][ T5326] ? __pfx_generic_perform_write+0x10/0x10 [ 103.241696][ T5326] ? file_update_time_flags+0x219/0x4a0 [ 103.245164][ T5326] ? __generic_file_write_iter+0xf9/0x230 [ 103.248202][ T5326] ? generic_file_write_iter+0x9a/0x330 [ 103.250907][ T5326] generic_file_write_iter+0xae/0x330 [ 103.253396][ T5326] vfs_write+0x612/0xba0 [ 103.255303][ T5326] ? __pfx_vfs_write+0x10/0x10 [ 103.257706][ T5326] ? __fget_files+0x2a/0x420 [ 103.260496][ T5326] __x64_sys_pwrite64+0x196/0x220 [ 103.263298][ T5326] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 103.265726][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.268053][ T5326] do_syscall_64+0x174/0x580 [ 103.269905][ T5326] ? trace_irq_disable+0x3b/0x140 [ 103.272743][ T5326] ? clear_bhb_loop+0x40/0x90 [ 103.275510][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.278553][ T5326] RIP: 0033:0x7f5185d9de59 [ 103.281128][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.289611][ T5326] RSP: 002b:00007f5186bf9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 103.293838][ T5326] RAX: ffffffffffffffda RBX: 00007f5186025fa0 RCX: 00007f5185d9de59 [ 103.297531][ T5326] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 103.300953][ T5326] RBP: 00007f5185e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 103.304219][ T5326] R10: 0000000000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 103.308157][ T5326] R13: 00007f5186026038 R14: 00007f5186025fa0 R15: 00007ffec2ae9228 [ 103.312641][ T5326] [ 103.314466][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.318333][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.322329][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.326910][ T5326] Call Trace: [ 103.328323][ T5326] [ 103.329545][ T5326] vpanic+0x56c/0xa60 [ 103.331398][ T5326] ? __pfx__printk+0x10/0x10 [ 103.333639][ T5326] ? __pfx_vpanic+0x10/0x10 [ 103.335991][ T5326] ? is_bpf_text_address+0x292/0x2b0 [ 103.338526][ T5326] ? is_bpf_text_address+0x26/0x2b0 [ 103.341152][ T5326] panic+0xc5/0xd0 [ 103.342789][ T5326] ? __pfx_panic+0x10/0x10 [ 103.344763][ T5326] __warn+0x315/0x4c0 [ 103.346603][ T5326] ? mark_buffer_dirty+0x299/0x410 [ 103.349217][ T5326] ? mark_buffer_dirty+0x299/0x410 [ 103.351954][ T5326] __report_bug+0x331/0x530 [ 103.354202][ T5326] ? filemap_get_entry+0xcd/0x3f0 [ 103.356462][ T5326] ? filemap_get_entry+0xcd/0x3f0 [ 103.358751][ T5326] ? mark_buffer_dirty+0x299/0x410 [ 103.360986][ T5326] ? __pfx___report_bug+0x10/0x10 [ 103.363049][ T5326] ? __pfx_folio_mark_accessed+0x10/0x10 [ 103.365345][ T5326] ? mark_buffer_dirty+0x299/0x410 [ 103.367560][ T5326] report_bug+0x16a/0x220 [ 103.369664][ T5326] ? mark_buffer_dirty+0x299/0x410 [ 103.372196][ T5326] ? mark_buffer_dirty+0x29b/0x410 [ 103.374716][ T5326] handle_bug+0x9c/0x200 [ 103.376826][ T5326] exc_invalid_op+0x1a/0x50 [ 103.378803][ T5326] asm_exc_invalid_op+0x1a/0x20 [ 103.381034][ T5326] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 103.383733][ T5326] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 9f f3 69 ff eb 8c e8 98 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 8a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff [ 103.393678][ T5326] RSP: 0018:ffffc9000d177828 EFLAGS: 00010293 [ 103.396412][ T5326] RAX: ffffffff825c7e78 RBX: ffff888043e5dc40 RCX: ffff88803628ca80 [ 103.399742][ T5326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 103.403277][ T5326] RBP: 0000000000000201 R08: ffff888043e5dc47 R09: 1ffff110087cbb88 [ 103.408002][ T5326] R10: dffffc0000000000 R11: ffffed10087cbb89 R12: 000000000000000a [ 103.412113][ T5326] R13: ffff888043e5dc40 R14: ffff888043e5c7e0 R15: dffffc0000000000 [ 103.415980][ T5326] ? mark_buffer_dirty+0x298/0x410 [ 103.418399][ T5326] ? mark_buffer_dirty+0x298/0x410 [ 103.420703][ T5326] bfs_get_block+0x5c6/0xb50 [ 103.422611][ T5326] __block_write_begin_int+0x6c2/0x1900 [ 103.424978][ T5326] ? __pfx_bfs_get_block+0x10/0x10 [ 103.427294][ T5326] ? __pfx___block_write_begin_int+0x10/0x10 [ 103.430548][ T5326] ? __pfx_bfs_get_block+0x10/0x10 [ 103.434689][ T5326] block_write_begin+0x8d/0x120 [ 103.437064][ T5326] ? bfs_write_begin+0x1e/0xd0 [ 103.439229][ T5326] bfs_write_begin+0x35/0xd0 [ 103.441328][ T5326] generic_perform_write+0x2d5/0x8f0 [ 103.443559][ T5326] ? __pfx_generic_perform_write+0x10/0x10 [ 103.446044][ T5326] ? file_update_time_flags+0x219/0x4a0 [ 103.448553][ T5326] ? __generic_file_write_iter+0xf9/0x230 [ 103.451291][ T5326] ? generic_file_write_iter+0x9a/0x330 [ 103.454524][ T5326] generic_file_write_iter+0xae/0x330 [ 103.457117][ T5326] vfs_write+0x612/0xba0 [ 103.458903][ T5326] ? __pfx_vfs_write+0x10/0x10 [ 103.460925][ T5326] ? __fget_files+0x2a/0x420 [ 103.462904][ T5326] __x64_sys_pwrite64+0x196/0x220 [ 103.465156][ T5326] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 103.468014][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.470836][ T5326] do_syscall_64+0x174/0x580 [ 103.472648][ T5326] ? trace_irq_disable+0x3b/0x140 [ 103.474520][ T5326] ? clear_bhb_loop+0x40/0x90 [ 103.476717][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.479669][ T5326] RIP: 0033:0x7f5185d9de59 [ 103.482111][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.490400][ T5326] RSP: 002b:00007f5186bf9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 103.494119][ T5326] RAX: ffffffffffffffda RBX: 00007f5186025fa0 RCX: 00007f5185d9de59 [ 103.497910][ T5326] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 103.500772][ T5326] RBP: 00007f5185e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 103.503412][ T5326] R10: 0000000000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 103.506098][ T5326] R13: 00007f5186026038 R14: 00007f5186025fa0 R15: 00007ffec2ae9228 [ 103.509234][ T5326] [ 103.510921][ T5326] Kernel Offset: disabled [ 103.512521][ T5326] Rebooting in 86400 seconds..