program:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYRES64=0x0], 0x1, 0x25a, &(0x7f0000000240)="$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")
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc056b1c4a068303c}, 0x20)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9)
r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f00000004c0)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})
[ 94.097264][ T5281] Bluetooth: hci0: command tx timeout
[ 94.231177][ T5317] loop0: detected capacity change from 0 to 128
[ 94.403793][ T153] I/O error, dev loop0, sector 1 op 0x1:(WRITE) flags 0x800000 phys_seg 1 prio class 2
[ 94.403974][ T153] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[ 94.404279][ T5317] ------------[ cut here ]------------
[ 94.404287][ T5317] !buffer_uptodate(bh)
[ 94.404304][ T5317] WARNING: fs/buffer.c:991 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5317
[ 94.420922][ T5317] Modules linked in:
[ 94.423187][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.427120][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.431367][ T5317] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 94.433989][ T5317] Code: 4c 89 f7 e8 69 fa d7 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 af 58 66 ff eb 8c e8 a8 58 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 9a 58 66 ff 90 0f 0b 90 e9 cf fd ff ff
[ 94.442509][ T5317] RSP: 0018:ffffc9000e317438 EFLAGS: 00010283
[ 94.445105][ T5317] RAX: ffffffff8261a678 RBX: ffff888043e189a0 RCX: 0000000000100000
[ 94.448662][ T5317] RDX: ffffc9000ebea000 RSI: 000000000003963d RDI: 000000000003963e
[ 94.452073][ T5317] RBP: dffffc0000000001 R08: ffff888043e189a7 R09: 1ffff110087c3134
[ 94.455428][ T5317] R10: dffffc0000000000 R11: ffffed10087c3135 R12: dffffc0000000000
[ 94.458696][ T5317] R13: 1ffff92001c62ebe R14: ffffc9000e3175f0 R15: ffff88801f400788
[ 94.463086][ T5317] FS: 00007ffb1b5386c0(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000
[ 94.466930][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.469842][ T5317] CR2: 0000200000009000 CR3: 0000000043a34000 CR4: 0000000000352ef0
[ 94.473537][ T5317] Call Trace:
[ 94.475055][ T5317]
[ 94.476441][ T5317] mmb_mark_buffer_dirty+0x2c/0x1f0
[ 94.478669][ T5317] fat12_ent_put+0x1b7/0x2f0
[ 94.480701][ T5317] fat_ent_write+0xb8/0x190
[ 94.482704][ T5317] fat_chain_add+0x409/0x8e0
[ 94.484444][ T5317] ? __pfx_fat_chain_add+0x10/0x10
[ 94.486581][ T5317] ? clean_bdev_aliases+0x62e/0x750
[ 94.488802][ T5317] ? fat_bmap+0x487/0x5a0
[ 94.490675][ T5317] fat_get_block+0x768/0xae0
[ 94.493122][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.495753][ T5317] ? do_raw_spin_unlock+0x4d/0x200
[ 94.498037][ T5317] ? _raw_spin_unlock+0x28/0x50
[ 94.500236][ T5317] ? create_empty_buffers+0x460/0x520
[ 94.502573][ T5317] __block_write_begin_int+0x6c2/0x1900
[ 94.504962][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.507078][ T5317] ? __pfx___block_write_begin_int+0x10/0x10
[ 94.509620][ T5317] cont_write_begin+0x71b/0xac0
[ 94.512104][ T5317] ? __pfx_cont_write_begin+0x10/0x10
[ 94.514842][ T5317] ? do_raw_spin_unlock+0x4d/0x200
[ 94.517295][ T5317] ? _raw_spin_unlock+0x28/0x50
[ 94.519800][ T5317] fat_write_begin+0x7a/0x150
[ 94.522510][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.524860][ T5317] generic_perform_write+0x2d5/0x8f0
[ 94.527248][ T5317] ? __pfx_generic_perform_write+0x10/0x10
[ 94.529952][ T5317] ? file_update_time_flags+0x3ab/0x440
[ 94.532559][ T5317] ? __generic_file_write_iter+0xf9/0x230
[ 94.535012][ T5317] ? generic_file_write_iter+0x9a/0x330
[ 94.537444][ T5317] generic_file_write_iter+0xae/0x330
[ 94.539842][ T5317] vfs_write+0x612/0xba0
[ 94.541743][ T5317] ? __pfx_vfs_write+0x10/0x10
[ 94.543888][ T5317] ? __fget_files+0x2a/0x420
[ 94.545999][ T5317] ksys_write+0x150/0x270
[ 94.547931][ T5317] ? __pfx_ksys_write+0x10/0x10
[ 94.550134][ T5317] do_syscall_64+0x166/0x520
[ 94.552249][ T5317] ? trace_irq_disable+0x3b/0x140
[ 94.554855][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.557594][ T5317] ? clear_bhb_loop+0x70/0xc0
[ 94.559525][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.561936][ T5317] RIP: 0033:0x7ffb1a59e159
[ 94.563924][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.572308][ T5317] RSP: 002b:00007ffb1b537fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.575734][ T5317] RAX: ffffffffffffffda RBX: 00007ffb1a825fa0 RCX: 00007ffb1a59e159
[ 94.578771][ T5317] RDX: 00000000fffffceb RSI: 00002000000001c0 RDI: 0000000000000005
[ 94.581984][ T5317] RBP: 00007ffb1a63506b R08: 0000000000000000 R09: 0000000000000000
[ 94.585297][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.588794][ T5317] R13: 00007ffb1a826038 R14: 00007ffb1a825fa0 R15: 00007ffce48ed7a8
[ 94.592480][ T5317]
[ 94.593863][ T5317] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.596683][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.600297][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.604593][ T5317] Call Trace:
[ 94.606189][ T5317]
[ 94.607531][ T5317] vpanic+0x56d/0xa60
[ 94.609357][ T5317] ? __pfx__printk+0x10/0x10
[ 94.611461][ T5317] ? __pfx_vpanic+0x10/0x10
[ 94.613465][ T5317] ? is_bpf_text_address+0x292/0x2b0
[ 94.615705][ T5317] ? is_bpf_text_address+0x26/0x2b0
[ 94.618046][ T5317] panic+0xc5/0xd0
[ 94.619752][ T5317] ? __pfx_panic+0x10/0x10
[ 94.621552][ T5317] __warn+0x315/0x4c0
[ 94.623231][ T5317] ? mark_buffer_dirty+0x299/0x410
[ 94.625348][ T5317] ? mark_buffer_dirty+0x299/0x410
[ 94.627609][ T5317] __report_bug+0x276/0x570
[ 94.629596][ T5317] ? __pfx___schedule+0x10/0x10
[ 94.631690][ T5317] ? mark_buffer_dirty+0x299/0x410
[ 94.633872][ T5317] ? __pfx___report_bug+0x10/0x10
[ 94.636162][ T5317] ? schedule+0x90/0x2b0
[ 94.638118][ T5317] ? __lock_acquire+0x747/0x2de0
[ 94.640333][ T5317] ? mark_buffer_dirty+0x299/0x410
[ 94.642592][ T5317] report_bug+0x16b/0x220
[ 94.644478][ T5317] ? mark_buffer_dirty+0x299/0x410
[ 94.646771][ T5317] ? mark_buffer_dirty+0x29b/0x410
[ 94.648722][ T5317] handle_bug+0x9c/0x200
[ 94.650498][ T5317] exc_invalid_op+0x1a/0x50
[ 94.652443][ T5317] asm_exc_invalid_op+0x1a/0x20
[ 94.654782][ T5317] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 94.658551][ T5317] Code: 4c 89 f7 e8 69 fa d7 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 af 58 66 ff eb 8c e8 a8 58 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 9a 58 66 ff 90 0f 0b 90 e9 cf fd ff ff
[ 94.666320][ T5317] RSP: 0018:ffffc9000e317438 EFLAGS: 00010283
[ 94.668847][ T5317] RAX: ffffffff8261a678 RBX: ffff888043e189a0 RCX: 0000000000100000
[ 94.672150][ T5317] RDX: ffffc9000ebea000 RSI: 000000000003963d RDI: 000000000003963e
[ 94.675578][ T5317] RBP: dffffc0000000001 R08: ffff888043e189a7 R09: 1ffff110087c3134
[ 94.679073][ T5317] R10: dffffc0000000000 R11: ffffed10087c3135 R12: dffffc0000000000
[ 94.682026][ T5317] R13: 1ffff92001c62ebe R14: ffffc9000e3175f0 R15: ffff88801f400788
[ 94.685229][ T5317] ? mark_buffer_dirty+0x298/0x410
[ 94.687474][ T5317] ? mark_buffer_dirty+0x298/0x410
[ 94.689696][ T5317] mmb_mark_buffer_dirty+0x2c/0x1f0
[ 94.691920][ T5317] fat12_ent_put+0x1b7/0x2f0
[ 94.693924][ T5317] fat_ent_write+0xb8/0x190
[ 94.695787][ T5317] fat_chain_add+0x409/0x8e0
[ 94.697607][ T5317] ? __pfx_fat_chain_add+0x10/0x10
[ 94.699605][ T5317] ? clean_bdev_aliases+0x62e/0x750
[ 94.701642][ T5317] ? fat_bmap+0x487/0x5a0
[ 94.703385][ T5317] fat_get_block+0x768/0xae0
[ 94.705286][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.707696][ T5317] ? do_raw_spin_unlock+0x4d/0x200
[ 94.709843][ T5317] ? _raw_spin_unlock+0x28/0x50
[ 94.711736][ T5317] ? create_empty_buffers+0x460/0x520
[ 94.713740][ T5317] __block_write_begin_int+0x6c2/0x1900
[ 94.716245][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.718581][ T5317] ? __pfx___block_write_begin_int+0x10/0x10
[ 94.721198][ T5317] cont_write_begin+0x71b/0xac0
[ 94.727074][ T5317] ? __pfx_cont_write_begin+0x10/0x10
[ 94.730016][ T5317] ? do_raw_spin_unlock+0x4d/0x200
[ 94.732318][ T5317] ? _raw_spin_unlock+0x28/0x50
[ 94.734678][ T5317] fat_write_begin+0x7a/0x150
[ 94.737300][ T5317] ? __pfx_fat_get_block+0x10/0x10
[ 94.740068][ T5317] generic_perform_write+0x2d5/0x8f0
[ 94.742556][ T5317] ? __pfx_generic_perform_write+0x10/0x10
[ 94.745109][ T5317] ? file_update_time_flags+0x3ab/0x440
[ 94.747759][ T5317] ? __generic_file_write_iter+0xf9/0x230
[ 94.750404][ T5317] ? generic_file_write_iter+0x9a/0x330
[ 94.752790][ T5317] generic_file_write_iter+0xae/0x330
[ 94.755034][ T5317] vfs_write+0x612/0xba0
[ 94.757024][ T5317] ? __pfx_vfs_write+0x10/0x10
[ 94.759350][ T5317] ? __fget_files+0x2a/0x420
[ 94.761565][ T5317] ksys_write+0x150/0x270
[ 94.763719][ T5317] ? __pfx_ksys_write+0x10/0x10
[ 94.766088][ T5317] do_syscall_64+0x166/0x520
[ 94.768463][ T5317] ? trace_irq_disable+0x3b/0x140
[ 94.770857][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.773590][ T5317] ? clear_bhb_loop+0x70/0xc0
[ 94.775448][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.778169][ T5317] RIP: 0033:0x7ffb1a59e159
[ 94.780149][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.787883][ T5317] RSP: 002b:00007ffb1b537fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.791231][ T5317] RAX: ffffffffffffffda RBX: 00007ffb1a825fa0 RCX: 00007ffb1a59e159
[ 94.794467][ T5317] RDX: 00000000fffffceb RSI: 00002000000001c0 RDI: 0000000000000005
[ 94.797835][ T5317] RBP: 00007ffb1a63506b R08: 0000000000000000 R09: 0000000000000000
[ 94.801160][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.804480][ T5317] R13: 00007ffb1a826038 R14: 00007ffb1a825fa0 R15: 00007ffce48ed7a8
[ 94.807897][ T5317]
[ 94.809836][ T5317] Kernel Offset: disabled
[ 94.811762][ T5317] Rebooting in 86400 seconds..