program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0xaf01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x5, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}}, 0x20044880) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00cced80a0092f6facaf45ed552eb238a8c0e103b9aae3c66c423fc48faff2f75042adc822ad530469ea22b3dae141cd727e0750ccc27cf29808041ee43e91d9eae2065b80f1e8218884bb25cf41b655114128f3a90b90c29a0b69cb59ef4370a647dc234958131cc972844c2f333a71b4118d8d57a15c31b9af88b8ae4e6b582507eed29bf6db76071a821d5821ce8cb6a017393c33611db4"], 0x1, 0x185, &(0x7f0000000580)="$eJzs28tO6lAUxvGvBc7hcG6c+4kjE010IuWmiTN5FAIViUWJOIGYGB/FJ/MFYODImTUWgrYCNiSlgv9fQvZelMVae7DpZlABeLcOJBkylJbkuu7l0aah9bibArAQ7mi8d6e7m3ENwDJLzNr6AFbYoJLw7v9tSTe3F7X+6JUOeX4YVExvfPwf0X+W/2nyx80X+VeGN64l/fkZSZ/DnF+uh/lbgfpfwvY/qp8J5H8NnT9c0vaGP/+bpO+SspJ+SPop6Zek35L+TKhfD9T/H7I+AAAAAABhGMoFY98bpg6bjp0fxykvLozjD15cDMSlcfzRi3O1U6ce1RIAzMl8Zf8nAvs/Gdj/AJZXp9s7rjqOfRbJROmovjnSibJvog0mTKKfpKZcivuXCUDUrPNW2+p0ezvNVrVhN+yTYnl3r1wq7OeLlnfyt/znfwCr4+mmH3cnAAAAAAAAAAAAAABgXn8l/Yu7CQAAAAALsYgnjeJeIwAAAAAAAAAAAAAAq+4hAAD//+dwSQU=") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000004300)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1a00000028000108000000d459c9ee390999198b8186a27be2fa42dc8c6b0becd78fda1649461b", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1, 0x0, 0x0, 0x40}, 0x240408c0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file7\x00', 0x405, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x114905, 0x6, 0x9, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x9805, 0x3, 0x7fc, 0x6, 0x0, 0x1, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) [ 161.983128][ T4648] Bluetooth: hci0: command tx timeout [ 162.110025][ T5325] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 162.156378][ T5325] netlink: 'syz.0.0': attribute type 2 has an invalid length. [ 162.156660][ T5325] warning: `syz.0.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 162.217718][ T5325] loop0: detected capacity change from 0 to 64 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb7000) [ 162.472199][ T1055] kernel resource error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x800000 phys_seg 1 prio class 2 [ 162.472359][ T1055] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 162.579178][ T1055] kernel resource error, dev loop0, sector 16 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 162.660659][ T1055] kernel resource error, dev loop0, sector 4 op 0x1:(WRITE) flags 0x800000 phys_seg 1 prio class 2 [ 162.660679][ T1055] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 162.760049][ T1113] kernel resource error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 162.772530][ T5326] ------------[ cut here ]------------ [ 162.772543][ T5326] !buffer_uptodate(bh) [ 162.772557][ T5326] WARNING: fs/buffer.c:991 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5326 [ 162.781770][ T5326] Modules linked in: [ 162.783754][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 162.787689][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.793509][ T5326] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 162.796174][ T5326] Code: 4c 89 f7 e8 a9 01 d8 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 8f 62 66 ff eb 8c e8 88 62 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a 62 66 ff 90 0f 0b 90 e9 cf fd ff ff [ 162.804118][ T5326] RSP: 0018:ffffc9000ef5fbd0 EFLAGS: 00010287 [ 162.806729][ T5326] RAX: ffffffff82617938 RBX: ffff8880442ad620 RCX: 0000000000100000 [ 162.810088][ T5326] RDX: ffffc90020802000 RSI: 00000000000883bf RDI: 00000000000883c0 [ 162.813742][ T5326] RBP: ffffc9000ef5fd01 R08: ffff8880442ad627 R09: 1ffff11008855ac4 [ 162.817207][ T5326] R10: dffffc0000000000 R11: ffffed1008855ac5 R12: ffff888044353608 [ 162.820366][ T5326] R13: 1ffff92001debf8c R14: ffffffff82aee440 R15: 0000000000000001 [ 162.823724][ T5326] FS: 00007f40ae0386c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 162.827326][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 162.830061][ T5326] CR2: 00007fd824b909c0 CR3: 0000000042e15000 CR4: 0000000000352ef0 [ 162.833671][ T5326] Call Trace: [ 162.835162][ T5326] [ 162.836475][ T5326] ? __pfx_minix_evict_inode+0x10/0x10 [ 162.838792][ T5326] evict+0x624/0xb50 [ 162.840452][ T5326] ? __pfx_evict+0x10/0x10 [ 162.842529][ T5326] ? do_raw_spin_unlock+0x4d/0x200 [ 162.844805][ T5326] ? _raw_spin_unlock+0x28/0x50 [ 162.846974][ T5326] ? iput+0xb84/0xf00 [ 162.848645][ T5326] minix_mkdir+0xdc/0x120 [ 162.850514][ T5326] vfs_mkdir+0x40c/0x620 [ 162.852470][ T5326] filename_mkdirat+0x285/0x510 [ 162.854563][ T5326] ? __pfx_filename_mkdirat+0x10/0x10 [ 162.856588][ T5326] ? do_getname+0x151/0x250 [ 162.858595][ T5326] __se_sys_mkdirat+0x35/0x150 [ 162.860571][ T5326] do_syscall_64+0x166/0x520 [ 162.862690][ T5326] ? trace_irq_disable+0x3b/0x140 [ 162.864844][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.867294][ T5326] ? clear_bhb_loop+0x70/0xc0 [ 162.869268][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.872177][ T5326] RIP: 0033:0x7f40ad19cfc7 [ 162.874042][ T5326] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.882084][ T5326] RSP: 002b:00007f40ae037e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 162.885758][ T5326] RAX: ffffffffffffffda RBX: 00007f40ae037ea0 RCX: 00007f40ad19cfc7 [ 162.889083][ T5326] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 162.892769][ T5326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.895989][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080 [ 162.899273][ T5326] R13: 00007f40ae037e60 R14: 0000000000000000 R15: 0000000000000000 [ 162.902635][ T5326] [ 162.903912][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 162.907046][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 162.910762][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.914593][ T5326] Call Trace: [ 162.915925][ T5326] [ 162.917252][ T5326] vpanic+0x56d/0xa60 [ 162.919113][ T5326] ? __pfx__printk+0x10/0x10 [ 162.921219][ T5326] ? __pfx_vpanic+0x10/0x10 [ 162.923291][ T5326] ? is_bpf_text_address+0x292/0x2b0 [ 162.925649][ T5326] ? is_bpf_text_address+0x26/0x2b0 [ 162.927848][ T5326] panic+0xc5/0xd0 [ 162.929540][ T5326] ? __pfx_panic+0x10/0x10 [ 162.931585][ T5326] __warn+0x315/0x4c0 [ 162.933440][ T5326] ? mark_buffer_dirty+0x299/0x410 [ 162.935690][ T5326] ? mark_buffer_dirty+0x299/0x410 [ 162.937767][ T5326] __report_bug+0x276/0x570 [ 162.939737][ T5326] ? mark_buffer_dirty+0x299/0x410 [ 162.942021][ T5326] ? __pfx___report_bug+0x10/0x10 [ 162.944197][ T5326] ? xas_set_mark+0x2e7/0x4b0 [ 162.946301][ T5326] ? mark_buffer_dirty+0x299/0x410 [ 162.948639][ T5326] report_bug+0x16b/0x220 [ 162.950639][ T5326] ? mark_buffer_dirty+0x299/0x410 [ 162.952911][ T5326] ? mark_buffer_dirty+0x29b/0x410 [ 162.955064][ T5326] handle_bug+0x9c/0x200 [ 162.957002][ T5326] exc_invalid_op+0x1a/0x50 [ 162.959055][ T5326] asm_exc_invalid_op+0x1a/0x20 [ 162.961080][ T5326] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 162.963309][ T5326] Code: 4c 89 f7 e8 a9 01 d8 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 8f 62 66 ff eb 8c e8 88 62 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a 62 66 ff 90 0f 0b 90 e9 cf fd ff ff [ 162.971209][ T5326] RSP: 0018:ffffc9000ef5fbd0 EFLAGS: 00010287 [ 162.973825][ T5326] RAX: ffffffff82617938 RBX: ffff8880442ad620 RCX: 0000000000100000 [ 162.977108][ T5326] RDX: ffffc90020802000 RSI: 00000000000883bf RDI: 00000000000883c0 [ 162.980086][ T5326] RBP: ffffc9000ef5fd01 R08: ffff8880442ad627 R09: 1ffff11008855ac4 [ 162.983043][ T5326] R10: dffffc0000000000 R11: ffffed1008855ac5 R12: ffff888044353608 [ 162.985972][ T5326] R13: 1ffff92001debf8c R14: ffffffff82aee440 R15: 0000000000000001 [ 162.988774][ T5326] ? __pfx_minix_evict_inode+0x10/0x10 [ 162.990653][ T5326] ? mark_buffer_dirty+0x298/0x410 [ 162.992502][ T5326] ? __pfx_minix_evict_inode+0x10/0x10 [ 162.994506][ T5326] evict+0x624/0xb50 [ 162.995849][ T5326] ? __pfx_evict+0x10/0x10 [ 162.997474][ T5326] ? do_raw_spin_unlock+0x4d/0x200 [ 162.999458][ T5326] ? _raw_spin_unlock+0x28/0x50 [ 163.001509][ T5326] ? iput+0xb84/0xf00 [ 163.003134][ T5326] minix_mkdir+0xdc/0x120 [ 163.005033][ T5326] vfs_mkdir+0x40c/0x620 [ 163.006813][ T5326] filename_mkdirat+0x285/0x510 [ 163.008943][ T5326] ? __pfx_filename_mkdirat+0x10/0x10 [ 163.011318][ T5326] ? do_getname+0x151/0x250 [ 163.013258][ T5326] __se_sys_mkdirat+0x35/0x150 [ 163.015335][ T5326] do_syscall_64+0x166/0x520 [ 163.017296][ T5326] ? trace_irq_disable+0x3b/0x140 [ 163.019469][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.022083][ T5326] ? clear_bhb_loop+0x70/0xc0 [ 163.024128][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.026538][ T5326] RIP: 0033:0x7f40ad19cfc7 [ 163.028443][ T5326] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.036604][ T5326] RSP: 002b:00007f40ae037e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 163.040235][ T5326] RAX: ffffffffffffffda RBX: 00007f40ae037ea0 RCX: 00007f40ad19cfc7 [ 163.043222][ T5326] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 163.046674][ T5326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.050094][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080 [ 163.053215][ T5326] R13: 00007f40ae037e60 R14: 0000000000000000 R15: 0000000000000000 [ 163.056660][ T5326] [ 163.058477][ T5326] Kernel Offset: disabled [ 163.060364][ T5326] Rebooting in 86400 seconds..