program: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) syz_mount_image$minix(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x8010, &(0x7f0000000480)=ANY=[], 0x2, 0x18a, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000005900)='./bus\x00', 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x40005, 0xffffffffffffffff, 0xe, 0x29, "22536a030000000000000043a52dbc3a9ae8b04fcca15548328cb3e74d938981061383375e1d61471a2d2dfe0000000000000000000000040000000000821700", "04106d0c31ef6c1f02a4aa6d0c5aa9263626c0240010f9db74161ccff2c5cf5e", [0x5, 0xff]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, r6, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.current\x00', 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r11, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}}, 0x2c008840) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x180, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xc7, 0x5b, "73c2973eb81d664054f11df6f9ac7f115dd3c2c2598f4b74498791ae2753c9e30a72f4721c34388ed3bba73ab209d7538fc478762be90cdadad44fe310058341c578736348438ffe3ede65585a58f336b18d1ef2b852893cfd9fc8cab1566bc2b13b3d865c56b97c3b0c5c9a177f39878dda691b1ed50a116d209cd6c5eb255e9d36d26239f4be8a48014a82981088bc5c23cf45bc138d3fed720bd8912eddfcd7b3d10b267046e43a0a9ac1ef218b94700cb1472a65839a8bb27d701ae715db2800a4"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5e64}, @NL80211_ATTR_FRAME_MATCH={0x56, 0x5b, "e0ddbb5aa38adb77987437778f5b912e665869fe47e51d9989a3db762ce0a850f4eaf05def670173a0182044012f46fc4bb6952c7eea088321d6c5343c6d293566b9609713b598f55ca7a42544a6098e7d1b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x29, 0x5b, "f2b585d69e55afbb698ace772b60b41f9ed52f1b09714b639ef27e33d99d4b983cc873e28e"}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) [ 94.201422][ T5322] loop0: detected capacity change from 0 to 64 [ 94.226061][ T44] Bluetooth: hci0: command tx timeout [ 94.627738][ T5323] loop0: detected capacity change from 64 to 0 [ 94.633926][ T13] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 94.639488][ T5322] Buffer I/O error on dev loop0, logical block 6, async page read [ 94.678048][ T5322] ------------[ cut here ]------------ [ 94.680752][ T5322] !buffer_uptodate(bh) [ 94.680762][ T5322] WARNING: fs/buffer.c:1093 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5322 [ 94.687504][ T5322] Modules linked in: [ 94.689488][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.693350][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.697682][ T5322] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 94.700376][ T5322] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 9f f3 69 ff eb 8c e8 98 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 8a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff [ 94.708611][ T5322] RSP: 0018:ffffc9000e99f9f0 EFLAGS: 00010293 [ 94.711156][ T5322] RAX: ffffffff825c7e78 RBX: ffff8880441ef8c0 RCX: ffff888038c20000 [ 94.714361][ T5322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 94.718373][ T5322] RBP: ffffc9000e99fb01 R08: ffff8880441ef8c7 R09: 1ffff1100883df18 [ 94.721742][ T5322] R10: dffffc0000000000 R11: ffffed100883df19 R12: ffff88801fc4b57e [ 94.725186][ T5322] R13: ffff88801fc4b608 R14: ffff88801fc4b570 R15: 0000000000000017 [ 94.728659][ T5322] FS: 00007fad2f3ff6c0(0000) GS:ffff88808c815000(0000) knlGS:0000000000000000 [ 94.733422][ T5322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.736719][ T5322] CR2: 00007fcee5ff3720 CR3: 000000001bea0000 CR4: 0000000000352ef0 [ 94.740224][ T5322] Call Trace: [ 94.741704][ T5322] [ 94.742995][ T5322] V1_minix_truncate+0x310/0x10c0 [ 94.745524][ T5322] ? __pfx_V1_minix_truncate+0x10/0x10 [ 94.748128][ T5322] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.750839][ T5322] ? lockdep_hardirqs_on+0x7a/0x110 [ 94.753370][ T5322] minix_evict_inode+0x1c9/0x260 [ 94.755838][ T5322] ? __pfx_minix_evict_inode+0x10/0x10 [ 94.758095][ T5322] evict+0x624/0xb50 [ 94.759794][ T5322] ? __pfx_evict+0x10/0x10 [ 94.761640][ T5322] ? do_raw_spin_unlock+0x4d/0x210 [ 94.764225][ T5322] ? _raw_spin_unlock+0x28/0x50 [ 94.766899][ T5322] ? iput+0xb84/0xf00 [ 94.769105][ T5322] minix_mkdir+0xe2/0x120 [ 94.771308][ T5322] vfs_mkdir+0x406/0x620 [ 94.773012][ T5322] filename_mkdirat+0x285/0x510 [ 94.775188][ T5322] ? __pfx_filename_mkdirat+0x10/0x10 [ 94.777524][ T5322] ? do_getname+0x151/0x250 [ 94.779484][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.782432][ T5322] __se_sys_mkdir+0x34/0x150 [ 94.784942][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.788122][ T5322] do_syscall_64+0x174/0x580 [ 94.790762][ T5322] ? trace_irq_disable+0x3b/0x140 [ 94.793193][ T5322] ? clear_bhb_loop+0x40/0x90 [ 94.795401][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.797852][ T5322] RIP: 0033:0x7fad2e59de59 [ 94.799861][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.808801][ T5322] RSP: 002b:00007fad2f3fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 94.812355][ T5322] RAX: ffffffffffffffda RBX: 00007fad2e825fa0 RCX: 00007fad2e59de59 [ 94.816022][ T5322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000005900 [ 94.819675][ T5322] RBP: 00007fad2e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 94.823451][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.827373][ T5322] R13: 00007fad2e826038 R14: 00007fad2e825fa0 R15: 00007ffc3fc0b248 [ 94.830934][ T5322] [ 94.832381][ T5322] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.836081][ T5322] CPU: 0 UID: 0 PID: 5322 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.840494][ T5322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.844939][ T5322] Call Trace: [ 94.846592][ T5322] [ 94.848041][ T5322] vpanic+0x56c/0xa60 [ 94.849915][ T5322] ? __pfx__printk+0x10/0x10 [ 94.852296][ T5322] ? __pfx_vpanic+0x10/0x10 [ 94.854538][ T5322] ? is_bpf_text_address+0x292/0x2b0 [ 94.856853][ T5322] ? is_bpf_text_address+0x26/0x2b0 [ 94.859095][ T5322] panic+0xc5/0xd0 [ 94.860859][ T5322] ? __pfx_panic+0x10/0x10 [ 94.863154][ T5322] __warn+0x315/0x4c0 [ 94.865187][ T5322] ? mark_buffer_dirty+0x299/0x410 [ 94.867717][ T5322] ? mark_buffer_dirty+0x299/0x410 [ 94.870184][ T5322] __report_bug+0x331/0x530 [ 94.872190][ T5322] ? mark_buffer_dirty+0x299/0x410 [ 94.874583][ T5322] ? __pfx___report_bug+0x10/0x10 [ 94.877256][ T5322] ? truncate_inode_pages_range+0xc4c/0xd80 [ 94.880299][ T5322] ? add_lock_to_list+0xc7/0x100 [ 94.882625][ T5322] ? mark_buffer_dirty+0x299/0x410 [ 94.884916][ T5322] report_bug+0x16a/0x220 [ 94.886823][ T5322] ? mark_buffer_dirty+0x299/0x410 [ 94.889081][ T5322] ? mark_buffer_dirty+0x29b/0x410 [ 94.891418][ T5322] handle_bug+0x9c/0x200 [ 94.893387][ T5322] exc_invalid_op+0x1a/0x50 [ 94.895484][ T5322] asm_exc_invalid_op+0x1a/0x20 [ 94.897834][ T5322] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 94.900558][ T5322] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 9f f3 69 ff eb 8c e8 98 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 8a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff [ 94.909183][ T5322] RSP: 0018:ffffc9000e99f9f0 EFLAGS: 00010293 [ 94.912253][ T5322] RAX: ffffffff825c7e78 RBX: ffff8880441ef8c0 RCX: ffff888038c20000 [ 94.915809][ T5322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 94.919424][ T5322] RBP: ffffc9000e99fb01 R08: ffff8880441ef8c7 R09: 1ffff1100883df18 [ 94.923316][ T5322] R10: dffffc0000000000 R11: ffffed100883df19 R12: ffff88801fc4b57e [ 94.926958][ T5322] R13: ffff88801fc4b608 R14: ffff88801fc4b570 R15: 0000000000000017 [ 94.930286][ T5322] ? mark_buffer_dirty+0x298/0x410 [ 94.932635][ T5322] V1_minix_truncate+0x310/0x10c0 [ 94.935215][ T5322] ? __pfx_V1_minix_truncate+0x10/0x10 [ 94.938233][ T5322] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.940490][ T5322] ? lockdep_hardirqs_on+0x7a/0x110 [ 94.942735][ T5322] minix_evict_inode+0x1c9/0x260 [ 94.944878][ T5322] ? __pfx_minix_evict_inode+0x10/0x10 [ 94.947168][ T5322] evict+0x624/0xb50 [ 94.949080][ T5322] ? __pfx_evict+0x10/0x10 [ 94.951615][ T5322] ? do_raw_spin_unlock+0x4d/0x210 [ 94.953945][ T5322] ? _raw_spin_unlock+0x28/0x50 [ 94.956048][ T5322] ? iput+0xb84/0xf00 [ 94.957734][ T5322] minix_mkdir+0xe2/0x120 [ 94.959638][ T5322] vfs_mkdir+0x406/0x620 [ 94.961896][ T5322] filename_mkdirat+0x285/0x510 [ 94.964765][ T5322] ? __pfx_filename_mkdirat+0x10/0x10 [ 94.967241][ T5322] ? do_getname+0x151/0x250 [ 94.969179][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.971800][ T5322] __se_sys_mkdir+0x34/0x150 [ 94.973807][ T5322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.976618][ T5322] do_syscall_64+0x174/0x580 [ 94.979181][ T5322] ? trace_irq_disable+0x3b/0x140 [ 94.981809][ T5322] ? clear_bhb_loop+0x40/0x90 [ 94.983842][ T5322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.986363][ T5322] RIP: 0033:0x7fad2e59de59 [ 94.988216][ T5322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.997504][ T5322] RSP: 002b:00007fad2f3fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 95.001180][ T5322] RAX: ffffffffffffffda RBX: 00007fad2e825fa0 RCX: 00007fad2e59de59 [ 95.004526][ T5322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000005900 [ 95.008367][ T5322] RBP: 00007fad2e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 95.012587][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.016320][ T5322] R13: 00007fad2e826038 R14: 00007fad2e825fa0 R15: 00007ffc3fc0b248 [ 95.019694][ T5322] [ 95.021488][ T5322] Kernel Offset: disabled [ 95.023415][ T5322] Rebooting in 86400 seconds..