program:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x3c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@nested={0x14, 0x14, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0xdf, 0x0, 0x0, @u32=0xfffffffa}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@delqdisc={0x150, 0x25, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffea}, {0xf, 0xf}, {0xffe0, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x22, 0x3, 0xa, 0x1, 0xbb, 0xd30, 0x1}}, {0x6, 0x2, [0x742]}}, {{0x1c, 0x1, {0xa7, 0x4e, 0x3, 0x7a, 0x1, 0x3, 0x1, 0x5}}, {0xe, 0x2, [0x0, 0x8, 0xfff7, 0x6, 0x6]}}, {{0x1c, 0x1, {0xb, 0x4, 0x8, 0x401, 0x0, 0x80000001, 0x6, 0x5}}, {0xe, 0x2, [0x52, 0x165, 0x7, 0x9, 0xfff]}}, {{0x1c, 0x1, {0x10, 0x5, 0x2, 0x5a3f5beb, 0x0, 0x3, 0x10001, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0xcb, 0x3b, 0x6, 0x4, 0x0, 0x1, 0x8, 0x9}}, {0x16, 0x2, [0x7, 0xc5da, 0xfff9, 0x6, 0xa, 0x6, 0x200, 0x81, 0x6c]}}, {{0x1c, 0x1, {0x2, 0x4, 0xb0a8, 0x2, 0x2, 0x4, 0x1, 0x5}}, {0xe, 0x2, [0xf30, 0x4, 0x3, 0xb76, 0x40]}}, {{0x1c, 0x1, {0x3, 0x80, 0x3, 0x10001, 0x0, 0x9, 0x1}}, {0x4}}]}]}, 0x150}}, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0xf7fe, 0xa9, {0x6, 0x1}, {0x64, 0x40}, @cond=[{0x7, 0x208, 0x7, 0xffff, 0x2, 0x3}, {0x8, 0x5, 0x1, 0x52, 0x9, 0xd}]}) (async)
quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) (async)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000008c0), 0xfecc) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8)
[ 85.691976][ T5336] Bluetooth: hci0: command tx timeout
[ 85.723087][ T5362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 85.765454][ T5365] loop0: detected capacity change from 0 to 64
[ 85.824441][ T5362] ------------[ cut here ]------------
[ 85.827486][ T5362] WARNING: CPU: 0 PID: 5362 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410
[ 85.831776][ T5362] Modules linked in:
[ 85.833523][ T5362] CPU: 0 UID: 0 PID: 5362 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.837345][ T5362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.843120][ T5362] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 85.846121][ T5362] Code: 4c 89 f7 e8 69 4a dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 1f 59 78 ff eb 8c e8 18 59 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 0a 59 78 ff 90 0f 0b 90 e9 bf fd ff ff
[ 85.854053][ T5362] RSP: 0018:ffffc9000d3f7608 EFLAGS: 00010293
[ 85.857609][ T5362] RAX: ffffffff824773f8 RBX: ffff8880320e7ae0 RCX: ffff88800035a440
[ 85.862564][ T5362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 85.867976][ T5362] RBP: ffff888000372001 R08: ffff8880320e7ae7 R09: 1ffff1100641cf5c
[ 85.872105][ T5362] R10: dffffc0000000000 R11: ffffed100641cf5d R12: ffff88804cc9b400
[ 85.875311][ T5362] R13: ffff8880320e4e80 R14: ffff8880320e7ae0 R15: 000000000000000a
[ 85.878888][ T5362] FS: 00007f492bf9f6c0(0000) GS:ffff88808d00a000(0000) knlGS:0000000000000000
[ 85.882590][ T5362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.885655][ T5362] CR2: 0000200000002000 CR3: 0000000042d5a000 CR4: 0000000000352ef0
[ 85.890052][ T5362] Call Trace:
[ 85.891720][ T5362]
[ 85.892911][ T5362] bfs_get_block+0x5da/0xae0
[ 85.894967][ T5362] __block_write_begin_int+0x6b5/0x1900
[ 85.897304][ T5362] ? __pfx_bfs_get_block+0x10/0x10
[ 85.899578][ T5362] ? __pfx___block_write_begin_int+0x10/0x10
[ 85.902639][ T5362] ? __filemap_get_folio+0x79f/0xaf0
[ 85.905217][ T5362] ? __pfx_bfs_get_block+0x10/0x10
[ 85.907726][ T5362] block_write_begin+0x8a/0x120
[ 85.909924][ T5362] ? bfs_write_begin+0x1e/0xd0
[ 85.912518][ T5362] bfs_write_begin+0x35/0xd0
[ 85.915064][ T5362] generic_perform_write+0x2c2/0x900
[ 85.917540][ T5362] ? __pfx_generic_perform_write+0x10/0x10
[ 85.920557][ T5362] ? file_update_time+0x2da/0x490
[ 85.924377][ T5362] ? __generic_file_write_iter+0xf9/0x230
[ 85.926952][ T5362] ? generic_file_write_iter+0x103/0x550
[ 85.929282][ T5362] generic_file_write_iter+0x117/0x550
[ 85.931751][ T5362] ? __pfx_generic_file_write_iter+0x10/0x10
[ 85.934487][ T5362] ? __lock_acquire+0xab9/0xd20
[ 85.936997][ T5362] ? rcu_read_lock_any_held+0xb3/0x120
[ 85.939600][ T5362] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 85.943330][ T5362] vfs_write+0x5c9/0xb30
[ 85.946077][ T5362] ? __pfx_generic_file_write_iter+0x10/0x10
[ 85.948773][ T5362] ? __pfx_vfs_write+0x10/0x10
[ 85.950936][ T5362] ? __fget_files+0x2a/0x420
[ 85.952942][ T5362] ksys_write+0x145/0x250
[ 85.954730][ T5362] ? __pfx_ksys_write+0x10/0x10
[ 85.956790][ T5362] ? rcu_is_watching+0x15/0xb0
[ 85.958894][ T5362] ? do_syscall_64+0xbe/0x3b0
[ 85.961102][ T5362] do_syscall_64+0xfa/0x3b0
[ 85.963094][ T5362] ? lockdep_hardirqs_on+0x9c/0x150
[ 85.965615][ T5362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.968831][ T5362] ? clear_bhb_loop+0x60/0xb0
[ 85.971385][ T5362] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.974554][ T5362] RIP: 0033:0x7f492b18eba9
[ 85.976614][ T5362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 85.985466][ T5362] RSP: 002b:00007f492bf9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 85.989574][ T5362] RAX: ffffffffffffffda RBX: 00007f492b3d5fa0 RCX: 00007f492b18eba9
[ 85.993116][ T5362] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000005
[ 85.996516][ T5362] RBP: 00007f492b211e19 R08: 0000000000000000 R09: 0000000000000000
[ 86.000047][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.005526][ T5362] R13: 00007f492b3d6038 R14: 00007f492b3d5fa0 R15: 00007ffdce186868
[ 86.009113][ T5362]
[ 86.010458][ T5362] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.013492][ T5362] CPU: 0 UID: 0 PID: 5362 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.017381][ T5362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.021927][ T5362] Call Trace:
[ 86.023480][ T5362]
[ 86.024890][ T5362] dump_stack_lvl+0x99/0x250
[ 86.027272][ T5362] ? __asan_memcpy+0x40/0x70
[ 86.029692][ T5362] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.031977][ T5362] ? __pfx__printk+0x10/0x10
[ 86.034045][ T5362] vpanic+0x281/0x750
[ 86.035732][ T5362] ? __pfx__printk+0x10/0x10
[ 86.037851][ T5362] ? __pfx_vpanic+0x10/0x10
[ 86.039739][ T5362] ? is_bpf_text_address+0x26/0x2b0
[ 86.042316][ T5362] panic+0xb9/0xc0
[ 86.044633][ T5362] ? __pfx_panic+0x10/0x10
[ 86.047176][ T5362] __warn+0x31b/0x4b0
[ 86.048995][ T5362] ? mark_buffer_dirty+0x2a9/0x410
[ 86.051194][ T5362] ? mark_buffer_dirty+0x2a9/0x410
[ 86.053403][ T5362] report_bug+0x2be/0x4f0
[ 86.055322][ T5362] ? mark_buffer_dirty+0x2a9/0x410
[ 86.057618][ T5362] ? mark_buffer_dirty+0x2a9/0x410
[ 86.059820][ T5362] ? mark_buffer_dirty+0x2ab/0x410
[ 86.062359][ T5362] handle_bug+0x84/0x160
[ 86.064666][ T5362] exc_invalid_op+0x1a/0x50
[ 86.066915][ T5362] asm_exc_invalid_op+0x1a/0x20
[ 86.069096][ T5362] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 86.071613][ T5362] Code: 4c 89 f7 e8 69 4a dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 1f 59 78 ff eb 8c e8 18 59 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 0a 59 78 ff 90 0f 0b 90 e9 bf fd ff ff
[ 86.079588][ T5362] RSP: 0018:ffffc9000d3f7608 EFLAGS: 00010293
[ 86.082285][ T5362] RAX: ffffffff824773f8 RBX: ffff8880320e7ae0 RCX: ffff88800035a440
[ 86.086419][ T5362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 86.090198][ T5362] RBP: ffff888000372001 R08: ffff8880320e7ae7 R09: 1ffff1100641cf5c
[ 86.093492][ T5362] R10: dffffc0000000000 R11: ffffed100641cf5d R12: ffff88804cc9b400
[ 86.096964][ T5362] R13: ffff8880320e4e80 R14: ffff8880320e7ae0 R15: 000000000000000a
[ 86.100960][ T5362] ? mark_buffer_dirty+0x2a8/0x410
[ 86.103752][ T5362] ? mark_buffer_dirty+0x2a8/0x410
[ 86.106234][ T5362] bfs_get_block+0x5da/0xae0
[ 86.108156][ T5362] __block_write_begin_int+0x6b5/0x1900
[ 86.110697][ T5362] ? __pfx_bfs_get_block+0x10/0x10
[ 86.112893][ T5362] ? __pfx___block_write_begin_int+0x10/0x10
[ 86.115413][ T5362] ? __filemap_get_folio+0x79f/0xaf0
[ 86.117512][ T5362] ? __pfx_bfs_get_block+0x10/0x10
[ 86.119693][ T5362] block_write_begin+0x8a/0x120
[ 86.121893][ T5362] ? bfs_write_begin+0x1e/0xd0
[ 86.124405][ T5362] bfs_write_begin+0x35/0xd0
[ 86.127297][ T5362] generic_perform_write+0x2c2/0x900
[ 86.129801][ T5362] ? __pfx_generic_perform_write+0x10/0x10
[ 86.132291][ T5362] ? file_update_time+0x2da/0x490
[ 86.134543][ T5362] ? __generic_file_write_iter+0xf9/0x230
[ 86.136777][ T5362] ? generic_file_write_iter+0x103/0x550
[ 86.139313][ T5362] generic_file_write_iter+0x117/0x550
[ 86.141845][ T5362] ? __pfx_generic_file_write_iter+0x10/0x10
[ 86.144652][ T5362] ? __lock_acquire+0xab9/0xd20
[ 86.146841][ T5362] ? rcu_read_lock_any_held+0xb3/0x120
[ 86.149432][ T5362] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 86.152060][ T5362] vfs_write+0x5c9/0xb30
[ 86.153953][ T5362] ? __pfx_generic_file_write_iter+0x10/0x10
[ 86.156576][ T5362] ? __pfx_vfs_write+0x10/0x10
[ 86.158836][ T5362] ? __fget_files+0x2a/0x420
[ 86.161453][ T5362] ksys_write+0x145/0x250
[ 86.163941][ T5362] ? __pfx_ksys_write+0x10/0x10
[ 86.165769][ T5362] ? rcu_is_watching+0x15/0xb0
[ 86.167875][ T5362] ? do_syscall_64+0xbe/0x3b0
[ 86.169984][ T5362] do_syscall_64+0xfa/0x3b0
[ 86.171940][ T5362] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.174182][ T5362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.176959][ T5362] ? clear_bhb_loop+0x60/0xb0
[ 86.179594][ T5362] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.182628][ T5362] RIP: 0033:0x7f492b18eba9
[ 86.184398][ T5362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.192286][ T5362] RSP: 002b:00007f492bf9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 86.196853][ T5362] RAX: ffffffffffffffda RBX: 00007f492b3d5fa0 RCX: 00007f492b18eba9
[ 86.201489][ T5362] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000005
[ 86.205336][ T5362] RBP: 00007f492b211e19 R08: 0000000000000000 R09: 0000000000000000
[ 86.208753][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 86.212227][ T5362] R13: 00007f492b3d6038 R14: 00007f492b3d5fa0 R15: 00007ffdce186868
[ 86.215576][ T5362]
[ 86.217158][ T5362] Kernel Offset: disabled
[ 86.219291][ T5362] Rebooting in 86400 seconds..