program:
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
open(&(0x7f0000000440)='./file0\x00', 0x14927e, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x12, 0x3, "d2273078cf6175866187bbf62372bbb65d940f27bc28a5a442ff5a8d374a182008a1fd92701ce53ee6aa5d922917aeecbfb3db24b09909c24cc157a3780cf5d5", "09b49809fc32a5fc7be9f88c6b84907998105e3111daa2bd51b0d0c3bc93fb2d0f0244a8c7a99a75e76613c745458f5c1212e72d93b272fed81941f04edd0059", "a960f08042e09119b6f87de59f19912c538884e7a95c3d50e4be66184e298bb1", [0x4, 0x6c]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fsync(r1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xad, 0xff, 0x0, 0x80000002}, {0xb6, 0x1, 0x0, 0xc0c8}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140)={[{@errors_remount}, {@inode_readahead_blks}, {@lazytime}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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")
lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
clock_getres(0x2, &(0x7f00000001c0))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x105)
fallocate(r4, 0x10, 0x3ffd, 0x8000)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x0, 0xfffffffe, 0x32344d59, 0x2, 0x5, [{0x2}, {0x0, 0x1000}, {0xb6e7, 0x2}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0xa8}, {0x3, 0x2000}, {0x0, 0xfffffffc}], 0x0, 0x40, 0x6, 0x0, 0x5}})
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000200)={0x2, 0x0, [0xd, 0xfffffffa, 0x3ff, 0x8, 0x8c6, 0x100, 0x70, 0x8]})
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c0007800800064000000001"], 0x58}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r9, r9, 0x0, 0x2000fb)
creat(&(0x7f0000000280)='./file0\x00', 0x10)
[ 109.442249][ T44] Bluetooth: hci0: command tx timeout
[ 109.595845][ T5331] loop0: detected capacity change from 0 to 64
[ 109.743034][ T5331] loop0: detected capacity change from 64 to 0
[ 109.749245][ T5331] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[ 109.770911][ T68] ------------[ cut here ]------------
[ 109.774800][ T68] !buffer_uptodate(bh)
[ 109.774815][ T68] WARNING: fs/buffer.c:1093 at mark_buffer_dirty+0x299/0x410, CPU#0: kworker/u4:4/68
[ 109.781959][ T68] Modules linked in:
[ 109.784015][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full)
[ 109.787876][ T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 109.793663][ T68] Workqueue: writeback wb_workfn (flush-7:0)
[ 109.796391][ T68] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 109.799092][ T68] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 8f f3 69 ff eb 8c e8 88 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff
[ 109.809716][ T68] RSP: 0018:ffffc90000aef220 EFLAGS: 00010293
[ 109.813635][ T68] RAX: ffffffff825c8e48 RBX: ffff8880442f7460 RCX: ffff888000a74a80
[ 109.818026][ T68] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 109.821731][ T68] RBP: 0000000000000001 R08: ffff8880442f7467 R09: 1ffff1100885ee8c
[ 109.826289][ T68] R10: dffffc0000000000 R11: ffffed100885ee8d R12: ffff88801fde124c
[ 109.830383][ T68] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880442f7460
[ 109.833820][ T68] FS: 0000000000000000(0000) GS:ffff88808c818000(0000) knlGS:0000000000000000
[ 109.837637][ T68] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 109.840506][ T68] CR2: 00007f8b57832230 CR3: 0000000012715000 CR4: 0000000000352ef0
[ 109.844592][ T68] Call Trace:
[ 109.846474][ T68]
[ 109.848136][ T68] bfs_write_inode+0x4f0/0x840
[ 109.850769][ T68] __writeback_single_inode+0x6ac/0xf90
[ 109.853871][ T68] writeback_sb_inodes+0x9de/0x1b00
[ 109.856010][ T68] ? save_trace+0x2c4/0x390
[ 109.857789][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10
[ 109.859988][ T68] ? __pfx_down_read_trylock+0x10/0x10
[ 109.862511][ T68] __writeback_inodes_wb+0x114/0x240
[ 109.864638][ T68] wb_writeback+0x42f/0xad0
[ 109.866757][ T68] ? queue_io+0x2c1/0x470
[ 109.868863][ T68] ? __pfx_wb_writeback+0x10/0x10
[ 109.871647][ T68] ? do_raw_spin_lock+0x12b/0x2f0
[ 109.874329][ T68] ? process_scheduled_works+0xa20/0x14e0
[ 109.876820][ T68] wb_workfn+0x980/0x10f0
[ 109.878628][ T68] ? __pfx_wb_workfn+0x10/0x10
[ 109.880600][ T68] ? rcu_is_watching+0x15/0xb0
[ 109.882866][ T68] ? trace_hrtimer_start+0x82/0x200
[ 109.884935][ T68] ? do_raw_spin_lock+0x12b/0x2f0
[ 109.887184][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 109.889740][ T68] ? process_scheduled_works+0xa20/0x14e0
[ 109.893517][ T68] ? rcu_is_watching+0x15/0xb0
[ 109.895620][ T68] ? process_scheduled_works+0xa20/0x14e0
[ 109.898050][ T68] process_scheduled_works+0xa8e/0x14e0
[ 109.900279][ T68] ? __pfx_process_scheduled_works+0x10/0x10
[ 109.902946][ T68] ? assign_work+0x3cf/0x5d0
[ 109.905235][ T68] worker_thread+0xa47/0xfb0
[ 109.907506][ T68] kthread+0x388/0x470
[ 109.909275][ T68] ? __pfx_worker_thread+0x10/0x10
[ 109.911299][ T68] ? __pfx_kthread+0x10/0x10
[ 109.913265][ T68] ret_from_fork+0x514/0xb70
[ 109.915091][ T68] ? __pfx_ret_from_fork+0x10/0x10
[ 109.917202][ T68] ? __switch_to+0xc89/0x1420
[ 109.919688][ T68] ? __pfx_kthread+0x10/0x10
[ 109.922512][ T68] ret_from_fork_asm+0x1a/0x30
[ 109.925126][ T68]
[ 109.926464][ T68] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 109.929449][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full)
[ 109.933406][ T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 109.937818][ T68] Workqueue: writeback wb_workfn (flush-7:0)
[ 109.941035][ T68] Call Trace:
[ 109.942924][ T68]
[ 109.944445][ T68] vpanic+0x56c/0xa60
[ 109.946202][ T68] ? __pfx__printk+0x10/0x10
[ 109.948247][ T68] ? __pfx_vpanic+0x10/0x10
[ 109.950320][ T68] ? is_bpf_text_address+0x292/0x2b0
[ 109.952551][ T68] ? is_bpf_text_address+0x26/0x2b0
[ 109.954747][ T68] panic+0xc5/0xd0
[ 109.956324][ T68] ? __pfx_panic+0x10/0x10
[ 109.958390][ T68] ? ret_from_fork_asm+0x1a/0x30
[ 109.961150][ T68] __warn+0x315/0x4c0
[ 109.963186][ T68] ? mark_buffer_dirty+0x299/0x410
[ 109.965614][ T68] ? mark_buffer_dirty+0x299/0x410
[ 109.967527][ T68] __report_bug+0x331/0x530
[ 109.969434][ T68] ? mark_buffer_dirty+0x299/0x410
[ 109.971604][ T68] ? __pfx___report_bug+0x10/0x10
[ 109.973698][ T68] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 109.976215][ T68] ? lockdep_hardirqs_on+0x7a/0x110
[ 109.978780][ T68] ? __mutex_lock+0x1092/0x1550
[ 109.981313][ T68] ? mark_buffer_dirty+0x299/0x410
[ 109.983494][ T68] report_bug+0x16a/0x220
[ 109.985219][ T68] ? mark_buffer_dirty+0x299/0x410
[ 109.987255][ T68] ? mark_buffer_dirty+0x29b/0x410
[ 109.989131][ T68] handle_bug+0x9c/0x200
[ 109.990817][ T68] exc_invalid_op+0x1a/0x50
[ 109.992747][ T68] asm_exc_invalid_op+0x1a/0x20
[ 109.994950][ T68] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 109.997919][ T68] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 8f f3 69 ff eb 8c e8 88 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff
[ 110.006606][ T68] RSP: 0018:ffffc90000aef220 EFLAGS: 00010293
[ 110.009270][ T68] RAX: ffffffff825c8e48 RBX: ffff8880442f7460 RCX: ffff888000a74a80
[ 110.012578][ T68] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 110.016559][ T68] RBP: 0000000000000001 R08: ffff8880442f7467 R09: 1ffff1100885ee8c
[ 110.020133][ T68] R10: dffffc0000000000 R11: ffffed100885ee8d R12: ffff88801fde124c
[ 110.023316][ T68] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880442f7460
[ 110.026567][ T68] ? mark_buffer_dirty+0x298/0x410
[ 110.028568][ T68] bfs_write_inode+0x4f0/0x840
[ 110.030495][ T68] __writeback_single_inode+0x6ac/0xf90
[ 110.032735][ T68] writeback_sb_inodes+0x9de/0x1b00
[ 110.035006][ T68] ? save_trace+0x2c4/0x390
[ 110.038012][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10
[ 110.040924][ T68] ? __pfx_down_read_trylock+0x10/0x10
[ 110.043204][ T68] __writeback_inodes_wb+0x114/0x240
[ 110.045451][ T68] wb_writeback+0x42f/0xad0
[ 110.047316][ T68] ? queue_io+0x2c1/0x470
[ 110.049040][ T68] ? __pfx_wb_writeback+0x10/0x10
[ 110.051192][ T68] ? do_raw_spin_lock+0x12b/0x2f0
[ 110.053552][ T68] ? process_scheduled_works+0xa20/0x14e0
[ 110.056506][ T68] wb_workfn+0x980/0x10f0
[ 110.058726][ T68] ? __pfx_wb_workfn+0x10/0x10
[ 110.060820][ T68] ? rcu_is_watching+0x15/0xb0
[ 110.062899][ T68] ? trace_hrtimer_start+0x82/0x200
[ 110.065005][ T68] ? do_raw_spin_lock+0x12b/0x2f0
[ 110.067127][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 110.069325][ T68] ? process_scheduled_works+0xa20/0x14e0
[ 110.071851][ T68] ? rcu_is_watching+0x15/0xb0
[ 110.074058][ T68] ? process_scheduled_works+0xa20/0x14e0
[ 110.076613][ T68] process_scheduled_works+0xa8e/0x14e0
[ 110.079554][ T68] ? __pfx_process_scheduled_works+0x10/0x10
[ 110.082338][ T68] ? assign_work+0x3cf/0x5d0
[ 110.084096][ T68] worker_thread+0xa47/0xfb0
[ 110.085933][ T68] kthread+0x388/0x470
[ 110.087594][ T68] ? __pfx_worker_thread+0x10/0x10
[ 110.089693][ T68] ? __pfx_kthread+0x10/0x10
[ 110.091895][ T68] ret_from_fork+0x514/0xb70
[ 110.094111][ T68] ? __pfx_ret_from_fork+0x10/0x10
[ 110.096244][ T68] ? __switch_to+0xc89/0x1420
[ 110.098369][ T68] ? __pfx_kthread+0x10/0x10
[ 110.100310][ T68] ret_from_fork_asm+0x1a/0x30
[ 110.102435][ T68]
[ 110.104029][ T68] Kernel Offset: disabled
[ 110.105829][ T68] Rebooting in 86400 seconds..