program:
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xaf, &(0x7f0000000140)="$eJzs1z1qw0AYBNBPCuSnTBMCKVKryZ1EyqgJqiQCukHIRXIVH0G9CxdqjfEa2QKj1oUF5r1iYHZZmHZX2/+3vyIidRGpeP1ep7O6ab/Kqm7arKyCm5RHxENEPEbE+/Opb7L5fT/8fPbD3exdN8b979X3AgAAl8vjY973aTrYTb/AY3kZ42mBfQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABLOwQAAP//iw8oYA==")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000580)={0x20, 0x0, 0x0, 0x3000000, 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000008c0), 0xfecc) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)
[ 79.151166][ T5294] Bluetooth: hci0: command tx timeout
[ 79.154715][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 79.157552][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 79.251949][ T5309] loop0: detected capacity change from 0 to 64
[ 79.318829][ T5310] ------------[ cut here ]------------
[ 79.321604][ T5310] WARNING: CPU: 0 PID: 5310 at fs/buffer.c:1186 mark_buffer_dirty+0x2a9/0x410
[ 79.325495][ T5310] Modules linked in:
[ 79.327356][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller-00208-g00b827f0cffa #0 PREEMPT(full)
[ 79.332517][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 79.336863][ T5310] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 79.339253][ T5310] Code: 4c 89 f7 e8 79 0d de ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 34 fc ff e8 8f 18 7c ff eb 8c e8 88 18 7c ff 90 <0f> 0b 90 e9 95 fd ff ff e8 7a 18 7c ff 90 0f 0b 90 e9 bf fd ff ff
[ 79.347475][ T5310] RSP: 0018:ffffc9000f567628 EFLAGS: 00010293
[ 79.350093][ T5310] RAX: ffffffff8243a7c8 RBX: ffff888043590658 RCX: ffff88801e622440
[ 79.353559][ T5310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 79.356940][ T5310] RBP: ffff888041704001 R08: ffff88804359065f R09: 1ffff110086b20cb
[ 79.360403][ T5310] R10: dffffc0000000000 R11: ffffed10086b20cc R12: ffff8880441fe400
[ 79.363921][ T5310] R13: ffff8880435960e8 R14: ffff888043590658 R15: 000000000000000a
[ 79.367271][ T5310] FS: 00007f476287d6c0(0000) GS:ffff88808d6cc000(0000) knlGS:0000000000000000
[ 79.371138][ T5310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 79.373949][ T5310] CR2: 0000200000002000 CR3: 000000003ff84000 CR4: 0000000000352ef0
[ 79.377303][ T5310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 79.380649][ T5310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 79.384154][ T5310] Call Trace:
[ 79.385641][ T5310]
[ 79.386900][ T5310] bfs_get_block+0x5da/0xae0
[ 79.388862][ T5310] __block_write_begin_int+0x6b2/0x1900
[ 79.391343][ T5310] ? __pfx_bfs_get_block+0x10/0x10
[ 79.393546][ T5310] ? __pfx___block_write_begin_int+0x10/0x10
[ 79.395880][ T5310] ? __filemap_get_folio+0x79f/0xaf0
[ 79.398084][ T5310] ? __pfx_bfs_get_block+0x10/0x10
[ 79.400025][ T5310] block_write_begin+0x8a/0x120
[ 79.402875][ T5310] ? bfs_write_begin+0x1e/0xd0
[ 79.404960][ T5310] bfs_write_begin+0x35/0xd0
[ 79.406841][ T5310] generic_perform_write+0x2c4/0x910
[ 79.408946][ T5310] ? __pfx_generic_perform_write+0x10/0x10
[ 79.412155][ T5310] ? file_update_time+0x2da/0x490
[ 79.414368][ T5310] ? __generic_file_write_iter+0xf9/0x230
[ 79.416752][ T5310] ? generic_file_write_iter+0xfb/0x540
[ 79.419054][ T5310] generic_file_write_iter+0x10f/0x540
[ 79.421474][ T5310] ? __pfx_generic_file_write_iter+0x10/0x10
[ 79.423904][ T5310] ? __lock_acquire+0xaac/0xd20
[ 79.425913][ T5310] ? rcu_read_lock_any_held+0xb3/0x120
[ 79.428143][ T5310] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 79.430467][ T5310] vfs_write+0x548/0xa90
[ 79.432161][ T5310] ? __pfx_generic_file_write_iter+0x10/0x10
[ 79.434461][ T5310] ? __pfx_vfs_write+0x10/0x10
[ 79.436333][ T5310] ? __fget_files+0x2a/0x420
[ 79.438219][ T5310] ksys_write+0x145/0x250
[ 79.439787][ T5310] ? rcu_is_watching+0x15/0xb0
[ 79.441694][ T5310] ? __pfx_ksys_write+0x10/0x10
[ 79.443332][ T5310] ? do_syscall_64+0xba/0x210
[ 79.447293][ T5310] do_syscall_64+0xf6/0x210
[ 79.448950][ T5310] ? clear_bhb_loop+0x45/0xa0
[ 79.450660][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.453465][ T5310] RIP: 0033:0x7f476198e969
[ 79.455426][ T5310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 79.463365][ T5310] RSP: 002b:00007f476287d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 79.466294][ T5310] RAX: ffffffffffffffda RBX: 00007f4761bb6080 RCX: 00007f476198e969
[ 79.469213][ T5310] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000006
[ 79.472583][ T5310] RBP: 00007f4761a10ab1 R08: 0000000000000000 R09: 0000000000000000
[ 79.475901][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 79.479287][ T5310] R13: 0000000000000000 R14: 00007f4761bb6080 R15: 00007fffb7f78708
[ 79.482681][ T5310]
[ 79.483985][ T5310] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 79.486714][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller-00208-g00b827f0cffa #0 PREEMPT(full)
[ 79.491158][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 79.494967][ T5310] Call Trace:
[ 79.496131][ T5310]
[ 79.497261][ T5310] dump_stack_lvl+0x99/0x250
[ 79.499029][ T5310] ? __asan_memcpy+0x40/0x70
[ 79.500763][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10
[ 79.502742][ T5310] ? __pfx__printk+0x10/0x10
[ 79.504668][ T5310] panic+0x2db/0x790
[ 79.506272][ T5310] ? __pfx_panic+0x10/0x10
[ 79.507941][ T5310] ? show_trace_log_lvl+0x4fb/0x550
[ 79.510082][ T5310] __warn+0x31b/0x4b0
[ 79.511667][ T5310] ? mark_buffer_dirty+0x2a9/0x410
[ 79.513679][ T5310] ? mark_buffer_dirty+0x2a9/0x410
[ 79.515460][ T5310] report_bug+0x2be/0x4f0
[ 79.517008][ T5310] ? mark_buffer_dirty+0x2a9/0x410
[ 79.518995][ T5310] ? mark_buffer_dirty+0x2a9/0x410
[ 79.521151][ T5310] ? mark_buffer_dirty+0x2ab/0x410
[ 79.523207][ T5310] handle_bug+0x84/0x160
[ 79.524914][ T5310] exc_invalid_op+0x1a/0x50
[ 79.526892][ T5310] asm_exc_invalid_op+0x1a/0x20
[ 79.528996][ T5310] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 79.531323][ T5310] Code: 4c 89 f7 e8 79 0d de ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 34 fc ff e8 8f 18 7c ff eb 8c e8 88 18 7c ff 90 <0f> 0b 90 e9 95 fd ff ff e8 7a 18 7c ff 90 0f 0b 90 e9 bf fd ff ff
[ 79.539275][ T5310] RSP: 0018:ffffc9000f567628 EFLAGS: 00010293
[ 79.541941][ T5310] RAX: ffffffff8243a7c8 RBX: ffff888043590658 RCX: ffff88801e622440
[ 79.545529][ T5310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 79.548697][ T5310] RBP: ffff888041704001 R08: ffff88804359065f R09: 1ffff110086b20cb
[ 79.552036][ T5310] R10: dffffc0000000000 R11: ffffed10086b20cc R12: ffff8880441fe400
[ 79.555275][ T5310] R13: ffff8880435960e8 R14: ffff888043590658 R15: 000000000000000a
[ 79.558345][ T5310] ? mark_buffer_dirty+0x2a8/0x410
[ 79.560177][ T5310] ? mark_buffer_dirty+0x2a8/0x410
[ 79.562217][ T5310] bfs_get_block+0x5da/0xae0
[ 79.564266][ T5310] __block_write_begin_int+0x6b2/0x1900
[ 79.566931][ T5310] ? __pfx_bfs_get_block+0x10/0x10
[ 79.569207][ T5310] ? __pfx___block_write_begin_int+0x10/0x10
[ 79.571410][ T5310] ? __filemap_get_folio+0x79f/0xaf0
[ 79.573506][ T5310] ? __pfx_bfs_get_block+0x10/0x10
[ 79.575536][ T5310] block_write_begin+0x8a/0x120
[ 79.577504][ T5310] ? bfs_write_begin+0x1e/0xd0
[ 79.579436][ T5310] bfs_write_begin+0x35/0xd0
[ 79.581260][ T5310] generic_perform_write+0x2c4/0x910
[ 79.583545][ T5310] ? __pfx_generic_perform_write+0x10/0x10
[ 79.586436][ T5310] ? file_update_time+0x2da/0x490
[ 79.588960][ T5310] ? __generic_file_write_iter+0xf9/0x230
[ 79.591624][ T5310] ? generic_file_write_iter+0xfb/0x540
[ 79.594303][ T5310] generic_file_write_iter+0x10f/0x540
[ 79.597218][ T5310] ? __pfx_generic_file_write_iter+0x10/0x10
[ 79.600317][ T5310] ? __lock_acquire+0xaac/0xd20
[ 79.602491][ T5310] ? rcu_read_lock_any_held+0xb3/0x120
[ 79.604902][ T5310] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 79.607471][ T5310] vfs_write+0x548/0xa90
[ 79.609363][ T5310] ? __pfx_generic_file_write_iter+0x10/0x10
[ 79.611840][ T5310] ? __pfx_vfs_write+0x10/0x10
[ 79.613853][ T5310] ? __fget_files+0x2a/0x420
[ 79.615725][ T5310] ksys_write+0x145/0x250
[ 79.617608][ T5310] ? rcu_is_watching+0x15/0xb0
[ 79.619849][ T5310] ? __pfx_ksys_write+0x10/0x10
[ 79.621899][ T5310] ? do_syscall_64+0xba/0x210
[ 79.623809][ T5310] do_syscall_64+0xf6/0x210
[ 79.625685][ T5310] ? clear_bhb_loop+0x45/0xa0
[ 79.627611][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.629889][ T5310] RIP: 0033:0x7f476198e969
[ 79.631674][ T5310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 79.639296][ T5310] RSP: 002b:00007f476287d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 79.642639][ T5310] RAX: ffffffffffffffda RBX: 00007f4761bb6080 RCX: 00007f476198e969
[ 79.645433][ T5310] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000006
[ 79.648414][ T5310] RBP: 00007f4761a10ab1 R08: 0000000000000000 R09: 0000000000000000
[ 79.651468][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 79.654697][ T5310] R13: 0000000000000000 R14: 00007f4761bb6080 R15: 00007fffb7f78708
[ 79.657883][ T5310]
[ 79.659412][ T5310] Kernel Offset: disabled
[ 79.661241][ T5310] Rebooting in 86400 seconds..