program:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x201bf)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x131)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
[ 85.889408][ T5341] loop0: detected capacity change from 0 to 512
[ 85.948150][ T5341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 85.962518][ T5341] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 86.064600][ T5341] loop0: detected capacity change from 512 to 64
[ 86.067538][ T3171] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm kworker/u4:15: bg 0: bad block bitmap checksum
[ 86.085243][ T3171] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 74
[ 86.090524][ T3171] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 86.090524][ T3171]
[ 86.105738][ T5342] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Out of memory
[ 86.121705][ T5342] EXT4-fs error (device loop0): ext4_setattr:5984: inode #18: comm syz.0.0: mark_inode_dirty error
[ 86.128556][ T5342] EXT4-fs error (device loop0) in ext4_setattr:6035: Out of memory
[ 86.136481][ T5340] ------------[ cut here ]------------
[ 86.139256][ T5340] WARNING: mm/page-writeback.c:2710 at __folio_mark_dirty+0x202/0xe10, CPU#0: syz.0.0/5340
[ 86.143565][ T5340] Modules linked in:
[ 86.145645][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.149276][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.153903][ T5340] RIP: 0010:__folio_mark_dirty+0x202/0xe10
[ 86.156336][ T5340] Code: 3c 20 00 74 08 48 89 df e8 fb ce 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 2a 29 c3 ff 49 83 e6 08 75 20 e8 3f 24 c3 ff 90 <0f> 0b 90 eb 1a e8 34 24 c3 ff 48 8b 2c 24 e9 5d 07 00 00 e8 26 24
[ 86.164580][ T5340] RSP: 0000:ffffc9000e03f810 EFLAGS: 00010093
[ 86.167206][ T5340] RAX: ffffffff81fde321 RBX: ffffea00014bcec0 RCX: ffff8880001624c0
[ 86.170385][ T5340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 86.173407][ T5340] RBP: ffff8880446b97f8 R08: ffffea00014bcec7 R09: 1ffffd40002979d8
[ 86.176619][ T5340] R10: dffffc0000000000 R11: fffff940002979d9 R12: dffffc0000000000
[ 86.179983][ T5340] R13: ffff8880446b9800 R14: 0000000000000000 R15: 0000000000000001
[ 86.183119][ T5340] FS: 0000555578646500(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000
[ 86.187192][ T5340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 86.190115][ T5340] CR2: 0000200000000040 CR3: 000000001134c000 CR4: 0000000000352ef0
[ 86.193594][ T5340] Call Trace:
[ 86.195202][ T5340]
[ 86.196621][ T5340] ? do_raw_spin_unlock+0x4d/0x240
[ 86.198964][ T5340] block_dirty_folio+0x17a/0x1d0
[ 86.201151][ T5340] ext4_page_mkwrite+0xf07/0x1190
[ 86.203406][ T5340] ? __pfx_ext4_get_block_unwritten+0x10/0x10
[ 86.206225][ T5340] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 86.208653][ T5340] do_page_mkwrite+0x14d/0x310
[ 86.210540][ T5340] do_wp_page+0x2676/0x5810
[ 86.212230][ T5340] ? ___pte_offset_map+0x29/0x240
[ 86.214348][ T5340] ? __pfx_do_wp_page+0x10/0x10
[ 86.216071][ T5340] ? do_raw_spin_lock+0x121/0x290
[ 86.218322][ T5340] ? handle_mm_fault+0x1411/0x32b0
[ 86.220565][ T5340] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 86.222905][ T5340] handle_mm_fault+0x14c5/0x32b0
[ 86.225093][ T5340] ? handle_mm_fault+0xdb/0x32b0
[ 86.227279][ T5340] ? __pfx_handle_mm_fault+0x10/0x10
[ 86.229617][ T5340] ? lock_vma_under_rcu+0x42c/0x4a0
[ 86.231939][ T5340] ? __pfx_do_futex+0x10/0x10
[ 86.233990][ T5340] do_user_addr_fault+0xa7c/0x1380
[ 86.236257][ T5340] ? rcu_is_watching+0x15/0xb0
[ 86.238328][ T5340] ? trace_page_fault_user+0x84/0x1c0
[ 86.240653][ T5340] exc_page_fault+0x71/0xd0
[ 86.242590][ T5340] asm_exc_page_fault+0x26/0x30
[ 86.244616][ T5340] RIP: 0033:0x7f6322758b70
[ 86.246578][ T5340] Code: fa 08 73 36 48 83 ea 04 73 e0 83 fa fd 7c 10 8a 0e 74 0a 0f b7 74 16 02 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48
[ 86.254790][ T5340] RSP: 002b:00007fffee852ad8 EFLAGS: 00010206
[ 86.257396][ T5340] RAX: 0000200000000040 RBX: 0000000000000004 RCX: 8000000000000013
[ 86.260847][ T5340] RDX: 0000000000000013 RSI: 00007f63221ff869 RDI: 0000200000000040
[ 86.264217][ T5340] RBP: 00007f63229e7da0 R08: 00007f63225ff02c R09: 0000000000000001
[ 86.267612][ T5340] R10: 0000000000000001 R11: 0000000000000009 R12: 00007f63229e609c
[ 86.271070][ T5340] R13: 00007f63229e6090 R14: fffffffffffffffe R15: 00007fffee852bf0
[ 86.274330][ T5340]
[ 86.275688][ T5340] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.278742][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.282631][ T5340] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.287213][ T5340] Call Trace:
[ 86.288724][ T5340]
[ 86.290058][ T5340] vpanic+0x1e0/0x670
[ 86.291738][ T5340] panic+0xb9/0xc0
[ 86.293270][ T5340] ? __pfx_panic+0x10/0x10
[ 86.295215][ T5340] __warn+0x317/0x4b0
[ 86.297022][ T5340] ? __folio_mark_dirty+0x202/0xe10
[ 86.299229][ T5340] ? __folio_mark_dirty+0x202/0xe10
[ 86.301356][ T5340] __report_bug+0x288/0x500
[ 86.303296][ T5340] ? __folio_mark_dirty+0x202/0xe10
[ 86.305558][ T5340] ? __pfx___report_bug+0x10/0x10
[ 86.307693][ T5340] ? __lock_acquire+0x6b6/0x2cf0
[ 86.309858][ T5340] ? do_raw_spin_unlock+0x4d/0x240
[ 86.311944][ T5340] ? __folio_mark_dirty+0x202/0xe10
[ 86.314181][ T5340] report_bug+0x16a/0x220
[ 86.316085][ T5340] ? __folio_mark_dirty+0x202/0xe10
[ 86.318146][ T5340] ? __folio_mark_dirty+0x204/0xe10
[ 86.320329][ T5340] handle_bug+0x98/0x200
[ 86.322051][ T5340] exc_invalid_op+0x1a/0x50
[ 86.324209][ T5340] asm_exc_invalid_op+0x1a/0x20
[ 86.326354][ T5340] RIP: 0010:__folio_mark_dirty+0x202/0xe10
[ 86.328807][ T5340] Code: 3c 20 00 74 08 48 89 df e8 fb ce 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 2a 29 c3 ff 49 83 e6 08 75 20 e8 3f 24 c3 ff 90 <0f> 0b 90 eb 1a e8 34 24 c3 ff 48 8b 2c 24 e9 5d 07 00 00 e8 26 24
[ 86.336678][ T5340] RSP: 0000:ffffc9000e03f810 EFLAGS: 00010093
[ 86.339147][ T5340] RAX: ffffffff81fde321 RBX: ffffea00014bcec0 RCX: ffff8880001624c0
[ 86.342362][ T5340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 86.345523][ T5340] RBP: ffff8880446b97f8 R08: ffffea00014bcec7 R09: 1ffffd40002979d8
[ 86.348421][ T5340] R10: dffffc0000000000 R11: fffff940002979d9 R12: dffffc0000000000
[ 86.351521][ T5340] R13: ffff8880446b9800 R14: 0000000000000000 R15: 0000000000000001
[ 86.355005][ T5340] ? __folio_mark_dirty+0x201/0xe10
[ 86.357372][ T5340] ? do_raw_spin_unlock+0x4d/0x240
[ 86.359613][ T5340] block_dirty_folio+0x17a/0x1d0
[ 86.361700][ T5340] ext4_page_mkwrite+0xf07/0x1190
[ 86.363751][ T5340] ? __pfx_ext4_get_block_unwritten+0x10/0x10
[ 86.366315][ T5340] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 86.368661][ T5340] do_page_mkwrite+0x14d/0x310
[ 86.370686][ T5340] do_wp_page+0x2676/0x5810
[ 86.372710][ T5340] ? ___pte_offset_map+0x29/0x240
[ 86.374907][ T5340] ? __pfx_do_wp_page+0x10/0x10
[ 86.376984][ T5340] ? do_raw_spin_lock+0x121/0x290
[ 86.379117][ T5340] ? handle_mm_fault+0x1411/0x32b0
[ 86.381502][ T5340] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 86.383767][ T5340] handle_mm_fault+0x14c5/0x32b0
[ 86.385710][ T5340] ? handle_mm_fault+0xdb/0x32b0
[ 86.387982][ T5340] ? __pfx_handle_mm_fault+0x10/0x10
[ 86.390175][ T5340] ? lock_vma_under_rcu+0x42c/0x4a0
[ 86.392477][ T5340] ? __pfx_do_futex+0x10/0x10
[ 86.394599][ T5340] do_user_addr_fault+0xa7c/0x1380
[ 86.396673][ T5340] ? rcu_is_watching+0x15/0xb0
[ 86.398417][ T5340] ? trace_page_fault_user+0x84/0x1c0
[ 86.400426][ T5340] exc_page_fault+0x71/0xd0
[ 86.402124][ T5340] asm_exc_page_fault+0x26/0x30
[ 86.404187][ T5340] RIP: 0033:0x7f6322758b70
[ 86.406151][ T5340] Code: fa 08 73 36 48 83 ea 04 73 e0 83 fa fd 7c 10 8a 0e 74 0a 0f b7 74 16 02 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48
[ 86.414636][ T5340] RSP: 002b:00007fffee852ad8 EFLAGS: 00010206
[ 86.417282][ T5340] RAX: 0000200000000040 RBX: 0000000000000004 RCX: 8000000000000013
[ 86.420653][ T5340] RDX: 0000000000000013 RSI: 00007f63221ff869 RDI: 0000200000000040
[ 86.424084][ T5340] RBP: 00007f63229e7da0 R08: 00007f63225ff02c R09: 0000000000000001
[ 86.427646][ T5340] R10: 0000000000000001 R11: 0000000000000009 R12: 00007f63229e609c
[ 86.431041][ T5340] R13: 00007f63229e6090 R14: fffffffffffffffe R15: 00007fffee852bf0
[ 86.434488][ T5340]
[ 86.436151][ T5340] Kernel Offset: disabled
[ 86.437973][ T5340] Rebooting in 86400 seconds..