program: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x0, 0x48, 0x8}) sendmsg$can_bcm(r4, &(0x7f0000000440)={&(0x7f0000000300), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0xf, 0x800, 0x200, {0x0, 0xea60}, {0x77359400}, {0x1}, 0x1, @canfd={{0x4, 0x1, 0x0, 0x1}, 0x11, 0x0, 0x0, 0x0, "f16afdb2a8688fcb5728033823a647a49ab2e38d7d4fb22b9af4b918447926b82695e1fe61a0bf99136f1bfa50cb51d99ee1fcfbfab3007ff354eec7d86050f5"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="610304"], 0x1c) (async, rerun: 32) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000008c0), 0xfecc) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) [ 87.211326][ T5304] Bluetooth: hci0: command tx timeout [ 87.438070][ T5339] loop0: detected capacity change from 0 to 64 [ 87.528626][ T5329] ------------[ cut here ]------------ [ 87.531368][ T5329] !buffer_uptodate(bh) [ 87.531379][ T5329] WARNING: fs/buffer.c:1183 at mark_buffer_dirty+0x299/0x3f0, CPU#0: syz.0.0/5329 [ 87.538015][ T5329] Modules linked in: [ 87.539784][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.544142][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.549341][ T5329] RIP: 0010:mark_buffer_dirty+0x299/0x3f0 [ 87.552460][ T5329] Code: 4c 89 f7 e8 89 da da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 84 7f fb ff e8 6f 00 71 ff eb 8c e8 68 00 71 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 5a 00 71 ff 90 0f 0b 90 e9 cf fd ff ff [ 87.560646][ T5329] RSP: 0018:ffffc9000ebe7608 EFLAGS: 00010293 [ 87.563263][ T5329] RAX: ffffffff82538688 RBX: ffff88801f0692b8 RCX: ffff88801f99a4c0 [ 87.566574][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 87.570287][ T5329] RBP: ffff88803431c001 R08: ffff88801f0692bf R09: 1ffff11003e0d257 [ 87.574017][ T5329] R10: dffffc0000000000 R11: ffffed1003e0d258 R12: ffff8880230c7400 [ 87.577876][ T5329] R13: ffff88804667f910 R14: ffff88801f0692b8 R15: 000000000000000a [ 87.582003][ T5329] FS: 00007f4ec2eb56c0(0000) GS:ffff88808ccea000(0000) knlGS:0000000000000000 [ 87.585550][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.588391][ T5329] CR2: 0000200000002000 CR3: 000000003795d000 CR4: 0000000000352ef0 [ 87.592125][ T5329] Call Trace: [ 87.593601][ T5329] [ 87.594884][ T5329] bfs_get_block+0x5da/0xae0 [ 87.596874][ T5329] __block_write_begin_int+0x6c6/0x1910 [ 87.599324][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 87.601970][ T5329] ? __pfx___block_write_begin_int+0x10/0x10 [ 87.604498][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 87.606748][ T5329] block_write_begin+0x8d/0x120 [ 87.608727][ T5329] ? bfs_write_begin+0x1e/0xd0 [ 87.610612][ T5329] bfs_write_begin+0x35/0xd0 [ 87.612769][ T5329] generic_perform_write+0x2e2/0x8f0 [ 87.615210][ T5329] ? __pfx_generic_perform_write+0x10/0x10 [ 87.617826][ T5329] ? file_update_time_flags+0x2cb/0x4d0 [ 87.620246][ T5329] ? __generic_file_write_iter+0xf9/0x230 [ 87.622914][ T5329] ? generic_file_write_iter+0x136/0x680 [ 87.625386][ T5329] generic_file_write_iter+0x14a/0x680 [ 87.627831][ T5329] ? add_lock_to_list+0xc7/0x100 [ 87.630006][ T5329] ? __pfx_generic_file_write_iter+0x10/0x10 [ 87.632820][ T5329] ? lockdep_unlock+0x5d/0xd0 [ 87.634646][ T5329] ? __lock_acquire+0x146e/0x2cf0 [ 87.636515][ T5329] ? __pfx_aa_file_perm+0x10/0x10 [ 87.638574][ T5329] ? vfs_write+0x227/0xb90 [ 87.640396][ T5329] ? vfs_write+0x227/0xb90 [ 87.642335][ T5329] vfs_write+0x61d/0xb90 [ 87.644091][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 87.646062][ T5329] ? __fget_files+0x2a/0x420 [ 87.647980][ T5329] ksys_write+0x150/0x270 [ 87.649838][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 87.651987][ T5329] do_syscall_64+0xe2/0xf80 [ 87.654098][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.656600][ T5329] ? trace_irq_disable+0x37/0x100 [ 87.658462][ T5329] ? clear_bhb_loop+0x60/0xb0 [ 87.660467][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.662848][ T5329] RIP: 0033:0x7f4ec1f9aeb9 [ 87.664761][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.673027][ T5329] RSP: 002b:00007f4ec2eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.682079][ T5329] RAX: ffffffffffffffda RBX: 00007f4ec2215fa0 RCX: 00007f4ec1f9aeb9 [ 87.685519][ T5329] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000046 [ 87.688937][ T5329] RBP: 00007f4ec2008c1f R08: 0000000000000000 R09: 0000000000000000 [ 87.692748][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.696853][ T5329] R13: 00007f4ec2216038 R14: 00007f4ec2215fa0 R15: 00007fffbf2d01a8 [ 87.700261][ T5329] [ 87.701939][ T5329] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.704802][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.708421][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.712971][ T5329] Call Trace: [ 87.714459][ T5329] [ 87.715811][ T5329] vpanic+0x1e0/0x670 [ 87.717454][ T5329] panic+0xc5/0xd0 [ 87.719094][ T5329] ? __pfx_panic+0x10/0x10 [ 87.721248][ T5329] __warn+0x315/0x4a0 [ 87.723143][ T5329] ? mark_buffer_dirty+0x299/0x3f0 [ 87.725366][ T5329] ? mark_buffer_dirty+0x299/0x3f0 [ 87.727544][ T5329] __report_bug+0x29a/0x540 [ 87.729612][ T5329] ? filemap_get_entry+0xca/0x320 [ 87.731939][ T5329] ? mark_buffer_dirty+0x299/0x3f0 [ 87.734221][ T5329] ? __pfx___report_bug+0x10/0x10 [ 87.736449][ T5329] ? __pfx_folio_mark_accessed+0x10/0x10 [ 87.739046][ T5329] ? mark_buffer_dirty+0x299/0x3f0 [ 87.741421][ T5329] report_bug+0x16a/0x220 [ 87.743304][ T5329] ? mark_buffer_dirty+0x299/0x3f0 [ 87.745555][ T5329] ? mark_buffer_dirty+0x29b/0x3f0 [ 87.747880][ T5329] handle_bug+0x98/0x200 [ 87.749687][ T5329] exc_invalid_op+0x1a/0x50 [ 87.751636][ T5329] asm_exc_invalid_op+0x1a/0x20 [ 87.753764][ T5329] RIP: 0010:mark_buffer_dirty+0x299/0x3f0 [ 87.756266][ T5329] Code: 4c 89 f7 e8 89 da da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 84 7f fb ff e8 6f 00 71 ff eb 8c e8 68 00 71 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 5a 00 71 ff 90 0f 0b 90 e9 cf fd ff ff [ 87.764679][ T5329] RSP: 0018:ffffc9000ebe7608 EFLAGS: 00010293 [ 87.767461][ T5329] RAX: ffffffff82538688 RBX: ffff88801f0692b8 RCX: ffff88801f99a4c0 [ 87.770965][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 87.774499][ T5329] RBP: ffff88803431c001 R08: ffff88801f0692bf R09: 1ffff11003e0d257 [ 87.777990][ T5329] R10: dffffc0000000000 R11: ffffed1003e0d258 R12: ffff8880230c7400 [ 87.781690][ T5329] R13: ffff88804667f910 R14: ffff88801f0692b8 R15: 000000000000000a [ 87.785105][ T5329] ? mark_buffer_dirty+0x298/0x3f0 [ 87.787360][ T5329] ? mark_buffer_dirty+0x298/0x3f0 [ 87.789562][ T5329] bfs_get_block+0x5da/0xae0 [ 87.791552][ T5329] __block_write_begin_int+0x6c6/0x1910 [ 87.793939][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 87.796302][ T5329] ? __pfx___block_write_begin_int+0x10/0x10 [ 87.798947][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 87.801150][ T5329] block_write_begin+0x8d/0x120 [ 87.803331][ T5329] ? bfs_write_begin+0x1e/0xd0 [ 87.805505][ T5329] bfs_write_begin+0x35/0xd0 [ 87.807530][ T5329] generic_perform_write+0x2e2/0x8f0 [ 87.809793][ T5329] ? __pfx_generic_perform_write+0x10/0x10 [ 87.812406][ T5329] ? file_update_time_flags+0x2cb/0x4d0 [ 87.814823][ T5329] ? __generic_file_write_iter+0xf9/0x230 [ 87.817449][ T5329] ? generic_file_write_iter+0x136/0x680 [ 87.819986][ T5329] generic_file_write_iter+0x14a/0x680 [ 87.822457][ T5329] ? add_lock_to_list+0xc7/0x100 [ 87.824691][ T5329] ? __pfx_generic_file_write_iter+0x10/0x10 [ 87.827402][ T5329] ? lockdep_unlock+0x5d/0xd0 [ 87.829439][ T5329] ? __lock_acquire+0x146e/0x2cf0 [ 87.831695][ T5329] ? __pfx_aa_file_perm+0x10/0x10 [ 87.833873][ T5329] ? vfs_write+0x227/0xb90 [ 87.835869][ T5329] ? vfs_write+0x227/0xb90 [ 87.837840][ T5329] vfs_write+0x61d/0xb90 [ 87.839741][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 87.841924][ T5329] ? __fget_files+0x2a/0x420 [ 87.844007][ T5329] ksys_write+0x150/0x270 [ 87.845909][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 87.848125][ T5329] do_syscall_64+0xe2/0xf80 [ 87.850147][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.852922][ T5329] ? trace_irq_disable+0x37/0x100 [ 87.855099][ T5329] ? clear_bhb_loop+0x60/0xb0 [ 87.857141][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.859724][ T5329] RIP: 0033:0x7f4ec1f9aeb9 [ 87.861824][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.870085][ T5329] RSP: 002b:00007f4ec2eb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.873856][ T5329] RAX: ffffffffffffffda RBX: 00007f4ec2215fa0 RCX: 00007f4ec1f9aeb9 [ 87.877240][ T5329] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000046 [ 87.880773][ T5329] RBP: 00007f4ec2008c1f R08: 0000000000000000 R09: 0000000000000000 [ 87.884280][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.887756][ T5329] R13: 00007f4ec2216038 R14: 00007f4ec2215fa0 R15: 00007fffbf2d01a8 [ 87.891290][ T5329] [ 87.893209][ T5329] Kernel Offset: disabled [ 87.895196][ T5329] Rebooting in 86400 seconds..