program: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000040)) [ 85.627016][ T4684] Bluetooth: hci0: command tx timeout [ 85.696452][ T5343] loop0: detected capacity change from 0 to 64 [ 85.782684][ T5344] ------------[ cut here ]------------ [ 85.785492][ T5344] WARNING: fs/buffer.c:1183 at mark_buffer_dirty+0x299/0x400, CPU#0: syz.0.0/5344 [ 85.790007][ T5344] Modules linked in: [ 85.792222][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.796747][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.801273][ T5344] RIP: 0010:mark_buffer_dirty+0x299/0x400 [ 85.803514][ T5344] Code: 4c 89 f7 e8 69 c5 db ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 14 a2 fb ff e8 af e3 73 ff eb 8c e8 a8 e3 73 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 9a e3 73 ff 90 0f 0b 90 e9 cf fd ff ff [ 85.811925][ T5344] RSP: 0018:ffffc9000c097608 EFLAGS: 00010293 [ 85.815042][ T5344] RAX: ffffffff824ddd28 RBX: ffff8880473e53a0 RCX: ffff88803cd9a4c0 [ 85.818637][ T5344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 85.822036][ T5344] RBP: ffff88801a22e001 R08: ffff8880473e53a7 R09: 1ffff11008e7ca74 [ 85.826084][ T5344] R10: dffffc0000000000 R11: ffffed1008e7ca75 R12: ffff88805076f400 [ 85.829532][ T5344] R13: ffff8880120019f8 R14: ffff8880473e53a0 R15: 000000000000000a [ 85.833637][ T5344] FS: 00007fba478096c0(0000) GS:ffff88808d22a000(0000) knlGS:0000000000000000 [ 85.837401][ T5344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.840091][ T5344] CR2: 0000200000002000 CR3: 0000000012619000 CR4: 0000000000352ef0 [ 85.843216][ T5344] Call Trace: [ 85.845271][ T5344] [ 85.846667][ T5344] bfs_get_block+0x5da/0xae0 [ 85.848727][ T5344] __block_write_begin_int+0x6b5/0x1900 [ 85.851199][ T5344] ? __pfx_workingset_update_node+0x10/0x10 [ 85.854119][ T5344] ? __pfx_bfs_get_block+0x10/0x10 [ 85.856418][ T5344] ? __pfx___block_write_begin_int+0x10/0x10 [ 85.858959][ T5344] ? __pfx_bfs_get_block+0x10/0x10 [ 85.861099][ T5344] block_write_begin+0x8d/0x120 [ 85.863213][ T5344] ? bfs_write_begin+0x1e/0xd0 [ 85.865411][ T5344] bfs_write_begin+0x35/0xd0 [ 85.867386][ T5344] generic_perform_write+0x2c5/0x900 [ 85.869590][ T5344] ? __pfx_generic_perform_write+0x10/0x10 [ 85.872255][ T5344] ? file_update_time_flags+0x2cb/0x4e0 [ 85.875163][ T5344] ? __generic_file_write_iter+0xf9/0x230 [ 85.877954][ T5344] ? generic_file_write_iter+0x103/0x550 [ 85.880576][ T5344] generic_file_write_iter+0x117/0x550 [ 85.882809][ T5344] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.885417][ T5344] ? __lock_acquire+0x146f/0x2cf0 [ 85.887570][ T5344] ? __pfx_aa_file_perm+0x10/0x10 [ 85.889797][ T5344] ? rcu_read_lock_any_held+0xb3/0x120 [ 85.892097][ T5344] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 85.894528][ T5344] vfs_write+0x5c9/0xb30 [ 85.896155][ T5344] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.898688][ T5344] ? __pfx_vfs_write+0x10/0x10 [ 85.900793][ T5344] ? __fget_files+0x2a/0x420 [ 85.902903][ T5344] ksys_write+0x145/0x250 [ 85.904960][ T5344] ? __pfx_ksys_write+0x10/0x10 [ 85.906810][ T5344] ? do_syscall_64+0xbe/0xf80 [ 85.908915][ T5344] do_syscall_64+0xfa/0xf80 [ 85.910856][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.913547][ T5344] ? clear_bhb_loop+0x60/0xb0 [ 85.915668][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.918155][ T5344] RIP: 0033:0x7fba4698f7c9 [ 85.919944][ T5344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.928082][ T5344] RSP: 002b:00007fba47809038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.931587][ T5344] RAX: ffffffffffffffda RBX: 00007fba46be6090 RCX: 00007fba4698f7c9 [ 85.935018][ T5344] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 85.938307][ T5344] RBP: 00007fba46a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 85.941788][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.945859][ T5344] R13: 00007fba46be6128 R14: 00007fba46be6090 R15: 00007ffc134d1fa8 [ 85.949814][ T5344] [ 85.951183][ T5344] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.954296][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.958071][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.962479][ T5344] Call Trace: [ 85.963950][ T5344] [ 85.965190][ T5344] dump_stack_lvl+0x99/0x250 [ 85.967127][ T5344] ? __asan_memcpy+0x40/0x70 [ 85.969009][ T5344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.971354][ T5344] ? __pfx__printk+0x10/0x10 [ 85.973517][ T5344] vpanic+0x237/0x6d0 [ 85.975294][ T5344] ? __pfx_vpanic+0x10/0x10 [ 85.977180][ T5344] ? is_bpf_text_address+0x292/0x2b0 [ 85.979499][ T5344] ? is_bpf_text_address+0x26/0x2b0 [ 85.981824][ T5344] panic+0xb9/0xc0 [ 85.983498][ T5344] ? __pfx_panic+0x10/0x10 [ 85.985445][ T5344] __warn+0x317/0x4b0 [ 85.987148][ T5344] ? mark_buffer_dirty+0x299/0x400 [ 85.989391][ T5344] ? mark_buffer_dirty+0x299/0x400 [ 85.991471][ T5344] __report_bug+0x288/0x500 [ 85.993400][ T5344] ? __pfx___might_resched+0x10/0x10 [ 85.995558][ T5344] ? mark_buffer_dirty+0x299/0x400 [ 85.997798][ T5344] ? __pfx___report_bug+0x10/0x10 [ 85.999965][ T5344] ? find_get_block_common+0xc26/0xfc0 [ 86.002200][ T5344] ? find_get_block_common+0xc86/0xfc0 [ 86.004360][ T5344] ? mark_buffer_dirty+0x299/0x400 [ 86.006599][ T5344] report_bug+0x16a/0x220 [ 86.008426][ T5344] ? mark_buffer_dirty+0x299/0x400 [ 86.010551][ T5344] ? mark_buffer_dirty+0x29b/0x400 [ 86.012706][ T5344] handle_bug+0x98/0x200 [ 86.014399][ T5344] exc_invalid_op+0x1a/0x50 [ 86.016193][ T5344] asm_exc_invalid_op+0x1a/0x20 [ 86.018139][ T5344] RIP: 0010:mark_buffer_dirty+0x299/0x400 [ 86.020556][ T5344] Code: 4c 89 f7 e8 69 c5 db ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 14 a2 fb ff e8 af e3 73 ff eb 8c e8 a8 e3 73 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 9a e3 73 ff 90 0f 0b 90 e9 cf fd ff ff [ 86.029065][ T5344] RSP: 0018:ffffc9000c097608 EFLAGS: 00010293 [ 86.031759][ T5344] RAX: ffffffff824ddd28 RBX: ffff8880473e53a0 RCX: ffff88803cd9a4c0 [ 86.035159][ T5344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 86.038484][ T5344] RBP: ffff88801a22e001 R08: ffff8880473e53a7 R09: 1ffff11008e7ca74 [ 86.041733][ T5344] R10: dffffc0000000000 R11: ffffed1008e7ca75 R12: ffff88805076f400 [ 86.045026][ T5344] R13: ffff8880120019f8 R14: ffff8880473e53a0 R15: 000000000000000a [ 86.048523][ T5344] ? mark_buffer_dirty+0x298/0x400 [ 86.050867][ T5344] ? mark_buffer_dirty+0x298/0x400 [ 86.052977][ T5344] bfs_get_block+0x5da/0xae0 [ 86.054672][ T5344] __block_write_begin_int+0x6b5/0x1900 [ 86.056696][ T5344] ? __pfx_workingset_update_node+0x10/0x10 [ 86.059005][ T5344] ? __pfx_bfs_get_block+0x10/0x10 [ 86.061240][ T5344] ? __pfx___block_write_begin_int+0x10/0x10 [ 86.063915][ T5344] ? __pfx_bfs_get_block+0x10/0x10 [ 86.066202][ T5344] block_write_begin+0x8d/0x120 [ 86.068086][ T5344] ? bfs_write_begin+0x1e/0xd0 [ 86.070038][ T5344] bfs_write_begin+0x35/0xd0 [ 86.071950][ T5344] generic_perform_write+0x2c5/0x900 [ 86.074224][ T5344] ? __pfx_generic_perform_write+0x10/0x10 [ 86.076460][ T5344] ? file_update_time_flags+0x2cb/0x4e0 [ 86.078700][ T5344] ? __generic_file_write_iter+0xf9/0x230 [ 86.081075][ T5344] ? generic_file_write_iter+0x103/0x550 [ 86.083550][ T5344] generic_file_write_iter+0x117/0x550 [ 86.085908][ T5344] ? __pfx_generic_file_write_iter+0x10/0x10 [ 86.088552][ T5344] ? __lock_acquire+0x146f/0x2cf0 [ 86.090757][ T5344] ? __pfx_aa_file_perm+0x10/0x10 [ 86.092951][ T5344] ? rcu_read_lock_any_held+0xb3/0x120 [ 86.095575][ T5344] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 86.098761][ T5344] vfs_write+0x5c9/0xb30 [ 86.101006][ T5344] ? __pfx_generic_file_write_iter+0x10/0x10 [ 86.103840][ T5344] ? __pfx_vfs_write+0x10/0x10 [ 86.105872][ T5344] ? __fget_files+0x2a/0x420 [ 86.107971][ T5344] ksys_write+0x145/0x250 [ 86.109806][ T5344] ? __pfx_ksys_write+0x10/0x10 [ 86.111910][ T5344] ? do_syscall_64+0xbe/0xf80 [ 86.114094][ T5344] do_syscall_64+0xfa/0xf80 [ 86.116146][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.118625][ T5344] ? clear_bhb_loop+0x60/0xb0 [ 86.120687][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.123179][ T5344] RIP: 0033:0x7fba4698f7c9 [ 86.124997][ T5344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.132922][ T5344] RSP: 002b:00007fba47809038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.136375][ T5344] RAX: ffffffffffffffda RBX: 00007fba46be6090 RCX: 00007fba4698f7c9 [ 86.139227][ T5344] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 86.142159][ T5344] RBP: 00007fba46a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.145539][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.148622][ T5344] R13: 00007fba46be6128 R14: 00007fba46be6090 R15: 00007ffc134d1fa8 [ 86.152019][ T5344] [ 86.153673][ T5344] Kernel Offset: disabled [ 86.155521][ T5344] Rebooting in 86400 seconds..