program:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100))
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r1, 0x201bf)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x131)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9)
sendto$inet6(r0, &(0x7f0000000040)="04ee6df198935974de22501bc53100000000000000000000000000000000000036537f", 0x23, 0x200088c3, &(0x7f00000000c0)={0xa, 0x2, 0x6, @empty}, 0x1c)
shutdown(r0, 0x1)
[ 130.834423][ T46] Bluetooth: hci0: command tx timeout
[ 130.959409][ T5347] loop0: detected capacity change from 0 to 512
[ 131.072380][ T5347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 131.084938][ T5347] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 131.198944][ T140] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm kworker/u4:6: bg 0: bad block bitmap checksum
[ 131.226686][ T5347] loop0: detected capacity change from 512 to 64
[ 131.231488][ T140] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 74
[ 131.249189][ T140] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 131.249189][ T140]
[ 131.256356][ T5348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Out of memory
[ 131.270859][ T5348] EXT4-fs error (device loop0): ext4_setattr:5984: inode #18: comm syz.0.0: mark_inode_dirty error
[ 131.279360][ T5348] EXT4-fs error (device loop0) in ext4_setattr:6035: Out of memory
[ 131.286042][ T5346] ------------[ cut here ]------------
[ 131.288799][ T5346] WARNING: mm/page-writeback.c:2710 at __folio_mark_dirty+0x202/0xe10, CPU#0: syz.0.0/5346
[ 131.293511][ T5346] Modules linked in:
[ 131.295782][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 131.300008][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 131.304590][ T5346] RIP: 0010:__folio_mark_dirty+0x202/0xe10
[ 131.307247][ T5346] Code: 3c 20 00 74 08 48 89 df e8 7b cf 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 6a 29 c3 ff 49 83 e6 08 75 20 e8 7f 24 c3 ff 90 <0f> 0b 90 eb 1a e8 74 24 c3 ff 48 8b 2c 24 e9 5d 07 00 00 e8 66 24
[ 131.316650][ T5346] RSP: 0000:ffffc9000e907810 EFLAGS: 00010093
[ 131.319087][ T5346] RAX: ffffffff81fde0a1 RBX: ffffea00008c13c0 RCX: ffff888000e8a4c0
[ 131.322647][ T5346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 131.327656][ T5346] RBP: ffff88801261ab38 R08: ffffea00008c13c7 R09: 1ffffd4000118278
[ 131.331473][ T5346] R10: dffffc0000000000 R11: fffff94000118279 R12: dffffc0000000000
[ 131.334910][ T5346] R13: ffff88801261ab40 R14: 0000000000000000 R15: 0000000000000001
[ 131.338304][ T5346] FS: 00005555641de500(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000
[ 131.341881][ T5346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 131.344382][ T5346] CR2: 0000200000000140 CR3: 0000000011ebf000 CR4: 0000000000352ef0
[ 131.347771][ T5346] Call Trace:
[ 131.349452][ T5346]
[ 131.350711][ T5346] ? do_raw_spin_unlock+0x4d/0x240
[ 131.352960][ T5346] block_dirty_folio+0x17a/0x1d0
[ 131.355297][ T5346] ext4_page_mkwrite+0xf07/0x1190
[ 131.357779][ T5346] ? __pfx_ext4_get_block_unwritten+0x10/0x10
[ 131.360407][ T5346] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 131.362424][ T5346] do_page_mkwrite+0x14d/0x310
[ 131.364307][ T5346] do_wp_page+0x2676/0x5810
[ 131.366446][ T5346] ? ___pte_offset_map+0x29/0x240
[ 131.368505][ T5346] ? __pfx_do_wp_page+0x10/0x10
[ 131.370931][ T5346] ? do_raw_spin_lock+0x121/0x290
[ 131.373520][ T5346] ? handle_mm_fault+0x1411/0x32b0
[ 131.375825][ T5346] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 131.378433][ T5346] handle_mm_fault+0x14c5/0x32b0
[ 131.382052][ T5346] ? handle_mm_fault+0xdb/0x32b0
[ 131.385894][ T5346] ? __pfx_handle_mm_fault+0x10/0x10
[ 131.388435][ T5346] ? lock_vma_under_rcu+0x42c/0x4a0
[ 131.390763][ T5346] ? __pfx_do_futex+0x10/0x10
[ 131.392968][ T5346] do_user_addr_fault+0xa7c/0x1380
[ 131.395314][ T5346] ? rcu_is_watching+0x15/0xb0
[ 131.397313][ T5346] ? trace_page_fault_user+0x84/0x1c0
[ 131.399595][ T5346] exc_page_fault+0x71/0xd0
[ 131.401700][ T5346] asm_exc_page_fault+0x26/0x30
[ 131.403985][ T5346] RIP: 0033:0x7f618ee555f3
[ 131.406111][ T5346] Code: 8b 44 24 08 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 7a 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 d2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 44 24 08 48
[ 131.415273][ T5346] RSP: 002b:00007ffd4d1b0810 EFLAGS: 00010246
[ 131.418674][ T5346] RAX: 0000200000000140 RBX: 0000000000000008 RCX: 0000000000000000
[ 131.423329][ T5346] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 00005555641de3c8
[ 131.426690][ T5346] RBP: 00007ffd4d1b0918 R08: 0000000000000000 R09: 0000000000000000
[ 131.429983][ T5346] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f618f1e609c
[ 131.433281][ T5346] R13: 00007f618f1e6090 R14: fffffffffffffffe R15: 00007ffd4d1b0960
[ 131.436540][ T5346]
[ 131.437859][ T5346] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 131.441119][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 131.444978][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 131.449226][ T5346] Call Trace:
[ 131.450765][ T5346]
[ 131.452152][ T5346] vpanic+0x1e0/0x670
[ 131.453974][ T5346] panic+0xb9/0xc0
[ 131.455740][ T5346] ? __pfx_panic+0x10/0x10
[ 131.457799][ T5346] __warn+0x317/0x4b0
[ 131.459709][ T5346] ? __folio_mark_dirty+0x202/0xe10
[ 131.462037][ T5346] ? __folio_mark_dirty+0x202/0xe10
[ 131.464599][ T5346] __report_bug+0x288/0x500
[ 131.467043][ T5346] ? __folio_mark_dirty+0x202/0xe10
[ 131.469440][ T5346] ? __pfx___report_bug+0x10/0x10
[ 131.471801][ T5346] ? __lock_acquire+0x6b6/0x2cf0
[ 131.474025][ T5346] ? do_raw_spin_unlock+0x4d/0x240
[ 131.476345][ T5346] ? __folio_mark_dirty+0x202/0xe10
[ 131.478453][ T5346] report_bug+0x16a/0x220
[ 131.480118][ T5346] ? __folio_mark_dirty+0x202/0xe10
[ 131.482854][ T5346] ? __folio_mark_dirty+0x204/0xe10
[ 131.485227][ T5346] handle_bug+0x98/0x200
[ 131.487173][ T5346] exc_invalid_op+0x1a/0x50
[ 131.489295][ T5346] asm_exc_invalid_op+0x1a/0x20
[ 131.491466][ T5346] RIP: 0010:__folio_mark_dirty+0x202/0xe10
[ 131.493683][ T5346] Code: 3c 20 00 74 08 48 89 df e8 7b cf 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 6a 29 c3 ff 49 83 e6 08 75 20 e8 7f 24 c3 ff 90 <0f> 0b 90 eb 1a e8 74 24 c3 ff 48 8b 2c 24 e9 5d 07 00 00 e8 66 24
[ 131.500557][ T5346] RSP: 0000:ffffc9000e907810 EFLAGS: 00010093
[ 131.502678][ T5346] RAX: ffffffff81fde0a1 RBX: ffffea00008c13c0 RCX: ffff888000e8a4c0
[ 131.505880][ T5346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 131.509154][ T5346] RBP: ffff88801261ab38 R08: ffffea00008c13c7 R09: 1ffffd4000118278
[ 131.512615][ T5346] R10: dffffc0000000000 R11: fffff94000118279 R12: dffffc0000000000
[ 131.516151][ T5346] R13: ffff88801261ab40 R14: 0000000000000000 R15: 0000000000000001
[ 131.519702][ T5346] ? __folio_mark_dirty+0x201/0xe10
[ 131.521982][ T5346] ? do_raw_spin_unlock+0x4d/0x240
[ 131.524219][ T5346] block_dirty_folio+0x17a/0x1d0
[ 131.526434][ T5346] ext4_page_mkwrite+0xf07/0x1190
[ 131.528702][ T5346] ? __pfx_ext4_get_block_unwritten+0x10/0x10
[ 131.531375][ T5346] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 131.534086][ T5346] do_page_mkwrite+0x14d/0x310
[ 131.536532][ T5346] do_wp_page+0x2676/0x5810
[ 131.538737][ T5346] ? ___pte_offset_map+0x29/0x240
[ 131.541543][ T5346] ? __pfx_do_wp_page+0x10/0x10
[ 131.543980][ T5346] ? do_raw_spin_lock+0x121/0x290
[ 131.546386][ T5346] ? handle_mm_fault+0x1411/0x32b0
[ 131.548631][ T5346] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 131.551103][ T5346] handle_mm_fault+0x14c5/0x32b0
[ 131.553314][ T5346] ? handle_mm_fault+0xdb/0x32b0
[ 131.555745][ T5346] ? __pfx_handle_mm_fault+0x10/0x10
[ 131.557713][ T5346] ? lock_vma_under_rcu+0x42c/0x4a0
[ 131.559770][ T5346] ? __pfx_do_futex+0x10/0x10
[ 131.561657][ T5346] do_user_addr_fault+0xa7c/0x1380
[ 131.563859][ T5346] ? rcu_is_watching+0x15/0xb0
[ 131.565876][ T5346] ? trace_page_fault_user+0x84/0x1c0
[ 131.568321][ T5346] exc_page_fault+0x71/0xd0
[ 131.570501][ T5346] asm_exc_page_fault+0x26/0x30
[ 131.572894][ T5346] RIP: 0033:0x7f618ee555f3
[ 131.575192][ T5346] Code: 8b 44 24 08 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 7a 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 d2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 44 24 08 48
[ 131.583410][ T5346] RSP: 002b:00007ffd4d1b0810 EFLAGS: 00010246
[ 131.585636][ T5346] RAX: 0000200000000140 RBX: 0000000000000008 RCX: 0000000000000000
[ 131.588766][ T5346] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 00005555641de3c8
[ 131.592091][ T5346] RBP: 00007ffd4d1b0918 R08: 0000000000000000 R09: 0000000000000000
[ 131.595330][ T5346] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f618f1e609c
[ 131.598795][ T5346] R13: 00007f618f1e6090 R14: fffffffffffffffe R15: 00007ffd4d1b0960
[ 131.602073][ T5346]
[ 131.603843][ T5346] Kernel Offset: disabled
[ 131.605716][ T5346] Rebooting in 86400 seconds..