program: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = syz_clone(0x20000400, &(0x7f0000000040)="3c287a536af0d2b1a921132108b09fe789a5889b1de9bb4ceff8b67fcc4b84e6d2b1798d79c5b37876307b6059b48a7dc4c6e44bfad3c3064ea47ab7f1561a1d713063fb88fd0a7ef17cc6b9842ec3991e115b", 0x53, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000280)="f6c889a4751c47259b5122f97feb601901daff01d0bd9d2a08e55c1c0e0643d338f68905756f70459dc410cc6f606f14a4f07f1f3aec6f032403cdb983e6418b0ee3650e522920afe7c11cb293fcb5c3e88fe1b197bdd12f0bafc6f0bfc7b0c876bb9cb3a4b4146ddbdf827e7204a2f1c0993a694e0a968bc8ef6d15b8bbc1de2158a06af8d3afd9c9ce898adcd74a6110aa72df4da1cf4d980b39de9c19c8f6845845da9e9d2d465391c1c31a2fcf66858403f3aab4d33c135838522be23500a3c704ae9fcc8ecc322dad1dbe1776d93f") r1 = syz_open_procfs(r0, &(0x7f00000001c0)='fd/4\x00') r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x10000]}, 0x8) fcntl$lock(r2, 0x6, &(0x7f0000001c40)={0x5, 0x1, 0x30, 0x80000001}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r5, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, r3, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x29}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_SSID={0x21, 0x34, @random="76cc0d3ffe5c8acbf97cf6b5c659a31fd3d8d86d87395f8dd6ae6369ba"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}, @NL80211_ATTR_PMKID={0x14, 0x55, "6139d12c84882453591917aa8787a1fc"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x80}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40080}, 0x4008) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000008c0), 0xfecc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) [ 85.513814][ T4668] Bluetooth: hci0: command tx timeout [ 85.571665][ T5326] loop0: detected capacity change from 0 to 64 [ 85.692612][ T5326] ------------[ cut here ]------------ [ 85.695614][ T5326] WARNING: CPU: 0 PID: 5326 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410 [ 85.699508][ T5326] Modules linked in: [ 85.701311][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.705628][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.710094][ T5326] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 85.712490][ T5326] Code: 4c 89 f7 e8 b9 06 dd ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 14 ea fb ff e8 ff b8 75 ff eb 8c e8 f8 b8 75 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 ea b8 75 ff 90 0f 0b 90 e9 bf fd ff ff [ 85.721236][ T5326] RSP: 0018:ffffc9000d137608 EFLAGS: 00010283 [ 85.724766][ T5326] RAX: ffffffff824a5a58 RBX: ffff8880431b3828 RCX: 0000000000100000 [ 85.728326][ T5326] RDX: ffffc9000e30a000 RSI: 00000000000012f3 RDI: 00000000000012f4 [ 85.731903][ T5326] RBP: ffff88801144c001 R08: ffff8880431b382f R09: 1ffff11008636705 [ 85.735617][ T5326] R10: dffffc0000000000 R11: ffffed1008636706 R12: ffff88804c169000 [ 85.739034][ T5326] R13: ffff8880431b0bc8 R14: ffff8880431b3828 R15: 000000000000000f [ 85.742514][ T5326] FS: 00007f0b303de6c0(0000) GS:ffff88808d72d000(0000) knlGS:0000000000000000 [ 85.746590][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.749424][ T5326] CR2: 0000200000002000 CR3: 0000000042432000 CR4: 0000000000352ef0 [ 85.753677][ T5326] Call Trace: [ 85.755298][ T5326] [ 85.756628][ T5326] bfs_get_block+0x5da/0xae0 [ 85.758659][ T5326] __block_write_begin_int+0x6b5/0x1900 [ 85.761163][ T5326] ? __pfx_bfs_get_block+0x10/0x10 [ 85.763348][ T5326] ? __pfx___block_write_begin_int+0x10/0x10 [ 85.766223][ T5326] ? __filemap_get_folio+0x79f/0xaf0 [ 85.768470][ T5326] ? __pfx_bfs_get_block+0x10/0x10 [ 85.770652][ T5326] block_write_begin+0x8a/0x120 [ 85.772809][ T5326] ? bfs_write_begin+0x1e/0xd0 [ 85.775468][ T5326] bfs_write_begin+0x35/0xd0 [ 85.777573][ T5326] generic_perform_write+0x2c5/0x900 [ 85.779865][ T5326] ? __pfx_generic_perform_write+0x10/0x10 [ 85.782424][ T5326] ? file_update_time+0x2da/0x490 [ 85.784721][ T5326] ? __generic_file_write_iter+0xf9/0x230 [ 85.786952][ T5326] ? generic_file_write_iter+0x103/0x550 [ 85.789189][ T5326] generic_file_write_iter+0x117/0x550 [ 85.791302][ T5326] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.793807][ T5326] ? __lock_acquire+0xab9/0xd20 [ 85.795714][ T5326] ? rcu_read_lock_any_held+0xb3/0x120 [ 85.797884][ T5326] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 85.800346][ T5326] vfs_write+0x5c9/0xb30 [ 85.802140][ T5326] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.804930][ T5326] ? __pfx_vfs_write+0x10/0x10 [ 85.806990][ T5326] ? __fget_files+0x2a/0x420 [ 85.808933][ T5326] ksys_write+0x145/0x250 [ 85.810644][ T5326] ? __pfx_ksys_write+0x10/0x10 [ 85.812813][ T5326] ? do_syscall_64+0xbe/0xfa0 [ 85.815347][ T5326] do_syscall_64+0xfa/0xfa0 [ 85.817440][ T5326] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.819685][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.822491][ T5326] ? clear_bhb_loop+0x60/0xb0 [ 85.824753][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.827239][ T5326] RIP: 0033:0x7f0b2f58f7c9 [ 85.829147][ T5326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.837138][ T5326] RSP: 002b:00007f0b303de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.840899][ T5326] RAX: ffffffffffffffda RBX: 00007f0b2f7e5fa0 RCX: 00007f0b2f58f7c9 [ 85.844568][ T5326] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000006 [ 85.848020][ T5326] RBP: 00007f0b2f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 85.851457][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.854800][ T5326] R13: 00007f0b2f7e6038 R14: 00007f0b2f7e5fa0 R15: 00007ffeeda2c738 [ 85.858458][ T5326] [ 85.859821][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.862734][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.866452][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.870851][ T5326] Call Trace: [ 85.872304][ T5326] [ 85.873579][ T5326] dump_stack_lvl+0x99/0x250 [ 85.875615][ T5326] ? __asan_memcpy+0x40/0x70 [ 85.877608][ T5326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.879856][ T5326] ? __pfx__printk+0x10/0x10 [ 85.881845][ T5326] vpanic+0x237/0x6d0 [ 85.883617][ T5326] ? __pfx_vpanic+0x10/0x10 [ 85.885684][ T5326] panic+0xb9/0xc0 [ 85.887277][ T5326] ? __pfx_panic+0x10/0x10 [ 85.889099][ T5326] __warn+0x31b/0x4b0 [ 85.890887][ T5326] ? mark_buffer_dirty+0x2a9/0x410 [ 85.892902][ T5326] ? mark_buffer_dirty+0x2a9/0x410 [ 85.894992][ T5326] report_bug+0x2be/0x4f0 [ 85.896864][ T5326] ? mark_buffer_dirty+0x2a9/0x410 [ 85.899074][ T5326] ? mark_buffer_dirty+0x2a9/0x410 [ 85.901309][ T5326] ? mark_buffer_dirty+0x2ab/0x410 [ 85.903508][ T5326] handle_bug+0x84/0x160 [ 85.905391][ T5326] exc_invalid_op+0x1a/0x50 [ 85.907362][ T5326] asm_exc_invalid_op+0x1a/0x20 [ 85.909490][ T5326] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 85.911997][ T5326] Code: 4c 89 f7 e8 b9 06 dd ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 14 ea fb ff e8 ff b8 75 ff eb 8c e8 f8 b8 75 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 ea b8 75 ff 90 0f 0b 90 e9 bf fd ff ff [ 85.920421][ T5326] RSP: 0018:ffffc9000d137608 EFLAGS: 00010283 [ 85.923081][ T5326] RAX: ffffffff824a5a58 RBX: ffff8880431b3828 RCX: 0000000000100000 [ 85.926383][ T5326] RDX: ffffc9000e30a000 RSI: 00000000000012f3 RDI: 00000000000012f4 [ 85.929725][ T5326] RBP: ffff88801144c001 R08: ffff8880431b382f R09: 1ffff11008636705 [ 85.933141][ T5326] R10: dffffc0000000000 R11: ffffed1008636706 R12: ffff88804c169000 [ 85.936389][ T5326] R13: ffff8880431b0bc8 R14: ffff8880431b3828 R15: 000000000000000f [ 85.939819][ T5326] ? mark_buffer_dirty+0x2a8/0x410 [ 85.942017][ T5326] ? mark_buffer_dirty+0x2a8/0x410 [ 85.944201][ T5326] bfs_get_block+0x5da/0xae0 [ 85.946264][ T5326] __block_write_begin_int+0x6b5/0x1900 [ 85.948599][ T5326] ? __pfx_bfs_get_block+0x10/0x10 [ 85.950759][ T5326] ? __pfx___block_write_begin_int+0x10/0x10 [ 85.953210][ T5326] ? __filemap_get_folio+0x79f/0xaf0 [ 85.955409][ T5326] ? __pfx_bfs_get_block+0x10/0x10 [ 85.957577][ T5326] block_write_begin+0x8a/0x120 [ 85.959660][ T5326] ? bfs_write_begin+0x1e/0xd0 [ 85.961746][ T5326] bfs_write_begin+0x35/0xd0 [ 85.963735][ T5326] generic_perform_write+0x2c5/0x900 [ 85.966035][ T5326] ? __pfx_generic_perform_write+0x10/0x10 [ 85.968735][ T5326] ? file_update_time+0x2da/0x490 [ 85.970935][ T5326] ? __generic_file_write_iter+0xf9/0x230 [ 85.973449][ T5326] ? generic_file_write_iter+0x103/0x550 [ 85.976042][ T5326] generic_file_write_iter+0x117/0x550 [ 85.978488][ T5326] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.980954][ T5326] ? __lock_acquire+0xab9/0xd20 [ 85.982761][ T5326] ? rcu_read_lock_any_held+0xb3/0x120 [ 85.984927][ T5326] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 85.987148][ T5326] vfs_write+0x5c9/0xb30 [ 85.988773][ T5326] ? __pfx_generic_file_write_iter+0x10/0x10 [ 85.991030][ T5326] ? __pfx_vfs_write+0x10/0x10 [ 85.992849][ T5326] ? __fget_files+0x2a/0x420 [ 85.994582][ T5326] ksys_write+0x145/0x250 [ 85.996308][ T5326] ? __pfx_ksys_write+0x10/0x10 [ 85.998471][ T5326] ? do_syscall_64+0xbe/0xfa0 [ 86.000680][ T5326] do_syscall_64+0xfa/0xfa0 [ 86.002669][ T5326] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.004864][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.007395][ T5326] ? clear_bhb_loop+0x60/0xb0 [ 86.009494][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.011972][ T5326] RIP: 0033:0x7f0b2f58f7c9 [ 86.013871][ T5326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.021625][ T5326] RSP: 002b:00007f0b303de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.025154][ T5326] RAX: ffffffffffffffda RBX: 00007f0b2f7e5fa0 RCX: 00007f0b2f58f7c9 [ 86.028577][ T5326] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000006 [ 86.031131][ T5326] RBP: 00007f0b2f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.033748][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.036944][ T5326] R13: 00007f0b2f7e6038 R14: 00007f0b2f7e5fa0 R15: 00007ffeeda2c738 [ 86.039963][ T5326] [ 86.041463][ T5326] Kernel Offset: disabled [ 86.043252][ T5326] Rebooting in 86400 seconds..