program: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x38}}, 0x0) recvmsg(r2, &(0x7f0000000540)={&(0x7f0000000200)=@generic, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000040)=""/59, 0x3b}], 0x3, &(0x7f0000000bc0)=""/143, 0x8f}, 0x10000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x201bf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x131) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mmap(&(0x7f00004b8000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, r7, 0xffffc000) [ 84.748850][ T5315] Bluetooth: hci0: command tx timeout [ 84.800537][ T5339] loop0: detected capacity change from 0 to 512 [ 84.892913][ T5339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.935529][ T5339] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.050354][ T5339] loop0: detected capacity change from 512 to 64 [ 85.055190][ T218] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm kworker/u4:5: bg 0: bad block bitmap checksum [ 85.088379][ T218] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 74 [ 85.093741][ T218] EXT4-fs (loop0): This should not happen!! Data will be lost [ 85.093741][ T218] [ 85.099536][ T5340] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Out of memory [ 85.108708][ T5340] EXT4-fs error (device loop0): ext4_setattr:5984: inode #18: comm syz.0.0: mark_inode_dirty error [ 85.121251][ T5340] EXT4-fs error (device loop0) in ext4_setattr:6035: Out of memory [ 85.126395][ T5338] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Out of memory [ 85.132669][ T5338] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #18: comm syz.0.0: mark_inode_dirty error [ 85.138978][ T5338] ------------[ cut here ]------------ [ 85.142103][ T5338] WARNING: mm/page-writeback.c:2710 at __folio_mark_dirty+0x202/0xe10, CPU#0: syz.0.0/5338 [ 85.146600][ T5338] Modules linked in: [ 85.148603][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.152469][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.157094][ T5338] RIP: 0010:__folio_mark_dirty+0x202/0xe10 [ 85.159713][ T5338] Code: 3c 20 00 74 08 48 89 df e8 fb ce 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 2a 29 c3 ff 49 83 e6 08 75 20 e8 3f 24 c3 ff 90 <0f> 0b 90 eb 1a e8 34 24 c3 ff 48 8b 2c 24 e9 5d 07 00 00 e8 26 24 [ 85.167846][ T5338] RSP: 0018:ffffc90005a1f810 EFLAGS: 00010093 [ 85.170448][ T5338] RAX: ffffffff81fde321 RBX: ffffea00007f6a00 RCX: ffff8880332a0000 [ 85.173732][ T5338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.177528][ T5338] RBP: ffff888047962198 R08: ffffea00007f6a07 R09: 1ffffd40000fed40 [ 85.180945][ T5338] R10: dffffc0000000000 R11: fffff940000fed41 R12: dffffc0000000000 [ 85.184101][ T5338] R13: ffff8880479621a0 R14: 0000000000000000 R15: 0000000000000001 [ 85.187441][ T5338] FS: 000055557cae1500(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000 [ 85.190954][ T5338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.193495][ T5338] CR2: 0000200000000140 CR3: 000000001a100000 CR4: 0000000000352ef0 [ 85.196589][ T5338] Call Trace: [ 85.197986][ T5338] [ 85.199170][ T5338] ? do_raw_spin_unlock+0x4d/0x240 [ 85.201249][ T5338] block_dirty_folio+0x17a/0x1d0 [ 85.203281][ T5338] ext4_page_mkwrite+0xf07/0x1190 [ 85.205536][ T5338] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 85.208212][ T5338] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 85.210687][ T5338] do_page_mkwrite+0x14d/0x310 [ 85.212797][ T5338] do_wp_page+0x2676/0x5810 [ 85.214918][ T5338] ? ___pte_offset_map+0x29/0x240 [ 85.217214][ T5338] ? __pfx_do_wp_page+0x10/0x10 [ 85.219359][ T5338] ? do_raw_spin_lock+0x121/0x290 [ 85.221616][ T5338] ? handle_mm_fault+0x1411/0x32b0 [ 85.223901][ T5338] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.226282][ T5338] handle_mm_fault+0x14c5/0x32b0 [ 85.228446][ T5338] ? handle_mm_fault+0xdb/0x32b0 [ 85.230761][ T5338] ? __pfx_handle_mm_fault+0x10/0x10 [ 85.233112][ T5338] ? lock_vma_under_rcu+0x42c/0x4a0 [ 85.235281][ T5338] ? __pfx_do_futex+0x10/0x10 [ 85.237536][ T5338] do_user_addr_fault+0xa7c/0x1380 [ 85.239788][ T5338] ? rcu_is_watching+0x15/0xb0 [ 85.241983][ T5338] ? trace_page_fault_user+0x84/0x1c0 [ 85.244504][ T5338] exc_page_fault+0x71/0xd0 [ 85.246522][ T5338] asm_exc_page_fault+0x26/0x30 [ 85.248557][ T5338] RIP: 0033:0x7f3ade6555f3 [ 85.250536][ T5338] Code: 8b 44 24 08 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 7a 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 d2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 44 24 08 48 [ 85.258680][ T5338] RSP: 002b:00007ffd9111a900 EFLAGS: 00010246 [ 85.261268][ T5338] RAX: 0000200000000140 RBX: 0000000000000008 RCX: 0000000000000000 [ 85.264491][ T5338] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000055557cae13c8 [ 85.267823][ T5338] RBP: 00007ffd9111aa08 R08: 0000000000000000 R09: 0000000000000000 [ 85.271217][ T5338] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f3ade9e609c [ 85.274695][ T5338] R13: 00007f3ade9e6090 R14: fffffffffffffffe R15: 00007ffd9111aa50 [ 85.278066][ T5338] [ 85.279419][ T5338] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.282460][ T5338] CPU: 0 UID: 0 PID: 5338 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.286292][ T5338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.290741][ T5338] Call Trace: [ 85.292231][ T5338] [ 85.293502][ T5338] vpanic+0x1e0/0x670 [ 85.295286][ T5338] panic+0xb9/0xc0 [ 85.297050][ T5338] ? __pfx_panic+0x10/0x10 [ 85.298939][ T5338] __warn+0x317/0x4b0 [ 85.300726][ T5338] ? __folio_mark_dirty+0x202/0xe10 [ 85.303047][ T5338] ? __folio_mark_dirty+0x202/0xe10 [ 85.305448][ T5338] __report_bug+0x288/0x500 [ 85.307288][ T5338] ? __folio_mark_dirty+0x202/0xe10 [ 85.309585][ T5338] ? __pfx___report_bug+0x10/0x10 [ 85.311881][ T5338] ? __lock_acquire+0x6b6/0x2cf0 [ 85.314649][ T5338] ? do_raw_spin_unlock+0x4d/0x240 [ 85.317724][ T5338] ? __folio_mark_dirty+0x202/0xe10 [ 85.320096][ T5338] report_bug+0x16a/0x220 [ 85.322412][ T5338] ? __folio_mark_dirty+0x202/0xe10 [ 85.325281][ T5338] ? __folio_mark_dirty+0x204/0xe10 [ 85.327545][ T5338] handle_bug+0x98/0x200 [ 85.329440][ T5338] exc_invalid_op+0x1a/0x50 [ 85.331426][ T5338] asm_exc_invalid_op+0x1a/0x20 [ 85.333492][ T5338] RIP: 0010:__folio_mark_dirty+0x202/0xe10 [ 85.336071][ T5338] Code: 3c 20 00 74 08 48 89 df e8 fb ce 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 2a 29 c3 ff 49 83 e6 08 75 20 e8 3f 24 c3 ff 90 <0f> 0b 90 eb 1a e8 34 24 c3 ff 48 8b 2c 24 e9 5d 07 00 00 e8 26 24 [ 85.344354][ T5338] RSP: 0018:ffffc90005a1f810 EFLAGS: 00010093 [ 85.346989][ T5338] RAX: ffffffff81fde321 RBX: ffffea00007f6a00 RCX: ffff8880332a0000 [ 85.350538][ T5338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.353936][ T5338] RBP: ffff888047962198 R08: ffffea00007f6a07 R09: 1ffffd40000fed40 [ 85.357122][ T5338] R10: dffffc0000000000 R11: fffff940000fed41 R12: dffffc0000000000 [ 85.360930][ T5338] R13: ffff8880479621a0 R14: 0000000000000000 R15: 0000000000000001 [ 85.364412][ T5338] ? __folio_mark_dirty+0x201/0xe10 [ 85.366585][ T5338] ? do_raw_spin_unlock+0x4d/0x240 [ 85.368728][ T5338] block_dirty_folio+0x17a/0x1d0 [ 85.370861][ T5338] ext4_page_mkwrite+0xf07/0x1190 [ 85.373032][ T5338] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 85.375760][ T5338] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 85.378246][ T5338] do_page_mkwrite+0x14d/0x310 [ 85.380317][ T5338] do_wp_page+0x2676/0x5810 [ 85.382276][ T5338] ? ___pte_offset_map+0x29/0x240 [ 85.384328][ T5338] ? __pfx_do_wp_page+0x10/0x10 [ 85.386418][ T5338] ? do_raw_spin_lock+0x121/0x290 [ 85.388429][ T5338] ? handle_mm_fault+0x1411/0x32b0 [ 85.390537][ T5338] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.392871][ T5338] handle_mm_fault+0x14c5/0x32b0 [ 85.395025][ T5338] ? handle_mm_fault+0xdb/0x32b0 [ 85.397254][ T5338] ? __pfx_handle_mm_fault+0x10/0x10 [ 85.399517][ T5338] ? lock_vma_under_rcu+0x42c/0x4a0 [ 85.401874][ T5338] ? __pfx_do_futex+0x10/0x10 [ 85.403944][ T5338] do_user_addr_fault+0xa7c/0x1380 [ 85.406325][ T5338] ? rcu_is_watching+0x15/0xb0 [ 85.408393][ T5338] ? trace_page_fault_user+0x84/0x1c0 [ 85.410644][ T5338] exc_page_fault+0x71/0xd0 [ 85.412523][ T5338] asm_exc_page_fault+0x26/0x30 [ 85.414666][ T5338] RIP: 0033:0x7f3ade6555f3 [ 85.416662][ T5338] Code: 8b 44 24 08 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 7a 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 d2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 44 24 08 48 [ 85.424034][ T5338] RSP: 002b:00007ffd9111a900 EFLAGS: 00010246 [ 85.426423][ T5338] RAX: 0000200000000140 RBX: 0000000000000008 RCX: 0000000000000000 [ 85.429533][ T5338] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000055557cae13c8 [ 85.432818][ T5338] RBP: 00007ffd9111aa08 R08: 0000000000000000 R09: 0000000000000000 [ 85.436176][ T5338] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f3ade9e609c [ 85.439647][ T5338] R13: 00007f3ade9e6090 R14: fffffffffffffffe R15: 00007ffd9111aa50 [ 85.443135][ T5338] [ 85.444870][ T5338] Kernel Offset: disabled [ 85.446778][ T5338] Rebooting in 86400 seconds..