program:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x201bf)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x131)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x21)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r7, 0x80)
accept$netrom(r7, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
read(r6, &(0x7f00000003c0)=""/123, 0x7b)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="000000005d5cbdbb45a88d96bb427b3df318b4dc6825b63842bbeaaf9cb5d61aeecf799e8829245bc9aaed167e311c8fd47fd2f8bd1be3dd9dbe31a05f3d37fd29f7923bf9537654016813ba76ec9a5536833941aea69b589f766ab4652f35254eab8241987b93f34f0db15264d4ceec24c8900cc0623907e20f4a4049ccb8f662919ab85784190a2dd2c1", @ANYRES16=0x0, @ANYBLOB="df4827bd7000000000000c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
[ 92.922257][ T1238] cfg80211: failed to load regulatory.db
[ 92.992024][ T5343] loop0: detected capacity change from 0 to 512
[ 93.063397][ T5343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 93.074081][ T5343] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 93.127310][ T5343] loop0: detected capacity change from 512 to 64
[ 93.144055][ T3789] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm kworker/u4:20: bg 0: bad block bitmap checksum
[ 93.172808][ T5343] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Out of memory
[ 93.178119][ T3789] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 74
[ 93.187145][ T3789] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 93.187145][ T3789]
[ 93.191770][ T5343] EXT4-fs error (device loop0): ext4_setattr:5984: inode #18: comm syz.0.0: mark_inode_dirty error
[ 93.197784][ T5343] EXT4-fs error (device loop0) in ext4_setattr:6035: Out of memory
[ 93.204293][ T5342] ------------[ cut here ]------------
[ 93.207029][ T5342] WARNING: mm/page-writeback.c:2710 at __folio_mark_dirty+0x202/0xe10, CPU#0: syz.0.0/5342
[ 93.211440][ T5342] Modules linked in:
[ 93.213434][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.217350][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 93.221911][ T5342] RIP: 0010:__folio_mark_dirty+0x202/0xe10
[ 93.224407][ T5342] Code: 3c 20 00 74 08 48 89 df e8 7b cf 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 6a 29 c3 ff 49 83 e6 08 75 20 e8 7f 24 c3 ff 90 <0f> 0b 90 eb 1a e8 74 24 c3 ff 48 8b 2c 24 e9 5d 07 00 00 e8 66 24
[ 93.232834][ T5342] RSP: 0000:ffffc9000a3d7810 EFLAGS: 00010093
[ 93.235543][ T5342] RAX: ffffffff81fde121 RBX: ffffea00007eeec0 RCX: ffff888037268000
[ 93.239027][ T5342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 93.242244][ T5342] RBP: ffff8880231104b8 R08: ffffea00007eeec7 R09: 1ffffd40000fddd8
[ 93.245343][ T5342] R10: dffffc0000000000 R11: fffff940000fddd9 R12: dffffc0000000000
[ 93.248528][ T5342] R13: ffff8880231104c0 R14: 0000000000000000 R15: 0000000000000001
[ 93.251990][ T5342] FS: 000055558712f500(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000
[ 93.255887][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 93.258740][ T5342] CR2: 0000200000000300 CR3: 0000000037053000 CR4: 0000000000352ef0
[ 93.262264][ T5342] Call Trace:
[ 93.263805][ T5342]
[ 93.265096][ T5342] ? do_raw_spin_unlock+0x4d/0x240
[ 93.267306][ T5342] block_dirty_folio+0x17a/0x1d0
[ 93.269510][ T5342] ext4_page_mkwrite+0xf07/0x1190
[ 93.271868][ T5342] ? __pfx_ext4_get_block_unwritten+0x10/0x10
[ 93.274514][ T5342] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 93.276879][ T5342] do_page_mkwrite+0x14d/0x310
[ 93.279015][ T5342] do_wp_page+0x2676/0x5810
[ 93.281106][ T5342] ? ___pte_offset_map+0x29/0x240
[ 93.283330][ T5342] ? __pfx_do_wp_page+0x10/0x10
[ 93.285530][ T5342] ? do_raw_spin_lock+0x121/0x290
[ 93.287784][ T5342] ? handle_mm_fault+0x1411/0x32b0
[ 93.290005][ T5342] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 93.292296][ T5342] handle_mm_fault+0x14c5/0x32b0
[ 93.294333][ T5342] ? handle_mm_fault+0xdb/0x32b0
[ 93.296461][ T5342] ? __pfx_handle_mm_fault+0x10/0x10
[ 93.298847][ T5342] ? lock_vma_under_rcu+0x42c/0x4a0
[ 93.301190][ T5342] ? __pfx_do_futex+0x10/0x10
[ 93.303306][ T5342] do_user_addr_fault+0xa7c/0x1380
[ 93.305489][ T5342] ? rcu_is_watching+0x15/0xb0
[ 93.307589][ T5342] ? trace_page_fault_user+0x84/0x1c0
[ 93.309917][ T5342] exc_page_fault+0x71/0xd0
[ 93.311978][ T5342] asm_exc_page_fault+0x26/0x30
[ 93.314048][ T5342] RIP: 0033:0x7f5966455543
[ 93.315966][ T5342] Code: 48 85 c0 74 1b 48 83 f8 01 0f 85 3b 03 00 00 0f b7 44 24 18 66 c1 c0 08 0f b7 c0 48 89 44 24 18 48 8b 44 24 10 0f b7 54 24 18 <66> 89 10 e9 82 fe ff ff 48 83 3c 24 08 0f 85 a1 02 00 00 48 8b 44
[ 93.324201][ T5342] RSP: 002b:00007ffcd9517fb0 EFLAGS: 00010246
[ 93.326815][ T5342] RAX: 0000200000000300 RBX: 0000000000000002 RCX: 0000000000000000
[ 93.330379][ T5342] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 000055558712f3c8
[ 93.334002][ T5342] RBP: 00007ffcd95180b8 R08: 0000000000000000 R09: 0000000000000000
[ 93.337426][ T5342] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f59667e5fac
[ 93.340926][ T5342] R13: 00007f59667e5fa0 R14: fffffffffffffffe R15: 00007ffcd9518100
[ 93.344362][ T5342]
[ 93.345753][ T5342] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 93.348963][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.352916][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 93.357609][ T5342] Call Trace:
[ 93.359073][ T5342]
[ 93.360395][ T5342] vpanic+0x1e0/0x670
[ 93.362221][ T5342] panic+0xb9/0xc0
[ 93.363865][ T5342] ? __pfx_panic+0x10/0x10
[ 93.365893][ T5342] __warn+0x317/0x4b0
[ 93.367588][ T5342] ? __folio_mark_dirty+0x202/0xe10
[ 93.369539][ T5342] ? __folio_mark_dirty+0x202/0xe10
[ 93.371774][ T5342] __report_bug+0x288/0x500
[ 93.373616][ T5342] ? __folio_mark_dirty+0x202/0xe10
[ 93.375717][ T5342] ? __pfx___report_bug+0x10/0x10
[ 93.377659][ T5342] ? __lock_acquire+0x6b6/0x2cf0
[ 93.379421][ T5342] ? do_raw_spin_unlock+0x4d/0x240
[ 93.381383][ T5342] ? __folio_mark_dirty+0x202/0xe10
[ 93.383521][ T5342] report_bug+0x16a/0x220
[ 93.385364][ T5342] ? __folio_mark_dirty+0x202/0xe10
[ 93.387494][ T5342] ? __folio_mark_dirty+0x204/0xe10
[ 93.389626][ T5342] handle_bug+0x98/0x200
[ 93.391504][ T5342] exc_invalid_op+0x1a/0x50
[ 93.393431][ T5342] asm_exc_invalid_op+0x1a/0x20
[ 93.395263][ T5342] RIP: 0010:__folio_mark_dirty+0x202/0xe10
[ 93.397796][ T5342] Code: 3c 20 00 74 08 48 89 df e8 7b cf 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 6a 29 c3 ff 49 83 e6 08 75 20 e8 7f 24 c3 ff 90 <0f> 0b 90 eb 1a e8 74 24 c3 ff 48 8b 2c 24 e9 5d 07 00 00 e8 66 24
[ 93.405451][ T5342] RSP: 0000:ffffc9000a3d7810 EFLAGS: 00010093
[ 93.408221][ T5342] RAX: ffffffff81fde121 RBX: ffffea00007eeec0 RCX: ffff888037268000
[ 93.411713][ T5342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 93.415332][ T5342] RBP: ffff8880231104b8 R08: ffffea00007eeec7 R09: 1ffffd40000fddd8
[ 93.418875][ T5342] R10: dffffc0000000000 R11: fffff940000fddd9 R12: dffffc0000000000
[ 93.422460][ T5342] R13: ffff8880231104c0 R14: 0000000000000000 R15: 0000000000000001
[ 93.425452][ T5342] ? __folio_mark_dirty+0x201/0xe10
[ 93.427276][ T5342] ? do_raw_spin_unlock+0x4d/0x240
[ 93.429178][ T5342] block_dirty_folio+0x17a/0x1d0
[ 93.431100][ T5342] ext4_page_mkwrite+0xf07/0x1190
[ 93.433351][ T5342] ? __pfx_ext4_get_block_unwritten+0x10/0x10
[ 93.435881][ T5342] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 93.438302][ T5342] do_page_mkwrite+0x14d/0x310
[ 93.440643][ T5342] do_wp_page+0x2676/0x5810
[ 93.442618][ T5342] ? ___pte_offset_map+0x29/0x240
[ 93.444777][ T5342] ? __pfx_do_wp_page+0x10/0x10
[ 93.447090][ T5342] ? do_raw_spin_lock+0x121/0x290
[ 93.449374][ T5342] ? handle_mm_fault+0x1411/0x32b0
[ 93.451656][ T5342] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 93.454053][ T5342] handle_mm_fault+0x14c5/0x32b0
[ 93.456216][ T5342] ? handle_mm_fault+0xdb/0x32b0
[ 93.458205][ T5342] ? __pfx_handle_mm_fault+0x10/0x10
[ 93.460394][ T5342] ? lock_vma_under_rcu+0x42c/0x4a0
[ 93.462417][ T5342] ? __pfx_do_futex+0x10/0x10
[ 93.464459][ T5342] do_user_addr_fault+0xa7c/0x1380
[ 93.466652][ T5342] ? rcu_is_watching+0x15/0xb0
[ 93.468850][ T5342] ? trace_page_fault_user+0x84/0x1c0
[ 93.471250][ T5342] exc_page_fault+0x71/0xd0
[ 93.473169][ T5342] asm_exc_page_fault+0x26/0x30
[ 93.475219][ T5342] RIP: 0033:0x7f5966455543
[ 93.477077][ T5342] Code: 48 85 c0 74 1b 48 83 f8 01 0f 85 3b 03 00 00 0f b7 44 24 18 66 c1 c0 08 0f b7 c0 48 89 44 24 18 48 8b 44 24 10 0f b7 54 24 18 <66> 89 10 e9 82 fe ff ff 48 83 3c 24 08 0f 85 a1 02 00 00 48 8b 44
[ 93.485260][ T5342] RSP: 002b:00007ffcd9517fb0 EFLAGS: 00010246
[ 93.487972][ T5342] RAX: 0000200000000300 RBX: 0000000000000002 RCX: 0000000000000000
[ 93.491292][ T5342] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 000055558712f3c8
[ 93.494563][ T5342] RBP: 00007ffcd95180b8 R08: 0000000000000000 R09: 0000000000000000
[ 93.497876][ T5342] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f59667e5fac
[ 93.501419][ T5342] R13: 00007f59667e5fa0 R14: fffffffffffffffe R15: 00007ffcd9518100
[ 93.504916][ T5342]
[ 93.506510][ T5342] Kernel Offset: disabled
[ 93.508400][ T5342] Rebooting in 86400 seconds..