program: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040), 0x1, 0x4b9, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x4) r1 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r0, 0x1000000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r5, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r7, 0x11a, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x1c, r9, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000800000", @ANYRES16=r9, @ANYBLOB="00042cbd7000fbdbdf250a00000006000900010000000c0006000300000000000000060009000300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000300000003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000002}, 0xc054) [ 74.279654][ T4667] Bluetooth: hci0: command tx timeout [ 74.381925][ T5319] loop0: detected capacity change from 0 to 512 [ 74.457852][ T5319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.470920][ T5319] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.540025][ T5319] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.0: bg 0: block 361: padding at end of block bitmap is not set [ 74.552616][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 96 with error 28 [ 74.568594][ T43] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.568594][ T43] [ 74.573578][ T43] EXT4-fs (loop0): Total free blocks count 0 [ 74.577020][ T43] EXT4-fs (loop0): Free/Dirty block details [ 74.609673][ T43] EXT4-fs (loop0): free_blocks=0 [ 74.648457][ T43] EXT4-fs (loop0): dirty_blocks=96 [ 74.667025][ T43] EXT4-fs (loop0): Block reservation details [ 74.687610][ T43] EXT4-fs (loop0): i_reserved_data_blocks=96 [ 74.701648][ T5319] ------------[ cut here ]------------ [ 74.718603][ T5319] !folio_buffers(folio) [ 74.718618][ T5319] WARNING: fs/ext4/inode.c:3965 at ext4_dirty_folio+0x167/0x1b0, CPU#0: syz.0.0/5319 [ 74.724822][ T5319] Modules linked in: [ 74.726999][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.731317][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.736987][ T5319] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 74.740433][ T5319] Code: df 80 a9 ff 49 83 3f 00 74 1a e8 54 a3 3f ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ef a7 ce ff e8 3a a3 3f ff 90 <0f> 0b 90 eb e0 e8 2f a3 3f ff 90 0f 0b 90 eb a7 e8 24 a3 3f ff 48 [ 74.759463][ T5319] RSP: 0018:ffffc900019cf530 EFLAGS: 00010287 [ 74.767137][ T5319] RAX: ffffffff8284e686 RBX: ffffea00004b8d40 RCX: 0000000000100000 [ 74.770783][ T5319] RDX: ffffc9000f442000 RSI: 0000000000008420 RDI: 0000000000008421 [ 74.773925][ T5319] RBP: 1ffffd40000971a8 R08: ffffea00004b8d47 R09: 1ffffd40000971a8 [ 74.776871][ T5319] R10: dffffc0000000000 R11: fffff940000971a9 R12: ffff888012a6a198 [ 74.793288][ T5319] R13: 1ffffd40000971a9 R14: 0000000000000001 R15: ffffea00004b8d68 [ 74.803437][ T5319] FS: 00007f0c1b43a6c0(0000) GS:ffff88808cce8000(0000) knlGS:0000000000000000 [ 74.807260][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.810066][ T5319] CR2: 00007ff553b65540 CR3: 0000000011b44000 CR4: 0000000000352ef0 [ 74.828414][ T5319] Call Trace: [ 74.838156][ T5319] [ 74.842580][ T5319] bio_set_pages_dirty+0xf4/0x390 [ 74.851043][ T5319] __blkdev_direct_IO+0x859/0xfa0 [ 74.854205][ T5319] ? __pfx_aio_complete_rw+0x10/0x10 [ 74.857388][ T5319] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 74.860998][ T5319] ? __lock_acquire+0x6b5/0x2cf0 [ 74.912308][ T5319] blkdev_direct_IO+0x121a/0x1790 [ 74.916099][ T5319] ? do_raw_spin_lock+0x12b/0x2f0 [ 74.972519][ T5319] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 74.974777][ T5319] ? reacquire_held_locks+0x104/0x190 [ 74.977017][ T5319] ? __mark_inode_dirty+0x6a8/0x1320 [ 75.008978][ T5319] ? blkdev_read_iter+0x210/0x440 [ 75.013511][ T5319] ? touch_atime+0x384/0x6d0 [ 75.015495][ T5319] ? blkdev_read_iter+0x210/0x440 [ 75.017654][ T5319] blkdev_read_iter+0x23d/0x440 [ 75.040085][ T5319] aio_read+0x33a/0x4d0 [ 75.042866][ T5319] ? __pfx_aio_read+0x10/0x10 [ 75.045918][ T5319] ? __might_fault+0xaf/0x130 [ 75.048400][ T5319] io_submit_one+0x79d/0x14c0 [ 75.050728][ T5319] ? irqentry_exit+0x59c/0x620 [ 75.054119][ T5319] ? __pfx_io_submit_one+0x10/0x10 [ 75.060329][ T5319] ? __might_fault+0xaf/0x130 [ 75.063819][ T5319] ? __might_fault+0xaf/0x130 [ 75.070359][ T5319] __se_sys_io_submit+0x195/0x340 [ 75.074311][ T5319] ? __pfx___se_sys_io_submit+0x10/0x10 [ 75.078255][ T5319] do_syscall_64+0xe2/0xf80 [ 75.081077][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.086137][ T5319] ? trace_irq_disable+0x37/0x100 [ 75.090592][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 75.092874][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.095598][ T5319] RIP: 0033:0x7f0c1a59aeb9 [ 75.097681][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.121670][ T5319] RSP: 002b:00007f0c1b43a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 75.133511][ T5319] RAX: ffffffffffffffda RBX: 00007f0c1a815fa0 RCX: 00007f0c1a59aeb9 [ 75.143428][ T5319] RDX: 00002000000000c0 RSI: 00000000000000ca RDI: 00007f0c1b3f8000 [ 75.149236][ T5319] RBP: 00007f0c1a608c1f R08: 0000000000000000 R09: 0000000000000000 [ 75.152556][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.155835][ T5319] R13: 00007f0c1a816038 R14: 00007f0c1a815fa0 R15: 00007ffc2868ef68 [ 75.160506][ T5319] [ 75.162408][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.168656][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.175369][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.181600][ T5319] Call Trace: [ 75.183564][ T5319] [ 75.185676][ T5319] vpanic+0x1e0/0x670 [ 75.189381][ T5319] panic+0xc5/0xd0 [ 75.191706][ T5319] ? __pfx_panic+0x10/0x10 [ 75.196177][ T5319] __warn+0x315/0x4a0 [ 75.201605][ T5319] ? ext4_dirty_folio+0x167/0x1b0 [ 75.204508][ T5319] ? ext4_dirty_folio+0x167/0x1b0 [ 75.207127][ T5319] __report_bug+0x29a/0x540 [ 75.209341][ T5319] ? ext4_dirty_folio+0x167/0x1b0 [ 75.227284][ T5319] ? __pfx___report_bug+0x10/0x10 [ 75.230002][ T5319] ? pin_user_pages_fast+0x4d/0xb0 [ 75.232678][ T5319] ? iov_iter_extract_pages+0x457/0x5f0 [ 75.235277][ T5319] ? ext4_dirty_folio+0x167/0x1b0 [ 75.237901][ T5319] report_bug+0x16a/0x220 [ 75.240149][ T5319] ? ext4_dirty_folio+0x167/0x1b0 [ 75.242973][ T5319] ? ext4_dirty_folio+0x169/0x1b0 [ 75.245599][ T5319] handle_bug+0x98/0x200 [ 75.247865][ T5319] exc_invalid_op+0x1a/0x50 [ 75.264003][ T5319] asm_exc_invalid_op+0x1a/0x20 [ 75.266281][ T5319] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 75.268931][ T5319] Code: df 80 a9 ff 49 83 3f 00 74 1a e8 54 a3 3f ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ef a7 ce ff e8 3a a3 3f ff 90 <0f> 0b 90 eb e0 e8 2f a3 3f ff 90 0f 0b 90 eb a7 e8 24 a3 3f ff 48 [ 75.308635][ T5319] RSP: 0018:ffffc900019cf530 EFLAGS: 00010287 [ 75.311399][ T5319] RAX: ffffffff8284e686 RBX: ffffea00004b8d40 RCX: 0000000000100000 [ 75.315014][ T5319] RDX: ffffc9000f442000 RSI: 0000000000008420 RDI: 0000000000008421 [ 75.318609][ T5319] RBP: 1ffffd40000971a8 R08: ffffea00004b8d47 R09: 1ffffd40000971a8 [ 75.332373][ T5319] R10: dffffc0000000000 R11: fffff940000971a9 R12: ffff888012a6a198 [ 75.336646][ T5319] R13: 1ffffd40000971a9 R14: 0000000000000001 R15: ffffea00004b8d68 [ 75.340528][ T5319] ? ext4_dirty_folio+0x166/0x1b0 [ 75.353680][ T5319] bio_set_pages_dirty+0xf4/0x390 [ 75.356974][ T5319] __blkdev_direct_IO+0x859/0xfa0 [ 75.362490][ T5319] ? __pfx_aio_complete_rw+0x10/0x10 [ 75.374065][ T5319] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 75.377876][ T5319] ? __lock_acquire+0x6b5/0x2cf0 [ 75.383356][ T5319] blkdev_direct_IO+0x121a/0x1790 [ 75.394059][ T5319] ? do_raw_spin_lock+0x12b/0x2f0 [ 75.399103][ T5319] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 75.405787][ T5319] ? reacquire_held_locks+0x104/0x190 [ 75.410698][ T5319] ? __mark_inode_dirty+0x6a8/0x1320 [ 75.417184][ T5319] ? blkdev_read_iter+0x210/0x440 [ 75.419574][ T5319] ? touch_atime+0x384/0x6d0 [ 75.421661][ T5319] ? blkdev_read_iter+0x210/0x440 [ 75.424024][ T5319] blkdev_read_iter+0x23d/0x440 [ 75.426169][ T5319] aio_read+0x33a/0x4d0 [ 75.428027][ T5319] ? __pfx_aio_read+0x10/0x10 [ 75.430151][ T5319] ? __might_fault+0xaf/0x130 [ 75.463491][ T5319] io_submit_one+0x79d/0x14c0 [ 75.465957][ T5319] ? irqentry_exit+0x59c/0x620 [ 75.468669][ T5319] ? __pfx_io_submit_one+0x10/0x10 [ 75.481757][ T5319] ? __might_fault+0xaf/0x130 [ 75.484394][ T5319] ? __might_fault+0xaf/0x130 [ 75.487202][ T5319] __se_sys_io_submit+0x195/0x340 [ 75.490670][ T5319] ? __pfx___se_sys_io_submit+0x10/0x10 [ 75.494565][ T5319] do_syscall_64+0xe2/0xf80 [ 75.497206][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.500714][ T5319] ? trace_irq_disable+0x37/0x100 [ 75.513273][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 75.515512][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.536082][ T5319] RIP: 0033:0x7f0c1a59aeb9 [ 75.538306][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.546881][ T5319] RSP: 002b:00007f0c1b43a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 75.550755][ T5319] RAX: ffffffffffffffda RBX: 00007f0c1a815fa0 RCX: 00007f0c1a59aeb9 [ 75.557783][ T5319] RDX: 00002000000000c0 RSI: 00000000000000ca RDI: 00007f0c1b3f8000 [ 75.561377][ T5319] RBP: 00007f0c1a608c1f R08: 0000000000000000 R09: 0000000000000000 [ 75.566357][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.584303][ T5319] R13: 00007f0c1a816038 R14: 00007f0c1a815fa0 R15: 00007ffc2868ef68 [ 75.588014][ T5319] [ 75.589889][ T5319] Kernel Offset: disabled [ 75.602143][ T5319] Rebooting in 86400 seconds..