program:
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001008000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000102d103000014000000110001000000264ce778000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x108)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x2}}, 0x20)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000140)=0x3, 0x4) (async)
r6 = syz_open_dev$loop(&(0x7f0000000380), 0x9, 0x80500)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000003c0)={r4, 0x100, {0x0, 0x0, 0x0, 0xe, 0x40, 0x0, 0x5, 0xc, 0x1, "9a713104e4b9320b55dfb17c8990d6c9bec5ae048429e1985ad33e49f97d19d520c1c90b862bee7be4f87b54d7c85b9b227dc5ad746aa72157052de29ca0e6dc", "80502e101c1f03f0c7a0b844153e2372ccff84acd855aa14ac59d9f0dc65b59364b1e8b1c8b63590eed4a481472d5f241f590b97f610a5a8c60630dc0e808c3c", "1761f840ff9ccb313ec0d92baf1335af2ff6d9608f331d0fc8c1ae85054bdd3d", [0xc, 0x3]}})
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000bc0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20442, 0x36)
pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
[ 77.236167][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 77.239002][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 77.242936][ T47] Bluetooth: hci0: command tx timeout
[ 77.309532][ T5325] loop0: detected capacity change from 0 to 64
[ 77.391273][ T5325] ------------[ cut here ]------------
[ 77.394038][ T5325] WARNING: CPU: 0 PID: 5325 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410
[ 77.398632][ T5325] Modules linked in:
[ 77.400381][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 77.404736][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 77.410236][ T5325] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 77.412846][ T5325] Code: 4c 89 f7 e8 19 72 dc ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 9f fb ff e8 3f 16 75 ff eb 8c e8 38 16 75 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 2a 16 75 ff 90 0f 0b 90 e9 bf fd ff ff
[ 77.422998][ T5325] RSP: 0018:ffffc9000d537608 EFLAGS: 00010293
[ 77.425854][ T5325] RAX: ffffffff824b76b8 RBX: ffff888042a2e658 RCX: ffff888038b94900
[ 77.429453][ T5325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 77.432887][ T5325] RBP: ffff888036a48001 R08: ffff888042a2e65f R09: 1ffff11008545ccb
[ 77.436925][ T5325] R10: dffffc0000000000 R11: ffffed1008545ccc R12: ffff888019f27000
[ 77.441585][ T5325] R13: ffff88801c07f2b8 R14: ffff888042a2e658 R15: 000000000000000f
[ 77.446101][ T5325] FS: 00007f93427796c0(0000) GS:ffff88808d722000(0000) knlGS:0000000000000000
[ 77.450090][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 77.452916][ T5325] CR2: 0000200000002000 CR3: 00000000421d5000 CR4: 0000000000352ef0
[ 77.456537][ T5325] Call Trace:
[ 77.458089][ T5325]
[ 77.459456][ T5325] bfs_get_block+0x5da/0xae0
[ 77.461590][ T5325] __block_write_begin_int+0x6b5/0x1900
[ 77.464275][ T5325] ? __pfx_bfs_get_block+0x10/0x10
[ 77.466667][ T5325] ? __pfx___block_write_begin_int+0x10/0x10
[ 77.469459][ T5325] ? __filemap_get_folio+0x79f/0xaf0
[ 77.471928][ T5325] ? __pfx_bfs_get_block+0x10/0x10
[ 77.474691][ T5325] block_write_begin+0x8a/0x120
[ 77.476918][ T5325] ? bfs_write_begin+0x1e/0xd0
[ 77.478998][ T5325] bfs_write_begin+0x35/0xd0
[ 77.481336][ T5325] generic_perform_write+0x2c5/0x900
[ 77.483863][ T5325] ? __pfx_generic_perform_write+0x10/0x10
[ 77.487045][ T5325] ? file_update_time_flags+0x2cb/0x4e0
[ 77.489497][ T5325] ? __generic_file_write_iter+0xf9/0x230
[ 77.491935][ T5325] ? generic_file_write_iter+0x103/0x550
[ 77.494502][ T5325] generic_file_write_iter+0x117/0x550
[ 77.497044][ T5325] ? __pfx_generic_file_write_iter+0x10/0x10
[ 77.499821][ T5325] ? __pfx___futex_wait+0x10/0x10
[ 77.502248][ T5325] ? __pfx_aa_file_perm+0x10/0x10
[ 77.504684][ T5325] ? __lock_acquire+0xab9/0xd20
[ 77.506880][ T5325] ? rcu_read_lock_any_held+0xb3/0x120
[ 77.509727][ T5325] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 77.512528][ T5325] vfs_write+0x5c9/0xb30
[ 77.514836][ T5325] ? __pfx_generic_file_write_iter+0x10/0x10
[ 77.517486][ T5325] ? __pfx_vfs_write+0x10/0x10
[ 77.519478][ T5325] ? __fget_files+0x2a/0x420
[ 77.521510][ T5325] __x64_sys_pwrite64+0x193/0x220
[ 77.523744][ T5325] ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 77.526585][ T5325] ? do_syscall_64+0xbe/0xfa0
[ 77.528927][ T5325] do_syscall_64+0xfa/0xfa0
[ 77.531155][ T5325] ? lockdep_hardirqs_on+0x9c/0x150
[ 77.533595][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.536428][ T5325] ? clear_bhb_loop+0x60/0xb0
[ 77.538340][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.540997][ T5325] RIP: 0033:0x7f934198f7c9
[ 77.542951][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 77.555142][ T5325] RSP: 002b:00007f9342779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[ 77.559347][ T5325] RAX: ffffffffffffffda RBX: 00007f9341be6090 RCX: 00007f934198f7c9
[ 77.562699][ T5325] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000008
[ 77.566085][ T5325] RBP: 00007f9341a13f91 R08: 0000000000000000 R09: 0000000000000000
[ 77.569432][ T5325] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000
[ 77.573186][ T5325] R13: 00007f9341be6128 R14: 00007f9341be6090 R15: 00007ffcb7c95ea8
[ 77.577245][ T5325]
[ 77.579052][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 77.583234][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 77.588060][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 77.594286][ T5325] Call Trace:
[ 77.596135][ T5325]
[ 77.597487][ T5325] dump_stack_lvl+0x99/0x250
[ 77.599603][ T5325] ? __asan_memcpy+0x40/0x70
[ 77.601665][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10
[ 77.604078][ T5325] ? __pfx__printk+0x10/0x10
[ 77.606336][ T5325] vpanic+0x237/0x6d0
[ 77.608460][ T5325] ? __pfx_vpanic+0x10/0x10
[ 77.610642][ T5325] panic+0xb9/0xc0
[ 77.612301][ T5325] ? __pfx_panic+0x10/0x10
[ 77.614292][ T5325] __warn+0x31b/0x4b0
[ 77.616028][ T5325] ? mark_buffer_dirty+0x2a9/0x410
[ 77.618292][ T5325] ? mark_buffer_dirty+0x2a9/0x410
[ 77.620562][ T5325] report_bug+0x2be/0x4f0
[ 77.622806][ T5325] ? mark_buffer_dirty+0x2a9/0x410
[ 77.625336][ T5325] ? mark_buffer_dirty+0x2a9/0x410
[ 77.627765][ T5325] ? mark_buffer_dirty+0x2ab/0x410
[ 77.631736][ T5325] handle_bug+0x84/0x160
[ 77.633646][ T5325] exc_invalid_op+0x1a/0x50
[ 77.635758][ T5325] asm_exc_invalid_op+0x1a/0x20
[ 77.637870][ T5325] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 77.640330][ T5325] Code: 4c 89 f7 e8 19 72 dc ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 9f fb ff e8 3f 16 75 ff eb 8c e8 38 16 75 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 2a 16 75 ff 90 0f 0b 90 e9 bf fd ff ff
[ 77.650277][ T5325] RSP: 0018:ffffc9000d537608 EFLAGS: 00010293
[ 77.653030][ T5325] RAX: ffffffff824b76b8 RBX: ffff888042a2e658 RCX: ffff888038b94900
[ 77.656895][ T5325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 77.660520][ T5325] RBP: ffff888036a48001 R08: ffff888042a2e65f R09: 1ffff11008545ccb
[ 77.664243][ T5325] R10: dffffc0000000000 R11: ffffed1008545ccc R12: ffff888019f27000
[ 77.667833][ T5325] R13: ffff88801c07f2b8 R14: ffff888042a2e658 R15: 000000000000000f
[ 77.671426][ T5325] ? mark_buffer_dirty+0x2a8/0x410
[ 77.674031][ T5325] ? mark_buffer_dirty+0x2a8/0x410
[ 77.676393][ T5325] bfs_get_block+0x5da/0xae0
[ 77.678579][ T5325] __block_write_begin_int+0x6b5/0x1900
[ 77.681384][ T5325] ? __pfx_bfs_get_block+0x10/0x10
[ 77.683573][ T5325] ? __pfx___block_write_begin_int+0x10/0x10
[ 77.686229][ T5325] ? __filemap_get_folio+0x79f/0xaf0
[ 77.688496][ T5325] ? __pfx_bfs_get_block+0x10/0x10
[ 77.690577][ T5325] block_write_begin+0x8a/0x120
[ 77.692646][ T5325] ? bfs_write_begin+0x1e/0xd0
[ 77.694849][ T5325] bfs_write_begin+0x35/0xd0
[ 77.697342][ T5325] generic_perform_write+0x2c5/0x900
[ 77.699662][ T5325] ? __pfx_generic_perform_write+0x10/0x10
[ 77.702208][ T5325] ? file_update_time_flags+0x2cb/0x4e0
[ 77.704794][ T5325] ? __generic_file_write_iter+0xf9/0x230
[ 77.707819][ T5325] ? generic_file_write_iter+0x103/0x550
[ 77.710432][ T5325] generic_file_write_iter+0x117/0x550
[ 77.713052][ T5325] ? __pfx_generic_file_write_iter+0x10/0x10
[ 77.715810][ T5325] ? __pfx___futex_wait+0x10/0x10
[ 77.718144][ T5325] ? __pfx_aa_file_perm+0x10/0x10
[ 77.720377][ T5325] ? __lock_acquire+0xab9/0xd20
[ 77.722436][ T5325] ? rcu_read_lock_any_held+0xb3/0x120
[ 77.724995][ T5325] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 77.727993][ T5325] vfs_write+0x5c9/0xb30
[ 77.730360][ T5325] ? __pfx_generic_file_write_iter+0x10/0x10
[ 77.732967][ T5325] ? __pfx_vfs_write+0x10/0x10
[ 77.735191][ T5325] ? __fget_files+0x2a/0x420
[ 77.737193][ T5325] __x64_sys_pwrite64+0x193/0x220
[ 77.739511][ T5325] ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 77.741880][ T5325] ? do_syscall_64+0xbe/0xfa0
[ 77.744126][ T5325] do_syscall_64+0xfa/0xfa0
[ 77.746355][ T5325] ? lockdep_hardirqs_on+0x9c/0x150
[ 77.748884][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.751702][ T5325] ? clear_bhb_loop+0x60/0xb0
[ 77.753741][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 77.756170][ T5325] RIP: 0033:0x7f934198f7c9
[ 77.757967][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 77.766000][ T5325] RSP: 002b:00007f9342779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[ 77.769896][ T5325] RAX: ffffffffffffffda RBX: 00007f9341be6090 RCX: 00007f934198f7c9
[ 77.773456][ T5325] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000008
[ 77.777014][ T5325] RBP: 00007f9341a13f91 R08: 0000000000000000 R09: 0000000000000000
[ 77.781353][ T5325] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000
[ 77.784922][ T5325] R13: 00007f9341be6128 R14: 00007f9341be6090 R15: 00007ffcb7c95ea8
[ 77.788548][ T5325]
[ 77.790314][ T5325] Kernel Offset: disabled
[ 77.792270][ T5325] Rebooting in 86400 seconds..