program:
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async)
socket(0x40000000015, 0x5, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
socket(0x15, 0x5, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1}) (async)
ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000140)={0x7, 0x5, 0xfc000000})
io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x0)
[ 73.742338][ T5335] Bluetooth: hci0: command tx timeout
[ 73.815587][ T5359] loop0: detected capacity change from 0 to 64
[ 73.856160][ T5359] ------------[ cut here ]------------
[ 73.859585][ T5359] WARNING: CPU: 0 PID: 5359 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410
[ 73.865064][ T5359] Modules linked in:
[ 73.867170][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 73.871084][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 73.876136][ T5359] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 73.878741][ T5359] Code: 4c 89 f7 e8 39 4e dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 3f 66 78 ff eb 8c e8 38 66 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 2a 66 78 ff 90 0f 0b 90 e9 bf fd ff ff
[ 73.887597][ T5359] RSP: 0018:ffffc9000d4e7608 EFLAGS: 00010293
[ 73.890639][ T5359] RAX: ffffffff824754f8 RBX: ffff8880444e6828 RCX: ffff8880339aa440
[ 73.894909][ T5359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 73.898357][ T5359] RBP: ffff8880002f4001 R08: ffff8880444e682f R09: 1ffff1100889cd05
[ 73.901594][ T5359] R10: dffffc0000000000 R11: ffffed100889cd06 R12: ffff888041d67400
[ 73.905222][ T5359] R13: ffff8880444e1cb0 R14: ffff8880444e6828 R15: 000000000000000a
[ 73.908880][ T5359] FS: 00007f53428ab6c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000
[ 73.913020][ T5359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 73.915989][ T5359] CR2: 0000200000001000 CR3: 0000000042e01000 CR4: 0000000000352ef0
[ 73.919778][ T5359] Call Trace:
[ 73.921335][ T5359]
[ 73.922868][ T5359] bfs_get_block+0x5da/0xae0
[ 73.924796][ T5359] __block_write_begin_int+0x6b5/0x1900
[ 73.927210][ T5359] ? __pfx_bfs_get_block+0x10/0x10
[ 73.929429][ T5359] ? __pfx___block_write_begin_int+0x10/0x10
[ 73.932114][ T5359] ? __filemap_get_folio+0x79f/0xaf0
[ 73.934427][ T5359] ? __pfx_bfs_get_block+0x10/0x10
[ 73.936668][ T5359] block_write_begin+0x8a/0x120
[ 73.938749][ T5359] ? bfs_write_begin+0x1e/0xd0
[ 73.940997][ T5359] bfs_write_begin+0x35/0xd0
[ 73.943346][ T5359] generic_perform_write+0x2c2/0x900
[ 73.945753][ T5359] ? __pfx_generic_perform_write+0x10/0x10
[ 73.948956][ T5359] ? file_update_time+0x2da/0x490
[ 73.951596][ T5359] ? __generic_file_write_iter+0xf9/0x230
[ 73.954276][ T5359] ? generic_file_write_iter+0x103/0x550
[ 73.957391][ T5359] generic_file_write_iter+0x117/0x550
[ 73.960793][ T5359] ? __pfx_generic_file_write_iter+0x10/0x10
[ 73.963523][ T5359] ? __pfx___futex_wait+0x10/0x10
[ 73.965745][ T5359] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 73.968478][ T5359] ? __pfx_aa_file_perm+0x10/0x10
[ 73.970794][ T5359] ? __pfx_futex_wake_mark+0x10/0x10
[ 73.973317][ T5359] ? vfs_write+0x211/0xb30
[ 73.975311][ T5359] ? rcu_is_watching+0x15/0xb0
[ 73.977691][ T5359] ? lock_acquire+0x5f/0x360
[ 73.979964][ T5359] ? security_file_permission+0x75/0x290
[ 73.982865][ T5359] vfs_write+0x5c9/0xb30
[ 73.984747][ T5359] ? rcu_is_watching+0x15/0xb0
[ 73.987039][ T5359] ? __pfx_generic_file_write_iter+0x10/0x10
[ 73.989816][ T5359] ? __pfx_vfs_write+0x10/0x10
[ 73.992094][ T5359] ? __fget_files+0x2a/0x420
[ 73.994125][ T5359] ksys_write+0x145/0x250
[ 73.996070][ T5359] ? __pfx_ksys_write+0x10/0x10
[ 73.998222][ T5359] ? rcu_is_watching+0x15/0xb0
[ 74.000515][ T5359] ? rcu_is_watching+0x15/0xb0
[ 74.002940][ T5359] do_syscall_64+0xfa/0x3b0
[ 74.004918][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.007764][ T5359] ? clear_bhb_loop+0x60/0xb0
[ 74.010384][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.013243][ T5359] RIP: 0033:0x7f534198ebe9
[ 74.016087][ T5359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.025816][ T5359] RSP: 002b:00007f53428ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 74.029355][ T5359] RAX: ffffffffffffffda RBX: 00007f5341bb5fa0 RCX: 00007f534198ebe9
[ 74.032875][ T5359] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000004
[ 74.036413][ T5359] RBP: 00007f5341a11e19 R08: 0000000000000000 R09: 0000000000000000
[ 74.039888][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 74.043438][ T5359] R13: 00007f5341bb6038 R14: 00007f5341bb5fa0 R15: 00007ffeef465938
[ 74.046894][ T5359]
[ 74.048325][ T5359] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 74.051621][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 74.055638][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.060203][ T5359] Call Trace:
[ 74.061600][ T5359]
[ 74.062903][ T5359] dump_stack_lvl+0x99/0x250
[ 74.064929][ T5359] ? __asan_memcpy+0x40/0x70
[ 74.066971][ T5359] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.069251][ T5359] ? __pfx__printk+0x10/0x10
[ 74.071398][ T5359] vpanic+0x281/0x750
[ 74.073271][ T5359] ? __pfx__printk+0x10/0x10
[ 74.075374][ T5359] ? __pfx_vpanic+0x10/0x10
[ 74.077327][ T5359] ? is_bpf_text_address+0x26/0x2b0
[ 74.079569][ T5359] panic+0xb9/0xc0
[ 74.081157][ T5359] ? __pfx_panic+0x10/0x10
[ 74.083076][ T5359] __warn+0x31b/0x4b0
[ 74.084854][ T5359] ? mark_buffer_dirty+0x2a9/0x410
[ 74.087239][ T5359] ? mark_buffer_dirty+0x2a9/0x410
[ 74.089657][ T5359] report_bug+0x2be/0x4f0
[ 74.091771][ T5359] ? mark_buffer_dirty+0x2a9/0x410
[ 74.094170][ T5359] ? mark_buffer_dirty+0x2a9/0x410
[ 74.096653][ T5359] ? mark_buffer_dirty+0x2ab/0x410
[ 74.098844][ T5359] handle_bug+0x84/0x160
[ 74.100760][ T5359] exc_invalid_op+0x1a/0x50
[ 74.102836][ T5359] asm_exc_invalid_op+0x1a/0x20
[ 74.104809][ T5359] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[ 74.107219][ T5359] Code: 4c 89 f7 e8 39 4e dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 3f 66 78 ff eb 8c e8 38 66 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 2a 66 78 ff 90 0f 0b 90 e9 bf fd ff ff
[ 74.116982][ T5359] RSP: 0018:ffffc9000d4e7608 EFLAGS: 00010293
[ 74.120029][ T5359] RAX: ffffffff824754f8 RBX: ffff8880444e6828 RCX: ffff8880339aa440
[ 74.123545][ T5359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 74.126634][ T5359] RBP: ffff8880002f4001 R08: ffff8880444e682f R09: 1ffff1100889cd05
[ 74.129932][ T5359] R10: dffffc0000000000 R11: ffffed100889cd06 R12: ffff888041d67400
[ 74.133467][ T5359] R13: ffff8880444e1cb0 R14: ffff8880444e6828 R15: 000000000000000a
[ 74.136893][ T5359] ? mark_buffer_dirty+0x2a8/0x410
[ 74.139080][ T5359] ? mark_buffer_dirty+0x2a8/0x410
[ 74.141559][ T5359] bfs_get_block+0x5da/0xae0
[ 74.144014][ T5359] __block_write_begin_int+0x6b5/0x1900
[ 74.146489][ T5359] ? __pfx_bfs_get_block+0x10/0x10
[ 74.148705][ T5359] ? __pfx___block_write_begin_int+0x10/0x10
[ 74.151225][ T5359] ? __filemap_get_folio+0x79f/0xaf0
[ 74.153614][ T5359] ? __pfx_bfs_get_block+0x10/0x10
[ 74.155923][ T5359] block_write_begin+0x8a/0x120
[ 74.158215][ T5359] ? bfs_write_begin+0x1e/0xd0
[ 74.160393][ T5359] bfs_write_begin+0x35/0xd0
[ 74.162541][ T5359] generic_perform_write+0x2c2/0x900
[ 74.164949][ T5359] ? __pfx_generic_perform_write+0x10/0x10
[ 74.167474][ T5359] ? file_update_time+0x2da/0x490
[ 74.169876][ T5359] ? __generic_file_write_iter+0xf9/0x230
[ 74.172388][ T5359] ? generic_file_write_iter+0x103/0x550
[ 74.174864][ T5359] generic_file_write_iter+0x117/0x550
[ 74.177646][ T5359] ? __pfx_generic_file_write_iter+0x10/0x10
[ 74.180485][ T5359] ? __pfx___futex_wait+0x10/0x10
[ 74.182671][ T5359] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 74.185253][ T5359] ? __pfx_aa_file_perm+0x10/0x10
[ 74.187504][ T5359] ? __pfx_futex_wake_mark+0x10/0x10
[ 74.190261][ T5359] ? vfs_write+0x211/0xb30
[ 74.192641][ T5359] ? rcu_is_watching+0x15/0xb0
[ 74.195019][ T5359] ? lock_acquire+0x5f/0x360
[ 74.197162][ T5359] ? security_file_permission+0x75/0x290
[ 74.199688][ T5359] vfs_write+0x5c9/0xb30
[ 74.201522][ T5359] ? rcu_is_watching+0x15/0xb0
[ 74.203615][ T5359] ? __pfx_generic_file_write_iter+0x10/0x10
[ 74.206222][ T5359] ? __pfx_vfs_write+0x10/0x10
[ 74.208276][ T5359] ? __fget_files+0x2a/0x420
[ 74.210278][ T5359] ksys_write+0x145/0x250
[ 74.212180][ T5359] ? __pfx_ksys_write+0x10/0x10
[ 74.214222][ T5359] ? rcu_is_watching+0x15/0xb0
[ 74.216295][ T5359] ? rcu_is_watching+0x15/0xb0
[ 74.218346][ T5359] do_syscall_64+0xfa/0x3b0
[ 74.220373][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.223069][ T5359] ? clear_bhb_loop+0x60/0xb0
[ 74.225198][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.227821][ T5359] RIP: 0033:0x7f534198ebe9
[ 74.229691][ T5359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.237730][ T5359] RSP: 002b:00007f53428ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 74.241341][ T5359] RAX: ffffffffffffffda RBX: 00007f5341bb5fa0 RCX: 00007f534198ebe9
[ 74.244926][ T5359] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000004
[ 74.248640][ T5359] RBP: 00007f5341a11e19 R08: 0000000000000000 R09: 0000000000000000
[ 74.252198][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 74.255784][ T5359] R13: 00007f5341bb6038 R14: 00007f5341bb5fa0 R15: 00007ffeef465938
[ 74.259284][ T5359]
[ 74.261080][ T5359] Kernel Offset: disabled
[ 74.263176][ T5359] Rebooting in 86400 seconds..