program: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x86, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001140)=ANY=[], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x8035}, @void, @llc={@snap={0xaa, 0x0, "ac", "b431ff", 0x10, "78c0b8ef59039c553ebbd1ed08d4f8cf664bda13c264596c345baecc386a08"}}}, 0x2b) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000080)=""/4096, 0x1000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0x21, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) [ 77.798680][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.801157][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.809977][ T5296] Bluetooth: hci0: command tx timeout [ 77.871221][ T5312] loop0: detected capacity change from 0 to 64 [ 77.924344][ T5313] ------------[ cut here ]------------ [ 77.926514][ T5313] WARNING: CPU: 0 PID: 5313 at fs/buffer.c:1186 mark_buffer_dirty+0x2a9/0x410 [ 77.930441][ T5313] Modules linked in: [ 77.932027][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 77.936535][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.941143][ T5313] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 77.943399][ T5313] Code: 4c 89 f7 e8 79 0d de ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 34 fc ff e8 5f 18 7c ff eb 8c e8 58 18 7c ff 90 <0f> 0b 90 e9 95 fd ff ff e8 4a 18 7c ff 90 0f 0b 90 e9 bf fd ff ff [ 77.950756][ T5313] RSP: 0018:ffffc9000d14f628 EFLAGS: 00010293 [ 77.953080][ T5313] RAX: ffffffff8243a678 RBX: ffff888051c8c828 RCX: ffff8880001dc880 [ 77.956027][ T5313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 77.959247][ T5313] RBP: ffff888012360001 R08: ffff888051c8c82f R09: 1ffff1100a391905 [ 77.962201][ T5313] R10: dffffc0000000000 R11: ffffed100a391906 R12: ffff888043b68000 [ 77.965688][ T5313] R13: ffff888042b74488 R14: ffff888051c8c828 R15: 0000000000000010 [ 77.969358][ T5313] FS: 00007f5e9497f6c0(0000) GS:ffff88808d6cc000(0000) knlGS:0000000000000000 [ 77.972865][ T5313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.975585][ T5313] CR2: 0000200000001000 CR3: 000000003faa6000 CR4: 0000000000352ef0 [ 77.978987][ T5313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.982570][ T5313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.985910][ T5313] Call Trace: [ 77.988548][ T5313] [ 77.989766][ T5313] bfs_get_block+0x5da/0xae0 [ 77.991448][ T5313] __block_write_begin_int+0x6b2/0x1900 [ 77.993843][ T5313] ? __pfx_bfs_get_block+0x10/0x10 [ 77.995851][ T5313] ? __pfx___block_write_begin_int+0x10/0x10 [ 77.998500][ T5313] ? __filemap_get_folio+0x79f/0xaf0 [ 78.000680][ T5313] ? __pfx_bfs_get_block+0x10/0x10 [ 78.002706][ T5313] block_write_begin+0x8a/0x120 [ 78.004626][ T5313] ? bfs_write_begin+0x1e/0xd0 [ 78.006497][ T5313] bfs_write_begin+0x35/0xd0 [ 78.008315][ T5313] generic_perform_write+0x2c4/0x910 [ 78.010338][ T5313] ? __pfx_generic_perform_write+0x10/0x10 [ 78.012615][ T5313] ? file_update_time+0x2da/0x490 [ 78.014633][ T5313] ? __generic_file_write_iter+0xf9/0x230 [ 78.016699][ T5313] ? generic_file_write_iter+0xfb/0x540 [ 78.019018][ T5313] generic_file_write_iter+0x10f/0x540 [ 78.021219][ T5313] ? __pfx_generic_file_write_iter+0x10/0x10 [ 78.023875][ T5313] ? __lock_acquire+0xaac/0xd20 [ 78.026255][ T5313] ? rcu_read_lock_any_held+0xb3/0x120 [ 78.028636][ T5313] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 78.031043][ T5313] vfs_write+0x548/0xa90 [ 78.032786][ T5313] ? __pfx_generic_file_write_iter+0x10/0x10 [ 78.035154][ T5313] ? __pfx_vfs_write+0x10/0x10 [ 78.037331][ T5313] ? __fget_files+0x2a/0x420 [ 78.039193][ T5313] ksys_write+0x145/0x250 [ 78.040833][ T5313] ? rcu_is_watching+0x15/0xb0 [ 78.042654][ T5313] ? __pfx_ksys_write+0x10/0x10 [ 78.044552][ T5313] ? do_syscall_64+0xba/0x210 [ 78.046385][ T5313] do_syscall_64+0xf6/0x210 [ 78.048248][ T5313] ? clear_bhb_loop+0x45/0xa0 [ 78.050029][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.052371][ T5313] RIP: 0033:0x7f5e93b8e969 [ 78.054096][ T5313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.061351][ T5313] RSP: 002b:00007f5e9497f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.064510][ T5313] RAX: ffffffffffffffda RBX: 00007f5e93db6080 RCX: 00007f5e93b8e969 [ 78.067958][ T5313] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 78.070970][ T5313] RBP: 00007f5e93c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 78.073860][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.076936][ T5313] R13: 0000000000000000 R14: 00007f5e93db6080 R15: 00007ffe78d8e348 [ 78.079743][ T5313] [ 78.080865][ T5313] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.083904][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 78.088327][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.092302][ T5313] Call Trace: [ 78.093649][ T5313] [ 78.094744][ T5313] dump_stack_lvl+0x99/0x250 [ 78.096508][ T5313] ? __asan_memcpy+0x40/0x70 [ 78.098320][ T5313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.100316][ T5313] ? __pfx__printk+0x10/0x10 [ 78.102100][ T5313] panic+0x2db/0x790 [ 78.103537][ T5313] ? __pfx_panic+0x10/0x10 [ 78.105197][ T5313] ? show_trace_log_lvl+0x4fb/0x550 [ 78.107214][ T5313] __warn+0x31b/0x4b0 [ 78.108775][ T5313] ? mark_buffer_dirty+0x2a9/0x410 [ 78.110732][ T5313] ? mark_buffer_dirty+0x2a9/0x410 [ 78.112647][ T5313] report_bug+0x2be/0x4f0 [ 78.114269][ T5313] ? mark_buffer_dirty+0x2a9/0x410 [ 78.116164][ T5313] ? mark_buffer_dirty+0x2a9/0x410 [ 78.118046][ T5313] ? mark_buffer_dirty+0x2ab/0x410 [ 78.119896][ T5313] handle_bug+0x84/0x160 [ 78.121478][ T5313] exc_invalid_op+0x1a/0x50 [ 78.123703][ T5313] asm_exc_invalid_op+0x1a/0x20 [ 78.125940][ T5313] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 78.128148][ T5313] Code: 4c 89 f7 e8 79 0d de ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 34 fc ff e8 5f 18 7c ff eb 8c e8 58 18 7c ff 90 <0f> 0b 90 e9 95 fd ff ff e8 4a 18 7c ff 90 0f 0b 90 e9 bf fd ff ff [ 78.135403][ T5313] RSP: 0018:ffffc9000d14f628 EFLAGS: 00010293 [ 78.137754][ T5313] RAX: ffffffff8243a678 RBX: ffff888051c8c828 RCX: ffff8880001dc880 [ 78.140644][ T5313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 78.143603][ T5313] RBP: ffff888012360001 R08: ffff888051c8c82f R09: 1ffff1100a391905 [ 78.146664][ T5313] R10: dffffc0000000000 R11: ffffed100a391906 R12: ffff888043b68000 [ 78.149484][ T5313] R13: ffff888042b74488 R14: ffff888051c8c828 R15: 0000000000000010 [ 78.152440][ T5313] ? mark_buffer_dirty+0x2a8/0x410 [ 78.154446][ T5313] ? mark_buffer_dirty+0x2a8/0x410 [ 78.156614][ T5313] bfs_get_block+0x5da/0xae0 [ 78.158494][ T5313] __block_write_begin_int+0x6b2/0x1900 [ 78.160745][ T5313] ? __pfx_bfs_get_block+0x10/0x10 [ 78.162734][ T5313] ? __pfx___block_write_begin_int+0x10/0x10 [ 78.164884][ T5313] ? __filemap_get_folio+0x79f/0xaf0 [ 78.166805][ T5313] ? __pfx_bfs_get_block+0x10/0x10 [ 78.168743][ T5313] block_write_begin+0x8a/0x120 [ 78.170580][ T5313] ? bfs_write_begin+0x1e/0xd0 [ 78.172389][ T5313] bfs_write_begin+0x35/0xd0 [ 78.174180][ T5313] generic_perform_write+0x2c4/0x910 [ 78.176081][ T5313] ? __pfx_generic_perform_write+0x10/0x10 [ 78.178191][ T5313] ? file_update_time+0x2da/0x490 [ 78.179980][ T5313] ? __generic_file_write_iter+0xf9/0x230 [ 78.181728][ T5313] ? generic_file_write_iter+0xfb/0x540 [ 78.183447][ T5313] generic_file_write_iter+0x10f/0x540 [ 78.185131][ T5313] ? __pfx_generic_file_write_iter+0x10/0x10 [ 78.186990][ T5313] ? __lock_acquire+0xaac/0xd20 [ 78.188679][ T5313] ? rcu_read_lock_any_held+0xb3/0x120 [ 78.190466][ T5313] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 78.192587][ T5313] vfs_write+0x548/0xa90 [ 78.194285][ T5313] ? __pfx_generic_file_write_iter+0x10/0x10 [ 78.196592][ T5313] ? __pfx_vfs_write+0x10/0x10 [ 78.198503][ T5313] ? __fget_files+0x2a/0x420 [ 78.200327][ T5313] ksys_write+0x145/0x250 [ 78.201821][ T5313] ? rcu_is_watching+0x15/0xb0 [ 78.203686][ T5313] ? __pfx_ksys_write+0x10/0x10 [ 78.205412][ T5313] ? do_syscall_64+0xba/0x210 [ 78.207022][ T5313] do_syscall_64+0xf6/0x210 [ 78.208849][ T5313] ? clear_bhb_loop+0x45/0xa0 [ 78.210730][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.213081][ T5313] RIP: 0033:0x7f5e93b8e969 [ 78.214837][ T5313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.222293][ T5313] RSP: 002b:00007f5e9497f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.225587][ T5313] RAX: ffffffffffffffda RBX: 00007f5e93db6080 RCX: 00007f5e93b8e969 [ 78.228736][ T5313] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 78.231888][ T5313] RBP: 00007f5e93c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 78.234909][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.238094][ T5313] R13: 0000000000000000 R14: 00007f5e93db6080 R15: 00007ffe78d8e348 [ 78.241117][ T5313] [ 78.242561][ T5313] Kernel Offset: disabled [ 78.244272][ T5313] Rebooting in 86400 seconds..