program:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x48d, 0x0, 0x8000000}]}) (async, rerun: 64)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") (rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x3ff}, 0xc) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000140)) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r3, &(0x7f0000000340)="0b000000010000", 0x7) (async)
write$binfmt_script(r2, &(0x7f00000008c0), 0xfecc) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0xfecc)
[ 85.181288][ T5316] Bluetooth: hci0: command tx timeout
[ 85.260528][ T5339] loop0: detected capacity change from 0 to 64
[ 85.501562][ T5340] Bluetooth: MGMT ver 1.23
[ 85.509807][ T5342] ------------[ cut here ]------------
[ 85.512335][ T5342] !buffer_uptodate(bh)
[ 85.512346][ T5342] WARNING: fs/buffer.c:1183 at mark_buffer_dirty+0x299/0x3f0, CPU#0: syz.0.0/5342
[ 85.518286][ T5342] Modules linked in:
[ 85.520248][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.523953][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.528351][ T5342] RIP: 0010:mark_buffer_dirty+0x299/0x3f0
[ 85.530935][ T5342] Code: 4c 89 f7 e8 d9 62 db ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 b4 8a fb ff e8 3f d0 72 ff eb 8c e8 38 d0 72 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 2a d0 72 ff 90 0f 0b 90 e9 cf fd ff ff
[ 85.539509][ T5342] RSP: 0018:ffffc9000ceb7608 EFLAGS: 00010293
[ 85.542095][ T5342] RAX: ffffffff824fd828 RBX: ffff88801c8c2ae0 RCX: ffff88801a6a0000
[ 85.545592][ T5342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 85.549184][ T5342] RBP: ffff88801a58e001 R08: ffff88801c8c2ae7 R09: 1ffff1100391855c
[ 85.552709][ T5342] R10: dffffc0000000000 R11: ffffed100391855d R12: ffff88804f796400
[ 85.556176][ T5342] R13: ffff88804667f9f8 R14: ffff88801c8c2ae0 R15: 000000000000000a
[ 85.559567][ T5342] FS: 00007f97b46a36c0(0000) GS:ffff88808cf1d000(0000) knlGS:0000000000000000
[ 85.563297][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.566312][ T5342] CR2: 0000200000002000 CR3: 0000000036314000 CR4: 0000000000352ef0
[ 85.569922][ T5342] Call Trace:
[ 85.571342][ T5342]
[ 85.572665][ T5342] bfs_get_block+0x5da/0xae0
[ 85.574708][ T5342] __block_write_begin_int+0x6c6/0x1910
[ 85.577330][ T5342] ? __pfx_bfs_get_block+0x10/0x10
[ 85.579862][ T5342] ? __pfx___block_write_begin_int+0x10/0x10
[ 85.582248][ T5342] ? __pfx_bfs_get_block+0x10/0x10
[ 85.584535][ T5342] block_write_begin+0x8d/0x120
[ 85.586576][ T5342] ? bfs_write_begin+0x1e/0xd0
[ 85.588713][ T5342] bfs_write_begin+0x35/0xd0
[ 85.590754][ T5342] generic_perform_write+0x2e2/0x8f0
[ 85.593050][ T5342] ? __pfx_generic_perform_write+0x10/0x10
[ 85.595521][ T5342] ? file_update_time_flags+0x2cb/0x4d0
[ 85.597781][ T5342] ? __generic_file_write_iter+0xf9/0x230
[ 85.600370][ T5342] ? generic_file_write_iter+0x136/0x680
[ 85.602830][ T5342] generic_file_write_iter+0x14a/0x680
[ 85.605204][ T5342] ? add_lock_to_list+0xc7/0x100
[ 85.607368][ T5342] ? __pfx_generic_file_write_iter+0x10/0x10
[ 85.610182][ T5342] ? lockdep_unlock+0x5d/0xd0
[ 85.612367][ T5342] ? __lock_acquire+0x146e/0x2cf0
[ 85.614738][ T5342] ? __pfx_aa_file_perm+0x10/0x10
[ 85.617094][ T5342] ? vfs_write+0x227/0xb90
[ 85.619324][ T5342] ? vfs_write+0x227/0xb90
[ 85.621396][ T5342] vfs_write+0x61d/0xb90
[ 85.623286][ T5342] ? __pfx_vfs_write+0x10/0x10
[ 85.625611][ T5342] ? __fget_files+0x2a/0x420
[ 85.627755][ T5342] ksys_write+0x150/0x270
[ 85.629657][ T5342] ? __pfx_ksys_write+0x10/0x10
[ 85.631735][ T5342] do_syscall_64+0xe2/0xf80
[ 85.633764][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.636350][ T5342] ? trace_irq_disable+0x37/0x100
[ 85.638498][ T5342] ? clear_bhb_loop+0x60/0xb0
[ 85.640700][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.643212][ T5342] RIP: 0033:0x7f97b379acb9
[ 85.645193][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.653530][ T5342] RSP: 002b:00007f97b46a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 85.657297][ T5342] RAX: ffffffffffffffda RBX: 00007f97b3a16180 RCX: 00007f97b379acb9
[ 85.660932][ T5342] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000007
[ 85.664407][ T5342] RBP: 00007f97b3808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 85.667824][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.671425][ T5342] R13: 00007f97b3a16218 R14: 00007f97b3a16180 R15: 00007ffe482df5b8
[ 85.674863][ T5342]
[ 85.676245][ T5342] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 85.679427][ T5342] CPU: 0 UID: 0 PID: 5342 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.683399][ T5342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.687586][ T5342] Call Trace:
[ 85.689013][ T5342]
[ 85.690339][ T5342] vpanic+0x1e0/0x670
[ 85.692118][ T5342] panic+0xc5/0xd0
[ 85.693805][ T5342] ? __pfx_panic+0x10/0x10
[ 85.695903][ T5342] __warn+0x315/0x4a0
[ 85.697706][ T5342] ? mark_buffer_dirty+0x299/0x3f0
[ 85.700000][ T5342] ? mark_buffer_dirty+0x299/0x3f0
[ 85.702293][ T5342] __report_bug+0x29a/0x540
[ 85.704336][ T5342] ? filemap_get_entry+0xca/0x320
[ 85.706619][ T5342] ? mark_buffer_dirty+0x299/0x3f0
[ 85.708912][ T5342] ? __pfx___report_bug+0x10/0x10
[ 85.711180][ T5342] ? __pfx_folio_mark_accessed+0x10/0x10
[ 85.713777][ T5342] ? mark_buffer_dirty+0x299/0x3f0
[ 85.716074][ T5342] report_bug+0x16a/0x220
[ 85.718058][ T5342] ? mark_buffer_dirty+0x299/0x3f0
[ 85.720363][ T5342] ? mark_buffer_dirty+0x29b/0x3f0
[ 85.722750][ T5342] handle_bug+0x98/0x200
[ 85.724791][ T5342] exc_invalid_op+0x1a/0x50
[ 85.726851][ T5342] asm_exc_invalid_op+0x1a/0x20
[ 85.729118][ T5342] RIP: 0010:mark_buffer_dirty+0x299/0x3f0
[ 85.731675][ T5342] Code: 4c 89 f7 e8 d9 62 db ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 b4 8a fb ff e8 3f d0 72 ff eb 8c e8 38 d0 72 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 2a d0 72 ff 90 0f 0b 90 e9 cf fd ff ff
[ 85.740037][ T5342] RSP: 0018:ffffc9000ceb7608 EFLAGS: 00010293
[ 85.742765][ T5342] RAX: ffffffff824fd828 RBX: ffff88801c8c2ae0 RCX: ffff88801a6a0000
[ 85.746463][ T5342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 85.749806][ T5342] RBP: ffff88801a58e001 R08: ffff88801c8c2ae7 R09: 1ffff1100391855c
[ 85.753233][ T5342] R10: dffffc0000000000 R11: ffffed100391855d R12: ffff88804f796400
[ 85.756744][ T5342] R13: ffff88804667f9f8 R14: ffff88801c8c2ae0 R15: 000000000000000a
[ 85.760081][ T5342] ? mark_buffer_dirty+0x298/0x3f0
[ 85.762325][ T5342] ? mark_buffer_dirty+0x298/0x3f0
[ 85.764622][ T5342] bfs_get_block+0x5da/0xae0
[ 85.766591][ T5342] __block_write_begin_int+0x6c6/0x1910
[ 85.768765][ T5342] ? __pfx_bfs_get_block+0x10/0x10
[ 85.770839][ T5342] ? __pfx___block_write_begin_int+0x10/0x10
[ 85.773787][ T5342] ? __pfx_bfs_get_block+0x10/0x10
[ 85.776645][ T5342] block_write_begin+0x8d/0x120
[ 85.779164][ T5342] ? bfs_write_begin+0x1e/0xd0
[ 85.781291][ T5342] bfs_write_begin+0x35/0xd0
[ 85.783285][ T5342] generic_perform_write+0x2e2/0x8f0
[ 85.785636][ T5342] ? __pfx_generic_perform_write+0x10/0x10
[ 85.788137][ T5342] ? file_update_time_flags+0x2cb/0x4d0
[ 85.790642][ T5342] ? __generic_file_write_iter+0xf9/0x230
[ 85.793086][ T5342] ? generic_file_write_iter+0x136/0x680
[ 85.795533][ T5342] generic_file_write_iter+0x14a/0x680
[ 85.798022][ T5342] ? add_lock_to_list+0xc7/0x100
[ 85.800273][ T5342] ? __pfx_generic_file_write_iter+0x10/0x10
[ 85.802666][ T5342] ? lockdep_unlock+0x5d/0xd0
[ 85.804673][ T5342] ? __lock_acquire+0x146e/0x2cf0
[ 85.806825][ T5342] ? __pfx_aa_file_perm+0x10/0x10
[ 85.809099][ T5342] ? vfs_write+0x227/0xb90
[ 85.810965][ T5342] ? vfs_write+0x227/0xb90
[ 85.812900][ T5342] vfs_write+0x61d/0xb90
[ 85.814779][ T5342] ? __pfx_vfs_write+0x10/0x10
[ 85.816757][ T5342] ? __fget_files+0x2a/0x420
[ 85.818773][ T5342] ksys_write+0x150/0x270
[ 85.820680][ T5342] ? __pfx_ksys_write+0x10/0x10
[ 85.822954][ T5342] do_syscall_64+0xe2/0xf80
[ 85.825528][ T5342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.828810][ T5342] ? trace_irq_disable+0x37/0x100
[ 85.831537][ T5342] ? clear_bhb_loop+0x60/0xb0
[ 85.834015][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.837138][ T5342] RIP: 0033:0x7f97b379acb9
[ 85.839521][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.847842][ T5342] RSP: 002b:00007f97b46a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 85.851338][ T5342] RAX: ffffffffffffffda RBX: 00007f97b3a16180 RCX: 00007f97b379acb9
[ 85.854698][ T5342] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000007
[ 85.858090][ T5342] RBP: 00007f97b3808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 85.861755][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.865928][ T5342] R13: 00007f97b3a16218 R14: 00007f97b3a16180 R15: 00007ffe482df5b8
[ 85.869748][ T5342]
[ 85.871481][ T5342] Kernel Offset: disabled
[ 85.873282][ T5342] Rebooting in 86400 seconds..