program: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80000) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) [ 74.265613][ T4671] Bluetooth: hci0: command tx timeout [ 74.318358][ T5322] loop0: detected capacity change from 0 to 64 [ 74.389496][ T5323] ------------[ cut here ]------------ [ 74.392000][ T5323] !buffer_uptodate(bh) [ 74.392012][ T5323] WARNING: fs/buffer.c:1183 at mark_buffer_dirty+0x299/0x3f0, CPU#0: syz.0.0/5323 [ 74.398580][ T5323] Modules linked in: [ 74.400766][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.404878][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.409746][ T5323] RIP: 0010:mark_buffer_dirty+0x299/0x3f0 [ 74.412372][ T5323] Code: 4c 89 f7 e8 d9 62 db ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 b4 8a fb ff e8 bf ce 72 ff eb 8c e8 b8 ce 72 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 aa ce 72 ff 90 0f 0b 90 e9 cf fd ff ff [ 74.421056][ T5323] RSP: 0018:ffffc9000b9bf608 EFLAGS: 00010293 [ 74.423849][ T5323] RAX: ffffffff824fd9f8 RBX: ffff88801c8a4910 RCX: ffff888000a54980 [ 74.427603][ T5323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 74.431079][ T5323] RBP: ffff8880439ce001 R08: ffff88801c8a4917 R09: 1ffff11003914922 [ 74.434591][ T5323] R10: dffffc0000000000 R11: ffffed1003914923 R12: ffff8880507bb400 [ 74.438030][ T5323] R13: ffff888046fe2bc8 R14: ffff88801c8a4910 R15: 000000000000000a [ 74.441441][ T5323] FS: 00007f80fbf7d6c0(0000) GS:ffff88808cf1b000(0000) knlGS:0000000000000000 [ 74.445433][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.448335][ T5323] CR2: 0000200000002000 CR3: 0000000041b9d000 CR4: 0000000000352ef0 [ 74.452161][ T5323] Call Trace: [ 74.454081][ T5323] [ 74.456002][ T5323] bfs_get_block+0x5da/0xae0 [ 74.458624][ T5323] __block_write_begin_int+0x6c6/0x1910 [ 74.461394][ T5323] ? __pfx_bfs_get_block+0x10/0x10 [ 74.464105][ T5323] ? __pfx___block_write_begin_int+0x10/0x10 [ 74.467306][ T5323] ? __pfx_bfs_get_block+0x10/0x10 [ 74.469532][ T5323] block_write_begin+0x8d/0x120 [ 74.471757][ T5323] ? bfs_write_begin+0x1e/0xd0 [ 74.474147][ T5323] bfs_write_begin+0x35/0xd0 [ 74.476370][ T5323] generic_perform_write+0x2e2/0x8f0 [ 74.478666][ T5323] ? __pfx_generic_perform_write+0x10/0x10 [ 74.481285][ T5323] ? file_update_time_flags+0x2cb/0x4d0 [ 74.483820][ T5323] ? __generic_file_write_iter+0xf9/0x230 [ 74.486459][ T5323] ? generic_file_write_iter+0x136/0x680 [ 74.488785][ T5323] generic_file_write_iter+0x14a/0x680 [ 74.491214][ T5323] ? add_lock_to_list+0xc7/0x100 [ 74.493450][ T5323] ? __pfx_generic_file_write_iter+0x10/0x10 [ 74.496105][ T5323] ? lockdep_unlock+0x5d/0xd0 [ 74.498080][ T5323] ? __lock_acquire+0x146e/0x2cf0 [ 74.500282][ T5323] ? __pfx_aa_file_perm+0x10/0x10 [ 74.502453][ T5323] ? vfs_write+0x227/0xb90 [ 74.504393][ T5323] ? vfs_write+0x227/0xb90 [ 74.506539][ T5323] vfs_write+0x61d/0xb90 [ 74.508245][ T5323] ? __pfx_vfs_write+0x10/0x10 [ 74.510394][ T5323] ? __fget_files+0x2a/0x420 [ 74.512380][ T5323] ksys_write+0x150/0x270 [ 74.514359][ T5323] ? __pfx_ksys_write+0x10/0x10 [ 74.516652][ T5323] do_syscall_64+0xe2/0xf80 [ 74.518800][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.521290][ T5323] ? trace_irq_disable+0x37/0x100 [ 74.523602][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 74.525811][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.528463][ T5323] RIP: 0033:0x7f80fb19acb9 [ 74.530480][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.539716][ T5323] RSP: 002b:00007f80fbf7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.543341][ T5323] RAX: ffffffffffffffda RBX: 00007f80fb416090 RCX: 00007f80fb19acb9 [ 74.546986][ T5323] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 74.550619][ T5323] RBP: 00007f80fb208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 74.554061][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.557428][ T5323] R13: 00007f80fb416128 R14: 00007f80fb416090 R15: 00007ffd1b2d9ff8 [ 74.560901][ T5323] [ 74.562303][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.565531][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.569441][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.573737][ T5323] Call Trace: [ 74.575346][ T5323] [ 74.576808][ T5323] vpanic+0x1e0/0x670 [ 74.578667][ T5323] panic+0xc5/0xd0 [ 74.580673][ T5323] ? __pfx_panic+0x10/0x10 [ 74.582774][ T5323] __warn+0x315/0x4a0 [ 74.584807][ T5323] ? mark_buffer_dirty+0x299/0x3f0 [ 74.587365][ T5323] ? mark_buffer_dirty+0x299/0x3f0 [ 74.589863][ T5323] __report_bug+0x29a/0x540 [ 74.591908][ T5323] ? filemap_get_entry+0xca/0x320 [ 74.594046][ T5323] ? mark_buffer_dirty+0x299/0x3f0 [ 74.596294][ T5323] ? __pfx___report_bug+0x10/0x10 [ 74.598453][ T5323] ? __pfx_folio_mark_accessed+0x10/0x10 [ 74.600825][ T5323] ? mark_buffer_dirty+0x299/0x3f0 [ 74.603157][ T5323] report_bug+0x16a/0x220 [ 74.604993][ T5323] ? mark_buffer_dirty+0x299/0x3f0 [ 74.607249][ T5323] ? mark_buffer_dirty+0x29b/0x3f0 [ 74.609547][ T5323] handle_bug+0x98/0x200 [ 74.611459][ T5323] exc_invalid_op+0x1a/0x50 [ 74.613432][ T5323] asm_exc_invalid_op+0x1a/0x20 [ 74.615592][ T5323] RIP: 0010:mark_buffer_dirty+0x299/0x3f0 [ 74.618174][ T5323] Code: 4c 89 f7 e8 d9 62 db ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 b4 8a fb ff e8 bf ce 72 ff eb 8c e8 b8 ce 72 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 aa ce 72 ff 90 0f 0b 90 e9 cf fd ff ff [ 74.626491][ T5323] RSP: 0018:ffffc9000b9bf608 EFLAGS: 00010293 [ 74.628994][ T5323] RAX: ffffffff824fd9f8 RBX: ffff88801c8a4910 RCX: ffff888000a54980 [ 74.632475][ T5323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 74.635817][ T5323] RBP: ffff8880439ce001 R08: ffff88801c8a4917 R09: 1ffff11003914922 [ 74.639080][ T5323] R10: dffffc0000000000 R11: ffffed1003914923 R12: ffff8880507bb400 [ 74.643020][ T5323] R13: ffff888046fe2bc8 R14: ffff88801c8a4910 R15: 000000000000000a [ 74.647457][ T5323] ? mark_buffer_dirty+0x298/0x3f0 [ 74.649878][ T5323] ? mark_buffer_dirty+0x298/0x3f0 [ 74.652050][ T5323] bfs_get_block+0x5da/0xae0 [ 74.654050][ T5323] __block_write_begin_int+0x6c6/0x1910 [ 74.656904][ T5323] ? __pfx_bfs_get_block+0x10/0x10 [ 74.659230][ T5323] ? __pfx___block_write_begin_int+0x10/0x10 [ 74.661789][ T5323] ? __pfx_bfs_get_block+0x10/0x10 [ 74.664068][ T5323] block_write_begin+0x8d/0x120 [ 74.666221][ T5323] ? bfs_write_begin+0x1e/0xd0 [ 74.668285][ T5323] bfs_write_begin+0x35/0xd0 [ 74.670377][ T5323] generic_perform_write+0x2e2/0x8f0 [ 74.672637][ T5323] ? __pfx_generic_perform_write+0x10/0x10 [ 74.675364][ T5323] ? file_update_time_flags+0x2cb/0x4d0 [ 74.677839][ T5323] ? __generic_file_write_iter+0xf9/0x230 [ 74.680257][ T5323] ? generic_file_write_iter+0x136/0x680 [ 74.682816][ T5323] generic_file_write_iter+0x14a/0x680 [ 74.685096][ T5323] ? add_lock_to_list+0xc7/0x100 [ 74.687346][ T5323] ? __pfx_generic_file_write_iter+0x10/0x10 [ 74.690038][ T5323] ? lockdep_unlock+0x5d/0xd0 [ 74.692112][ T5323] ? __lock_acquire+0x146e/0x2cf0 [ 74.694184][ T5323] ? __pfx_aa_file_perm+0x10/0x10 [ 74.696245][ T5323] ? vfs_write+0x227/0xb90 [ 74.698071][ T5323] ? vfs_write+0x227/0xb90 [ 74.699945][ T5323] vfs_write+0x61d/0xb90 [ 74.701702][ T5323] ? __pfx_vfs_write+0x10/0x10 [ 74.703702][ T5323] ? __fget_files+0x2a/0x420 [ 74.705591][ T5323] ksys_write+0x150/0x270 [ 74.707469][ T5323] ? __pfx_ksys_write+0x10/0x10 [ 74.709644][ T5323] do_syscall_64+0xe2/0xf80 [ 74.711661][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.714438][ T5323] ? trace_irq_disable+0x37/0x100 [ 74.716685][ T5323] ? clear_bhb_loop+0x60/0xb0 [ 74.718664][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.721080][ T5323] RIP: 0033:0x7f80fb19acb9 [ 74.722943][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.730596][ T5323] RSP: 002b:00007f80fbf7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.734387][ T5323] RAX: ffffffffffffffda RBX: 00007f80fb416090 RCX: 00007f80fb19acb9 [ 74.737964][ T5323] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 74.741431][ T5323] RBP: 00007f80fb208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 74.744911][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.748475][ T5323] R13: 00007f80fb416128 R14: 00007f80fb416090 R15: 00007ffd1b2d9ff8 [ 74.752003][ T5323] [ 74.753794][ T5323] Kernel Offset: disabled [ 74.755688][ T5323] Rebooting in 86400 seconds..