program: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb0, &(0x7f0000000140)="$eJzs1zFKA0EYBeDnCrqtjQgW1tt4B48iltqIlSKIFxAvkqvkCNunSLFtCJnA7kII6VJsIHxfMcybn4HX/vPV7P6/ScpPUpq790XZ+fj8en1+G85wlqok10nqJA83Q14+DbOLcd523y9td3n4+epv8r4AAMDxqjzu500ZH9bjFtiH2+S3v9TTVwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4qW0AAAD///2sKQw=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) (async) timer_create(0xb, &(0x7f0000000580)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000005c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000640)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) [ 67.444598][ T5331] Bluetooth: hci0: command tx timeout [ 67.470348][ T5350] loop0: detected capacity change from 0 to 64 [ 67.525034][ T5351] ------------[ cut here ]------------ [ 67.527741][ T5351] WARNING: CPU: 0 PID: 5351 at fs/buffer.c:1183 mark_buffer_dirty+0x2a9/0x410 [ 67.532146][ T5351] Modules linked in: [ 67.533985][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 67.538244][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.543018][ T5351] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 67.545517][ T5351] Code: 4c 89 f7 e8 39 4e dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 3f 66 78 ff eb 8c e8 38 66 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 2a 66 78 ff 90 0f 0b 90 e9 bf fd ff ff [ 67.553173][ T5351] RSP: 0018:ffffc9000d58f608 EFLAGS: 00010293 [ 67.555537][ T5351] RAX: ffffffff824754f8 RBX: ffff8880441039f8 RCX: ffff88801c72a440 [ 67.558560][ T5351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 67.561687][ T5351] RBP: ffff888036576001 R08: ffff8880441039ff R09: 1ffff1100882073f [ 67.564560][ T5351] R10: dffffc0000000000 R11: ffffed1008820740 R12: ffff88804cd82000 [ 67.567435][ T5351] R13: ffff8880441002b8 R14: ffff8880441039f8 R15: 0000000000000010 [ 67.570769][ T5351] FS: 00007feab767d6c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 67.574762][ T5351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.577731][ T5351] CR2: 0000200000001000 CR3: 00000000400a5000 CR4: 0000000000352ef0 [ 67.581308][ T5351] Call Trace: [ 67.582828][ T5351] [ 67.584041][ T5351] bfs_get_block+0x5da/0xae0 [ 67.586467][ T5351] __block_write_begin_int+0x6b5/0x1900 [ 67.588720][ T5351] ? __pfx_bfs_get_block+0x10/0x10 [ 67.590982][ T5351] ? __pfx___block_write_begin_int+0x10/0x10 [ 67.593563][ T5351] ? __filemap_get_folio+0x79f/0xaf0 [ 67.595971][ T5351] ? __pfx_bfs_get_block+0x10/0x10 [ 67.598200][ T5351] block_write_begin+0x8a/0x120 [ 67.600275][ T5351] ? bfs_write_begin+0x1e/0xd0 [ 67.602528][ T5351] bfs_write_begin+0x35/0xd0 [ 67.604939][ T5351] generic_perform_write+0x2c2/0x900 [ 67.607251][ T5351] ? __pfx_generic_perform_write+0x10/0x10 [ 67.609644][ T5351] ? file_update_time+0x2da/0x490 [ 67.611767][ T5351] ? __generic_file_write_iter+0xf9/0x230 [ 67.614228][ T5351] ? generic_file_write_iter+0x103/0x550 [ 67.616670][ T5351] generic_file_write_iter+0x117/0x550 [ 67.619013][ T5351] ? __pfx_generic_file_write_iter+0x10/0x10 [ 67.621896][ T5351] ? __pfx___futex_wait+0x10/0x10 [ 67.624287][ T5351] ? futex_private_hash_get+0x43/0x290 [ 67.626627][ T5351] ? __pfx_aa_file_perm+0x10/0x10 [ 67.628874][ T5351] ? __pfx_futex_wake_mark+0x10/0x10 [ 67.631325][ T5351] ? vfs_write+0x211/0xb30 [ 67.633190][ T5351] ? rcu_is_watching+0x15/0xb0 [ 67.635258][ T5351] ? lock_acquire+0x5f/0x360 [ 67.637329][ T5351] ? security_file_permission+0x75/0x290 [ 67.639842][ T5351] vfs_write+0x5c9/0xb30 [ 67.641762][ T5351] ? rcu_is_watching+0x15/0xb0 [ 67.643898][ T5351] ? __pfx_generic_file_write_iter+0x10/0x10 [ 67.646559][ T5351] ? __pfx_vfs_write+0x10/0x10 [ 67.648603][ T5351] ? __fget_files+0x2a/0x420 [ 67.650406][ T5351] ksys_write+0x145/0x250 [ 67.652099][ T5351] ? __pfx_ksys_write+0x10/0x10 [ 67.654155][ T5351] ? rcu_is_watching+0x15/0xb0 [ 67.656436][ T5351] ? rcu_is_watching+0x15/0xb0 [ 67.658563][ T5351] do_syscall_64+0xfa/0x3b0 [ 67.660454][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.662856][ T5351] ? clear_bhb_loop+0x60/0xb0 [ 67.664958][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.667583][ T5351] RIP: 0033:0x7feab678ebe9 [ 67.669610][ T5351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.677476][ T5351] RSP: 002b:00007feab767d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.681498][ T5351] RAX: ffffffffffffffda RBX: 00007feab69b6090 RCX: 00007feab678ebe9 [ 67.684998][ T5351] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 67.688191][ T5351] RBP: 00007feab6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 67.691080][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.694110][ T5351] R13: 00007feab69b6128 R14: 00007feab69b6090 R15: 00007fff0a920c98 [ 67.697545][ T5351] [ 67.698764][ T5351] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 67.701760][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 67.705656][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.710022][ T5351] Call Trace: [ 67.711515][ T5351] [ 67.712718][ T5351] dump_stack_lvl+0x99/0x250 [ 67.715111][ T5351] ? __asan_memcpy+0x40/0x70 [ 67.717230][ T5351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.719691][ T5351] ? __pfx__printk+0x10/0x10 [ 67.721774][ T5351] vpanic+0x281/0x750 [ 67.723518][ T5351] ? __pfx__printk+0x10/0x10 [ 67.725500][ T5351] ? __pfx_vpanic+0x10/0x10 [ 67.727585][ T5351] ? is_bpf_text_address+0x26/0x2b0 [ 67.730159][ T5351] panic+0xb9/0xc0 [ 67.732313][ T5351] ? __pfx_panic+0x10/0x10 [ 67.734509][ T5351] __warn+0x31b/0x4b0 [ 67.736407][ T5351] ? mark_buffer_dirty+0x2a9/0x410 [ 67.738832][ T5351] ? mark_buffer_dirty+0x2a9/0x410 [ 67.741076][ T5351] report_bug+0x2be/0x4f0 [ 67.743213][ T5351] ? mark_buffer_dirty+0x2a9/0x410 [ 67.745623][ T5351] ? mark_buffer_dirty+0x2a9/0x410 [ 67.747949][ T5351] ? mark_buffer_dirty+0x2ab/0x410 [ 67.750145][ T5351] handle_bug+0x84/0x160 [ 67.751921][ T5351] exc_invalid_op+0x1a/0x50 [ 67.753791][ T5351] asm_exc_invalid_op+0x1a/0x20 [ 67.755957][ T5351] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 67.758423][ T5351] Code: 4c 89 f7 e8 39 4e dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 02 fc ff e8 3f 66 78 ff eb 8c e8 38 66 78 ff 90 <0f> 0b 90 e9 95 fd ff ff e8 2a 66 78 ff 90 0f 0b 90 e9 bf fd ff ff [ 67.767471][ T5351] RSP: 0018:ffffc9000d58f608 EFLAGS: 00010293 [ 67.770160][ T5351] RAX: ffffffff824754f8 RBX: ffff8880441039f8 RCX: ffff88801c72a440 [ 67.773648][ T5351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 67.777048][ T5351] RBP: ffff888036576001 R08: ffff8880441039ff R09: 1ffff1100882073f [ 67.780553][ T5351] R10: dffffc0000000000 R11: ffffed1008820740 R12: ffff88804cd82000 [ 67.784023][ T5351] R13: ffff8880441002b8 R14: ffff8880441039f8 R15: 0000000000000010 [ 67.787578][ T5351] ? mark_buffer_dirty+0x2a8/0x410 [ 67.789890][ T5351] ? mark_buffer_dirty+0x2a8/0x410 [ 67.792232][ T5351] bfs_get_block+0x5da/0xae0 [ 67.794206][ T5351] __block_write_begin_int+0x6b5/0x1900 [ 67.796722][ T5351] ? __pfx_bfs_get_block+0x10/0x10 [ 67.798981][ T5351] ? __pfx___block_write_begin_int+0x10/0x10 [ 67.801483][ T5351] ? __filemap_get_folio+0x79f/0xaf0 [ 67.803849][ T5351] ? __pfx_bfs_get_block+0x10/0x10 [ 67.806225][ T5351] block_write_begin+0x8a/0x120 [ 67.808489][ T5351] ? bfs_write_begin+0x1e/0xd0 [ 67.810596][ T5351] bfs_write_begin+0x35/0xd0 [ 67.812708][ T5351] generic_perform_write+0x2c2/0x900 [ 67.815088][ T5351] ? __pfx_generic_perform_write+0x10/0x10 [ 67.817662][ T5351] ? file_update_time+0x2da/0x490 [ 67.820020][ T5351] ? __generic_file_write_iter+0xf9/0x230 [ 67.822794][ T5351] ? generic_file_write_iter+0x103/0x550 [ 67.825404][ T5351] generic_file_write_iter+0x117/0x550 [ 67.827921][ T5351] ? __pfx_generic_file_write_iter+0x10/0x10 [ 67.830541][ T5351] ? __pfx___futex_wait+0x10/0x10 [ 67.832811][ T5351] ? futex_private_hash_get+0x43/0x290 [ 67.835258][ T5351] ? __pfx_aa_file_perm+0x10/0x10 [ 67.837445][ T5351] ? __pfx_futex_wake_mark+0x10/0x10 [ 67.839819][ T5351] ? vfs_write+0x211/0xb30 [ 67.841822][ T5351] ? rcu_is_watching+0x15/0xb0 [ 67.844001][ T5351] ? lock_acquire+0x5f/0x360 [ 67.846224][ T5351] ? security_file_permission+0x75/0x290 [ 67.848945][ T5351] vfs_write+0x5c9/0xb30 [ 67.851100][ T5351] ? rcu_is_watching+0x15/0xb0 [ 67.853463][ T5351] ? __pfx_generic_file_write_iter+0x10/0x10 [ 67.856127][ T5351] ? __pfx_vfs_write+0x10/0x10 [ 67.858388][ T5351] ? __fget_files+0x2a/0x420 [ 67.860456][ T5351] ksys_write+0x145/0x250 [ 67.862357][ T5351] ? __pfx_ksys_write+0x10/0x10 [ 67.864433][ T5351] ? rcu_is_watching+0x15/0xb0 [ 67.866577][ T5351] ? rcu_is_watching+0x15/0xb0 [ 67.868685][ T5351] do_syscall_64+0xfa/0x3b0 [ 67.870727][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.873616][ T5351] ? clear_bhb_loop+0x60/0xb0 [ 67.875852][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.878507][ T5351] RIP: 0033:0x7feab678ebe9 [ 67.880547][ T5351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.888817][ T5351] RSP: 002b:00007feab767d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.892693][ T5351] RAX: ffffffffffffffda RBX: 00007feab69b6090 RCX: 00007feab678ebe9 [ 67.896204][ T5351] RDX: 000000000000fecc RSI: 0000200000000100 RDI: 0000000000000005 [ 67.899656][ T5351] RBP: 00007feab6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 67.902997][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.906338][ T5351] R13: 00007feab69b6128 R14: 00007feab69b6090 R15: 00007fff0a920c98 [ 67.909792][ T5351] [ 67.911513][ T5351] Kernel Offset: disabled [ 67.913361][ T5351] Rebooting in 86400 seconds..