program: r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYRES64=0x0], 0x1, 0x25a, &(0x7f0000000240)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9) r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x10) write(r4, &(0x7f0000000180)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000780)={r7, 0x0, 0x4, 0x0, 0x0, [0x0], [0x8001, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r8}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@nouser_xattr}, {@cache_strategy_disabled}, {@cache_strategy_readahead}, {@cache_strategy_disabled}, {@dax_never}, {@nouser_xattr}]}, 0x1, 0x174, &(0x7f00000003c0)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") [ 102.173914][ T5284] Bluetooth: hci0: command tx timeout [ 102.317656][ T5325] loop0: detected capacity change from 0 to 128 [ 102.466680][ T5326] loop0: detected capacity change from 128 to 0 [ 102.488365][ T37] I/O error, dev loop0, sector 1 op 0x1:(WRITE) flags 0x800000 phys_seg 1 prio class 2 [ 102.488509][ T37] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 102.498188][ T5325] ------------[ cut here ]------------ [ 102.498198][ T5325] !buffer_uptodate(bh) [ 102.498204][ T5325] WARNING: fs/buffer.c:991 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5325 [ 102.507442][ T5325] Modules linked in: [ 102.509719][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.513726][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.518411][ T5325] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 102.521080][ T5325] Code: 4c 89 f7 e8 69 fa d7 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 af 58 66 ff eb 8c e8 a8 58 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 9a 58 66 ff 90 0f 0b 90 e9 cf fd ff ff [ 102.529522][ T5325] RSP: 0018:ffffc9000e1cf438 EFLAGS: 00010283 [ 102.532159][ T5325] RAX: ffffffff8261c6f8 RBX: ffff888042a49380 RCX: 0000000000100000 [ 102.535427][ T5325] RDX: ffffc9000ea62000 RSI: 00000000000140d5 RDI: 00000000000140d6 [ 102.538815][ T5325] RBP: dffffc0000000001 R08: ffff888042a49387 R09: 1ffff11008549270 [ 102.542080][ T5325] R10: dffffc0000000000 R11: ffffed1008549271 R12: dffffc0000000000 [ 102.545371][ T5325] R13: 1ffff92001c39ebe R14: ffffc9000e1cf5f0 R15: ffff888042af8788 [ 102.548781][ T5325] FS: 00007f14ee9316c0(0000) GS:ffff88808c2bc000(0000) knlGS:0000000000000000 [ 102.552539][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.555388][ T5325] CR2: 00007f14e1801fd2 CR3: 0000000040748000 CR4: 0000000000352ef0 [ 102.561324][ T5325] Call Trace: [ 102.562678][ T5325] [ 102.564042][ T5325] mmb_mark_buffer_dirty+0x2c/0x1f0 [ 102.567737][ T5325] fat12_ent_put+0x1b7/0x2f0 [ 102.570154][ T5325] fat_ent_write+0xb8/0x190 [ 102.572201][ T5325] fat_chain_add+0x409/0x8e0 [ 102.574308][ T5325] ? __pfx_fat_chain_add+0x10/0x10 [ 102.576673][ T5325] ? clean_bdev_aliases+0x63f/0x750 [ 102.578993][ T5325] ? fat_bmap+0x487/0x5a0 [ 102.580967][ T5325] fat_get_block+0x768/0xae0 [ 102.583027][ T5325] ? __pfx_fat_get_block+0x10/0x10 [ 102.585201][ T5325] ? do_raw_spin_unlock+0x4d/0x200 [ 102.587567][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 102.589698][ T5325] ? create_empty_buffers+0x460/0x520 [ 102.592032][ T5325] __block_write_begin_int+0x6c2/0x1900 [ 102.594584][ T5325] ? __pfx_fat_get_block+0x10/0x10 [ 102.597004][ T5325] ? __pfx___block_write_begin_int+0x10/0x10 [ 102.599731][ T5325] cont_write_begin+0x71b/0xac0 [ 102.601980][ T5325] ? __pfx_cont_write_begin+0x10/0x10 [ 102.604295][ T5325] ? __pfx_unmap_mapping_range+0x10/0x10 [ 102.606964][ T5325] fat_write_begin+0x7a/0x150 [ 102.609045][ T5325] ? __pfx_fat_get_block+0x10/0x10 [ 102.611238][ T5325] generic_perform_write+0x2d5/0x8f0 [ 102.613489][ T5325] ? __pfx_generic_perform_write+0x10/0x10 [ 102.616061][ T5325] ? file_update_time_flags+0x3ab/0x440 [ 102.618416][ T5325] ? __generic_file_write_iter+0xf9/0x230 [ 102.621079][ T5325] ? generic_file_write_iter+0x9a/0x330 [ 102.623573][ T5325] generic_file_write_iter+0xae/0x330 [ 102.626101][ T5325] vfs_write+0x612/0xba0 [ 102.627989][ T5325] ? __pfx_vfs_write+0x10/0x10 [ 102.630143][ T5325] ? __fget_files+0x2a/0x420 [ 102.632219][ T5325] ksys_write+0x150/0x270 [ 102.634234][ T5325] ? __pfx_ksys_write+0x10/0x10 [ 102.636558][ T5325] do_syscall_64+0x166/0x520 [ 102.638687][ T5325] ? trace_irq_disable+0x3b/0x140 [ 102.640989][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.643750][ T5325] ? clear_bhb_loop+0x70/0xc0 [ 102.646015][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.648712][ T5325] RIP: 0033:0x7f14ed99e159 [ 102.650756][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.659398][ T5325] RSP: 002b:00007f14ee930fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.663211][ T5325] RAX: ffffffffffffffda RBX: 00007f14edc25fa0 RCX: 00007f14ed99e159 [ 102.666781][ T5325] RDX: 00000000fffffceb RSI: 00002000000001c0 RDI: 0000000000000006 [ 102.670626][ T5325] RBP: 00007f14eda3506b R08: 0000000000000000 R09: 0000000000000000 [ 102.674320][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.677886][ T5325] R13: 00007f14edc26038 R14: 00007f14edc25fa0 R15: 00007ffcefd5f248 [ 102.681470][ T5325] [ 102.682861][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.686102][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.689995][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.694476][ T5325] Call Trace: [ 102.695983][ T5325] [ 102.697362][ T5325] vpanic+0x56d/0xa60 [ 102.699188][ T5325] ? __pfx__printk+0x10/0x10 [ 102.701321][ T5325] ? __pfx_vpanic+0x10/0x10 [ 102.703401][ T5325] ? is_bpf_text_address+0x292/0x2b0 [ 102.705779][ T5325] ? is_bpf_text_address+0x26/0x2b0 [ 102.708125][ T5325] panic+0xc5/0xd0 [ 102.709863][ T5325] ? __pfx_panic+0x10/0x10 [ 102.711863][ T5325] __warn+0x315/0x4c0 [ 102.713607][ T5325] ? mark_buffer_dirty+0x299/0x410 [ 102.715869][ T5325] ? mark_buffer_dirty+0x299/0x410 [ 102.717989][ T5325] __report_bug+0x276/0x570 [ 102.719889][ T5325] ? __pfx___schedule+0x10/0x10 [ 102.721931][ T5325] ? mark_buffer_dirty+0x299/0x410 [ 102.724005][ T5325] ? __pfx___report_bug+0x10/0x10 [ 102.726099][ T5325] ? schedule+0x90/0x2b0 [ 102.727851][ T5325] ? __lock_acquire+0x747/0x2de0 [ 102.729801][ T5325] ? mark_buffer_dirty+0x299/0x410 [ 102.732023][ T5325] report_bug+0x16b/0x220 [ 102.733998][ T5325] ? mark_buffer_dirty+0x299/0x410 [ 102.736256][ T5325] ? mark_buffer_dirty+0x29b/0x410 [ 102.738435][ T5325] handle_bug+0x9c/0x200 [ 102.740311][ T5325] exc_invalid_op+0x1a/0x50 [ 102.742346][ T5325] asm_exc_invalid_op+0x1a/0x20 [ 102.744533][ T5325] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 102.747029][ T5325] Code: 4c 89 f7 e8 69 fa d7 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 af 58 66 ff eb 8c e8 a8 58 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 9a 58 66 ff 90 0f 0b 90 e9 cf fd ff ff [ 102.755380][ T5325] RSP: 0018:ffffc9000e1cf438 EFLAGS: 00010283 [ 102.758142][ T5325] RAX: ffffffff8261c6f8 RBX: ffff888042a49380 RCX: 0000000000100000 [ 102.761703][ T5325] RDX: ffffc9000ea62000 RSI: 00000000000140d5 RDI: 00000000000140d6 [ 102.765144][ T5325] RBP: dffffc0000000001 R08: ffff888042a49387 R09: 1ffff11008549270 [ 102.768702][ T5325] R10: dffffc0000000000 R11: ffffed1008549271 R12: dffffc0000000000 [ 102.772263][ T5325] R13: 1ffff92001c39ebe R14: ffffc9000e1cf5f0 R15: ffff888042af8788 [ 102.775798][ T5325] ? mark_buffer_dirty+0x298/0x410 [ 102.778109][ T5325] ? mark_buffer_dirty+0x298/0x410 [ 102.780402][ T5325] mmb_mark_buffer_dirty+0x2c/0x1f0 [ 102.782738][ T5325] fat12_ent_put+0x1b7/0x2f0 [ 102.784840][ T5325] fat_ent_write+0xb8/0x190 [ 102.786819][ T5325] fat_chain_add+0x409/0x8e0 [ 102.788790][ T5325] ? __pfx_fat_chain_add+0x10/0x10 [ 102.791091][ T5325] ? clean_bdev_aliases+0x63f/0x750 [ 102.793418][ T5325] ? fat_bmap+0x487/0x5a0 [ 102.795400][ T5325] fat_get_block+0x768/0xae0 [ 102.797516][ T5325] ? __pfx_fat_get_block+0x10/0x10 [ 102.799822][ T5325] ? do_raw_spin_unlock+0x4d/0x200 [ 102.802182][ T5325] ? _raw_spin_unlock+0x28/0x50 [ 102.804393][ T5325] ? create_empty_buffers+0x460/0x520 [ 102.806765][ T5325] __block_write_begin_int+0x6c2/0x1900 [ 102.809283][ T5325] ? __pfx_fat_get_block+0x10/0x10 [ 102.811591][ T5325] ? __pfx___block_write_begin_int+0x10/0x10 [ 102.814172][ T5325] cont_write_begin+0x71b/0xac0 [ 102.816332][ T5325] ? __pfx_cont_write_begin+0x10/0x10 [ 102.818768][ T5325] ? __pfx_unmap_mapping_range+0x10/0x10 [ 102.821324][ T5325] fat_write_begin+0x7a/0x150 [ 102.823453][ T5325] ? __pfx_fat_get_block+0x10/0x10 [ 102.825785][ T5325] generic_perform_write+0x2d5/0x8f0 [ 102.828201][ T5325] ? __pfx_generic_perform_write+0x10/0x10 [ 102.830886][ T5325] ? file_update_time_flags+0x3ab/0x440 [ 102.833402][ T5325] ? __generic_file_write_iter+0xf9/0x230 [ 102.835938][ T5325] ? generic_file_write_iter+0x9a/0x330 [ 102.838299][ T5325] generic_file_write_iter+0xae/0x330 [ 102.840674][ T5325] vfs_write+0x612/0xba0 [ 102.842580][ T5325] ? __pfx_vfs_write+0x10/0x10 [ 102.844777][ T5325] ? __fget_files+0x2a/0x420 [ 102.846754][ T5325] ksys_write+0x150/0x270 [ 102.848664][ T5325] ? __pfx_ksys_write+0x10/0x10 [ 102.850807][ T5325] do_syscall_64+0x166/0x520 [ 102.852934][ T5325] ? trace_irq_disable+0x3b/0x140 [ 102.855193][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.857880][ T5325] ? clear_bhb_loop+0x70/0xc0 [ 102.860011][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.862685][ T5325] RIP: 0033:0x7f14ed99e159 [ 102.864708][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.872902][ T5325] RSP: 002b:00007f14ee930fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.876129][ T5325] RAX: ffffffffffffffda RBX: 00007f14edc25fa0 RCX: 00007f14ed99e159 [ 102.879482][ T5325] RDX: 00000000fffffceb RSI: 00002000000001c0 RDI: 0000000000000006 [ 102.882999][ T5325] RBP: 00007f14eda3506b R08: 0000000000000000 R09: 0000000000000000 [ 102.886461][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.889968][ T5325] R13: 00007f14edc26038 R14: 00007f14edc25fa0 R15: 00007ffcefd5f248 [ 102.893045][ T5325] [ 102.896373][ T5325] Kernel Offset: disabled [ 102.898228][ T5325] Rebooting in 86400 seconds..