program: r0 = syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xaf, &(0x7f0000000380)="$eJzs1zFKA0EABdDvCmprI4KF9TbewaOIpTZipQjeIOQiuUqOsH2KFNuGkAnJbgghqVKkWN4rBv58Bqb908XkaVwn5T8p9ePXrOx9//x+vH12ZxikKsltkrskz/ddnr923VXfN+3fe9NeHz++GV38vwAAwPmqvBzmVekvlv0K3E6Dh12/CTkxBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGah0AAP//ghMolg==") ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000080)={0x9, 0x7}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x96) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000008c0), 0xfecc) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000440)={{@_ha_fsid={[0x6, 0x8]}, {0x200, 0xdf, 0x7fff, 0x6}}, {{[0x5, 0x6, 0x0, 0x5]}, 0x0, 0x3, 0x0, 0x0, &(0x7f0000000480)=[{{@align=0x9, {0x71, 0x9, 0xfffffffc, 0x2}}, 0xb43f, 0x0, 'd]#\xa4\x00'}, {{@_ha_fsid={[0x10, 0x7]}, {0x3, 0x400, 0x927d, 0xff8}}, 0xbd, 0x0, 'rdma.current\x00;\xd4\x1c\x1a\'\xb1&\x18\x04\xc3\x81\x05;\xe5\xe2\x10\x86\x11\xfc\x17\x94\xa8\xd7\xe7\xe0A\xcf\xaa\xa5\x86\xcbl'}, {{@align=0xec1, {0x2, 0x4, 0x505, 0x1}}, 0x3, 0x0, '#! '}, {{@align=0x80000000, {0x6, 0x3, 0x2, 0x2}}, 0x3, 0x0, '*\x00'}, {{@align=0x44e, {0x7, 0x1, 0x10000, 0x5fe6}}, 0x7, 0x0, 'bfs\x00'}, {{@_ha_fsid={[0x3a, 0x4]}, {0x3, 0x6, 0x9, 0x7}}, 0x8, 0x0, 'bfs\x00'}]}}) [ 74.735641][ T5292] Bluetooth: hci0: command tx timeout [ 74.801297][ T5329] loop0: detected capacity change from 0 to 64 [ 74.900973][ T5329] ------------[ cut here ]------------ [ 74.903524][ T5329] !buffer_uptodate(bh) [ 74.903536][ T5329] WARNING: fs/buffer.c:1087 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5329 [ 74.909219][ T5329] Modules linked in: [ 74.911407][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.915777][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.920402][ T5329] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 74.923083][ T5329] Code: 4c 89 f7 e8 89 68 da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 64 63 fb ff e8 2f 82 6d ff eb 8c e8 28 82 6d ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 1a 82 6d ff 90 0f 0b 90 e9 cf fd ff ff [ 74.931750][ T5329] RSP: 0018:ffffc9000e07f608 EFLAGS: 00010293 [ 74.934781][ T5329] RAX: ffffffff825844e8 RBX: ffff88801ccc1910 RCX: ffff888000a6ca80 [ 74.938620][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 74.942307][ T5329] RBP: ffff88801abf4001 R08: ffff88801ccc1917 R09: 1ffff11003998322 [ 74.946201][ T5329] R10: dffffc0000000000 R11: ffffed1003998323 R12: ffff88801fc62400 [ 74.949862][ T5329] R13: ffff88800baf49f8 R14: ffff88801ccc1910 R15: 000000000000000a [ 74.953287][ T5329] FS: 00007fbc4a5426c0(0000) GS:ffff88808c894000(0000) knlGS:0000000000000000 [ 74.956744][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.959377][ T5329] CR2: 0000200000001000 CR3: 0000000012e62000 CR4: 0000000000352ef0 [ 74.963079][ T5329] Call Trace: [ 74.964684][ T5329] [ 74.965935][ T5329] bfs_get_block+0x5da/0xae0 [ 74.967929][ T5329] __block_write_begin_int+0x6c6/0x1910 [ 74.970290][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 74.972520][ T5329] ? __pfx___block_write_begin_int+0x10/0x10 [ 74.975096][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 74.977057][ T5329] block_write_begin+0x8d/0x120 [ 74.979092][ T5329] ? bfs_write_begin+0x1e/0xd0 [ 74.981037][ T5329] bfs_write_begin+0x35/0xd0 [ 74.982990][ T5329] generic_perform_write+0x2e2/0x8f0 [ 74.985091][ T5329] ? __pfx_generic_perform_write+0x10/0x10 [ 74.987456][ T5329] ? file_update_time_flags+0x219/0x4a0 [ 74.989831][ T5329] ? __generic_file_write_iter+0xf9/0x230 [ 74.992341][ T5329] ? generic_file_write_iter+0x136/0x680 [ 74.994770][ T5329] generic_file_write_iter+0x14a/0x680 [ 74.996933][ T5329] ? __pfx_generic_file_write_iter+0x10/0x10 [ 74.999324][ T5329] ? __lock_acquire+0x6b5/0x2cf0 [ 75.001445][ T5329] ? __pfx_aa_file_perm+0x10/0x10 [ 75.003711][ T5329] ? __pfx_futex_wake_mark+0x10/0x10 [ 75.005911][ T5329] ? vfs_write+0x227/0xb90 [ 75.007651][ T5329] ? vfs_write+0x227/0xb90 [ 75.009477][ T5329] vfs_write+0x61d/0xb90 [ 75.011330][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 75.013417][ T5329] ? __fget_files+0x2a/0x420 [ 75.015066][ T5329] __x64_sys_pwrite64+0x199/0x230 [ 75.017045][ T5329] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 75.019409][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.022017][ T5329] do_syscall_64+0x174/0x580 [ 75.024165][ T5329] ? trace_irq_disable+0x3b/0x140 [ 75.026230][ T5329] ? clear_bhb_loop+0x40/0x90 [ 75.028201][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.030689][ T5329] RIP: 0033:0x7fbc4959ce59 [ 75.033307][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.040829][ T5329] RSP: 002b:00007fbc4a541fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 75.044270][ T5329] RAX: ffffffffffffffda RBX: 00007fbc49815fa0 RCX: 00007fbc4959ce59 [ 75.047307][ T5329] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 75.050179][ T5329] RBP: 00007fbc49632d6f R08: 0000000000000000 R09: 0000000000000000 [ 75.053382][ T5329] R10: 0000000000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 75.056434][ T5329] R13: 00007fbc49816038 R14: 00007fbc49815fa0 R15: 00007fff82cda0f8 [ 75.059741][ T5329] [ 75.061090][ T5329] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.064094][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.067817][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.071958][ T5329] Call Trace: [ 75.073385][ T5329] [ 75.074582][ T5329] vpanic+0x56c/0xa60 [ 75.076199][ T5329] ? __pfx__printk+0x10/0x10 [ 75.078123][ T5329] ? __pfx_vpanic+0x10/0x10 [ 75.079924][ T5329] ? is_bpf_text_address+0x292/0x2b0 [ 75.081965][ T5329] ? is_bpf_text_address+0x26/0x2b0 [ 75.083948][ T5329] panic+0xc5/0xd0 [ 75.085410][ T5329] ? __pfx_panic+0x10/0x10 [ 75.087169][ T5329] __warn+0x315/0x4c0 [ 75.088813][ T5329] ? mark_buffer_dirty+0x299/0x410 [ 75.090948][ T5329] ? mark_buffer_dirty+0x299/0x410 [ 75.093408][ T5329] __report_bug+0x29a/0x540 [ 75.095452][ T5329] ? filemap_get_entry+0xcd/0x3f0 [ 75.097867][ T5329] ? filemap_get_entry+0xcd/0x3f0 [ 75.099971][ T5329] ? mark_buffer_dirty+0x299/0x410 [ 75.102457][ T5329] ? __pfx___report_bug+0x10/0x10 [ 75.104568][ T5329] ? __pfx_folio_mark_accessed+0x10/0x10 [ 75.106846][ T5329] ? mark_buffer_dirty+0x299/0x410 [ 75.109015][ T5329] report_bug+0x16a/0x220 [ 75.110883][ T5329] ? mark_buffer_dirty+0x299/0x410 [ 75.113086][ T5329] ? mark_buffer_dirty+0x29b/0x410 [ 75.115061][ T5329] handle_bug+0x9c/0x200 [ 75.116670][ T5329] exc_invalid_op+0x1a/0x50 [ 75.118540][ T5329] asm_exc_invalid_op+0x1a/0x20 [ 75.120564][ T5329] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 75.122767][ T5329] Code: 4c 89 f7 e8 89 68 da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 64 63 fb ff e8 2f 82 6d ff eb 8c e8 28 82 6d ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 1a 82 6d ff 90 0f 0b 90 e9 cf fd ff ff [ 75.130497][ T5329] RSP: 0018:ffffc9000e07f608 EFLAGS: 00010293 [ 75.132858][ T5329] RAX: ffffffff825844e8 RBX: ffff88801ccc1910 RCX: ffff888000a6ca80 [ 75.136011][ T5329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 75.139311][ T5329] RBP: ffff88801abf4001 R08: ffff88801ccc1917 R09: 1ffff11003998322 [ 75.142840][ T5329] R10: dffffc0000000000 R11: ffffed1003998323 R12: ffff88801fc62400 [ 75.146135][ T5329] R13: ffff88800baf49f8 R14: ffff88801ccc1910 R15: 000000000000000a [ 75.149512][ T5329] ? mark_buffer_dirty+0x298/0x410 [ 75.151680][ T5329] ? mark_buffer_dirty+0x298/0x410 [ 75.153794][ T5329] bfs_get_block+0x5da/0xae0 [ 75.155812][ T5329] __block_write_begin_int+0x6c6/0x1910 [ 75.158037][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 75.160044][ T5329] ? __pfx___block_write_begin_int+0x10/0x10 [ 75.162452][ T5329] ? __pfx_bfs_get_block+0x10/0x10 [ 75.164784][ T5329] block_write_begin+0x8d/0x120 [ 75.167428][ T5329] ? bfs_write_begin+0x1e/0xd0 [ 75.169978][ T5329] bfs_write_begin+0x35/0xd0 [ 75.172133][ T5329] generic_perform_write+0x2e2/0x8f0 [ 75.174183][ T5329] ? __pfx_generic_perform_write+0x10/0x10 [ 75.176560][ T5329] ? file_update_time_flags+0x219/0x4a0 [ 75.178941][ T5329] ? __generic_file_write_iter+0xf9/0x230 [ 75.181250][ T5329] ? generic_file_write_iter+0x136/0x680 [ 75.183575][ T5329] generic_file_write_iter+0x14a/0x680 [ 75.185935][ T5329] ? __pfx_generic_file_write_iter+0x10/0x10 [ 75.188566][ T5329] ? __lock_acquire+0x6b5/0x2cf0 [ 75.190652][ T5329] ? __pfx_aa_file_perm+0x10/0x10 [ 75.192780][ T5329] ? __pfx_futex_wake_mark+0x10/0x10 [ 75.194975][ T5329] ? vfs_write+0x227/0xb90 [ 75.196885][ T5329] ? vfs_write+0x227/0xb90 [ 75.198708][ T5329] vfs_write+0x61d/0xb90 [ 75.200497][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 75.202536][ T5329] ? __fget_files+0x2a/0x420 [ 75.204594][ T5329] __x64_sys_pwrite64+0x199/0x230 [ 75.206632][ T5329] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 75.208933][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.211511][ T5329] do_syscall_64+0x174/0x580 [ 75.213512][ T5329] ? trace_irq_disable+0x3b/0x140 [ 75.215688][ T5329] ? clear_bhb_loop+0x40/0x90 [ 75.217754][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.220215][ T5329] RIP: 0033:0x7fbc4959ce59 [ 75.222124][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.230107][ T5329] RSP: 002b:00007fbc4a541fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 75.233945][ T5329] RAX: ffffffffffffffda RBX: 00007fbc49815fa0 RCX: 00007fbc4959ce59 [ 75.237374][ T5329] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 75.240703][ T5329] RBP: 00007fbc49632d6f R08: 0000000000000000 R09: 0000000000000000 [ 75.244053][ T5329] R10: 0000000000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 75.247390][ T5329] R13: 00007fbc49816038 R14: 00007fbc49815fa0 R15: 00007fff82cda0f8 [ 75.250586][ T5329] [ 75.252282][ T5329] Kernel Offset: disabled [ 75.254042][ T5329] Rebooting in 86400 seconds..