program: mkdir(0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, 0x0, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4ca, &(0x7f0000000540)="$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") sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14, &(0x7f0000000440)={&(0x7f0000000340)="c2d56fb4c28e0d8f1bff8d33e4f2989c29e770507f4a4393ed906a3b0f6525fbf340876d78e2c33ced88b01469e5f11b9dcd216ccdb037470cb279de2acd743ebb74dba289c10d24b77b6940ba6c1473b09830450988210562b74d9668be58a1ab7b6805b65293023b7dfd6778a2babdd2b303e34ea5fbe042c92784483cb0332b21a1c0d352a1d252de9a5a1aae20dea9d76a13992e99969b78f4cc692c0eb91b42f8c887826810aaf3ef6e61", 0xad}, 0x1, 0x0, 0x0, 0x8080}, 0x20000040) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000200)=""/125) r4 = open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x2) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x6, 0x8000) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000000)={0x1}) ftruncate(r5, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r4, 0x1000000) getsockname$packet(r4, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r9, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r8, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) [ 101.423226][ T5330] loop0: detected capacity change from 0 to 512 [ 101.432289][ T44] Bluetooth: hci0: command tx timeout [ 101.593046][ T5330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.602982][ T5330] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.715008][ T5331] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.0: bg 0: block 434: padding at end of block bitmap is not set [ 101.749131][ T1140] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 96 with error 28 [ 101.785502][ T1140] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.785502][ T1140] [ 101.798552][ T1140] EXT4-fs (loop0): Total free blocks count 0 [ 101.809030][ T1140] EXT4-fs (loop0): Free/Dirty block details [ 101.816452][ T1140] EXT4-fs (loop0): free_blocks=0 [ 101.824495][ T1140] EXT4-fs (loop0): dirty_blocks=96 [ 101.833496][ T1140] EXT4-fs (loop0): Block reservation details [ 101.845152][ T1140] EXT4-fs (loop0): i_reserved_data_blocks=96 [ 101.854217][ T5331] ------------[ cut here ]------------ [ 101.856665][ T5331] !folio_buffers(folio) [ 101.856678][ T5331] WARNING: fs/ext4/inode.c:3938 at ext4_dirty_folio+0x167/0x1b0, CPU#0: syz.0.0/5331 [ 101.862565][ T5331] Modules linked in: [ 101.864333][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 101.867877][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.873027][ T5331] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 101.875781][ T5331] Code: 4f ec a7 ff 49 83 3f 00 74 1a e8 b4 1a 3b ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 93 cd ff e8 9a 1a 3b ff 90 <0f> 0b 90 eb e0 e8 8f 1a 3b ff 90 0f 0b 90 eb a7 e8 84 1a 3b ff 48 [ 101.884502][ T5331] RSP: 0018:ffffc90006cd7520 EFLAGS: 00010283 [ 101.887306][ T5331] RAX: ffffffff828aaac6 RBX: ffffea00008fa0c0 RCX: 0000000000100000 [ 101.890706][ T5331] RDX: ffffc90021003000 RSI: 0000000000008196 RDI: 0000000000008197 [ 101.894199][ T5331] RBP: 1ffffd400011f418 R08: ffffea00008fa0c7 R09: 1ffffd400011f418 [ 101.897811][ T5331] R10: dffffc0000000000 R11: fffff9400011f419 R12: ffff888046e20db0 [ 101.901179][ T5331] R13: 1ffffd400011f419 R14: 0000000000000001 R15: ffffea00008fa0e8 [ 101.904665][ T5331] FS: 00007f325d1946c0(0000) GS:ffff88808c87b000(0000) knlGS:0000000000000000 [ 101.908585][ T5331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.911558][ T5331] CR2: 00007f325d173000 CR3: 0000000011dd5000 CR4: 0000000000352ef0 [ 101.914947][ T5331] Call Trace: [ 101.916743][ T5331] [ 101.918491][ T5331] bio_set_pages_dirty+0x38e/0xaa0 [ 101.920815][ T5331] __blkdev_direct_IO+0x859/0xfa0 [ 101.922964][ T5331] ? __pfx_aio_complete_rw+0x10/0x10 [ 101.925482][ T5331] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 101.927990][ T5331] blkdev_direct_IO+0x121a/0x1790 [ 101.930773][ T5331] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.933643][ T5331] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 101.936567][ T5331] ? reacquire_held_locks+0x104/0x190 [ 101.938988][ T5331] ? __mark_inode_dirty+0x6ec/0x13b0 [ 101.941349][ T5331] ? blkdev_read_iter+0x210/0x440 [ 101.943759][ T5331] ? touch_atime+0x379/0x6b0 [ 101.945883][ T5331] ? blkdev_read_iter+0x210/0x440 [ 101.948514][ T5331] blkdev_read_iter+0x23d/0x440 [ 101.950621][ T5331] aio_read+0x33a/0x4d0 [ 101.952526][ T5331] ? __pfx_aio_read+0x10/0x10 [ 101.954669][ T5331] ? __might_fault+0xaf/0x130 [ 101.956755][ T5331] io_submit_one+0x79d/0x14c0 [ 101.960554][ T5331] ? irqentry_exit+0x218/0x760 [ 101.962829][ T5331] ? __pfx_io_submit_one+0x10/0x10 [ 101.965526][ T5331] ? __might_fault+0xaf/0x130 [ 101.967913][ T5331] ? __might_fault+0xaf/0x130 [ 101.970187][ T5331] __se_sys_io_submit+0x195/0x340 [ 101.972704][ T5331] ? __pfx___se_sys_io_submit+0x10/0x10 [ 101.975545][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.978289][ T5331] do_syscall_64+0x15f/0x560 [ 101.980290][ T5331] ? trace_irq_disable+0x3b/0x140 [ 101.982554][ T5331] ? clear_bhb_loop+0x40/0x90 [ 101.984800][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.987452][ T5331] RIP: 0033:0x7f325c39ce59 [ 101.989437][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.997926][ T5331] RSP: 002b:00007f325d193fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 102.001668][ T5331] RAX: ffffffffffffffda RBX: 00007f325c616090 RCX: 00007f325c39ce59 [ 102.005303][ T5331] RDX: 00002000000000c0 RSI: 00000000000000ca RDI: 00007f325d173000 [ 102.008967][ T5331] RBP: 00007f325c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 102.012427][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.016255][ T5331] R13: 00007f325c616128 R14: 00007f325c616090 R15: 00007ffe59573e98 [ 102.019928][ T5331] [ 102.021462][ T5331] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.024739][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.028866][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.033390][ T5331] Call Trace: [ 102.034935][ T5331] [ 102.036385][ T5331] vpanic+0x56c/0xa60 [ 102.038245][ T5331] ? __pfx__printk+0x10/0x10 [ 102.040340][ T5331] ? __pfx_vpanic+0x10/0x10 [ 102.042422][ T5331] ? is_bpf_text_address+0x292/0x2b0 [ 102.044849][ T5331] ? is_bpf_text_address+0x26/0x2b0 [ 102.046980][ T5331] panic+0xc5/0xd0 [ 102.048571][ T5331] ? __pfx_panic+0x10/0x10 [ 102.050474][ T5331] __warn+0x315/0x4c0 [ 102.051873][ T5331] ? ext4_dirty_folio+0x167/0x1b0 [ 102.053690][ T5331] ? ext4_dirty_folio+0x167/0x1b0 [ 102.055787][ T5331] __report_bug+0x29a/0x540 [ 102.057581][ T5331] ? ext4_dirty_folio+0x167/0x1b0 [ 102.059559][ T5331] ? __pfx___report_bug+0x10/0x10 [ 102.062149][ T5331] ? folio_wait_bit_common+0xa03/0xbc0 [ 102.064923][ T5331] ? blkg_tryget+0x20/0x250 [ 102.067373][ T5331] ? is_valid_gup_args+0x11f/0x200 [ 102.070104][ T5331] ? ext4_dirty_folio+0x167/0x1b0 [ 102.072866][ T5331] report_bug+0x16a/0x220 [ 102.075211][ T5331] ? ext4_dirty_folio+0x167/0x1b0 [ 102.077844][ T5331] ? ext4_dirty_folio+0x169/0x1b0 [ 102.080441][ T5331] handle_bug+0x9c/0x200 [ 102.082293][ T5331] exc_invalid_op+0x1a/0x50 [ 102.084208][ T5331] asm_exc_invalid_op+0x1a/0x20 [ 102.086368][ T5331] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 102.088840][ T5331] Code: 4f ec a7 ff 49 83 3f 00 74 1a e8 b4 1a 3b ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 93 cd ff e8 9a 1a 3b ff 90 <0f> 0b 90 eb e0 e8 8f 1a 3b ff 90 0f 0b 90 eb a7 e8 84 1a 3b ff 48 [ 102.096876][ T5331] RSP: 0018:ffffc90006cd7520 EFLAGS: 00010283 [ 102.099344][ T5331] RAX: ffffffff828aaac6 RBX: ffffea00008fa0c0 RCX: 0000000000100000 [ 102.102567][ T5331] RDX: ffffc90021003000 RSI: 0000000000008196 RDI: 0000000000008197 [ 102.105801][ T5331] RBP: 1ffffd400011f418 R08: ffffea00008fa0c7 R09: 1ffffd400011f418 [ 102.109064][ T5331] R10: dffffc0000000000 R11: fffff9400011f419 R12: ffff888046e20db0 [ 102.112453][ T5331] R13: 1ffffd400011f419 R14: 0000000000000001 R15: ffffea00008fa0e8 [ 102.115999][ T5331] ? ext4_dirty_folio+0x166/0x1b0 [ 102.118228][ T5331] bio_set_pages_dirty+0x38e/0xaa0 [ 102.120463][ T5331] __blkdev_direct_IO+0x859/0xfa0 [ 102.122623][ T5331] ? __pfx_aio_complete_rw+0x10/0x10 [ 102.125151][ T5331] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 102.127642][ T5331] blkdev_direct_IO+0x121a/0x1790 [ 102.129907][ T5331] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.132126][ T5331] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 102.134590][ T5331] ? reacquire_held_locks+0x104/0x190 [ 102.137047][ T5331] ? __mark_inode_dirty+0x6ec/0x13b0 [ 102.139308][ T5331] ? blkdev_read_iter+0x210/0x440 [ 102.141499][ T5331] ? touch_atime+0x379/0x6b0 [ 102.143580][ T5331] ? blkdev_read_iter+0x210/0x440 [ 102.145907][ T5331] blkdev_read_iter+0x23d/0x440 [ 102.147996][ T5331] aio_read+0x33a/0x4d0 [ 102.149843][ T5331] ? __pfx_aio_read+0x10/0x10 [ 102.151879][ T5331] ? __might_fault+0xaf/0x130 [ 102.154012][ T5331] io_submit_one+0x79d/0x14c0 [ 102.156132][ T5331] ? irqentry_exit+0x218/0x760 [ 102.158633][ T5331] ? __pfx_io_submit_one+0x10/0x10 [ 102.161333][ T5331] ? __might_fault+0xaf/0x130 [ 102.163219][ T5331] ? __might_fault+0xaf/0x130 [ 102.165400][ T5331] __se_sys_io_submit+0x195/0x340 [ 102.167639][ T5331] ? __pfx___se_sys_io_submit+0x10/0x10 [ 102.170071][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.172756][ T5331] do_syscall_64+0x15f/0x560 [ 102.174829][ T5331] ? trace_irq_disable+0x3b/0x140 [ 102.177123][ T5331] ? clear_bhb_loop+0x40/0x90 [ 102.179232][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.181861][ T5331] RIP: 0033:0x7f325c39ce59 [ 102.183859][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.192208][ T5331] RSP: 002b:00007f325d193fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 102.195872][ T5331] RAX: ffffffffffffffda RBX: 00007f325c616090 RCX: 00007f325c39ce59 [ 102.199355][ T5331] RDX: 00002000000000c0 RSI: 00000000000000ca RDI: 00007f325d173000 [ 102.202886][ T5331] RBP: 00007f325c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 102.206505][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.210055][ T5331] R13: 00007f325c616128 R14: 00007f325c616090 R15: 00007ffe59573e98 [ 102.213665][ T5331] [ 102.215488][ T5331] Kernel Offset: disabled [ 102.217382][ T5331] Rebooting in 86400 seconds..