program: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f0000000140), 0x2, 0x786, &(0x7f0000000840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x80342, 0x168) pwrite64(r1, &(0x7f0000001040)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000010c0)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001100), 0x4000000004882, 0x0) io_setup(0x2, &(0x7f0000001140)=0x0) io_submit(r4, 0xca, &(0x7f0000001180)=[&(0x7f00000011c0)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000001200)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) [ 75.635197][ T5334] loop0: detected capacity change from 0 to 2048 [ 75.715207][ T5334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.807545][ T5334] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 75.819617][ T5334] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 75.819638][ T5334] EXT4-fs (loop0): This should not happen!! Data will be lost [ 75.819638][ T5334] [ 75.819648][ T5334] EXT4-fs (loop0): Total free blocks count 0 [ 75.819656][ T5334] EXT4-fs (loop0): Free/Dirty block details [ 75.819680][ T5334] EXT4-fs (loop0): free_blocks=4096 [ 75.819699][ T5334] EXT4-fs (loop0): dirty_blocks=64 [ 75.819733][ T5334] EXT4-fs (loop0): Block reservation details [ 75.819741][ T5334] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 75.872113][ T45] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 14 with error 28 [ 75.906865][ T5334] ------------[ cut here ]------------ [ 75.906877][ T5334] !folio_buffers(folio) [ 75.906882][ T5334] WARNING: fs/ext4/inode.c:4556 at ext4_dirty_folio+0x167/0x1b0, CPU#0: syz.0.0/5334 [ 75.916624][ T5334] Modules linked in: [ 75.918918][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.923269][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.927846][ T5334] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 75.930504][ T5334] Code: 7f a3 a3 ff 49 83 3f 00 74 1a e8 c4 9d 2a ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3f 16 cc ff e8 aa 9d 2a ff 90 <0f> 0b 90 eb e0 e8 9f 9d 2a ff 90 0f 0b 90 eb a7 e8 94 9d 2a ff 48 [ 75.938953][ T5334] RSP: 0018:ffffc9000dd57508 EFLAGS: 00010283 [ 75.941590][ T5334] RAX: ffffffff829e82f6 RBX: ffffea00008fd100 RCX: 0000000000100000 [ 75.945056][ T5334] RDX: ffffc9000ef2a000 RSI: 000000000000625c RDI: 000000000000625d [ 75.948699][ T5334] RBP: 1ffffd400011fa20 R08: ffffea00008fd107 R09: 1ffffd400011fa20 [ 75.952203][ T5334] R10: dffffc0000000000 R11: fffff9400011fa21 R12: ffff888045c49678 [ 75.955603][ T5334] R13: 1ffffd400011fa21 R14: 0000000000000001 R15: ffffea00008fd128 [ 75.958987][ T5334] FS: 00007fab5dece6c0(0000) GS:ffff88808a9fe000(0000) knlGS:0000000000000000 [ 75.962664][ T5334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.965333][ T5334] CR2: 00005636283eedb0 CR3: 0000000013a5e000 CR4: 0000000000352ef0 [ 75.968932][ T5334] Call Trace: [ 75.970389][ T5334] [ 75.971737][ T5334] bio_set_pages_dirty+0x36d/0xa70 [ 75.974009][ T5334] __blkdev_direct_IO+0x92d/0x1100 [ 75.976320][ T5334] ? __pfx_aio_complete_rw+0x10/0x10 [ 75.978813][ T5334] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 75.981265][ T5334] ? __lock_acquire+0x747/0x2de0 [ 75.983550][ T5334] blkdev_direct_IO+0x770/0x1840 [ 75.986106][ T5334] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 75.988839][ T5334] ? reacquire_held_locks+0x117/0x1a0 [ 75.991180][ T5334] ? __mark_inode_dirty+0x705/0x13b0 [ 75.993487][ T5334] ? blkdev_read_iter+0x228/0x590 [ 75.995631][ T5334] ? touch_atime+0x37c/0x670 [ 75.997830][ T5334] ? blkdev_read_iter+0x228/0x590 [ 76.000514][ T5334] blkdev_read_iter+0x249/0x590 [ 76.002889][ T5334] aio_read+0x33a/0x4d0 [ 76.004854][ T5334] ? __pfx_aio_read+0x10/0x10 [ 76.007032][ T5334] io_submit_one+0x774/0x13d0 [ 76.010619][ T5334] ? lockdep_hardirqs_on+0x7b/0x110 [ 76.013138][ T5334] ? irqentry_exit+0x2a0/0x9b0 [ 76.015402][ T5334] ? __pfx_io_submit_one+0x10/0x10 [ 76.017638][ T5334] ? lock_acquire+0x115/0x350 [ 76.020015][ T5334] ? __might_fault+0xaf/0x130 [ 76.022395][ T5334] __se_sys_io_submit+0x195/0x340 [ 76.024642][ T5334] ? __pfx___se_sys_io_submit+0x10/0x10 [ 76.027082][ T5334] do_syscall_64+0x166/0x520 [ 76.029288][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.031658][ T5334] ? clear_bhb_loop+0x70/0xc0 [ 76.033480][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.035805][ T5334] RIP: 0033:0x7fab5cf9fb19 [ 76.037556][ T5334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.045298][ T5334] RSP: 002b:00007fab5decdfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 76.049217][ T5334] RAX: ffffffffffffffda RBX: 00007fab5d225fa0 RCX: 00007fab5cf9fb19 [ 76.052446][ T5334] RDX: 0000200000001180 RSI: 00000000000000ca RDI: 00007fab5de8c000 [ 76.055850][ T5334] RBP: 00007fab5d037b70 R08: 0000000000000000 R09: 0000000000000000 [ 76.059506][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.062985][ T5334] R13: 00007fab5d226038 R14: 00007fab5d225fa0 R15: 00007ffc385207e8 [ 76.066431][ T5334] [ 76.067792][ T5334] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.070821][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.074594][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.078897][ T5334] Call Trace: [ 76.080302][ T5334] [ 76.081591][ T5334] vpanic+0x26f/0x710 [ 76.083314][ T5334] panic+0xc5/0xd0 [ 76.084931][ T5334] ? __pfx_panic+0x10/0x10 [ 76.086782][ T5334] __warn+0x315/0x4c0 [ 76.088563][ T5334] ? ext4_dirty_folio+0x167/0x1b0 [ 76.090748][ T5334] ? ext4_dirty_folio+0x167/0x1b0 [ 76.092853][ T5334] __report_bug+0x276/0x570 [ 76.094888][ T5334] ? ext4_dirty_folio+0x167/0x1b0 [ 76.097113][ T5334] ? __pfx___report_bug+0x10/0x10 [ 76.099275][ T5334] ? is_valid_gup_args+0x11f/0x200 [ 76.101588][ T5334] ? pin_user_pages_fast+0x4d/0xb0 [ 76.103919][ T5334] ? iov_iter_extract_pages+0x496/0x690 [ 76.106435][ T5334] ? ext4_dirty_folio+0x167/0x1b0 [ 76.108632][ T5334] report_bug+0x16b/0x220 [ 76.110489][ T5334] ? ext4_dirty_folio+0x167/0x1b0 [ 76.112587][ T5334] ? ext4_dirty_folio+0x169/0x1b0 [ 76.114508][ T5334] handle_bug+0x9c/0x200 [ 76.116402][ T5334] exc_invalid_op+0x1a/0x50 [ 76.118418][ T5334] asm_exc_invalid_op+0x1a/0x20 [ 76.120532][ T5334] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 76.122933][ T5334] Code: 7f a3 a3 ff 49 83 3f 00 74 1a e8 c4 9d 2a ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3f 16 cc ff e8 aa 9d 2a ff 90 <0f> 0b 90 eb e0 e8 9f 9d 2a ff 90 0f 0b 90 eb a7 e8 94 9d 2a ff 48 [ 76.130943][ T5334] RSP: 0018:ffffc9000dd57508 EFLAGS: 00010283 [ 76.133548][ T5334] RAX: ffffffff829e82f6 RBX: ffffea00008fd100 RCX: 0000000000100000 [ 76.136750][ T5334] RDX: ffffc9000ef2a000 RSI: 000000000000625c RDI: 000000000000625d [ 76.140035][ T5334] RBP: 1ffffd400011fa20 R08: ffffea00008fd107 R09: 1ffffd400011fa20 [ 76.143174][ T5334] R10: dffffc0000000000 R11: fffff9400011fa21 R12: ffff888045c49678 [ 76.146265][ T5334] R13: 1ffffd400011fa21 R14: 0000000000000001 R15: ffffea00008fd128 [ 76.149296][ T5334] ? ext4_dirty_folio+0x166/0x1b0 [ 76.151322][ T5334] ? ext4_dirty_folio+0x166/0x1b0 [ 76.153291][ T5334] bio_set_pages_dirty+0x36d/0xa70 [ 76.155417][ T5334] __blkdev_direct_IO+0x92d/0x1100 [ 76.157566][ T5334] ? __pfx_aio_complete_rw+0x10/0x10 [ 76.159846][ T5334] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 76.162271][ T5334] ? __lock_acquire+0x747/0x2de0 [ 76.164487][ T5334] blkdev_direct_IO+0x770/0x1840 [ 76.166645][ T5334] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 76.169056][ T5334] ? reacquire_held_locks+0x117/0x1a0 [ 76.171375][ T5334] ? __mark_inode_dirty+0x705/0x13b0 [ 76.173754][ T5334] ? blkdev_read_iter+0x228/0x590 [ 76.175915][ T5334] ? touch_atime+0x37c/0x670 [ 76.177996][ T5334] ? blkdev_read_iter+0x228/0x590 [ 76.180187][ T5334] blkdev_read_iter+0x249/0x590 [ 76.182283][ T5334] aio_read+0x33a/0x4d0 [ 76.184177][ T5334] ? __pfx_aio_read+0x10/0x10 [ 76.186200][ T5334] io_submit_one+0x774/0x13d0 [ 76.188309][ T5334] ? lockdep_hardirqs_on+0x7b/0x110 [ 76.190563][ T5334] ? irqentry_exit+0x2a0/0x9b0 [ 76.192633][ T5334] ? __pfx_io_submit_one+0x10/0x10 [ 76.194660][ T5334] ? lock_acquire+0x115/0x350 [ 76.196697][ T5334] ? __might_fault+0xaf/0x130 [ 76.198797][ T5334] __se_sys_io_submit+0x195/0x340 [ 76.201076][ T5334] ? __pfx___se_sys_io_submit+0x10/0x10 [ 76.203498][ T5334] do_syscall_64+0x166/0x520 [ 76.205547][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.208267][ T5334] ? clear_bhb_loop+0x70/0xc0 [ 76.210393][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.213007][ T5334] RIP: 0033:0x7fab5cf9fb19 [ 76.214986][ T5334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.223109][ T5334] RSP: 002b:00007fab5decdfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 76.226748][ T5334] RAX: ffffffffffffffda RBX: 00007fab5d225fa0 RCX: 00007fab5cf9fb19 [ 76.230129][ T5334] RDX: 0000200000001180 RSI: 00000000000000ca RDI: 00007fab5de8c000 [ 76.233656][ T5334] RBP: 00007fab5d037b70 R08: 0000000000000000 R09: 0000000000000000 [ 76.237058][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.240390][ T5334] R13: 00007fab5d226038 R14: 00007fab5d225fa0 R15: 00007ffc385207e8 [ 76.243864][ T5334] [ 76.245627][ T5334] Kernel Offset: disabled [ 76.247388][ T5334] Rebooting in 86400 seconds..