program: syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x28}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x2020007, 0x0, 0x200000, 0xd, "22536af39b7c7cb7435b0a43852dbc3a9ada34cc97af10fd4fcca15748328c53096c2f359e9ba743d30b59c491a7b3e74d938981061383374a1d79471a2d2dfe", "041091917d72322c0c5aa9263626c002000000db74161ccff2c5cf5e00", [0x3, 0x4]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) [ 154.634842][ T5323] Bluetooth: hci0: command tx timeout [ 154.779670][ T5345] loop0: detected capacity change from 0 to 64 [ 154.849626][ T5345] ======================================================= [ 154.849626][ T5345] WARNING: The mand mount option has been deprecated and [ 154.849626][ T5345] and is ignored by this kernel. Remove the mand [ 154.849626][ T5345] option from the mount to silence this warning. [ 154.849626][ T5345] ======================================================= [ 155.120073][ T5345] loop0: detected capacity change from 64 to 0 [ 155.123649][ T12] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 155.133449][ T12] Unable to read inode block [ 155.139074][ T12] Unable to read inode block [ 155.197507][ T5346] ------------[ cut here ]------------ [ 155.200309][ T5346] !buffer_uptodate(bh) [ 155.200325][ T5346] WARNING: fs/buffer.c:1180 at mark_buffer_dirty+0x299/0x440, CPU#0: syz.0.0/5346 [ 155.206707][ T5346] Modules linked in: [ 155.208742][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 155.212440][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.217845][ T5346] RIP: 0010:mark_buffer_dirty+0x299/0x440 [ 155.220654][ T5346] Code: 4c 89 f7 e8 e9 fc d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 60 fb ff e8 7f 1c 6e ff eb 8c e8 78 1c 6e ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 6a 1c 6e ff 90 0f 0b 90 e9 cf fd ff ff [ 155.230432][ T5346] RSP: 0018:ffffc9000d9571b0 EFLAGS: 00010287 [ 155.234469][ T5346] RAX: ffffffff8257b2f8 RBX: ffff888047956d98 RCX: 0000000000100000 [ 155.237854][ T5346] RDX: ffffc900209c2000 RSI: 00000000000025c4 RDI: 00000000000025c5 [ 155.241337][ T5346] RBP: ffffc9000d957301 R08: ffff888047956d9f R09: 1ffff11008f2adb3 [ 155.245087][ T5346] R10: dffffc0000000000 R11: ffffed1008f2adb4 R12: ffff888011ee69dc [ 155.248650][ T5346] R13: 1ffff110023dcd38 R14: ffff888011ee69c0 R15: 0000000000000017 [ 155.253147][ T5346] FS: 00007f33604526c0(0000) GS:ffff88808ca49000(0000) knlGS:0000000000000000 [ 155.257550][ T5346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.260531][ T5346] CR2: 00007f7102b958f5 CR3: 000000001a9f2000 CR4: 0000000000352ef0 [ 155.264590][ T5346] Call Trace: [ 155.266266][ T5346] [ 155.267642][ T5346] V2_minix_truncate+0x2ee/0x1160 [ 155.270015][ T5346] ? __pfx_V2_minix_truncate+0x10/0x10 [ 155.272565][ T5346] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.275541][ T5346] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.278111][ T5346] minix_evict_inode+0x1d1/0x260 [ 155.280338][ T5346] ? __pfx_minix_evict_inode+0x10/0x10 [ 155.282764][ T5346] evict+0x61e/0xb10 [ 155.284852][ T5346] ? __pfx_evict+0x10/0x10 [ 155.287059][ T5346] ? do_raw_spin_unlock+0x4d/0x210 [ 155.289490][ T5346] ? _raw_spin_unlock+0x28/0x50 [ 155.291694][ T5346] ? iput+0xb25/0xe80 [ 155.293729][ T5346] minix_mkdir+0xe2/0x120 [ 155.295925][ T5346] vfs_mkdir+0x413/0x630 [ 155.298101][ T5346] ovl_workdir_create+0x4d7/0x940 [ 155.300954][ T5346] ? __pfx_ovl_workdir_create+0x10/0x10 [ 155.303761][ T5346] ? mnt_get_write_access+0x213/0x280 [ 155.306314][ T5346] ovl_fill_super+0x1a56/0x5e40 [ 155.308573][ T5346] ? rcu_is_watching+0x15/0xb0 [ 155.311113][ T5346] ? __lock_acquire+0x6b5/0x2cf0 [ 155.314585][ T5346] ? __pfx_ovl_fill_super+0x10/0x10 [ 155.318080][ T5346] ? xas_create+0x1902/0x1b90 [ 155.320438][ T5346] ? __mutex_trylock_common+0x158/0x260 [ 155.322947][ T5346] ? __pfx___mutex_trylock_common+0x10/0x10 [ 155.325871][ T5346] ? rcu_is_watching+0x15/0xb0 [ 155.328130][ T5346] ? trace_contention_end+0x3d/0x150 [ 155.330645][ T5346] ? shrinker_register+0x124/0x230 [ 155.333612][ T5346] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 155.336871][ T5346] ? __pfx___mutex_lock+0x10/0x10 [ 155.339359][ T5346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.343351][ T5346] ? __raw_spin_lock_init+0x45/0x100 [ 155.347576][ T5346] ? sget_fc+0x962/0xa40 [ 155.349967][ T5346] ? __pfx_set_anon_super_fc+0x10/0x10 [ 155.352728][ T5346] ? __pfx_ovl_fill_super+0x10/0x10 [ 155.355226][ T5346] get_tree_nodev+0xbb/0x150 [ 155.357391][ T5346] vfs_get_tree+0x92/0x2a0 [ 155.359446][ T5346] do_new_mount+0x341/0xd30 [ 155.361583][ T5346] ? apparmor_capable+0x126/0x170 [ 155.363776][ T5346] ? __pfx_do_new_mount+0x10/0x10 [ 155.366283][ T5346] ? ns_capable+0x89/0xe0 [ 155.368637][ T5346] ? path_mount+0x690/0x10e0 [ 155.371421][ T5346] ? user_path_at+0xd4/0x160 [ 155.373673][ T5346] __se_sys_mount+0x31d/0x420 [ 155.375867][ T5346] ? __pfx___se_sys_mount+0x10/0x10 [ 155.378426][ T5346] ? __x64_sys_mount+0x20/0xc0 [ 155.381027][ T5346] do_syscall_64+0x14d/0xf80 [ 155.383497][ T5346] ? trace_irq_disable+0x3b/0x150 [ 155.386418][ T5346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.389563][ T5346] ? clear_bhb_loop+0x40/0x90 [ 155.391654][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.394399][ T5346] RIP: 0033:0x7f335f59c819 [ 155.396518][ T5346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.405985][ T5346] RSP: 002b:00007f3360451fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.409678][ T5346] RAX: ffffffffffffffda RBX: 00007f335f816180 RCX: 00007f335f59c819 [ 155.413069][ T5346] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 155.416463][ T5346] RBP: 00007f335f632c91 R08: 0000200000000140 R09: 0000000000000000 [ 155.419855][ T5346] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 155.423395][ T5346] R13: 00007f335f816218 R14: 00007f335f816180 R15: 00007ffdedb1d308 [ 155.427890][ T5346] [ 155.429403][ T5346] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.432826][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 155.436924][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.441895][ T5346] Call Trace: [ 155.443571][ T5346] [ 155.445162][ T5346] vpanic+0x56c/0xa60 [ 155.447079][ T5346] ? __pfx__printk+0x10/0x10 [ 155.449310][ T5346] ? __pfx_vpanic+0x10/0x10 [ 155.451325][ T5346] ? is_bpf_text_address+0x292/0x2b0 [ 155.453630][ T5346] ? is_bpf_text_address+0x26/0x2b0 [ 155.455996][ T5346] panic+0xc5/0xd0 [ 155.457691][ T5346] ? __pfx_panic+0x10/0x10 [ 155.459690][ T5346] __warn+0x315/0x4f0 [ 155.461383][ T5346] ? mark_buffer_dirty+0x299/0x440 [ 155.463289][ T5346] ? mark_buffer_dirty+0x299/0x440 [ 155.465375][ T5346] __report_bug+0x29a/0x540 [ 155.467405][ T5346] ? mark_buffer_dirty+0x299/0x440 [ 155.469639][ T5346] ? __pfx___report_bug+0x10/0x10 [ 155.471915][ T5346] ? __lock_acquire+0x6b5/0x2cf0 [ 155.474932][ T5346] ? truncate_inode_pages_range+0xcf0/0xe30 [ 155.477837][ T5346] ? mark_buffer_dirty+0x299/0x440 [ 155.479955][ T5346] report_bug+0x16a/0x220 [ 155.481826][ T5346] ? mark_buffer_dirty+0x299/0x440 [ 155.483879][ T5346] ? mark_buffer_dirty+0x29b/0x440 [ 155.487476][ T5346] handle_bug+0x9c/0x200 [ 155.489360][ T5346] exc_invalid_op+0x1a/0x50 [ 155.491167][ T5346] asm_exc_invalid_op+0x1a/0x20 [ 155.493742][ T5346] RIP: 0010:mark_buffer_dirty+0x299/0x440 [ 155.496831][ T5346] Code: 4c 89 f7 e8 e9 fc d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 60 fb ff e8 7f 1c 6e ff eb 8c e8 78 1c 6e ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 6a 1c 6e ff 90 0f 0b 90 e9 cf fd ff ff [ 155.507352][ T5346] RSP: 0018:ffffc9000d9571b0 EFLAGS: 00010287 [ 155.511195][ T5346] RAX: ffffffff8257b2f8 RBX: ffff888047956d98 RCX: 0000000000100000 [ 155.515765][ T5346] RDX: ffffc900209c2000 RSI: 00000000000025c4 RDI: 00000000000025c5 [ 155.519451][ T5346] RBP: ffffc9000d957301 R08: ffff888047956d9f R09: 1ffff11008f2adb3 [ 155.522955][ T5346] R10: dffffc0000000000 R11: ffffed1008f2adb4 R12: ffff888011ee69dc [ 155.526444][ T5346] R13: 1ffff110023dcd38 R14: ffff888011ee69c0 R15: 0000000000000017 [ 155.530514][ T5346] ? mark_buffer_dirty+0x298/0x440 [ 155.533441][ T5346] V2_minix_truncate+0x2ee/0x1160 [ 155.536243][ T5346] ? __pfx_V2_minix_truncate+0x10/0x10 [ 155.538724][ T5346] ? _raw_spin_unlock_irq+0x23/0x50 [ 155.540826][ T5346] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.542868][ T5346] minix_evict_inode+0x1d1/0x260 [ 155.545222][ T5346] ? __pfx_minix_evict_inode+0x10/0x10 [ 155.547701][ T5346] evict+0x61e/0xb10 [ 155.549468][ T5346] ? __pfx_evict+0x10/0x10 [ 155.551438][ T5346] ? do_raw_spin_unlock+0x4d/0x210 [ 155.554326][ T5346] ? _raw_spin_unlock+0x28/0x50 [ 155.557316][ T5346] ? iput+0xb25/0xe80 [ 155.559631][ T5346] minix_mkdir+0xe2/0x120 [ 155.561820][ T5346] vfs_mkdir+0x413/0x630 [ 155.563742][ T5346] ovl_workdir_create+0x4d7/0x940 [ 155.566162][ T5346] ? __pfx_ovl_workdir_create+0x10/0x10 [ 155.568567][ T5346] ? mnt_get_write_access+0x213/0x280 [ 155.570830][ T5346] ovl_fill_super+0x1a56/0x5e40 [ 155.572878][ T5346] ? rcu_is_watching+0x15/0xb0 [ 155.574947][ T5346] ? __lock_acquire+0x6b5/0x2cf0 [ 155.577941][ T5346] ? __pfx_ovl_fill_super+0x10/0x10 [ 155.580636][ T5346] ? xas_create+0x1902/0x1b90 [ 155.582831][ T5346] ? __mutex_trylock_common+0x158/0x260 [ 155.585220][ T5346] ? __pfx___mutex_trylock_common+0x10/0x10 [ 155.587769][ T5346] ? rcu_is_watching+0x15/0xb0 [ 155.589883][ T5346] ? trace_contention_end+0x3d/0x150 [ 155.592800][ T5346] ? shrinker_register+0x124/0x230 [ 155.595712][ T5346] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 155.598548][ T5346] ? __pfx___mutex_lock+0x10/0x10 [ 155.600868][ T5346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.603723][ T5346] ? __raw_spin_lock_init+0x45/0x100 [ 155.606245][ T5346] ? sget_fc+0x962/0xa40 [ 155.608483][ T5346] ? __pfx_set_anon_super_fc+0x10/0x10 [ 155.611486][ T5346] ? __pfx_ovl_fill_super+0x10/0x10 [ 155.614040][ T5346] get_tree_nodev+0xbb/0x150 [ 155.616350][ T5346] vfs_get_tree+0x92/0x2a0 [ 155.618047][ T5346] do_new_mount+0x341/0xd30 [ 155.619775][ T5346] ? apparmor_capable+0x126/0x170 [ 155.621820][ T5346] ? __pfx_do_new_mount+0x10/0x10 [ 155.623893][ T5346] ? ns_capable+0x89/0xe0 [ 155.625943][ T5346] ? path_mount+0x690/0x10e0 [ 155.628612][ T5346] ? user_path_at+0xd4/0x160 [ 155.631262][ T5346] __se_sys_mount+0x31d/0x420 [ 155.633580][ T5346] ? __pfx___se_sys_mount+0x10/0x10 [ 155.635936][ T5346] ? __x64_sys_mount+0x20/0xc0 [ 155.637990][ T5346] do_syscall_64+0x14d/0xf80 [ 155.640138][ T5346] ? trace_irq_disable+0x3b/0x150 [ 155.642513][ T5346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.645388][ T5346] ? clear_bhb_loop+0x40/0x90 [ 155.647591][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.650252][ T5346] RIP: 0033:0x7f335f59c819 [ 155.652451][ T5346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.662823][ T5346] RSP: 002b:00007f3360451fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.666550][ T5346] RAX: ffffffffffffffda RBX: 00007f335f816180 RCX: 00007f335f59c819 [ 155.670074][ T5346] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 155.673720][ T5346] RBP: 00007f335f632c91 R08: 0000200000000140 R09: 0000000000000000 [ 155.677503][ T5346] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 155.681627][ T5346] R13: 00007f335f816218 R14: 00007f335f816180 R15: 00007ffdedb1d308 [ 155.685705][ T5346] [ 155.687661][ T5346] Kernel Offset: disabled [ 155.689687][ T5346] Rebooting in 86400 seconds..