program: syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") open(&(0x7f0000000440)='./file0\x00', 0x14927e, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x12, 0x3, "d2273078cf6175866187bbf62372bbb65d940f27bc28a5a442ff5a8d374a182008a1fd92701ce53ee6aa5d922917aeecbfb3db24b09909c24cc157a3780cf5d5", "09b49809fc32a5fc7be9f88c6b84907998105e3111daa2bd51b0d0c3bc93fb2d0f0244a8c7a99a75e76613c745458f5c1212e72d93b272fed81941f04edd0059", "a960f08042e09119b6f87de59f19912c538884e7a95c3d50e4be66184e298bb1", [0x4, 0x6c]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r1) [ 95.530420][ T5323] loop0: detected capacity change from 0 to 64 [ 95.569964][ T5285] Bluetooth: hci0: command tx timeout [ 96.118369][ T5323] loop0: detected capacity change from 64 to 0 [ 96.155286][ T5324] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 96.218927][ T86] ------------[ cut here ]------------ [ 96.224483][ T86] !buffer_uptodate(bh) [ 96.224503][ T86] WARNING: fs/buffer.c:1093 at mark_buffer_dirty+0x299/0x410, CPU#0: kworker/u4:5/86 [ 96.236911][ T86] Modules linked in: [ 96.239892][ T86] CPU: 0 UID: 0 PID: 86 Comm: kworker/u4:5 Not tainted syzkaller #0 PREEMPT(full) [ 96.246741][ T86] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.252788][ T86] Workqueue: writeback wb_workfn (flush-7:0) [ 96.256367][ T86] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 96.261236][ T86] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 8f f3 69 ff eb 8c e8 88 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff [ 96.270471][ T86] RSP: 0000:ffffc90000d47220 EFLAGS: 00010293 [ 96.273820][ T86] RAX: ffffffff825c8e48 RBX: ffff888043b32b60 RCX: ffff88800028ca80 [ 96.279338][ T86] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 96.286238][ T86] RBP: 0000000000000001 R08: ffff888043b32b67 R09: 1ffff1100876656c [ 96.292022][ T86] R10: dffffc0000000000 R11: ffffed100876656d R12: ffff88801abd924c [ 96.297765][ T86] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888043b32b60 [ 96.303063][ T86] FS: 0000000000000000(0000) GS:ffff88808c81b000(0000) knlGS:0000000000000000 [ 96.307931][ T86] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.312571][ T86] CR2: 000055a4f34bcff8 CR3: 000000003fead000 CR4: 0000000000352ef0 [ 96.317246][ T86] Call Trace: [ 96.319240][ T86] [ 96.320844][ T86] bfs_write_inode+0x4f0/0x840 [ 96.324048][ T86] __writeback_single_inode+0x6ac/0xf90 [ 96.327411][ T86] writeback_sb_inodes+0x9de/0x1b00 [ 96.330978][ T86] ? save_trace+0x2c4/0x390 [ 96.334110][ T86] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 96.337906][ T86] ? __pfx_down_read_trylock+0x10/0x10 [ 96.341621][ T86] __writeback_inodes_wb+0x114/0x240 [ 96.344950][ T86] wb_writeback+0x42f/0xad0 [ 96.347763][ T86] ? queue_io+0x2c1/0x470 [ 96.350501][ T86] ? __pfx_wb_writeback+0x10/0x10 [ 96.353643][ T86] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.356723][ T86] ? process_scheduled_works+0xa20/0x14e0 [ 96.359656][ T86] wb_workfn+0x980/0x10f0 [ 96.362141][ T86] ? __pfx_wb_workfn+0x10/0x10 [ 96.365704][ T86] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.368873][ T86] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 96.371918][ T86] ? process_scheduled_works+0xa20/0x14e0 [ 96.375500][ T86] ? rcu_is_watching+0x15/0xb0 [ 96.378571][ T86] ? process_scheduled_works+0xa20/0x14e0 [ 96.382232][ T86] process_scheduled_works+0xa8e/0x14e0 [ 96.385239][ T86] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.388142][ T86] ? assign_work+0x3cf/0x5d0 [ 96.390621][ T86] worker_thread+0xa47/0xfb0 [ 96.392663][ T86] ? __kthread_parkme+0x71/0x1f0 [ 96.394848][ T86] kthread+0x388/0x470 [ 96.397793][ T86] ? __pfx_worker_thread+0x10/0x10 [ 96.401458][ T86] ? __pfx_kthread+0x10/0x10 [ 96.404728][ T86] ret_from_fork+0x514/0xb70 [ 96.407666][ T86] ? __pfx_ret_from_fork+0x10/0x10 [ 96.411231][ T86] ? __switch_to+0xc89/0x1420 [ 96.414701][ T86] ? __pfx_kthread+0x10/0x10 [ 96.417765][ T86] ret_from_fork_asm+0x1a/0x30 [ 96.420437][ T86] [ 96.422017][ T86] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.425507][ T86] CPU: 0 UID: 0 PID: 86 Comm: kworker/u4:5 Not tainted syzkaller #0 PREEMPT(full) [ 96.429810][ T86] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.436493][ T86] Workqueue: writeback wb_workfn (flush-7:0) [ 96.440176][ T86] Call Trace: [ 96.442278][ T86] [ 96.443738][ T86] vpanic+0x56c/0xa60 [ 96.445784][ T86] ? __pfx__printk+0x10/0x10 [ 96.448372][ T86] ? __pfx_vpanic+0x10/0x10 [ 96.450836][ T86] ? is_bpf_text_address+0x292/0x2b0 [ 96.454141][ T86] ? is_bpf_text_address+0x26/0x2b0 [ 96.457409][ T86] panic+0xc5/0xd0 [ 96.459930][ T86] ? __pfx_panic+0x10/0x10 [ 96.462848][ T86] ? ret_from_fork_asm+0x1a/0x30 [ 96.466038][ T86] __warn+0x315/0x4c0 [ 96.469100][ T86] ? mark_buffer_dirty+0x299/0x410 [ 96.472431][ T86] ? mark_buffer_dirty+0x299/0x410 [ 96.475253][ T86] __report_bug+0x331/0x530 [ 96.478036][ T86] ? mark_buffer_dirty+0x299/0x410 [ 96.481389][ T86] ? __pfx___report_bug+0x10/0x10 [ 96.484243][ T86] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 96.487298][ T86] ? lockdep_hardirqs_on+0x7a/0x110 [ 96.490163][ T86] ? __mutex_lock+0x1092/0x1550 [ 96.493003][ T86] ? mark_buffer_dirty+0x299/0x410 [ 96.495644][ T86] report_bug+0x16a/0x220 [ 96.497835][ T86] ? mark_buffer_dirty+0x299/0x410 [ 96.500447][ T86] ? mark_buffer_dirty+0x29b/0x410 [ 96.503608][ T86] handle_bug+0x9c/0x200 [ 96.505829][ T86] exc_invalid_op+0x1a/0x50 [ 96.507790][ T86] asm_exc_invalid_op+0x1a/0x20 [ 96.510086][ T86] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 96.513006][ T86] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 8f f3 69 ff eb 8c e8 88 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff [ 96.521431][ T86] RSP: 0000:ffffc90000d47220 EFLAGS: 00010293 [ 96.524498][ T86] RAX: ffffffff825c8e48 RBX: ffff888043b32b60 RCX: ffff88800028ca80 [ 96.528866][ T86] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 96.533061][ T86] RBP: 0000000000000001 R08: ffff888043b32b67 R09: 1ffff1100876656c [ 96.537436][ T86] R10: dffffc0000000000 R11: ffffed100876656d R12: ffff88801abd924c [ 96.541609][ T86] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888043b32b60 [ 96.545411][ T86] ? mark_buffer_dirty+0x298/0x410 [ 96.548139][ T86] bfs_write_inode+0x4f0/0x840 [ 96.550594][ T86] __writeback_single_inode+0x6ac/0xf90 [ 96.553513][ T86] writeback_sb_inodes+0x9de/0x1b00 [ 96.556051][ T86] ? save_trace+0x2c4/0x390 [ 96.558711][ T86] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 96.562102][ T86] ? __pfx_down_read_trylock+0x10/0x10 [ 96.564686][ T86] __writeback_inodes_wb+0x114/0x240 [ 96.567181][ T86] wb_writeback+0x42f/0xad0 [ 96.569542][ T86] ? queue_io+0x2c1/0x470 [ 96.572024][ T86] ? __pfx_wb_writeback+0x10/0x10 [ 96.574803][ T86] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.577413][ T86] ? process_scheduled_works+0xa20/0x14e0 [ 96.579930][ T86] wb_workfn+0x980/0x10f0 [ 96.581968][ T86] ? __pfx_wb_workfn+0x10/0x10 [ 96.584302][ T86] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.586819][ T86] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 96.589167][ T86] ? process_scheduled_works+0xa20/0x14e0 [ 96.591641][ T86] ? rcu_is_watching+0x15/0xb0 [ 96.594067][ T86] ? process_scheduled_works+0xa20/0x14e0 [ 96.597156][ T86] process_scheduled_works+0xa8e/0x14e0 [ 96.599913][ T86] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.602673][ T86] ? assign_work+0x3cf/0x5d0 [ 96.604734][ T86] worker_thread+0xa47/0xfb0 [ 96.606911][ T86] ? __kthread_parkme+0x71/0x1f0 [ 96.609399][ T86] kthread+0x388/0x470 [ 96.611477][ T86] ? __pfx_worker_thread+0x10/0x10 [ 96.614082][ T86] ? __pfx_kthread+0x10/0x10 [ 96.616291][ T86] ret_from_fork+0x514/0xb70 [ 96.618559][ T86] ? __pfx_ret_from_fork+0x10/0x10 [ 96.621179][ T86] ? __switch_to+0xc89/0x1420 [ 96.623651][ T86] ? __pfx_kthread+0x10/0x10 [ 96.626004][ T86] ret_from_fork_asm+0x1a/0x30 [ 96.628306][ T86] [ 96.630265][ T86] Kernel Offset: disabled [ 96.632473][ T86] Rebooting in 86400 seconds..