program: r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x400, &(0x7f0000000340), 0x2, 0x786, &(0x7f0000000700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x80342, 0x168) pwrite64(r1, &(0x7f0000000f00)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000f80)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000fc0), 0x4000000004882, 0x0) io_setup(0x2, &(0x7f0000001000)=0x0) io_submit(r4, 0xca, &(0x7f0000001040)=[&(0x7f0000001080)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f00000010c0)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r10, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r12}, @IFLA_HSR_SLAVE1={0x8, 0x1, r12}]}}}]}, 0x40}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x400, &(0x7f0000000340), 0x2, 0x786, &(0x7f0000000700)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x80342, 0x168) (async) pwrite64(r1, &(0x7f0000000f00)='2', 0xfdef, 0xfecc) (async) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x101042, 0x15) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000f80)) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000fc0), 0x4000000004882, 0x0) (async) io_setup(0x2, &(0x7f0000001000)) (async) io_submit(r4, 0xca, &(0x7f0000001040)=[&(0x7f0000001080)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f00000010c0)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r10, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) (async) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r12}, @IFLA_HSR_SLAVE1={0x8, 0x1, r12}]}}}]}, 0x40}}, 0x0) (async) [ 103.748175][ T4668] Bluetooth: hci0: command tx timeout [ 103.846778][ T5353] loop0: detected capacity change from 0 to 2048 [ 103.922531][ T5353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.955863][ T5353] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 103.959243][ T5353] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.959267][ T5353] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.959267][ T5353] [ 103.959273][ T5353] EXT4-fs (loop0): Total free blocks count 0 [ 103.959278][ T5353] EXT4-fs (loop0): Free/Dirty block details [ 103.959308][ T5353] EXT4-fs (loop0): free_blocks=4096 [ 103.959321][ T5353] EXT4-fs (loop0): dirty_blocks=64 [ 103.959325][ T5353] EXT4-fs (loop0): Block reservation details [ 103.959329][ T5353] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 104.029795][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 104.065664][ T5353] ------------[ cut here ]------------ [ 104.065676][ T5353] !folio_buffers(folio) [ 104.065682][ T5353] WARNING: fs/ext4/inode.c:4556 at ext4_dirty_folio+0x167/0x1b0, CPU#0: syz.0.0/5353 [ 104.074291][ T5353] Modules linked in: [ 104.076098][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 104.080058][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.084352][ T5353] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 104.086801][ T5353] Code: 7f a3 a3 ff 49 83 3f 00 74 1a e8 c4 9d 2a ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3f 16 cc ff e8 aa 9d 2a ff 90 <0f> 0b 90 eb e0 e8 9f 9d 2a ff 90 0f 0b 90 eb a7 e8 94 9d 2a ff 48 [ 104.095116][ T5353] RSP: 0018:ffffc9000f8a7508 EFLAGS: 00010293 [ 104.097758][ T5353] RAX: ffffffff829e82f6 RBX: ffffea00013ba480 RCX: ffff88801f9d2580 [ 104.101205][ T5353] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 104.105047][ T5353] RBP: 1ffffd4000277490 R08: ffffea00013ba487 R09: 1ffffd4000277490 [ 104.108508][ T5353] R10: dffffc0000000000 R11: fffff94000277491 R12: ffff888045318d68 [ 104.112003][ T5353] R13: 1ffffd4000277491 R14: 0000000000000001 R15: ffffea00013ba4a8 [ 104.115779][ T5353] FS: 00007f9e12a876c0(0000) GS:ffff88808a9fe000(0000) knlGS:0000000000000000 [ 104.119611][ T5353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.122420][ T5353] CR2: 0000200000000040 CR3: 000000000fd8a000 CR4: 0000000000352ef0 [ 104.125712][ T5353] Call Trace: [ 104.127129][ T5353] [ 104.128425][ T5353] bio_set_pages_dirty+0x36d/0xa70 [ 104.130648][ T5353] __blkdev_direct_IO+0x92d/0x1100 [ 104.132996][ T5353] ? __pfx_aio_complete_rw+0x10/0x10 [ 104.135326][ T5353] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 104.137747][ T5353] blkdev_direct_IO+0x770/0x1840 [ 104.140043][ T5353] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 104.142409][ T5353] ? reacquire_held_locks+0x117/0x1a0 [ 104.149017][ T5353] ? __mark_inode_dirty+0x705/0x13b0 [ 104.151220][ T5353] ? preempt_schedule_thunk+0x16/0x40 [ 104.153555][ T5353] ? preempt_schedule_common+0x7f/0xd0 [ 104.156026][ T5353] ? preempt_schedule_thunk+0x16/0x40 [ 104.158454][ T5353] ? blkdev_read_iter+0x228/0x590 [ 104.160652][ T5353] ? touch_atime+0x37c/0x670 [ 104.162729][ T5353] ? blkdev_read_iter+0x228/0x590 [ 104.164855][ T5353] blkdev_read_iter+0x249/0x590 [ 104.166893][ T5353] aio_read+0x33a/0x4d0 [ 104.168732][ T5353] ? __pfx_aio_read+0x10/0x10 [ 104.170806][ T5353] io_submit_one+0x774/0x13d0 [ 104.172971][ T5353] ? lockdep_hardirqs_on+0x7b/0x110 [ 104.175123][ T5353] ? irqentry_exit+0x2a0/0x9b0 [ 104.177054][ T5353] ? __pfx_io_submit_one+0x10/0x10 [ 104.179160][ T5353] ? lock_acquire+0x115/0x350 [ 104.181118][ T5353] ? __might_fault+0xaf/0x130 [ 104.183163][ T5353] __se_sys_io_submit+0x195/0x340 [ 104.185347][ T5353] ? __pfx___se_sys_io_submit+0x10/0x10 [ 104.187831][ T5353] do_syscall_64+0x166/0x520 [ 104.189831][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.192434][ T5353] ? clear_bhb_loop+0x70/0xc0 [ 104.194581][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.197111][ T5353] RIP: 0033:0x7f9e11b9fb19 [ 104.199137][ T5353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.209026][ T5353] RSP: 002b:00007f9e12a86fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 104.212877][ T5353] RAX: ffffffffffffffda RBX: 00007f9e11e25fa0 RCX: 00007f9e11b9fb19 [ 104.216245][ T5353] RDX: 0000200000001040 RSI: 00000000000000ca RDI: 00007f9e12a45000 [ 104.219564][ T5353] RBP: 00007f9e11c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.223199][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.226540][ T5353] R13: 00007f9e11e26038 R14: 00007f9e11e25fa0 R15: 00007ffeb452fd48 [ 104.230187][ T5353] [ 104.231565][ T5353] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.234690][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 104.238471][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.242623][ T5353] Call Trace: [ 104.244079][ T5353] [ 104.245311][ T5353] vpanic+0x26f/0x710 [ 104.247051][ T5353] panic+0xc5/0xd0 [ 104.248665][ T5353] ? __pfx_panic+0x10/0x10 [ 104.250513][ T5353] __warn+0x315/0x4c0 [ 104.252254][ T5353] ? ext4_dirty_folio+0x167/0x1b0 [ 104.254402][ T5353] ? ext4_dirty_folio+0x167/0x1b0 [ 104.256641][ T5353] __report_bug+0x276/0x570 [ 104.258545][ T5353] ? ext4_dirty_folio+0x167/0x1b0 [ 104.260754][ T5353] ? __pfx___report_bug+0x10/0x10 [ 104.262889][ T5353] ? is_valid_gup_args+0x11f/0x200 [ 104.265104][ T5353] ? pin_user_pages_fast+0x4d/0xb0 [ 104.267420][ T5353] ? iov_iter_extract_pages+0x496/0x690 [ 104.269788][ T5353] ? preempt_schedule_thunk+0x16/0x40 [ 104.271976][ T5353] ? ext4_dirty_folio+0x167/0x1b0 [ 104.274072][ T5353] report_bug+0x16b/0x220 [ 104.275859][ T5353] ? ext4_dirty_folio+0x167/0x1b0 [ 104.277980][ T5353] ? ext4_dirty_folio+0x169/0x1b0 [ 104.280170][ T5353] handle_bug+0x9c/0x200 [ 104.281902][ T5353] exc_invalid_op+0x1a/0x50 [ 104.283734][ T5353] asm_exc_invalid_op+0x1a/0x20 [ 104.285623][ T5353] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 104.287769][ T5353] Code: 7f a3 a3 ff 49 83 3f 00 74 1a e8 c4 9d 2a ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3f 16 cc ff e8 aa 9d 2a ff 90 <0f> 0b 90 eb e0 e8 9f 9d 2a ff 90 0f 0b 90 eb a7 e8 94 9d 2a ff 48 [ 104.295098][ T5353] RSP: 0018:ffffc9000f8a7508 EFLAGS: 00010293 [ 104.297627][ T5353] RAX: ffffffff829e82f6 RBX: ffffea00013ba480 RCX: ffff88801f9d2580 [ 104.300985][ T5353] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 104.304421][ T5353] RBP: 1ffffd4000277490 R08: ffffea00013ba487 R09: 1ffffd4000277490 [ 104.308005][ T5353] R10: dffffc0000000000 R11: fffff94000277491 R12: ffff888045318d68 [ 104.311277][ T5353] R13: 1ffffd4000277491 R14: 0000000000000001 R15: ffffea00013ba4a8 [ 104.314611][ T5353] ? ext4_dirty_folio+0x166/0x1b0 [ 104.316776][ T5353] ? ext4_dirty_folio+0x166/0x1b0 [ 104.319154][ T5353] bio_set_pages_dirty+0x36d/0xa70 [ 104.321382][ T5353] __blkdev_direct_IO+0x92d/0x1100 [ 104.323617][ T5353] ? __pfx_aio_complete_rw+0x10/0x10 [ 104.325986][ T5353] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 104.328446][ T5353] blkdev_direct_IO+0x770/0x1840 [ 104.330686][ T5353] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 104.333121][ T5353] ? reacquire_held_locks+0x117/0x1a0 [ 104.335453][ T5353] ? __mark_inode_dirty+0x705/0x13b0 [ 104.337877][ T5353] ? preempt_schedule_thunk+0x16/0x40 [ 104.339980][ T5353] ? preempt_schedule_common+0x7f/0xd0 [ 104.342118][ T5353] ? preempt_schedule_thunk+0x16/0x40 [ 104.344128][ T5353] ? blkdev_read_iter+0x228/0x590 [ 104.346032][ T5353] ? touch_atime+0x37c/0x670 [ 104.347962][ T5353] ? blkdev_read_iter+0x228/0x590 [ 104.349950][ T5353] blkdev_read_iter+0x249/0x590 [ 104.351857][ T5353] aio_read+0x33a/0x4d0 [ 104.353497][ T5353] ? __pfx_aio_read+0x10/0x10 [ 104.355350][ T5353] io_submit_one+0x774/0x13d0 [ 104.357289][ T5353] ? lockdep_hardirqs_on+0x7b/0x110 [ 104.359415][ T5353] ? irqentry_exit+0x2a0/0x9b0 [ 104.361520][ T5353] ? __pfx_io_submit_one+0x10/0x10 [ 104.363737][ T5353] ? lock_acquire+0x115/0x350 [ 104.365658][ T5353] ? __might_fault+0xaf/0x130 [ 104.367596][ T5353] __se_sys_io_submit+0x195/0x340 [ 104.369744][ T5353] ? __pfx___se_sys_io_submit+0x10/0x10 [ 104.372170][ T5353] do_syscall_64+0x166/0x520 [ 104.374231][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.376882][ T5353] ? clear_bhb_loop+0x70/0xc0 [ 104.378797][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.381324][ T5353] RIP: 0033:0x7f9e11b9fb19 [ 104.383255][ T5353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.392472][ T5353] RSP: 002b:00007f9e12a86fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 104.395984][ T5353] RAX: ffffffffffffffda RBX: 00007f9e11e25fa0 RCX: 00007f9e11b9fb19 [ 104.399377][ T5353] RDX: 0000200000001040 RSI: 00000000000000ca RDI: 00007f9e12a45000 [ 104.402589][ T5353] RBP: 00007f9e11c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 104.405900][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.409216][ T5353] R13: 00007f9e11e26038 R14: 00007f9e11e25fa0 R15: 00007ffeb452fd48 [ 104.412460][ T5353] [ 104.414233][ T5353] Kernel Offset: disabled [ 104.416006][ T5353] Rebooting in 86400 seconds..