program:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x560, &(0x7f0000000b00)="$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")
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108)
r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x48a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
read(r0, &(0x7f0000001400)=""/4096, 0x1000)
r4 = syz_open_dev$usbfs(0x0, 0x205, 0x2581)
fcntl$dupfd(r4, 0x0, r4)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0)
file_setattr(r7, 0x0, &(0x7f0000000080)={0x9, 0xd9, 0x3, 0xb, 0x57518bea}, 0x18, 0x1000)
[ 84.747704][ T5301] Bluetooth: hci0: command tx timeout
[ 84.952273][ T5323] loop0: detected capacity change from 0 to 512
[ 85.012420][ T5323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 85.018955][ T5323] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 85.077974][ T24] audit: type=1800 audit(1773354346.431:2): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=15 res=0 errno=0
[ 85.116952][ T1040] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 85.129012][ T1040] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28
[ 85.151560][ T1040] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 85.151560][ T1040]
[ 85.157192][ T1040] EXT4-fs (loop0): Total free blocks count 0
[ 85.170566][ T1040] EXT4-fs (loop0): Free/Dirty block details
[ 85.183194][ T1040] EXT4-fs (loop0): free_blocks=65280
[ 85.185587][ T1040] EXT4-fs (loop0): dirty_blocks=1
[ 85.187819][ T1040] EXT4-fs (loop0): Block reservation details
[ 85.196765][ T1040] EXT4-fs (loop0): i_reserved_data_blocks=1
[ 85.213168][ T5323] Direct I/O collision with buffered writes! File: /file1 Comm: syz.0.0
[ 85.220433][ T1040] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28
[ 85.233051][ T9] ------------[ cut here ]------------
[ 85.236692][ T9] !folio_buffers(folio)
[ 85.236709][ T9] WARNING: fs/ext4/inode.c:3913 at ext4_dirty_folio+0x167/0x1b0, CPU#0: kworker/0:0/9
[ 85.244793][ T9] Modules linked in:
[ 85.246912][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.251679][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.256790][ T9] Workqueue: events bio_dirty_fn
[ 85.259614][ T9] RIP: 0010:ext4_dirty_folio+0x167/0x1b0
[ 85.263277][ T9] Code: ff a8 a7 ff 49 83 3f 00 74 1a e8 34 e0 3b ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3f ad cd ff e8 1a e0 3b ff 90 <0f> 0b 90 eb e0 e8 0f e0 3b ff 90 0f 0b 90 eb a7 e8 04 e0 3b ff 48
[ 85.271882][ T9] RSP: 0018:ffffc9000022fa28 EFLAGS: 00010293
[ 85.274941][ T9] RAX: ffffffff8289cd36 RBX: ffffea00007bd040 RCX: ffff88801cafc980
[ 85.279678][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 85.283533][ T9] RBP: 1ffffd40000f7a08 R08: ffffea00007bd047 R09: 1ffffd40000f7a08
[ 85.287237][ T9] R10: dffffc0000000000 R11: fffff940000f7a09 R12: ffff888047ddf7d8
[ 85.291770][ T9] R13: 1ffffd40000f7a09 R14: 0000000000000001 R15: ffffea00007bd068
[ 85.296200][ T9] FS: 0000000000000000(0000) GS:ffff88808ca55000(0000) knlGS:0000000000000000
[ 85.300708][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.303992][ T9] CR2: 0000200000fca000 CR3: 0000000011871000 CR4: 0000000000352ef0
[ 85.307906][ T9] Call Trace:
[ 85.310150][ T9]
[ 85.311823][ T9] __bio_release_pages+0x103/0x1a0
[ 85.314788][ T9] bio_dirty_fn+0xac/0x100
[ 85.317055][ T9] ? process_scheduled_works+0xa25/0x1830
[ 85.320105][ T9] process_scheduled_works+0xb02/0x1830
[ 85.322878][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 85.326236][ T9] ? assign_work+0x3d5/0x5e0
[ 85.328921][ T9] worker_thread+0xa50/0xfc0
[ 85.331515][ T9] kthread+0x388/0x470
[ 85.333596][ T9] ? __pfx_worker_thread+0x10/0x10
[ 85.336135][ T9] ? __pfx_kthread+0x10/0x10
[ 85.339257][ T9] ret_from_fork+0x51e/0xb90
[ 85.342627][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 85.345259][ T9] ? __switch_to+0xc7d/0x1450
[ 85.347531][ T9] ? __pfx_kthread+0x10/0x10
[ 85.350266][ T9] ret_from_fork_asm+0x1a/0x30
[ 85.352891][ T9]
[ 85.354501][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 85.358361][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.363151][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.368343][ T9] Workqueue: events bio_dirty_fn
[ 85.371105][ T9] Call Trace:
[ 85.372702][ T9]
[ 85.374132][ T9] vpanic+0x56c/0xa60
[ 85.376150][ T9] ? __pfx__printk+0x10/0x10
[ 85.378425][ T9] ? __pfx_vpanic+0x10/0x10
[ 85.380957][ T9] ? is_bpf_text_address+0x292/0x2b0
[ 85.383702][ T9] ? is_bpf_text_address+0x26/0x2b0
[ 85.386140][ T9] panic+0xc5/0xd0
[ 85.388096][ T9] ? __pfx_panic+0x10/0x10
[ 85.390368][ T9] ? ret_from_fork_asm+0x1a/0x30
[ 85.393181][ T9] __warn+0x315/0x4f0
[ 85.395128][ T9] ? ext4_dirty_folio+0x167/0x1b0
[ 85.397753][ T9] ? ext4_dirty_folio+0x167/0x1b0
[ 85.400342][ T9] __report_bug+0x29a/0x540
[ 85.402690][ T9] ? ext4_dirty_folio+0x167/0x1b0
[ 85.404915][ T9] ? __pfx___report_bug+0x10/0x10
[ 85.407430][ T9] ? stack_trace_save+0xa9/0x100
[ 85.410624][ T9] ? __pfx_stack_trace_save+0x10/0x10
[ 85.413609][ T9] ? check_path+0x21/0x40
[ 85.415666][ T9] ? check_noncircular+0xda/0x150
[ 85.418077][ T9] ? add_lock_to_list+0xc7/0x100
[ 85.420450][ T9] ? ext4_dirty_folio+0x167/0x1b0
[ 85.422963][ T9] report_bug+0x16a/0x220
[ 85.425222][ T9] ? ext4_dirty_folio+0x167/0x1b0
[ 85.427953][ T9] ? ext4_dirty_folio+0x169/0x1b0
[ 85.430467][ T9] handle_bug+0x9c/0x200
[ 85.432525][ T9] exc_invalid_op+0x1a/0x50
[ 85.434846][ T9] asm_exc_invalid_op+0x1a/0x20
[ 85.437465][ T9] RIP: 0010:ext4_dirty_folio+0x167/0x1b0
[ 85.440459][ T9] Code: ff a8 a7 ff 49 83 3f 00 74 1a e8 34 e0 3b ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3f ad cd ff e8 1a e0 3b ff 90 <0f> 0b 90 eb e0 e8 0f e0 3b ff 90 0f 0b 90 eb a7 e8 04 e0 3b ff 48
[ 85.449335][ T9] RSP: 0018:ffffc9000022fa28 EFLAGS: 00010293
[ 85.452546][ T9] RAX: ffffffff8289cd36 RBX: ffffea00007bd040 RCX: ffff88801cafc980
[ 85.456101][ T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 85.459663][ T9] RBP: 1ffffd40000f7a08 R08: ffffea00007bd047 R09: 1ffffd40000f7a08
[ 85.463845][ T9] R10: dffffc0000000000 R11: fffff940000f7a09 R12: ffff888047ddf7d8
[ 85.467930][ T9] R13: 1ffffd40000f7a09 R14: 0000000000000001 R15: ffffea00007bd068
[ 85.471415][ T9] ? ext4_dirty_folio+0x166/0x1b0
[ 85.473794][ T9] ? ext4_dirty_folio+0x166/0x1b0
[ 85.476394][ T9] __bio_release_pages+0x103/0x1a0
[ 85.479023][ T9] bio_dirty_fn+0xac/0x100
[ 85.481364][ T9] ? process_scheduled_works+0xa25/0x1830
[ 85.483964][ T9] process_scheduled_works+0xb02/0x1830
[ 85.486456][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 85.489586][ T9] ? assign_work+0x3d5/0x5e0
[ 85.492283][ T9] worker_thread+0xa50/0xfc0
[ 85.494823][ T9] kthread+0x388/0x470
[ 85.496829][ T9] ? __pfx_worker_thread+0x10/0x10
[ 85.499578][ T9] ? __pfx_kthread+0x10/0x10
[ 85.501918][ T9] ret_from_fork+0x51e/0xb90
[ 85.504184][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 85.506860][ T9] ? __switch_to+0xc7d/0x1450
[ 85.509564][ T9] ? __pfx_kthread+0x10/0x10
[ 85.512120][ T9] ret_from_fork_asm+0x1a/0x30
[ 85.514904][ T9]
[ 85.516662][ T9] Kernel Offset: disabled
[ 85.518821][ T9] Rebooting in 86400 seconds..