program: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000540)={{@host, 0xfffffffc}, {@any, 0xfffffffd}, 0x400, "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"}, 0x418, 0x9dfc}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000100)={{@hyper, 0x5}, @any, 0x9, 0x80000001, 0x3, 0x2, 0x62, 0x4, 0x9}) (async) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000008c0), 0xfecc) (async) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) (async) io_setup(0x8, &(0x7f0000000e00)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r2, &(0x7f0000000080)='$', 0x1}]) (async) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000140)) (async) r4 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x9, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYBLOB="e110cd046b853e8fd70db5d701bc5cc97ddab52dda68c195463f16a52ddd323fd12d3a1f67fc444919a3f4d0a896157e8aab3583fb27dbf0b3ab9f817d21be33ebf50b6971d7887e741ef99bb306bb2b7e9b", @ANYRES32=r4, @ANYRESHEX=r0, @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, r4}, 0x94) [ 93.769333][ T4641] Bluetooth: hci0: command tx timeout [ 93.938399][ T5319] loop0: detected capacity change from 0 to 64 [ 94.140306][ T5315] ------------[ cut here ]------------ [ 94.140320][ T5315] !buffer_uptodate(bh) [ 94.140326][ T5315] WARNING: fs/buffer.c:991 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5315 [ 94.148950][ T5315] Modules linked in: [ 94.151264][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.154979][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.159333][ T5315] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 94.161798][ T5315] Code: 4c 89 f7 e8 a9 01 d8 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 8f 62 66 ff eb 8c e8 88 62 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a 62 66 ff 90 0f 0b 90 e9 cf fd ff ff [ 94.170288][ T5315] RSP: 0018:ffffc9000f3bf828 EFLAGS: 00010293 [ 94.173270][ T5315] RAX: ffffffff82617938 RBX: ffff8880130022a0 RCX: ffff8880341d4b00 [ 94.176844][ T5315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 94.180492][ T5315] RBP: 0000000000000201 R08: ffff8880130022a7 R09: 1ffff11002600454 [ 94.184664][ T5315] R10: dffffc0000000000 R11: ffffed1002600455 R12: 000000000000000a [ 94.189407][ T5315] R13: ffff8880130022a0 R14: ffff88803203f8c0 R15: dffffc0000000000 [ 94.192817][ T5315] FS: 00007fee86ed66c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 94.196798][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.199637][ T5315] CR2: 0000200000002000 CR3: 0000000012c9e000 CR4: 0000000000352ef0 [ 94.202988][ T5315] Call Trace: [ 94.204544][ T5315] [ 94.205975][ T5315] bfs_get_block+0x5c6/0xb50 [ 94.208247][ T5315] __block_write_begin_int+0x6c2/0x1900 [ 94.210648][ T5315] ? filemap_add_folio+0x336/0x4e0 [ 94.212914][ T5315] ? __pfx_bfs_get_block+0x10/0x10 [ 94.215081][ T5315] ? __pfx___block_write_begin_int+0x10/0x10 [ 94.217831][ T5315] ? __pfx_bfs_get_block+0x10/0x10 [ 94.219967][ T5315] block_write_begin+0x8d/0x120 [ 94.221996][ T5315] ? bfs_write_begin+0x1e/0xd0 [ 94.224036][ T5315] bfs_write_begin+0x35/0xd0 [ 94.226257][ T5315] generic_perform_write+0x2d5/0x8f0 [ 94.228615][ T5315] ? __pfx_generic_perform_write+0x10/0x10 [ 94.231167][ T5315] ? file_update_time_flags+0x1e0/0x440 [ 94.233382][ T5315] ? __generic_file_write_iter+0xf9/0x230 [ 94.235848][ T5315] ? generic_file_write_iter+0x9a/0x330 [ 94.238096][ T5315] generic_file_write_iter+0xae/0x330 [ 94.240297][ T5315] vfs_write+0x612/0xba0 [ 94.242016][ T5315] ? __pfx_vfs_write+0x10/0x10 [ 94.244131][ T5315] ? __fget_files+0x2a/0x420 [ 94.246269][ T5315] ksys_write+0x150/0x270 [ 94.248172][ T5315] ? __pfx_ksys_write+0x10/0x10 [ 94.250161][ T5315] do_syscall_64+0x166/0x520 [ 94.252174][ T5315] ? trace_irq_disable+0x3b/0x140 [ 94.254396][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.258119][ T5315] ? clear_bhb_loop+0x70/0xc0 [ 94.260066][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.262648][ T5315] RIP: 0033:0x7fee85f9e159 [ 94.264602][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.273211][ T5315] RSP: 002b:00007fee86ed5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.277193][ T5315] RAX: ffffffffffffffda RBX: 00007fee86225fa0 RCX: 00007fee85f9e159 [ 94.280572][ T5315] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000005 [ 94.283936][ T5315] RBP: 00007fee8603503b R08: 0000000000000000 R09: 0000000000000000 [ 94.287410][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.290677][ T5315] R13: 00007fee86226038 R14: 00007fee86225fa0 R15: 00007fffbdfadaf8 [ 94.293951][ T5315] [ 94.295299][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.298436][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.302273][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.306615][ T5315] Call Trace: [ 94.308046][ T5315] [ 94.309317][ T5315] vpanic+0x56d/0xa60 [ 94.310991][ T5315] ? __pfx__printk+0x10/0x10 [ 94.312958][ T5315] ? __pfx_vpanic+0x10/0x10 [ 94.314888][ T5315] ? is_bpf_text_address+0x292/0x2b0 [ 94.317247][ T5315] ? is_bpf_text_address+0x26/0x2b0 [ 94.319460][ T5315] panic+0xc5/0xd0 [ 94.321031][ T5315] ? __pfx_panic+0x10/0x10 [ 94.322887][ T5315] __warn+0x315/0x4c0 [ 94.324568][ T5315] ? mark_buffer_dirty+0x299/0x410 [ 94.326817][ T5315] ? mark_buffer_dirty+0x299/0x410 [ 94.328942][ T5315] __report_bug+0x276/0x570 [ 94.330852][ T5315] ? filemap_get_entry+0xcd/0x3f0 [ 94.333070][ T5315] ? filemap_get_entry+0xcd/0x3f0 [ 94.335404][ T5315] ? mark_buffer_dirty+0x299/0x410 [ 94.337653][ T5315] ? __pfx___report_bug+0x10/0x10 [ 94.339953][ T5315] ? __pfx_folio_mark_accessed+0x10/0x10 [ 94.342587][ T5315] ? mark_buffer_dirty+0x299/0x410 [ 94.345027][ T5315] report_bug+0x16b/0x220 [ 94.347086][ T5315] ? mark_buffer_dirty+0x299/0x410 [ 94.349533][ T5315] ? mark_buffer_dirty+0x29b/0x410 [ 94.351953][ T5315] handle_bug+0x9c/0x200 [ 94.353870][ T5315] exc_invalid_op+0x1a/0x50 [ 94.355947][ T5315] asm_exc_invalid_op+0x1a/0x20 [ 94.358046][ T5315] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 94.360448][ T5315] Code: 4c 89 f7 e8 a9 01 d8 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 8f 62 66 ff eb 8c e8 88 62 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a 62 66 ff 90 0f 0b 90 e9 cf fd ff ff [ 94.368465][ T5315] RSP: 0018:ffffc9000f3bf828 EFLAGS: 00010293 [ 94.371003][ T5315] RAX: ffffffff82617938 RBX: ffff8880130022a0 RCX: ffff8880341d4b00 [ 94.374386][ T5315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 94.377745][ T5315] RBP: 0000000000000201 R08: ffff8880130022a7 R09: 1ffff11002600454 [ 94.381183][ T5315] R10: dffffc0000000000 R11: ffffed1002600455 R12: 000000000000000a [ 94.384601][ T5315] R13: ffff8880130022a0 R14: ffff88803203f8c0 R15: dffffc0000000000 [ 94.388036][ T5315] ? mark_buffer_dirty+0x298/0x410 [ 94.390225][ T5315] ? mark_buffer_dirty+0x298/0x410 [ 94.392442][ T5315] bfs_get_block+0x5c6/0xb50 [ 94.394500][ T5315] __block_write_begin_int+0x6c2/0x1900 [ 94.396985][ T5315] ? filemap_add_folio+0x336/0x4e0 [ 94.399168][ T5315] ? __pfx_bfs_get_block+0x10/0x10 [ 94.401461][ T5315] ? __pfx___block_write_begin_int+0x10/0x10 [ 94.404092][ T5315] ? __pfx_bfs_get_block+0x10/0x10 [ 94.406341][ T5315] block_write_begin+0x8d/0x120 [ 94.408310][ T5315] ? bfs_write_begin+0x1e/0xd0 [ 94.410221][ T5315] bfs_write_begin+0x35/0xd0 [ 94.412112][ T5315] generic_perform_write+0x2d5/0x8f0 [ 94.414345][ T5315] ? __pfx_generic_perform_write+0x10/0x10 [ 94.416892][ T5315] ? file_update_time_flags+0x1e0/0x440 [ 94.419234][ T5315] ? __generic_file_write_iter+0xf9/0x230 [ 94.421532][ T5315] ? generic_file_write_iter+0x9a/0x330 [ 94.423961][ T5315] generic_file_write_iter+0xae/0x330 [ 94.426240][ T5315] vfs_write+0x612/0xba0 [ 94.428003][ T5315] ? __pfx_vfs_write+0x10/0x10 [ 94.429818][ T5315] ? __fget_files+0x2a/0x420 [ 94.431654][ T5315] ksys_write+0x150/0x270 [ 94.433427][ T5315] ? __pfx_ksys_write+0x10/0x10 [ 94.435445][ T5315] do_syscall_64+0x166/0x520 [ 94.437383][ T5315] ? trace_irq_disable+0x3b/0x140 [ 94.439503][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.442117][ T5315] ? clear_bhb_loop+0x70/0xc0 [ 94.444087][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.446550][ T5315] RIP: 0033:0x7fee85f9e159 [ 94.448422][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.456260][ T5315] RSP: 002b:00007fee86ed5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.459601][ T5315] RAX: ffffffffffffffda RBX: 00007fee86225fa0 RCX: 00007fee85f9e159 [ 94.462911][ T5315] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000005 [ 94.466155][ T5315] RBP: 00007fee8603503b R08: 0000000000000000 R09: 0000000000000000 [ 94.469441][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.472705][ T5315] R13: 00007fee86226038 R14: 00007fee86225fa0 R15: 00007fffbdfadaf8 [ 94.476012][ T5315] [ 94.477753][ T5315] Kernel Offset: disabled [ 94.479539][ T5315] Rebooting in 86400 seconds..