program:
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000380)={0x8000, 0xb8e, &(0x7f00000001c0)="f56bea639a5f29a4636d0e369b44e7a30b84680937094305b179c47c1121ebd03b01c00037093aa9eaccf6b0d3b819efaf27432646c8175111fa159e71b6abed7dbe3543130c343028e7479bbb244564027167a0bee6d44999dc41efa7d3213dcaf3f5462a9f30995bfea2c5659e67bfc760bc28b87ad6a4dbd0b138a8cc448b427e09f010a1c52265cb4bfe739ff47b4b3d2d6933184061e6f08e6f50b4a26cc276d8156b69117d698fa347871f55098da52bf9da46e63584dddf57f192a5957cb9487a68a3", &(0x7f00000002c0)="81b5b32ec61505c8dd40850969912acf29d5125c88558285aa2ce6a0a6a85a90414f8c402233875ca8875ec59bf00f9174a9410040cc6519d59117eda9dfcfc2b815e634786720d928a4b0633720d7e0bab958c987b95566573606c2dee675149e044c5b7602dc01b7b744cd1b2af7e4b4573ce189e9a595cd84a3d9590f7c783bb99f93c9939f135ec2ffbbee5b45aa58e85fa8d5dafb44e8cb49180b3477c34078c06f70d6c69c3ef7e388158d9028a37b21f282764b75f8fd4d69", 0xc6, 0xbc})
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0)
r3 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r5, 0x1, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x70, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0)
mknodat$loop(r2, &(0x7f0000000000)='./file1\x00', 0x1, 0x0)
[ 94.999157][ T4646] Bluetooth: hci0: command tx timeout
[ 95.130601][ T5321] loop0: detected capacity change from 0 to 2048
[ 95.264069][ T5321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 95.285550][ T5320] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 95.298046][ T5320] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 95.298071][ T5320] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 95.298071][ T5320]
[ 95.298079][ T5320] EXT4-fs (loop0): Total free blocks count 0
[ 95.298091][ T5320] EXT4-fs (loop0): Free/Dirty block details
[ 95.298113][ T5320] EXT4-fs (loop0): free_blocks=4096
[ 95.298131][ T5320] EXT4-fs (loop0): dirty_blocks=64
[ 95.298138][ T5320] EXT4-fs (loop0): Block reservation details
[ 95.298145][ T5320] EXT4-fs (loop0): i_reserved_data_blocks=4
[ 95.371049][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 18 with error 28
[ 95.406055][ T5321] ------------[ cut here ]------------
[ 95.406069][ T5321] !folio_buffers(folio)
[ 95.406075][ T5321] WARNING: fs/ext4/inode.c:3937 at ext4_dirty_folio+0x167/0x1b0, CPU#0: syz.0.0/5321
[ 95.415503][ T5321] Modules linked in:
[ 95.417436][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.421397][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.425735][ T5321] RIP: 0010:ext4_dirty_folio+0x167/0x1b0
[ 95.428331][ T5321] Code: ff 32 a5 ff 49 83 3f 00 74 1a e8 b4 8c 33 ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ef 33 cd ff e8 9a 8c 33 ff 90 <0f> 0b 90 eb e0 e8 8f 8c 33 ff 90 0f 0b 90 eb a7 e8 84 8c 33 ff 48
[ 95.436668][ T5321] RSP: 0018:ffffc9000e0a7ac8 EFLAGS: 00010283
[ 95.439459][ T5321] RAX: ffffffff829456f6 RBX: ffffea0001358d80 RCX: 0000000000100000
[ 95.443162][ T5321] RDX: ffffc9000eb2a000 RSI: 00000000000057ac RDI: 00000000000057ad
[ 95.446759][ T5321] RBP: 1ffffd400026b1b0 R08: ffffea0001358d87 R09: 1ffffd400026b1b0
[ 95.450180][ T5321] R10: dffffc0000000000 R11: fffff9400026b1b1 R12: ffff888043dd5ef8
[ 95.453660][ T5321] R13: 1ffffd400026b1b1 R14: 0000000000000001 R15: ffffea0001358da8
[ 95.457369][ T5321] FS: 00007fba9f4f76c0(0000) GS:ffff88808c2c2000(0000) knlGS:0000000000000000
[ 95.461348][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.464475][ T5321] CR2: 0000200000001bc0 CR3: 000000001fcd3000 CR4: 0000000000352ef0
[ 95.468090][ T5321] Call Trace:
[ 95.469691][ T5321]
[ 95.471144][ T5321] unpin_user_pages_dirty_lock+0x267/0x310
[ 95.473796][ T5321] process_vm_rw+0x8fa/0xba0
[ 95.475955][ T5321] ? __pfx_process_vm_rw+0x10/0x10
[ 95.478374][ T5321] ? futex_wait+0x2a2/0x390
[ 95.480528][ T5321] ? rcu_is_watching+0x16/0xb0
[ 95.482708][ T5321] __x64_sys_process_vm_writev+0xe0/0x100
[ 95.485913][ T5321] do_syscall_64+0x166/0x520
[ 95.488590][ T5321] ? trace_irq_disable+0x3b/0x140
[ 95.491155][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.493957][ T5321] ? clear_bhb_loop+0x70/0xc0
[ 95.495989][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.498738][ T5321] RIP: 0033:0x7fba9e59e159
[ 95.500746][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.509113][ T5321] RSP: 002b:00007fba9f4f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[ 95.513204][ T5321] RAX: ffffffffffffffda RBX: 00007fba9e825fa0 RCX: 00007fba9e59e159
[ 95.517038][ T5321] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 0000000000000006
[ 95.520513][ T5321] RBP: 00007fba9e63506b R08: 0000000000000001 R09: 0000000000000000
[ 95.523887][ T5321] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000000
[ 95.527314][ T5321] R13: 00007fba9e826038 R14: 00007fba9e825fa0 R15: 00007ffe6eb5dde8
[ 95.530587][ T5321]
[ 95.531786][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.534358][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.538155][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.542363][ T5321] Call Trace:
[ 95.543881][ T5321]
[ 95.545266][ T5321] vpanic+0x56d/0xa60
[ 95.546989][ T5321] ? __pfx__printk+0x10/0x10
[ 95.549201][ T5321] ? __pfx_vpanic+0x10/0x10
[ 95.551299][ T5321] ? is_bpf_text_address+0x292/0x2b0
[ 95.553655][ T5321] ? is_bpf_text_address+0x26/0x2b0
[ 95.555958][ T5321] panic+0xc5/0xd0
[ 95.557682][ T5321] ? __pfx_panic+0x10/0x10
[ 95.559611][ T5321] __warn+0x315/0x4c0
[ 95.561242][ T5321] ? ext4_dirty_folio+0x167/0x1b0
[ 95.563498][ T5321] ? ext4_dirty_folio+0x167/0x1b0
[ 95.565808][ T5321] __report_bug+0x276/0x570
[ 95.567798][ T5321] ? ext4_dirty_folio+0x167/0x1b0
[ 95.569961][ T5321] ? __pfx___report_bug+0x10/0x10
[ 95.572147][ T5321] ? lockdep_hardirqs_on+0x7b/0x110
[ 95.574238][ T5321] ? irqentry_exit+0x218/0x910
[ 95.576012][ T5321] ? trace_irq_disable+0x3b/0x140
[ 95.578077][ T5321] ? ext4_dirty_folio+0x169/0x1b0
[ 95.580247][ T5321] ? ext4_dirty_folio+0x167/0x1b0
[ 95.582471][ T5321] report_bug+0x16b/0x220
[ 95.584419][ T5321] ? ext4_dirty_folio+0x167/0x1b0
[ 95.586685][ T5321] ? ext4_dirty_folio+0x169/0x1b0
[ 95.588939][ T5321] handle_bug+0x9c/0x200
[ 95.590920][ T5321] exc_invalid_op+0x1a/0x50
[ 95.592938][ T5321] asm_exc_invalid_op+0x1a/0x20
[ 95.595454][ T5321] RIP: 0010:ext4_dirty_folio+0x167/0x1b0
[ 95.597924][ T5321] Code: ff 32 a5 ff 49 83 3f 00 74 1a e8 b4 8c 33 ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ef 33 cd ff e8 9a 8c 33 ff 90 <0f> 0b 90 eb e0 e8 8f 8c 33 ff 90 0f 0b 90 eb a7 e8 84 8c 33 ff 48
[ 95.605802][ T5321] RSP: 0018:ffffc9000e0a7ac8 EFLAGS: 00010283
[ 95.608424][ T5321] RAX: ffffffff829456f6 RBX: ffffea0001358d80 RCX: 0000000000100000
[ 95.611892][ T5321] RDX: ffffc9000eb2a000 RSI: 00000000000057ac RDI: 00000000000057ad
[ 95.615416][ T5321] RBP: 1ffffd400026b1b0 R08: ffffea0001358d87 R09: 1ffffd400026b1b0
[ 95.618936][ T5321] R10: dffffc0000000000 R11: fffff9400026b1b1 R12: ffff888043dd5ef8
[ 95.622535][ T5321] R13: 1ffffd400026b1b1 R14: 0000000000000001 R15: ffffea0001358da8
[ 95.626099][ T5321] ? ext4_dirty_folio+0x166/0x1b0
[ 95.628408][ T5321] ? ext4_dirty_folio+0x166/0x1b0
[ 95.630563][ T5321] unpin_user_pages_dirty_lock+0x267/0x310
[ 95.633155][ T5321] process_vm_rw+0x8fa/0xba0
[ 95.635257][ T5321] ? __pfx_process_vm_rw+0x10/0x10
[ 95.637514][ T5321] ? futex_wait+0x2a2/0x390
[ 95.639519][ T5321] ? rcu_is_watching+0x16/0xb0
[ 95.641680][ T5321] __x64_sys_process_vm_writev+0xe0/0x100
[ 95.644192][ T5321] do_syscall_64+0x166/0x520
[ 95.646252][ T5321] ? trace_irq_disable+0x3b/0x140
[ 95.648523][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.651503][ T5321] ? clear_bhb_loop+0x70/0xc0
[ 95.653690][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.656338][ T5321] RIP: 0033:0x7fba9e59e159
[ 95.658340][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.666873][ T5321] RSP: 002b:00007fba9f4f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[ 95.670632][ T5321] RAX: ffffffffffffffda RBX: 00007fba9e825fa0 RCX: 00007fba9e59e159
[ 95.674325][ T5321] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 0000000000000006
[ 95.677833][ T5321] RBP: 00007fba9e63506b R08: 0000000000000001 R09: 0000000000000000
[ 95.681344][ T5321] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000000
[ 95.684861][ T5321] R13: 00007fba9e826038 R14: 00007fba9e825fa0 R15: 00007ffe6eb5dde8
[ 95.688384][ T5321]
[ 95.690175][ T5321] Kernel Offset: disabled
[ 95.692100][ T5321] Rebooting in 86400 seconds..