program:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x97a9, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe, 0x1, 0x0, "ad01000000010000000d192cb8b8467000000000a00100"})
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x3b13ddc755f7a9d9)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x2)
mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=!d,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fsmagic=0x0000000000000008,dont_hash,hash,\x00'])
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x1, 0x140000000000000, 0x5, 0x7fffffff})
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r2, 0x201bf)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x131)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x200, 0x0, 0x3}, {0x4, 0x3}], "00ba00"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'k'}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50, 0x0, 0x4}, 0x28)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000080)={@local, @remote}, 0xc)
[ 85.345634][ T5322] Bluetooth: hci0: command tx timeout
[ 85.529815][ T5348] loop0: detected capacity change from 0 to 512
[ 85.638059][ T5348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 85.643455][ T5348] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 85.703891][ T5347] 9p: Could not find request transport: !d
[ 85.746967][ T5347] loop0: detected capacity change from 512 to 64
[ 85.754366][ T4402] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm kworker/u4:27: bg 0: bad block bitmap checksum
[ 85.789081][ T4402] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 74
[ 85.794062][ T4402] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 85.794062][ T4402]
[ 85.821842][ T5347] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Out of memory
[ 85.839143][ T5347] EXT4-fs error (device loop0): ext4_setattr:5984: inode #18: comm syz.0.0: mark_inode_dirty error
[ 85.844176][ T5347] EXT4-fs error (device loop0) in ext4_setattr:6035: Out of memory
[ 85.852648][ T5346] ------------[ cut here ]------------
[ 85.855526][ T5346] WARNING: mm/page-writeback.c:2710 at __folio_mark_dirty+0x202/0xe10, CPU#0: syz.0.0/5346
[ 85.859480][ T5346] Modules linked in:
[ 85.861532][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.865301][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.869995][ T5346] RIP: 0010:__folio_mark_dirty+0x202/0xe10
[ 85.872699][ T5346] Code: 3c 20 00 74 08 48 89 df e8 fb ce 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 2a 29 c3 ff 49 83 e6 08 75 20 e8 3f 24 c3 ff 90 <0f> 0b 90 eb 1a e8 34 24 c3 ff 48 8b 2c 24 e9 5d 07 00 00 e8 26 24
[ 85.880219][ T5346] RSP: 0000:ffffc9000de17810 EFLAGS: 00010093
[ 85.882685][ T5346] RAX: ffffffff81fde321 RBX: ffffea00008c4180 RCX: ffff888000790000
[ 85.886098][ T5346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 85.889631][ T5346] RBP: ffff88801200e4f8 R08: ffffea00008c4187 R09: 1ffffd4000118830
[ 85.892958][ T5346] R10: dffffc0000000000 R11: fffff94000118831 R12: dffffc0000000000
[ 85.896411][ T5346] R13: ffff88801200e500 R14: 0000000000000000 R15: 0000000000000001
[ 85.899777][ T5346] FS: 0000555566a6b500(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000
[ 85.903527][ T5346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.906261][ T5346] CR2: 0000200000000140 CR3: 00000000114da000 CR4: 0000000000352ef0
[ 85.909832][ T5346] Call Trace:
[ 85.911467][ T5346]
[ 85.912866][ T5346] ? do_raw_spin_unlock+0x4d/0x240
[ 85.914950][ T5346] block_dirty_folio+0x17a/0x1d0
[ 85.916823][ T5346] ext4_page_mkwrite+0xf07/0x1190
[ 85.918910][ T5346] ? __pfx_ext4_get_block_unwritten+0x10/0x10
[ 85.921578][ T5346] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 85.924004][ T5346] do_page_mkwrite+0x14d/0x310
[ 85.926129][ T5346] do_wp_page+0x2676/0x5810
[ 85.928151][ T5346] ? ___pte_offset_map+0x29/0x240
[ 85.930429][ T5346] ? __pfx_do_wp_page+0x10/0x10
[ 85.932630][ T5346] ? do_raw_spin_lock+0x121/0x290
[ 85.934905][ T5346] ? handle_mm_fault+0x1411/0x32b0
[ 85.937484][ T5346] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 85.939847][ T5346] handle_mm_fault+0x14c5/0x32b0
[ 85.942017][ T5346] ? handle_mm_fault+0xdb/0x32b0
[ 85.944175][ T5346] ? __pfx_handle_mm_fault+0x10/0x10
[ 85.946379][ T5346] ? lock_vma_under_rcu+0x42c/0x4a0
[ 85.948634][ T5346] ? __pfx_do_futex+0x10/0x10
[ 85.950692][ T5346] do_user_addr_fault+0xa7c/0x1380
[ 85.952879][ T5346] ? rcu_is_watching+0x15/0xb0
[ 85.954932][ T5346] ? trace_page_fault_user+0x84/0x1c0
[ 85.957253][ T5346] exc_page_fault+0x71/0xd0
[ 85.959318][ T5346] asm_exc_page_fault+0x26/0x30
[ 85.961438][ T5346] RIP: 0033:0x7f298dc555f3
[ 85.963441][ T5346] Code: 8b 44 24 08 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 7a 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 d2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 44 24 08 48
[ 85.971676][ T5346] RSP: 002b:00007ffc716766a0 EFLAGS: 00010246
[ 85.974359][ T5346] RAX: 0000200000000140 RBX: 0000000000000008 RCX: 0000000000000000
[ 85.978004][ T5346] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000555566a6b3c8
[ 85.981431][ T5346] RBP: 00007ffc716767a8 R08: 0000000000000000 R09: 0000000000000000
[ 85.984874][ T5346] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f298dfe5fac
[ 85.988284][ T5346] R13: 00007f298dfe5fa0 R14: fffffffffffffffe R15: 00007ffc716767f0
[ 85.991546][ T5346]
[ 85.992901][ T5346] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 85.996172][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.000190][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.004957][ T5346] Call Trace:
[ 86.006426][ T5346]
[ 86.007757][ T5346] vpanic+0x1e0/0x670
[ 86.009609][ T5346] panic+0xb9/0xc0
[ 86.011397][ T5346] ? __pfx_panic+0x10/0x10
[ 86.013345][ T5346] __warn+0x317/0x4b0
[ 86.015130][ T5346] ? __folio_mark_dirty+0x202/0xe10
[ 86.017493][ T5346] ? __folio_mark_dirty+0x202/0xe10
[ 86.019725][ T5346] __report_bug+0x288/0x500
[ 86.021788][ T5346] ? __folio_mark_dirty+0x202/0xe10
[ 86.024355][ T5346] ? __pfx___report_bug+0x10/0x10
[ 86.026582][ T5346] ? __lock_acquire+0x6b6/0x2cf0
[ 86.028707][ T5346] ? do_raw_spin_unlock+0x4d/0x240
[ 86.031161][ T5346] ? __folio_mark_dirty+0x202/0xe10
[ 86.033230][ T5346] report_bug+0x16a/0x220
[ 86.035240][ T5346] ? __folio_mark_dirty+0x202/0xe10
[ 86.037547][ T5346] ? __folio_mark_dirty+0x204/0xe10
[ 86.039862][ T5346] handle_bug+0x98/0x200
[ 86.041709][ T5346] exc_invalid_op+0x1a/0x50
[ 86.043925][ T5346] asm_exc_invalid_op+0x1a/0x20
[ 86.045970][ T5346] RIP: 0010:__folio_mark_dirty+0x202/0xe10
[ 86.048432][ T5346] Code: 3c 20 00 74 08 48 89 df e8 fb ce 2a 00 4c 8b 33 4c 89 f6 48 83 e6 08 31 ff e8 2a 29 c3 ff 49 83 e6 08 75 20 e8 3f 24 c3 ff 90 <0f> 0b 90 eb 1a e8 34 24 c3 ff 48 8b 2c 24 e9 5d 07 00 00 e8 26 24
[ 86.056660][ T5346] RSP: 0000:ffffc9000de17810 EFLAGS: 00010093
[ 86.059345][ T5346] RAX: ffffffff81fde321 RBX: ffffea00008c4180 RCX: ffff888000790000
[ 86.062525][ T5346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 86.065867][ T5346] RBP: ffff88801200e4f8 R08: ffffea00008c4187 R09: 1ffffd4000118830
[ 86.069104][ T5346] R10: dffffc0000000000 R11: fffff94000118831 R12: dffffc0000000000
[ 86.072379][ T5346] R13: ffff88801200e500 R14: 0000000000000000 R15: 0000000000000001
[ 86.075899][ T5346] ? __folio_mark_dirty+0x201/0xe10
[ 86.078284][ T5346] ? do_raw_spin_unlock+0x4d/0x240
[ 86.080487][ T5346] block_dirty_folio+0x17a/0x1d0
[ 86.082774][ T5346] ext4_page_mkwrite+0xf07/0x1190
[ 86.085081][ T5346] ? __pfx_ext4_get_block_unwritten+0x10/0x10
[ 86.087666][ T5346] ? __pfx_ext4_page_mkwrite+0x10/0x10
[ 86.089982][ T5346] do_page_mkwrite+0x14d/0x310
[ 86.092073][ T5346] do_wp_page+0x2676/0x5810
[ 86.094016][ T5346] ? ___pte_offset_map+0x29/0x240
[ 86.096149][ T5346] ? __pfx_do_wp_page+0x10/0x10
[ 86.098190][ T5346] ? do_raw_spin_lock+0x121/0x290
[ 86.100281][ T5346] ? handle_mm_fault+0x1411/0x32b0
[ 86.102377][ T5346] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 86.104626][ T5346] handle_mm_fault+0x14c5/0x32b0
[ 86.106733][ T5346] ? handle_mm_fault+0xdb/0x32b0
[ 86.108758][ T5346] ? __pfx_handle_mm_fault+0x10/0x10
[ 86.111175][ T5346] ? lock_vma_under_rcu+0x42c/0x4a0
[ 86.113790][ T5346] ? __pfx_do_futex+0x10/0x10
[ 86.116065][ T5346] do_user_addr_fault+0xa7c/0x1380
[ 86.118739][ T5346] ? rcu_is_watching+0x15/0xb0
[ 86.120904][ T5346] ? trace_page_fault_user+0x84/0x1c0
[ 86.123278][ T5346] exc_page_fault+0x71/0xd0
[ 86.125257][ T5346] asm_exc_page_fault+0x26/0x30
[ 86.127493][ T5346] RIP: 0033:0x7f298dc555f3
[ 86.129483][ T5346] Code: 8b 44 24 08 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 7a 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 d2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 44 24 08 48
[ 86.137261][ T5346] RSP: 002b:00007ffc716766a0 EFLAGS: 00010246
[ 86.139991][ T5346] RAX: 0000200000000140 RBX: 0000000000000008 RCX: 0000000000000000
[ 86.143667][ T5346] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000555566a6b3c8
[ 86.147136][ T5346] RBP: 00007ffc716767a8 R08: 0000000000000000 R09: 0000000000000000
[ 86.150561][ T5346] R10: 0000000000000000 R11: 0000000000000001 R12: 00007f298dfe5fac
[ 86.154378][ T5346] R13: 00007f298dfe5fa0 R14: fffffffffffffffe R15: 00007ffc716767f0
[ 86.157626][ T5346]
[ 86.159323][ T5346] Kernel Offset: disabled
[ 86.161109][ T5346] Rebooting in 86400 seconds..