program: r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x400, &(0x7f0000000340), 0x2, 0x786, &(0x7f0000000780)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r1 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x80342, 0x168) pwrite64(r1, &(0x7f0000000f80)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001000)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000004882, 0x0) io_setup(0x2, &(0x7f0000001080)=0x0) io_submit(r4, 0xca, &(0x7f00000010c0)=[&(0x7f0000001100)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000001140)="98", 0x2c1b0e8ca5, 0x1000000, 0x0, 0x10}]) [ 102.827587][ T5304] Bluetooth: hci0: command tx timeout [ 102.914148][ T5351] loop0: detected capacity change from 0 to 2048 [ 103.026529][ T5351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.074584][ T5351] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 103.078100][ T5351] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.078122][ T5351] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.078122][ T5351] [ 103.078131][ T5351] EXT4-fs (loop0): Total free blocks count 0 [ 103.078139][ T5351] EXT4-fs (loop0): Free/Dirty block details [ 103.078160][ T5351] EXT4-fs (loop0): free_blocks=4096 [ 103.078179][ T5351] EXT4-fs (loop0): dirty_blocks=64 [ 103.078187][ T5351] EXT4-fs (loop0): Block reservation details [ 103.078194][ T5351] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 103.136904][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 62 with error 28 [ 103.176668][ T5351] ------------[ cut here ]------------ [ 103.176682][ T5351] !folio_buffers(folio) [ 103.176702][ T5351] WARNING: fs/ext4/inode.c:3937 at ext4_dirty_folio+0x167/0x1b0, CPU#0: syz.0.0/5351 [ 103.185742][ T5351] Modules linked in: [ 103.187727][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.191499][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.195699][ T5351] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 103.198188][ T5351] Code: ef 0f a4 ff 49 83 3f 00 74 1a e8 24 eb 2b ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9f aa cc ff e8 0a eb 2b ff 90 <0f> 0b 90 eb e0 e8 ff ea 2b ff 90 0f 0b 90 eb a7 e8 f4 ea 2b ff 48 [ 103.207023][ T5351] RSP: 0018:ffffc9000e65f528 EFLAGS: 00010283 [ 103.210301][ T5351] RAX: ffffffff829d2cd6 RBX: ffffea000151a300 RCX: 0000000000100000 [ 103.213723][ T5351] RDX: ffffc9000efb2000 RSI: 00000000000062f1 RDI: 00000000000062f2 [ 103.217233][ T5351] RBP: 1ffffd40002a3460 R08: ffffea000151a307 R09: 1ffffd40002a3460 [ 103.220831][ T5351] R10: dffffc0000000000 R11: fffff940002a3461 R12: ffff888045d51678 [ 103.224244][ T5351] R13: 1ffffd40002a3461 R14: 0000000000000001 R15: ffffea000151a328 [ 103.227658][ T5351] FS: 00007fb7d706a6c0(0000) GS:ffff88808ac32000(0000) knlGS:0000000000000000 [ 103.232423][ T5351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.235433][ T5351] CR2: 00007fb7d7028000 CR3: 0000000014a42000 CR4: 0000000000352ef0 [ 103.239063][ T5351] Call Trace: [ 103.240744][ T5351] [ 103.242122][ T5351] bio_set_pages_dirty+0x36d/0xa70 [ 103.244369][ T5351] __blkdev_direct_IO+0x992/0x11a0 [ 103.246625][ T5351] ? __pfx_aio_complete_rw+0x10/0x10 [ 103.249003][ T5351] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 103.251613][ T5351] ? __lock_acquire+0x747/0x2de0 [ 103.253837][ T5351] ? __lock_acquire+0x747/0x2de0 [ 103.256045][ T5351] blkdev_direct_IO+0x1262/0x1840 [ 103.258290][ T5351] ? do_raw_spin_lock+0x12b/0x2f0 [ 103.260652][ T5351] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 103.262959][ T5351] ? reacquire_held_locks+0x117/0x1a0 [ 103.265307][ T5351] ? __mark_inode_dirty+0x705/0x13b0 [ 103.267650][ T5351] ? blkdev_read_iter+0x22e/0x530 [ 103.269979][ T5351] ? blkdev_read_iter+0x22e/0x530 [ 103.272323][ T5351] blkdev_read_iter+0x258/0x530 [ 103.274374][ T5351] aio_read+0x33a/0x4d0 [ 103.276077][ T5351] ? __pfx_aio_read+0x10/0x10 [ 103.278257][ T5351] io_submit_one+0x774/0x13d0 [ 103.280554][ T5351] ? lockdep_hardirqs_on+0x7b/0x110 [ 103.282955][ T5351] ? irqentry_exit+0x2a0/0x9b0 [ 103.285270][ T5351] ? __pfx_io_submit_one+0x10/0x10 [ 103.287872][ T5351] ? lock_acquire+0x115/0x350 [ 103.289934][ T5351] ? __might_fault+0xaf/0x130 [ 103.292310][ T5351] __se_sys_io_submit+0x195/0x340 [ 103.294463][ T5351] ? __pfx___se_sys_io_submit+0x10/0x10 [ 103.296814][ T5351] do_syscall_64+0x166/0x520 [ 103.298875][ T5351] ? trace_irq_disable+0x3b/0x140 [ 103.301234][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.303953][ T5351] ? clear_bhb_loop+0x70/0xc0 [ 103.305948][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.308576][ T5351] RIP: 0033:0x7fb7d619f559 [ 103.310846][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.319323][ T5351] RSP: 002b:00007fb7d7069fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 103.323115][ T5351] RAX: ffffffffffffffda RBX: 00007fb7d6425fa0 RCX: 00007fb7d619f559 [ 103.326655][ T5351] RDX: 00002000000010c0 RSI: 00000000000000ca RDI: 00007fb7d7028000 [ 103.330416][ T5351] RBP: 00007fb7d6236b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.333864][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.337238][ T5351] R13: 00007fb7d6426038 R14: 00007fb7d6425fa0 R15: 00007fffa7963ac8 [ 103.340926][ T5351] [ 103.342406][ T5351] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.345638][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.349650][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.353989][ T5351] Call Trace: [ 103.356598][ T5351] [ 103.357674][ T5351] vpanic+0x56d/0xa60 [ 103.359218][ T5351] ? __pfx__printk+0x10/0x10 [ 103.362105][ T5351] ? __pfx_vpanic+0x10/0x10 [ 103.363953][ T5351] ? is_bpf_text_address+0x292/0x2b0 [ 103.366104][ T5351] ? is_bpf_text_address+0x26/0x2b0 [ 103.368792][ T5351] panic+0xc5/0xd0 [ 103.370433][ T5351] ? __pfx_panic+0x10/0x10 [ 103.372354][ T5351] __warn+0x315/0x4c0 [ 103.374118][ T5351] ? ext4_dirty_folio+0x167/0x1b0 [ 103.376268][ T5351] ? ext4_dirty_folio+0x167/0x1b0 [ 103.378472][ T5351] __report_bug+0x276/0x570 [ 103.380452][ T5351] ? ext4_dirty_folio+0x167/0x1b0 [ 103.382635][ T5351] ? __pfx___report_bug+0x10/0x10 [ 103.384742][ T5351] ? pin_user_pages_fast+0x4d/0xb0 [ 103.387007][ T5351] ? iov_iter_extract_pages+0x496/0x690 [ 103.389412][ T5351] ? blkg_tryget+0x20/0x250 [ 103.391424][ T5351] ? ext4_dirty_folio+0x167/0x1b0 [ 103.393625][ T5351] report_bug+0x16b/0x220 [ 103.395553][ T5351] ? ext4_dirty_folio+0x167/0x1b0 [ 103.397732][ T5351] ? ext4_dirty_folio+0x169/0x1b0 [ 103.399952][ T5351] handle_bug+0x9c/0x200 [ 103.401819][ T5351] exc_invalid_op+0x1a/0x50 [ 103.403771][ T5351] asm_exc_invalid_op+0x1a/0x20 [ 103.405831][ T5351] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 103.408174][ T5351] Code: ef 0f a4 ff 49 83 3f 00 74 1a e8 24 eb 2b ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9f aa cc ff e8 0a eb 2b ff 90 <0f> 0b 90 eb e0 e8 ff ea 2b ff 90 0f 0b 90 eb a7 e8 f4 ea 2b ff 48 [ 103.416228][ T5351] RSP: 0018:ffffc9000e65f528 EFLAGS: 00010283 [ 103.418854][ T5351] RAX: ffffffff829d2cd6 RBX: ffffea000151a300 RCX: 0000000000100000 [ 103.422228][ T5351] RDX: ffffc9000efb2000 RSI: 00000000000062f1 RDI: 00000000000062f2 [ 103.425357][ T5351] RBP: 1ffffd40002a3460 R08: ffffea000151a307 R09: 1ffffd40002a3460 [ 103.429064][ T5351] R10: dffffc0000000000 R11: fffff940002a3461 R12: ffff888045d51678 [ 103.432395][ T5351] R13: 1ffffd40002a3461 R14: 0000000000000001 R15: ffffea000151a328 [ 103.435650][ T5351] ? ext4_dirty_folio+0x166/0x1b0 [ 103.437768][ T5351] ? ext4_dirty_folio+0x166/0x1b0 [ 103.440585][ T5351] bio_set_pages_dirty+0x36d/0xa70 [ 103.442687][ T5351] __blkdev_direct_IO+0x992/0x11a0 [ 103.444723][ T5351] ? __pfx_aio_complete_rw+0x10/0x10 [ 103.449201][ T5351] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 103.451535][ T5351] ? __lock_acquire+0x747/0x2de0 [ 103.453710][ T5351] ? __lock_acquire+0x747/0x2de0 [ 103.455686][ T5351] blkdev_direct_IO+0x1262/0x1840 [ 103.457739][ T5351] ? do_raw_spin_lock+0x12b/0x2f0 [ 103.459841][ T5351] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 103.462104][ T5351] ? reacquire_held_locks+0x117/0x1a0 [ 103.464291][ T5351] ? __mark_inode_dirty+0x705/0x13b0 [ 103.466587][ T5351] ? blkdev_read_iter+0x22e/0x530 [ 103.468644][ T5351] ? blkdev_read_iter+0x22e/0x530 [ 103.470840][ T5351] blkdev_read_iter+0x258/0x530 [ 103.472891][ T5351] aio_read+0x33a/0x4d0 [ 103.474680][ T5351] ? __pfx_aio_read+0x10/0x10 [ 103.476725][ T5351] io_submit_one+0x774/0x13d0 [ 103.478842][ T5351] ? lockdep_hardirqs_on+0x7b/0x110 [ 103.481038][ T5351] ? irqentry_exit+0x2a0/0x9b0 [ 103.483168][ T5351] ? __pfx_io_submit_one+0x10/0x10 [ 103.485501][ T5351] ? lock_acquire+0x115/0x350 [ 103.488847][ T5351] ? __might_fault+0xaf/0x130 [ 103.490933][ T5351] __se_sys_io_submit+0x195/0x340 [ 103.493096][ T5351] ? __pfx___se_sys_io_submit+0x10/0x10 [ 103.495370][ T5351] do_syscall_64+0x166/0x520 [ 103.497405][ T5351] ? trace_irq_disable+0x3b/0x140 [ 103.500244][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.502892][ T5351] ? clear_bhb_loop+0x70/0xc0 [ 103.504759][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.507260][ T5351] RIP: 0033:0x7fb7d619f559 [ 103.509253][ T5351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.517296][ T5351] RSP: 002b:00007fb7d7069fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 103.520829][ T5351] RAX: ffffffffffffffda RBX: 00007fb7d6425fa0 RCX: 00007fb7d619f559 [ 103.524085][ T5351] RDX: 00002000000010c0 RSI: 00000000000000ca RDI: 00007fb7d7028000 [ 103.527402][ T5351] RBP: 00007fb7d6236b20 R08: 0000000000000000 R09: 0000000000000000 [ 103.530702][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.534170][ T5351] R13: 00007fb7d6426038 R14: 00007fb7d6425fa0 R15: 00007fffa7963ac8 [ 103.537462][ T5351] [ 103.539271][ T5351] Kernel Offset: disabled [ 103.541161][ T5351] Rebooting in 86400 seconds..