program: bind$netlink(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000cc0)='ext4\x00', &(0x7f0000000d00)='./file1\x00', 0x400, &(0x7f0000000d40), 0x2, 0x786, &(0x7f0000000d80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./file1\x00', 0x80342, 0x168) pwrite64(r1, &(0x7f0000001580)='2', 0xfdef, 0xfecc) r2 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001600)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004882, 0x0) io_setup(0x2, &(0x7f0000000340)=0x0) io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) [ 102.603750][ T4664] Bluetooth: hci0: command tx timeout [ 102.724756][ T5350] loop0: detected capacity change from 0 to 2048 [ 102.819664][ T5350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.876684][ T5350] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 102.878695][ T5350] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.878710][ T5350] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.878710][ T5350] [ 102.878716][ T5350] EXT4-fs (loop0): Total free blocks count 0 [ 102.878721][ T5350] EXT4-fs (loop0): Free/Dirty block details [ 102.878734][ T5350] EXT4-fs (loop0): free_blocks=4096 [ 102.878745][ T5350] EXT4-fs (loop0): dirty_blocks=64 [ 102.878750][ T5350] EXT4-fs (loop0): Block reservation details [ 102.878754][ T5350] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 102.961723][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 26 with error 28 [ 102.992596][ T5350] ------------[ cut here ]------------ [ 102.992610][ T5350] !folio_buffers(folio) [ 102.992616][ T5350] WARNING: fs/ext4/inode.c:4556 at ext4_dirty_folio+0x167/0x1b0, CPU#0: syz.0.0/5350 [ 103.001640][ T5350] Modules linked in: [ 103.003373][ T5350] CPU: 0 UID: 0 PID: 5350 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.007559][ T5350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.012053][ T5350] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 103.014815][ T5350] Code: 0f 7c a3 ff 49 83 3f 00 74 1a e8 44 da 2a ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6f 21 cc ff e8 2a da 2a ff 90 <0f> 0b 90 eb e0 e8 1f da 2a ff 90 0f 0b 90 eb a7 e8 14 da 2a ff 48 [ 103.023211][ T5350] RSP: 0018:ffffc9000f7b7508 EFLAGS: 00010287 [ 103.026427][ T5350] RAX: ffffffff829e4cd6 RBX: ffffea00013bd700 RCX: 0000000000100000 [ 103.029869][ T5350] RDX: ffffc9000ef3a000 RSI: 0000000000005b2d RDI: 0000000000005b2e [ 103.033290][ T5350] RBP: 1ffffd4000277ae0 R08: ffffea00013bd707 R09: 1ffffd4000277ae0 [ 103.036888][ T5350] R10: dffffc0000000000 R11: fffff94000277ae1 R12: ffff8880458d2898 [ 103.040304][ T5350] R13: 1ffffd4000277ae1 R14: 0000000000000001 R15: ffffea00013bd728 [ 103.043939][ T5350] FS: 00007f51c64526c0(0000) GS:ffff88808aa01000(0000) knlGS:0000000000000000 [ 103.047774][ T5350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.050578][ T5350] CR2: 00007f987770a945 CR3: 0000000023f2d000 CR4: 0000000000352ef0 [ 103.054155][ T5350] Call Trace: [ 103.055713][ T5350] [ 103.057038][ T5350] bio_set_pages_dirty+0x36d/0xa70 [ 103.059281][ T5350] __blkdev_direct_IO+0x92d/0x1100 [ 103.061572][ T5350] ? __pfx_aio_complete_rw+0x10/0x10 [ 103.063960][ T5350] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 103.066243][ T5350] ? __lock_acquire+0x747/0x2de0 [ 103.068499][ T5350] blkdev_direct_IO+0x770/0x1840 [ 103.070990][ T5350] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 103.074034][ T5350] ? reacquire_held_locks+0x117/0x1a0 [ 103.077447][ T5350] ? __mark_inode_dirty+0x705/0x13b0 [ 103.080068][ T5350] ? blkdev_read_iter+0x228/0x590 [ 103.082354][ T5350] ? touch_atime+0x37c/0x670 [ 103.084575][ T5350] ? blkdev_read_iter+0x228/0x590 [ 103.086839][ T5350] blkdev_read_iter+0x249/0x590 [ 103.089050][ T5350] aio_read+0x33a/0x4d0 [ 103.090903][ T5350] ? __pfx_aio_read+0x10/0x10 [ 103.093066][ T5350] io_submit_one+0x774/0x13d0 [ 103.095215][ T5350] ? lockdep_hardirqs_on+0x7b/0x110 [ 103.097474][ T5350] ? irqentry_exit+0x2a0/0x9b0 [ 103.099869][ T5350] ? __pfx_io_submit_one+0x10/0x10 [ 103.102245][ T5350] ? lock_acquire+0x115/0x350 [ 103.104467][ T5350] ? __might_fault+0xaf/0x130 [ 103.106565][ T5350] __se_sys_io_submit+0x195/0x340 [ 103.108725][ T5350] ? __pfx___se_sys_io_submit+0x10/0x10 [ 103.111088][ T5350] do_syscall_64+0x166/0x520 [ 103.112988][ T5350] ? trace_irq_disable+0x3b/0x140 [ 103.115240][ T5350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.117938][ T5350] ? clear_bhb_loop+0x70/0xc0 [ 103.120024][ T5350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.122676][ T5350] RIP: 0033:0x7f51c559f559 [ 103.124925][ T5350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.133169][ T5350] RSP: 002b:00007f51c6451fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 103.136817][ T5350] RAX: ffffffffffffffda RBX: 00007f51c5825fa0 RCX: 00007f51c559f559 [ 103.139969][ T5350] RDX: 00002000000000c0 RSI: 00000000000000ca RDI: 00007f51c6410000 [ 103.143514][ T5350] RBP: 00007f51c5636b50 R08: 0000000000000000 R09: 0000000000000000 [ 103.146984][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.150440][ T5350] R13: 00007f51c5826038 R14: 00007f51c5825fa0 R15: 00007ffc380545a8 [ 103.153882][ T5350] [ 103.155160][ T5350] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.157975][ T5350] CPU: 0 UID: 0 PID: 5350 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.161904][ T5350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.165881][ T5350] Call Trace: [ 103.167192][ T5350] [ 103.168423][ T5350] vpanic+0x26f/0x710 [ 103.169920][ T5350] panic+0xc5/0xd0 [ 103.171246][ T5350] ? __pfx_panic+0x10/0x10 [ 103.172818][ T5350] __warn+0x315/0x4c0 [ 103.174284][ T5350] ? ext4_dirty_folio+0x167/0x1b0 [ 103.176188][ T5350] ? ext4_dirty_folio+0x167/0x1b0 [ 103.178138][ T5350] __report_bug+0x276/0x570 [ 103.179942][ T5350] ? ext4_dirty_folio+0x167/0x1b0 [ 103.182112][ T5350] ? __pfx___report_bug+0x10/0x10 [ 103.184264][ T5350] ? is_valid_gup_args+0x11f/0x200 [ 103.186475][ T5350] ? pin_user_pages_fast+0x4d/0xb0 [ 103.188800][ T5350] ? iov_iter_extract_pages+0x496/0x690 [ 103.191209][ T5350] ? ext4_dirty_folio+0x167/0x1b0 [ 103.193419][ T5350] report_bug+0x16b/0x220 [ 103.195319][ T5350] ? ext4_dirty_folio+0x167/0x1b0 [ 103.197571][ T5350] ? ext4_dirty_folio+0x169/0x1b0 [ 103.199798][ T5350] handle_bug+0x9c/0x200 [ 103.201634][ T5350] exc_invalid_op+0x1a/0x50 [ 103.203567][ T5350] asm_exc_invalid_op+0x1a/0x20 [ 103.205688][ T5350] RIP: 0010:ext4_dirty_folio+0x167/0x1b0 [ 103.208086][ T5350] Code: 0f 7c a3 ff 49 83 3f 00 74 1a e8 44 da 2a ff 4c 89 e7 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6f 21 cc ff e8 2a da 2a ff 90 <0f> 0b 90 eb e0 e8 1f da 2a ff 90 0f 0b 90 eb a7 e8 14 da 2a ff 48 [ 103.216087][ T5350] RSP: 0018:ffffc9000f7b7508 EFLAGS: 00010287 [ 103.218780][ T5350] RAX: ffffffff829e4cd6 RBX: ffffea00013bd700 RCX: 0000000000100000 [ 103.222306][ T5350] RDX: ffffc9000ef3a000 RSI: 0000000000005b2d RDI: 0000000000005b2e [ 103.225840][ T5350] RBP: 1ffffd4000277ae0 R08: ffffea00013bd707 R09: 1ffffd4000277ae0 [ 103.235552][ T5350] R10: dffffc0000000000 R11: fffff94000277ae1 R12: ffff8880458d2898 [ 103.239148][ T5350] R13: 1ffffd4000277ae1 R14: 0000000000000001 R15: ffffea00013bd728 [ 103.242614][ T5350] ? ext4_dirty_folio+0x166/0x1b0 [ 103.244972][ T5350] ? ext4_dirty_folio+0x166/0x1b0 [ 103.247133][ T5350] bio_set_pages_dirty+0x36d/0xa70 [ 103.249431][ T5350] __blkdev_direct_IO+0x92d/0x1100 [ 103.251600][ T5350] ? __pfx_aio_complete_rw+0x10/0x10 [ 103.253852][ T5350] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 103.256294][ T5350] ? __lock_acquire+0x747/0x2de0 [ 103.258495][ T5350] blkdev_direct_IO+0x770/0x1840 [ 103.260743][ T5350] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 103.263056][ T5350] ? reacquire_held_locks+0x117/0x1a0 [ 103.265397][ T5350] ? __mark_inode_dirty+0x705/0x13b0 [ 103.267812][ T5350] ? blkdev_read_iter+0x228/0x590 [ 103.270122][ T5350] ? touch_atime+0x37c/0x670 [ 103.272177][ T5350] ? blkdev_read_iter+0x228/0x590 [ 103.274449][ T5350] blkdev_read_iter+0x249/0x590 [ 103.276595][ T5350] aio_read+0x33a/0x4d0 [ 103.278429][ T5350] ? __pfx_aio_read+0x10/0x10 [ 103.280440][ T5350] io_submit_one+0x774/0x13d0 [ 103.282520][ T5350] ? lockdep_hardirqs_on+0x7b/0x110 [ 103.284896][ T5350] ? irqentry_exit+0x2a0/0x9b0 [ 103.287063][ T5350] ? __pfx_io_submit_one+0x10/0x10 [ 103.289373][ T5350] ? lock_acquire+0x115/0x350 [ 103.291519][ T5350] ? __might_fault+0xaf/0x130 [ 103.293631][ T5350] __se_sys_io_submit+0x195/0x340 [ 103.295910][ T5350] ? __pfx___se_sys_io_submit+0x10/0x10 [ 103.298414][ T5350] do_syscall_64+0x166/0x520 [ 103.300475][ T5350] ? trace_irq_disable+0x3b/0x140 [ 103.302758][ T5350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.305488][ T5350] ? clear_bhb_loop+0x70/0xc0 [ 103.307644][ T5350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.310754][ T5350] RIP: 0033:0x7f51c559f559 [ 103.315461][ T5350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.323833][ T5350] RSP: 002b:00007f51c6451fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 103.327540][ T5350] RAX: ffffffffffffffda RBX: 00007f51c5825fa0 RCX: 00007f51c559f559 [ 103.330849][ T5350] RDX: 00002000000000c0 RSI: 00000000000000ca RDI: 00007f51c6410000 [ 103.334256][ T5350] RBP: 00007f51c5636b50 R08: 0000000000000000 R09: 0000000000000000 [ 103.337733][ T5350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.341210][ T5350] R13: 00007f51c5826038 R14: 00007f51c5825fa0 R15: 00007ffc380545a8 [ 103.344632][ T5350] [ 103.346634][ T5350] Kernel Offset: disabled [ 103.348607][ T5350] Rebooting in 86400 seconds..