program: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000008c0), 0xfecc) (async) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000e00)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r4, &(0x7f0000000080)='$', 0x1}]) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) [ 94.270899][ T4644] Bluetooth: hci0: command tx timeout [ 94.339938][ C0] Illegal XDP return value 16128 on prog (id 2) dev bond_slave_1, expect packet loss! [ 94.357570][ T5318] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 94.357980][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.358696][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.389276][ T5318] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.389364][ T5318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.390328][ T5318] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.390406][ T5318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.410463][ T5317] loop0: detected capacity change from 0 to 64 [ 94.415483][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.415604][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.504929][ T5317] ------------[ cut here ]------------ [ 94.505355][ T5317] !buffer_uptodate(bh) [ 94.505363][ T5317] WARNING: fs/buffer.c:991 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5317 [ 94.515005][ T5317] Modules linked in: [ 94.517246][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.520963][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.525317][ T5317] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 94.527713][ T5317] Code: 4c 89 f7 e8 99 00 d8 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 3f 5a 66 ff eb 8c e8 38 5a 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 2a 5a 66 ff 90 0f 0b 90 e9 cf fd ff ff [ 94.535581][ T5317] RSP: 0018:ffffc9000dcf7828 EFLAGS: 00010293 [ 94.538191][ T5317] RAX: ffffffff82618958 RBX: ffff888044152e00 RCX: ffff888000f82580 [ 94.541475][ T5317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 94.544864][ T5317] RBP: 0000000000000201 R08: ffff888044152e07 R09: 1ffff1100882a5c0 [ 94.548131][ T5317] R10: dffffc0000000000 R11: ffffed100882a5c1 R12: 000000000000000a [ 94.551529][ T5317] R13: ffff888044152e00 R14: ffff8880441502a0 R15: dffffc0000000000 [ 94.556151][ T5317] FS: 00007f1f003396c0(0000) GS:ffff88808c2c2000(0000) knlGS:0000000000000000 [ 94.559854][ T5317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.562687][ T5317] CR2: 0000200000002000 CR3: 00000000129fe000 CR4: 0000000000352ef0 [ 94.565949][ T5317] Call Trace: [ 94.567171][ T5317] [ 94.568325][ T5317] bfs_get_block+0x5c6/0xb50 [ 94.570178][ T5317] __block_write_begin_int+0x6c2/0x1900 [ 94.572560][ T5317] ? filemap_add_folio+0x336/0x4e0 [ 94.574709][ T5317] ? __pfx_bfs_get_block+0x10/0x10 [ 94.577160][ T5317] ? __pfx___block_write_begin_int+0x10/0x10 [ 94.579716][ T5317] ? __pfx_bfs_get_block+0x10/0x10 [ 94.581873][ T5317] block_write_begin+0x8d/0x120 [ 94.584381][ T5317] ? bfs_write_begin+0x1e/0xd0 [ 94.586386][ T5317] bfs_write_begin+0x35/0xd0 [ 94.588471][ T5317] generic_perform_write+0x2d5/0x8f0 [ 94.590845][ T5317] ? __pfx_generic_perform_write+0x10/0x10 [ 94.593482][ T5317] ? file_update_time_flags+0x1e0/0x440 [ 94.595529][ T5317] ? __generic_file_write_iter+0xf9/0x230 [ 94.597545][ T5317] ? generic_file_write_iter+0x9a/0x330 [ 94.599753][ T5317] generic_file_write_iter+0xae/0x330 [ 94.602224][ T5317] vfs_write+0x612/0xba0 [ 94.604219][ T5317] ? __pfx_vfs_write+0x10/0x10 [ 94.606331][ T5317] ? __fget_files+0x2a/0x420 [ 94.608429][ T5317] ksys_write+0x150/0x270 [ 94.610261][ T5317] ? __pfx_ksys_write+0x10/0x10 [ 94.612435][ T5317] do_syscall_64+0x166/0x520 [ 94.614563][ T5317] ? trace_irq_disable+0x3b/0x140 [ 94.616792][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.619395][ T5317] ? clear_bhb_loop+0x70/0xc0 [ 94.621446][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.624066][ T5317] RIP: 0033:0x7f1eff39e159 [ 94.625992][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.634580][ T5317] RSP: 002b:00007f1f00338fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.638260][ T5317] RAX: ffffffffffffffda RBX: 00007f1eff625fa0 RCX: 00007f1eff39e159 [ 94.641779][ T5317] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000008 [ 94.645111][ T5317] RBP: 00007f1eff43506b R08: 0000000000000000 R09: 0000000000000000 [ 94.648304][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.651768][ T5317] R13: 00007f1eff626038 R14: 00007f1eff625fa0 R15: 00007ffea8ee7878 [ 94.655473][ T5317] [ 94.656933][ T5317] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.660114][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.664131][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.668134][ T5317] Call Trace: [ 94.669522][ T5317] [ 94.670725][ T5317] vpanic+0x56d/0xa60 [ 94.672361][ T5317] ? __pfx__printk+0x10/0x10 [ 94.674242][ T5317] ? __pfx_vpanic+0x10/0x10 [ 94.676276][ T5317] ? is_bpf_text_address+0x292/0x2b0 [ 94.678597][ T5317] ? is_bpf_text_address+0x26/0x2b0 [ 94.680918][ T5317] panic+0xc5/0xd0 [ 94.682620][ T5317] ? __pfx_panic+0x10/0x10 [ 94.684672][ T5317] __warn+0x315/0x4c0 [ 94.686211][ T5317] ? mark_buffer_dirty+0x299/0x410 [ 94.688207][ T5317] ? mark_buffer_dirty+0x299/0x410 [ 94.690298][ T5317] __report_bug+0x276/0x570 [ 94.692179][ T5317] ? filemap_get_entry+0xcd/0x3f0 [ 94.694280][ T5317] ? filemap_get_entry+0xcd/0x3f0 [ 94.696279][ T5317] ? mark_buffer_dirty+0x299/0x410 [ 94.698287][ T5317] ? __pfx___report_bug+0x10/0x10 [ 94.700192][ T5317] ? __pfx_folio_mark_accessed+0x10/0x10 [ 94.702300][ T5317] ? mark_buffer_dirty+0x299/0x410 [ 94.704168][ T5317] report_bug+0x16b/0x220 [ 94.705760][ T5317] ? mark_buffer_dirty+0x299/0x410 [ 94.707728][ T5317] ? mark_buffer_dirty+0x29b/0x410 [ 94.709611][ T5317] handle_bug+0x9c/0x200 [ 94.711216][ T5317] exc_invalid_op+0x1a/0x50 [ 94.713029][ T5317] asm_exc_invalid_op+0x1a/0x20 [ 94.714893][ T5317] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 94.717089][ T5317] Code: 4c 89 f7 e8 99 00 d8 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 3f 5a 66 ff eb 8c e8 38 5a 66 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 2a 5a 66 ff 90 0f 0b 90 e9 cf fd ff ff [ 94.724916][ T5317] RSP: 0018:ffffc9000dcf7828 EFLAGS: 00010293 [ 94.727278][ T5317] RAX: ffffffff82618958 RBX: ffff888044152e00 RCX: ffff888000f82580 [ 94.730443][ T5317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 94.734932][ T5317] RBP: 0000000000000201 R08: ffff888044152e07 R09: 1ffff1100882a5c0 [ 94.737888][ T5317] R10: dffffc0000000000 R11: ffffed100882a5c1 R12: 000000000000000a [ 94.740992][ T5317] R13: ffff888044152e00 R14: ffff8880441502a0 R15: dffffc0000000000 [ 94.744185][ T5317] ? mark_buffer_dirty+0x298/0x410 [ 94.746236][ T5317] ? mark_buffer_dirty+0x298/0x410 [ 94.748439][ T5317] bfs_get_block+0x5c6/0xb50 [ 94.750585][ T5317] __block_write_begin_int+0x6c2/0x1900 [ 94.753421][ T5317] ? filemap_add_folio+0x336/0x4e0 [ 94.755811][ T5317] ? __pfx_bfs_get_block+0x10/0x10 [ 94.758091][ T5317] ? __pfx___block_write_begin_int+0x10/0x10 [ 94.760740][ T5317] ? __pfx_bfs_get_block+0x10/0x10 [ 94.763020][ T5317] block_write_begin+0x8d/0x120 [ 94.765365][ T5317] ? bfs_write_begin+0x1e/0xd0 [ 94.767524][ T5317] bfs_write_begin+0x35/0xd0 [ 94.769506][ T5317] generic_perform_write+0x2d5/0x8f0 [ 94.771609][ T5317] ? __pfx_generic_perform_write+0x10/0x10 [ 94.773665][ T5317] ? file_update_time_flags+0x1e0/0x440 [ 94.775607][ T5317] ? __generic_file_write_iter+0xf9/0x230 [ 94.777677][ T5317] ? generic_file_write_iter+0x9a/0x330 [ 94.779679][ T5317] generic_file_write_iter+0xae/0x330 [ 94.781673][ T5317] vfs_write+0x612/0xba0 [ 94.783456][ T5317] ? __pfx_vfs_write+0x10/0x10 [ 94.785502][ T5317] ? __fget_files+0x2a/0x420 [ 94.787505][ T5317] ksys_write+0x150/0x270 [ 94.789393][ T5317] ? __pfx_ksys_write+0x10/0x10 [ 94.791562][ T5317] do_syscall_64+0x166/0x520 [ 94.793615][ T5317] ? trace_irq_disable+0x3b/0x140 [ 94.795829][ T5317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.798448][ T5317] ? clear_bhb_loop+0x70/0xc0 [ 94.800580][ T5317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.803276][ T5317] RIP: 0033:0x7f1eff39e159 [ 94.805358][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.812715][ T5317] RSP: 002b:00007f1f00338fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.816089][ T5317] RAX: ffffffffffffffda RBX: 00007f1eff625fa0 RCX: 00007f1eff39e159 [ 94.819489][ T5317] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000008 [ 94.822841][ T5317] RBP: 00007f1eff43506b R08: 0000000000000000 R09: 0000000000000000 [ 94.826361][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.829778][ T5317] R13: 00007f1eff626038 R14: 00007f1eff625fa0 R15: 00007ffea8ee7878 [ 94.833009][ T5317] [ 94.834813][ T5317] Kernel Offset: disabled [ 94.836498][ T5317] Rebooting in 86400 seconds..