program: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x3000080, &(0x7f0000000280)=ANY=[], 0x1, 0x2e0, &(0x7f0000000880)="$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") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8000) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xc00000000000, 0x3a, 'hfs\x00', 0x3a, '&[\xe7+)]\xae.', 0x3a, './file2', 0x3a, [0x50, 0x4f, 0x50, 0x43, 0x46, 0x43, 0x50, 0x46, 0x46, 0x50]}, 0x3d) [ 74.806026][ T5303] Bluetooth: hci0: command tx timeout [ 74.822461][ T5324] loop0: detected capacity change from 0 to 64 [ 74.943917][ T5300] Buffer I/O error on dev loop0, logical block 24, async page read [ 74.948894][ T1038] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 74.952535][ T1038] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 74.956927][ T5300] Buffer I/O error on dev loop0, logical block 25, async page read [ 74.960356][ T5300] Buffer I/O error on dev loop0, logical block 26, async page read [ 74.963755][ T5300] Buffer I/O error on dev loop0, logical block 27, async page read [ 74.968313][ T1038] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 74.971945][ T1038] Buffer I/O error on dev loop0, logical block 11, lost async page write [ 74.976730][ T5300] Buffer I/O error on dev loop0, logical block 28, async page read [ 74.980236][ T1038] Buffer I/O error on dev loop0, logical block 16, lost async page write [ 74.984844][ T5324] getblk(): invalid block size 512 requested [ 74.995309][ T5324] logical block size: 32768 [ 74.998753][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 74.998774][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.998782][ T5324] Call Trace: [ 74.998787][ T5324] [ 74.998794][ T5324] dump_stack_lvl+0x189/0x250 [ 74.998890][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.998911][ T5324] ? __pfx__printk+0x10/0x10 [ 74.998931][ T5324] ? fs_reclaim_acquire+0x7d/0x100 [ 74.998986][ T5324] bdev_getblk+0x5b0/0x690 [ 74.999004][ T5324] ? __pfx_wake_up_bit+0x10/0x10 [ 74.999025][ T5324] __bread_gfp+0x89/0x3c0 [ 74.999040][ T5324] hfs_mdb_commit+0xc0a/0x1160 [ 74.999065][ T5324] hfs_sync_fs+0x15/0x20 [ 74.999076][ T5324] sync_filesystem+0xeb/0x230 [ 74.999092][ T5324] hfs_reconfigure+0x66/0x270 [ 74.999107][ T5324] reconfigure_super+0x224/0x890 [ 74.999130][ T5324] vfs_fsconfig_locked+0x171/0x320 [ 74.999148][ T5324] __se_sys_fsconfig+0x78e/0x8d0 [ 74.999168][ T5324] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 74.999186][ T5324] ? rcu_is_watching+0x15/0xb0 [ 74.999208][ T5324] ? do_syscall_64+0xbe/0x3b0 [ 74.999247][ T5324] ? __x64_sys_fsconfig+0x20/0xc0 [ 74.999266][ T5324] do_syscall_64+0xfa/0x3b0 [ 74.999278][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.999296][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.999308][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 74.999325][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.999337][ T5324] RIP: 0033:0x7fb7c5b8e929 [ 74.999349][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.999359][ T5324] RSP: 002b:00007fb7c6ab1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 74.999373][ T5324] RAX: ffffffffffffffda RBX: 00007fb7c5db5fa0 RCX: 00007fb7c5b8e929 [ 74.999381][ T5324] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 74.999388][ T5324] RBP: 00007fb7c5c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.999394][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.999401][ T5324] R13: 0000000000000000 R14: 00007fb7c5db5fa0 R15: 00007ffe048f6f98 [ 74.999420][ T5324] [ 74.999569][ T5324] hfs: unable to read volume bitmap [ 75.107008][ T5324] ------------[ cut here ]------------ [ 75.109453][ T5324] WARNING: CPU: 0 PID: 5324 at fs/buffer.c:1189 mark_buffer_dirty+0x2a9/0x410 [ 75.113283][ T5324] Modules linked in: [ 75.115262][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 75.120356][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.124962][ T5324] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 75.127582][ T5324] Code: 4c 89 f7 e8 c9 b9 dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 94 33 fc ff e8 df 36 7a ff eb 8c e8 d8 36 7a ff 90 <0f> 0b 90 e9 95 fd ff ff e8 ca 36 7a ff 90 0f 0b 90 e9 bf fd ff ff [ 75.135816][ T5324] RSP: 0018:ffffc9000d587bc8 EFLAGS: 00010287 [ 75.138357][ T5324] RAX: ffffffff82461648 RBX: ffff888043edd828 RCX: 0000000000100000 [ 75.142056][ T5324] RDX: ffffc9000e04a000 RSI: 000000000001085f RDI: 0000000000010860 [ 75.145946][ T5324] RBP: 1ffff110023f4c01 R08: ffff888043edd82f R09: 1ffff110087dbb05 [ 75.149409][ T5324] R10: dffffc0000000000 R11: ffffed10087dbb06 R12: dffffc0000000000 [ 75.152837][ T5324] R13: ffff888011fa6640 R14: ffff88800ddfd45b R15: ffff88800ddfd400 [ 75.156437][ T5324] FS: 00007fb7c6ab16c0(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 75.160177][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.162986][ T5324] CR2: 00007fb7c6a8ffc8 CR3: 00000000119a6000 CR4: 0000000000352ef0 [ 75.166606][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.170028][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.173451][ T5324] Call Trace: [ 75.174913][ T5324] [ 75.176366][ T5324] hfs_mdb_commit+0x489/0x1160 [ 75.178490][ T5324] hfs_sync_fs+0x15/0x20 [ 75.180288][ T5324] sync_filesystem+0x1cf/0x230 [ 75.182391][ T5324] hfs_reconfigure+0x66/0x270 [ 75.184455][ T5324] reconfigure_super+0x224/0x890 [ 75.186679][ T5324] vfs_fsconfig_locked+0x171/0x320 [ 75.188827][ T5324] __se_sys_fsconfig+0x78e/0x8d0 [ 75.190949][ T5324] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 75.193281][ T5324] ? rcu_is_watching+0x15/0xb0 [ 75.195313][ T5324] ? do_syscall_64+0xbe/0x3b0 [ 75.197453][ T5324] ? __x64_sys_fsconfig+0x20/0xc0 [ 75.199665][ T5324] do_syscall_64+0xfa/0x3b0 [ 75.201426][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.203839][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.206937][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 75.209042][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.211671][ T5324] RIP: 0033:0x7fb7c5b8e929 [ 75.213613][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.222109][ T5324] RSP: 002b:00007fb7c6ab1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 75.226023][ T5324] RAX: ffffffffffffffda RBX: 00007fb7c5db5fa0 RCX: 00007fb7c5b8e929 [ 75.229500][ T5324] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 75.232961][ T5324] RBP: 00007fb7c5c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.236348][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.239662][ T5324] R13: 0000000000000000 R14: 00007fb7c5db5fa0 R15: 00007ffe048f6f98 [ 75.242856][ T5324] [ 75.244457][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.247761][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 75.252841][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.257589][ T5324] Call Trace: [ 75.259057][ T5324] [ 75.260281][ T5324] dump_stack_lvl+0x99/0x250 [ 75.262138][ T5324] ? __asan_memcpy+0x40/0x70 [ 75.264022][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.266259][ T5324] ? __pfx__printk+0x10/0x10 [ 75.268139][ T5324] panic+0x2db/0x790 [ 75.269770][ T5324] ? __pfx_panic+0x10/0x10 [ 75.271565][ T5324] ? show_trace_log_lvl+0x4fb/0x550 [ 75.273646][ T5324] __warn+0x31b/0x4b0 [ 75.275233][ T5324] ? mark_buffer_dirty+0x2a9/0x410 [ 75.277445][ T5324] ? mark_buffer_dirty+0x2a9/0x410 [ 75.279667][ T5324] report_bug+0x2be/0x4f0 [ 75.281506][ T5324] ? mark_buffer_dirty+0x2a9/0x410 [ 75.283844][ T5324] ? mark_buffer_dirty+0x2a9/0x410 [ 75.286230][ T5324] ? mark_buffer_dirty+0x2ab/0x410 [ 75.288414][ T5324] handle_bug+0x84/0x160 [ 75.290287][ T5324] exc_invalid_op+0x1a/0x50 [ 75.292418][ T5324] asm_exc_invalid_op+0x1a/0x20 [ 75.294566][ T5324] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 75.297185][ T5324] Code: 4c 89 f7 e8 c9 b9 dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 94 33 fc ff e8 df 36 7a ff eb 8c e8 d8 36 7a ff 90 <0f> 0b 90 e9 95 fd ff ff e8 ca 36 7a ff 90 0f 0b 90 e9 bf fd ff ff [ 75.305417][ T5324] RSP: 0018:ffffc9000d587bc8 EFLAGS: 00010287 [ 75.308403][ T5324] RAX: ffffffff82461648 RBX: ffff888043edd828 RCX: 0000000000100000 [ 75.311842][ T5324] RDX: ffffc9000e04a000 RSI: 000000000001085f RDI: 0000000000010860 [ 75.315411][ T5324] RBP: 1ffff110023f4c01 R08: ffff888043edd82f R09: 1ffff110087dbb05 [ 75.318742][ T5324] R10: dffffc0000000000 R11: ffffed10087dbb06 R12: dffffc0000000000 [ 75.322158][ T5324] R13: ffff888011fa6640 R14: ffff88800ddfd45b R15: ffff88800ddfd400 [ 75.325643][ T5324] ? mark_buffer_dirty+0x2a8/0x410 [ 75.327946][ T5324] ? mark_buffer_dirty+0x2a8/0x410 [ 75.330089][ T5324] hfs_mdb_commit+0x489/0x1160 [ 75.332188][ T5324] hfs_sync_fs+0x15/0x20 [ 75.333901][ T5324] sync_filesystem+0x1cf/0x230 [ 75.335946][ T5324] hfs_reconfigure+0x66/0x270 [ 75.337880][ T5324] reconfigure_super+0x224/0x890 [ 75.339827][ T5324] vfs_fsconfig_locked+0x171/0x320 [ 75.341841][ T5324] __se_sys_fsconfig+0x78e/0x8d0 [ 75.343825][ T5324] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 75.345963][ T5324] ? rcu_is_watching+0x15/0xb0 [ 75.347964][ T5324] ? do_syscall_64+0xbe/0x3b0 [ 75.350064][ T5324] ? __x64_sys_fsconfig+0x20/0xc0 [ 75.352280][ T5324] do_syscall_64+0xfa/0x3b0 [ 75.354104][ T5324] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.356470][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.359213][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 75.361328][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.363873][ T5324] RIP: 0033:0x7fb7c5b8e929 [ 75.365880][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.374203][ T5324] RSP: 002b:00007fb7c6ab1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 75.377694][ T5324] RAX: ffffffffffffffda RBX: 00007fb7c5db5fa0 RCX: 00007fb7c5b8e929 [ 75.381191][ T5324] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 75.384639][ T5324] RBP: 00007fb7c5c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.387810][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.390985][ T5324] R13: 0000000000000000 R14: 00007fb7c5db5fa0 R15: 00007ffe048f6f98 [ 75.394135][ T5324] [ 75.395742][ T5324] Kernel Offset: disabled [ 75.397305][ T5324] Rebooting in 86400 seconds..