program:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x60000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x2, 0x0, 0x81, 0x3, 0x908e}})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x3000080, &(0x7f0000000280)=ANY=[], 0x1, 0x2e0, &(0x7f0000000880)="$eJzs3c1qE10cx/HfmSRt+jT0mb48POCyWtCN1LoRNymSixAXojYRiqGiraBurOJKRPfuvQVvQXCjeAO6cuUFRBBGzpnJa+cljUmmod8PGCYz85/zP5m38x+wIwCn1rXat/eXf9h/RiqoIL26KnmSylJR0n/6v/xo72D3oNmop2ynFTg2yiiMNEdW2tlrxMWWFUVEfPutqErvPExGEATb3yXt550IcuXO/hieNB+dnW55eeqZpXs+YtzhmPOYNaallh5rKe88AAD5iu7/XnSfr0Tjd8+TNqLb/om8/4+qlXcCExekLu25/7sqKzB2//7rFnXrPVfC2eVeu0ocpuXSwPc5hUdW3wDTZFWVLhdv4e5us3Fx536z7umFqpGe1dbcZz08dNsysl2PqU1TDNF3Ez+iXHR9KNk+bCXkvzpiiyMzn8wXc9P4eqd6Z/xXDIzdTW5P+QN7Ksx/M3mLrpe+XUvRZaNarXp9qyy7Rs5ELUQyelmOr0jUPqKW1f+AwM/K00WtDESFvbuUEbUaRm0v9EVttb8lRK31tWV70zmak9ubNPPGXDfr+qkPqvWM/z2b34ZSz8zuWWM2wluB+8XD/szFN1d02/SP3DkOdaPSP6fzK84npf4r/Zp2OqX8Js9Swl7rjq5oaf/J03uFZrPx0E7cjpl4UOnMKb2UYtc55kT7JPqb7XjqztFhd9G8wgeRR6JKY2j0uBMXxrpBe/3IXNmeZVPp4FiOhFmdqH2ewoFkL5I59nSc1yicVN2dnrnqx6kkhGlz466w/uupVzbdYM9++Cnj9MwBWbTFwI6xOxVQuS9+xU39E1vBJT1uWEyu4Iatuc6el851Zv0OMqoRP8pzNgRpQz/L1PRVt3j+DwAAAAAAAAAAAAAAAAAAMGum8d8J8u4jAAAAAAAAAAAAAAAAAAAAAACzrvP+X7Xf/6vh3v87+Je/C+EbXsby/t+3e+L9v8Dk/QkAAP//TN6FzA==")
creat(&(0x7f0000000080)='./file1\x00', 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x8000)
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socket$kcm(0x29, 0x7, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r1, r4, 0x0, 0x7ffff004)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

[   74.949317][ T5303] Bluetooth: hci0: command tx timeout
[   75.003480][ T5324] loop0: detected capacity change from 0 to 64
[   75.079848][   T12] Buffer I/O error on dev loop0, logical block 8, lost async page write
[   75.083731][   T12] Buffer I/O error on dev loop0, logical block 9, lost async page write
[   75.088379][   T12] Buffer I/O error on dev loop0, logical block 10, lost async page write
[   75.092089][   T12] Buffer I/O error on dev loop0, logical block 11, lost async page write
[   75.095804][   T12] Buffer I/O error on dev loop0, logical block 16, lost async page write
[   75.100004][   T12] Buffer I/O error on dev loop0, logical block 17, lost async page write
[   75.103507][   T12] Buffer I/O error on dev loop0, logical block 18, lost async page write
[   75.108465][   T12] Buffer I/O error on dev loop0, logical block 19, lost async page write
[   75.113275][ T5324] Buffer I/O error on dev loop0, logical block 62, lost sync page write
[   75.117440][ T5324] getblk(): invalid block size 512 requested
[   75.121063][ T5324] logical block size: 32768
[   75.123003][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) 
[   75.123014][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   75.123020][ T5324] Call Trace:
[   75.123025][ T5324]  <TASK>
[   75.123028][ T5324]  dump_stack_lvl+0x189/0x250
[   75.123117][ T5324]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.123128][ T5324]  ? __pfx__printk+0x10/0x10
[   75.123139][ T5324]  ? fs_reclaim_acquire+0x7d/0x100
[   75.123174][ T5324]  bdev_getblk+0x5b0/0x690
[   75.123190][ T5324]  ? __pfx_wake_up_bit+0x10/0x10
[   75.123207][ T5324]  __bread_gfp+0x89/0x3c0
[   75.123221][ T5324]  hfs_mdb_commit+0xc0a/0x1160
[   75.123240][ T5324]  hfs_sync_fs+0x15/0x20
[   75.123248][ T5324]  sync_filesystem+0xee/0x230
[   75.123257][ T5324]  hfs_reconfigure+0x66/0x270
[   75.123265][ T5324]  reconfigure_super+0x227/0x890
[   75.123279][ T5324]  vfs_fsconfig_locked+0x171/0x320
[   75.123289][ T5324]  __se_sys_fsconfig+0x78e/0x8d0
[   75.123299][ T5324]  ? __pfx___se_sys_fsconfig+0x10/0x10
[   75.123309][ T5324]  ? rcu_is_watching+0x15/0xb0
[   75.123326][ T5324]  ? do_syscall_64+0xbe/0x3b0
[   75.123368][ T5324]  ? __x64_sys_fsconfig+0x20/0xc0
[   75.123384][ T5324]  do_syscall_64+0xfa/0x3b0
[   75.123394][ T5324]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.123411][ T5324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.123423][ T5324]  ? clear_bhb_loop+0x60/0xb0
[   75.123435][ T5324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.123447][ T5324] RIP: 0033:0x7faf0898e929
[   75.123459][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.123469][ T5324] RSP: 002b:00007faf0988b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[   75.123484][ T5324] RAX: ffffffffffffffda RBX: 00007faf08bb5fa0 RCX: 00007faf0898e929
[   75.123491][ T5324] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008
[   75.123497][ T5324] RBP: 00007faf08a10b39 R08: 0000000000000000 R09: 0000000000000000
[   75.123503][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.123511][ T5324] R13: 0000000000000000 R14: 00007faf08bb5fa0 R15: 00007ffc63b0b158
[   75.123527][ T5324]  </TASK>
[   75.123531][ T5324] hfs: unable to read volume bitmap
[   75.267301][ T5324] Buffer I/O error on dev loop0, logical block 2, lost async page write
[   75.273292][   T12] kworker/u4:0: attempt to access beyond end of device
[   75.273292][   T12] loop0: rw=2049, sector=65, nr_sectors = 1 limit=64
[   75.279720][   T12] kworker/u4:0: attempt to access beyond end of device
[   75.279720][   T12] loop0: rw=2049, sector=66, nr_sectors = 1 limit=64
[   75.285393][   T12] kworker/u4:0: attempt to access beyond end of device
[   75.285393][   T12] loop0: rw=2049, sector=67, nr_sectors = 1 limit=64
[   75.291161][   T12] kworker/u4:0: attempt to access beyond end of device
[   75.291161][   T12] loop0: rw=2049, sector=68, nr_sectors = 1 limit=64
[   75.296294][   T12] kworker/u4:0: attempt to access beyond end of device
[   75.296294][   T12] loop0: rw=2049, sector=72, nr_sectors = 1 limit=64
[   75.311904][   T12] kworker/u4:0: attempt to access beyond end of device
[   75.311904][   T12] loop0: rw=2049, sector=73, nr_sectors = 1 limit=64
[   75.325901][   T12] kworker/u4:0: attempt to access beyond end of device
[   75.325901][   T12] loop0: rw=2049, sector=76, nr_sectors = 1 limit=64
[   75.343286][   T12] kworker/u4:0: attempt to access beyond end of device
[   75.343286][   T12] loop0: rw=2049, sector=77, nr_sectors = 1 limit=64
[   75.354343][   T12] kworker/u4:0: attempt to access beyond end of device
[   75.354343][   T12] loop0: rw=2049, sector=78, nr_sectors = 1264 limit=64
[   75.372644][ T5324] ------------[ cut here ]------------
[   75.375077][ T5324] WARNING: CPU: 0 PID: 5324 at fs/buffer.c:1189 mark_buffer_dirty+0x2a9/0x410
[   75.379007][ T5324] Modules linked in:
[   75.380961][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) 
[   75.385841][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   75.390534][ T5324] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[   75.393013][ T5324] Code: 4c 89 f7 e8 a9 bb dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 94 33 fc ff e8 6f 3d 7a ff eb 8c e8 68 3d 7a ff 90 <0f> 0b 90 e9 95 fd ff ff e8 5a 3d 7a ff 90 0f 0b 90 e9 bf fd ff ff
[   75.401321][ T5324] RSP: 0018:ffffc9000d4b7bc8 EFLAGS: 00010287
[   75.403886][ T5324] RAX: ffffffff82461ee8 RBX: ffff888045415bc8 RCX: 0000000000100000
[   75.407351][ T5324] RDX: ffffc9000e08a000 RSI: 000000000001162a RDI: 000000000001162b
[   75.410667][ T5324] RBP: 1ffff11006914801 R08: ffff888045415bcf R09: 1ffff11008a82b79
[   75.413919][ T5324] R10: dffffc0000000000 R11: ffffed1008a82b7a R12: dffffc0000000000
[   75.417291][ T5324] R13: ffff8880348a4640 R14: ffff88804d17f45b R15: ffff88804d17f400
[   75.420621][ T5324] FS:  00007faf0988b6c0(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000
[   75.424310][ T5324] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   75.427296][ T5324] CR2: 0000200000024000 CR3: 0000000043dcd000 CR4: 0000000000352ef0
[   75.430527][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   75.433779][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   75.437611][ T5324] Call Trace:
[   75.439029][ T5324]  <TASK>
[   75.440255][ T5324]  hfs_mdb_commit+0x489/0x1160
[   75.442351][ T5324]  hfs_sync_fs+0x15/0x20
[   75.444153][ T5324]  sync_filesystem+0x1cc/0x230
[   75.446146][ T5324]  hfs_reconfigure+0x66/0x270
[   75.448301][ T5324]  reconfigure_super+0x227/0x890
[   75.450689][ T5324]  vfs_fsconfig_locked+0x171/0x320
[   75.452835][ T5324]  __se_sys_fsconfig+0x78e/0x8d0
[   75.454907][ T5324]  ? __pfx___se_sys_fsconfig+0x10/0x10
[   75.457341][ T5324]  ? rcu_is_watching+0x15/0xb0
[   75.459394][ T5324]  ? do_syscall_64+0xbe/0x3b0
[   75.461434][ T5324]  ? __x64_sys_fsconfig+0x20/0xc0
[   75.463673][ T5324]  do_syscall_64+0xfa/0x3b0
[   75.465636][ T5324]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.467970][ T5324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.470557][ T5324]  ? clear_bhb_loop+0x60/0xb0
[   75.472531][ T5324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.475116][ T5324] RIP: 0033:0x7faf0898e929
[   75.477224][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.485217][ T5324] RSP: 002b:00007faf0988b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[   75.488776][ T5324] RAX: ffffffffffffffda RBX: 00007faf08bb5fa0 RCX: 00007faf0898e929
[   75.492233][ T5324] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008
[   75.495693][ T5324] RBP: 00007faf08a10b39 R08: 0000000000000000 R09: 0000000000000000
[   75.499050][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.502348][ T5324] R13: 0000000000000000 R14: 00007faf08bb5fa0 R15: 00007ffc63b0b158
[   75.505746][ T5324]  </TASK>
[   75.507253][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   75.510293][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) 
[   75.515147][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[   75.519538][ T5324] Call Trace:
[   75.521029][ T5324]  <TASK>
[   75.522339][ T5324]  dump_stack_lvl+0x99/0x250
[   75.524399][ T5324]  ? __asan_memcpy+0x40/0x70
[   75.526540][ T5324]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.528832][ T5324]  ? __pfx__printk+0x10/0x10
[   75.530859][ T5324]  panic+0x2db/0x790
[   75.532548][ T5324]  ? __pfx_panic+0x10/0x10
[   75.534593][ T5324]  ? show_trace_log_lvl+0x4fb/0x550
[   75.536907][ T5324]  __warn+0x31b/0x4b0
[   75.538631][ T5324]  ? mark_buffer_dirty+0x2a9/0x410
[   75.540905][ T5324]  ? mark_buffer_dirty+0x2a9/0x410
[   75.543185][ T5324]  report_bug+0x2be/0x4f0
[   75.545071][ T5324]  ? mark_buffer_dirty+0x2a9/0x410
[   75.547283][ T5324]  ? mark_buffer_dirty+0x2a9/0x410
[   75.549471][ T5324]  ? mark_buffer_dirty+0x2ab/0x410
[   75.551712][ T5324]  handle_bug+0x84/0x160
[   75.553564][ T5324]  exc_invalid_op+0x1a/0x50
[   75.555555][ T5324]  asm_exc_invalid_op+0x1a/0x20
[   75.557681][ T5324] RIP: 0010:mark_buffer_dirty+0x2a9/0x410
[   75.560073][ T5324] Code: 4c 89 f7 e8 a9 bb dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 94 33 fc ff e8 6f 3d 7a ff eb 8c e8 68 3d 7a ff 90 <0f> 0b 90 e9 95 fd ff ff e8 5a 3d 7a ff 90 0f 0b 90 e9 bf fd ff ff
[   75.568265][ T5324] RSP: 0018:ffffc9000d4b7bc8 EFLAGS: 00010287
[   75.570801][ T5324] RAX: ffffffff82461ee8 RBX: ffff888045415bc8 RCX: 0000000000100000
[   75.574150][ T5324] RDX: ffffc9000e08a000 RSI: 000000000001162a RDI: 000000000001162b
[   75.577683][ T5324] RBP: 1ffff11006914801 R08: ffff888045415bcf R09: 1ffff11008a82b79
[   75.581142][ T5324] R10: dffffc0000000000 R11: ffffed1008a82b7a R12: dffffc0000000000
[   75.584533][ T5324] R13: ffff8880348a4640 R14: ffff88804d17f45b R15: ffff88804d17f400
[   75.587879][ T5324]  ? mark_buffer_dirty+0x2a8/0x410
[   75.590124][ T5324]  ? mark_buffer_dirty+0x2a8/0x410
[   75.592338][ T5324]  hfs_mdb_commit+0x489/0x1160
[   75.594324][ T5324]  hfs_sync_fs+0x15/0x20
[   75.596114][ T5324]  sync_filesystem+0x1cc/0x230
[   75.598255][ T5324]  hfs_reconfigure+0x66/0x270
[   75.600369][ T5324]  reconfigure_super+0x227/0x890
[   75.602622][ T5324]  vfs_fsconfig_locked+0x171/0x320
[   75.605449][ T5324]  __se_sys_fsconfig+0x78e/0x8d0
[   75.607713][ T5324]  ? __pfx___se_sys_fsconfig+0x10/0x10
[   75.609793][ T5324]  ? rcu_is_watching+0x15/0xb0
[   75.611768][ T5324]  ? do_syscall_64+0xbe/0x3b0
[   75.613703][ T5324]  ? __x64_sys_fsconfig+0x20/0xc0
[   75.615866][ T5324]  do_syscall_64+0xfa/0x3b0
[   75.617851][ T5324]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.620531][ T5324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.623313][ T5324]  ? clear_bhb_loop+0x60/0xb0
[   75.625355][ T5324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.627977][ T5324] RIP: 0033:0x7faf0898e929
[   75.630069][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.638083][ T5324] RSP: 002b:00007faf0988b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[   75.641711][ T5324] RAX: ffffffffffffffda RBX: 00007faf08bb5fa0 RCX: 00007faf0898e929
[   75.646035][ T5324] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008
[   75.650119][ T5324] RBP: 00007faf08a10b39 R08: 0000000000000000 R09: 0000000000000000
[   75.653406][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   75.656718][ T5324] R13: 0000000000000000 R14: 00007faf08bb5fa0 R15: 00007ffc63b0b158
[   75.660160][ T5324]  </TASK>
[   75.661970][ T5324] Kernel Offset: disabled
[   75.663881][ T5324] Rebooting in 86400 seconds..