program: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x3000080, &(0x7f0000000280)=ANY=[], 0x1, 0x2e0, &(0x7f0000000880)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8000) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) r3 = syz_clone(0x0, &(0x7f0000000180)="2685ff8c2516a043e2c93fec605a3f5d54ea22814e32a894a4d213e7ae969241b193cbd7e51a0407be1e6619f28319e3a791bf9dbeb8d0ecc8fd7ca59b61c6ef5fb3df928dc6befca1a14a87b53ad4bbada2eb93aa804ae8d666e58bd8caa4e0704542a2b96571d6b9a1628ba48a6cfd31a6dbe564f0e6297e4f8e13fa2df444da075f0edb4d68f2420a685c0cc4717467a84a8cf1f994b4750d73e544854a7a2f2c577c901b7c732f4f069022f1209e05de8bcf8c45f9c316e8769cfe3c1213153c0670", 0xc4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="0228264a2cb9") r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x400400, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x6c, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x2, 0x8000, 0x7]}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x3}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002400)=@RTM_GETNSID={0x4c, 0x5a, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r0}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x95}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f17bad6e", @ANYRES16=r8, @ANYBLOB="000229bd7000fedbdf250d0000000a000900ffffffffffff000005002d000000000005003500a600000005002e0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) [ 74.904489][ T5298] Bluetooth: hci0: command tx timeout [ 74.977832][ T5319] loop0: detected capacity change from 0 to 64 [ 75.117867][ T1039] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 75.122010][ T1039] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 75.127748][ T1039] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 75.131477][ T1039] Buffer I/O error on dev loop0, logical block 11, lost async page write [ 75.137402][ T1039] Buffer I/O error on dev loop0, logical block 16, lost async page write [ 75.141480][ T1039] Buffer I/O error on dev loop0, logical block 17, lost async page write [ 75.146215][ T1039] Buffer I/O error on dev loop0, logical block 18, lost async page write [ 75.150372][ T1039] Buffer I/O error on dev loop0, logical block 19, lost async page write [ 75.156012][ T5319] Buffer I/O error on dev loop0, logical block 62, lost sync page write [ 75.160710][ T5319] getblk(): invalid block size 512 requested [ 75.165290][ T5319] logical block size: 32768 [ 75.173218][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 75.173237][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.173245][ T5319] Call Trace: [ 75.173250][ T5319] [ 75.173256][ T5319] dump_stack_lvl+0x189/0x250 [ 75.173346][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.173365][ T5319] ? __pfx__printk+0x10/0x10 [ 75.173382][ T5319] ? fs_reclaim_acquire+0x7d/0x100 [ 75.173429][ T5319] bdev_getblk+0x5b0/0x690 [ 75.173445][ T5319] ? __pfx_wake_up_bit+0x10/0x10 [ 75.173465][ T5319] __bread_gfp+0x89/0x3c0 [ 75.173480][ T5319] hfs_mdb_commit+0xc0a/0x1160 [ 75.173500][ T5319] hfs_sync_fs+0x15/0x20 [ 75.173511][ T5319] sync_filesystem+0xeb/0x230 [ 75.173528][ T5319] hfs_reconfigure+0x66/0x270 [ 75.173542][ T5319] reconfigure_super+0x224/0x890 [ 75.173565][ T5319] vfs_fsconfig_locked+0x171/0x320 [ 75.173582][ T5319] __se_sys_fsconfig+0x78e/0x8d0 [ 75.173601][ T5319] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 75.173619][ T5319] ? rcu_is_watching+0x15/0xb0 [ 75.173638][ T5319] ? do_syscall_64+0xbe/0x3b0 [ 75.173682][ T5319] ? __x64_sys_fsconfig+0x20/0xc0 [ 75.173701][ T5319] do_syscall_64+0xfa/0x3b0 [ 75.173711][ T5319] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.173729][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.173740][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 75.173753][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.173764][ T5319] RIP: 0033:0x7fd72378e929 [ 75.173776][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.173785][ T5319] RSP: 002b:00007fd71fbf5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 75.173800][ T5319] RAX: ffffffffffffffda RBX: 00007fd7239b5fa0 RCX: 00007fd72378e929 [ 75.173808][ T5319] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 75.173814][ T5319] RBP: 00007fd723810b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.173820][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.173827][ T5319] R13: 0000000000000000 R14: 00007fd7239b5fa0 R15: 00007ffdde91b298 [ 75.173846][ T5319] [ 75.173851][ T5319] hfs: unable to read volume bitmap [ 75.306508][ T5324] coredump: 6(syz.0.0): Core dump to core aborted: cannot preserve file permissions [ 75.323280][ T5320] syz_tun: entered allmulticast mode [ 75.336468][ T5319] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 75.344154][ T5319] ------------[ cut here ]------------ [ 75.346992][ T5319] WARNING: CPU: 0 PID: 5319 at fs/buffer.c:1189 mark_buffer_dirty+0x2a9/0x410 [ 75.351345][ T5319] Modules linked in: [ 75.354360][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 75.359136][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.364496][ T5319] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 75.366612][ T5319] Code: 4c 89 f7 e8 a9 bb dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 94 33 fc ff e8 6f 3d 7a ff eb 8c e8 68 3d 7a ff 90 <0f> 0b 90 e9 95 fd ff ff e8 5a 3d 7a ff 90 0f 0b 90 e9 bf fd ff ff [ 75.375582][ T5319] RSP: 0018:ffffc9000d4cfbc8 EFLAGS: 00010283 [ 75.378312][ T5319] RAX: ffffffff82461f18 RBX: ffff8880444ba570 RCX: 0000000000100000 [ 75.381350][ T5319] RDX: ffffc9000e0a2000 RSI: 000000000001194e RDI: 000000000001194f [ 75.385619][ T5319] RBP: 1ffff11003d54401 R08: ffff8880444ba577 R09: 1ffff110088974ae [ 75.388801][ T5319] R10: dffffc0000000000 R11: ffffed10088974af R12: dffffc0000000000 [ 75.392735][ T5319] R13: ffff88801eaa2640 R14: ffff88804d20045b R15: ffff88804d200400 [ 75.396350][ T5319] FS: 00007fd71fbf56c0(0000) GS:ffff88808d251000(0000) knlGS:0000000000000000 [ 75.400224][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.404354][ T5319] CR2: 00007fd71fbd2fb8 CR3: 000000004367f000 CR4: 0000000000352ef0 [ 75.407610][ T5319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.410695][ T5319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.414330][ T5319] Call Trace: [ 75.416109][ T5319] [ 75.417862][ T5319] hfs_mdb_commit+0x489/0x1160 [ 75.420291][ T5319] hfs_sync_fs+0x15/0x20 [ 75.422058][ T5319] sync_filesystem+0x1cf/0x230 [ 75.424058][ T5319] hfs_reconfigure+0x66/0x270 [ 75.425946][ T5319] reconfigure_super+0x224/0x890 [ 75.428119][ T5319] vfs_fsconfig_locked+0x171/0x320 [ 75.430478][ T5319] __se_sys_fsconfig+0x78e/0x8d0 [ 75.432706][ T5319] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 75.434807][ T5319] ? rcu_is_watching+0x15/0xb0 [ 75.436628][ T5319] ? do_syscall_64+0xbe/0x3b0 [ 75.438470][ T5319] ? __x64_sys_fsconfig+0x20/0xc0 [ 75.440454][ T5319] do_syscall_64+0xfa/0x3b0 [ 75.442177][ T5319] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.444843][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.447891][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 75.449944][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.452489][ T5319] RIP: 0033:0x7fd72378e929 [ 75.454591][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.463131][ T5319] RSP: 002b:00007fd71fbf5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 75.467113][ T5319] RAX: ffffffffffffffda RBX: 00007fd7239b5fa0 RCX: 00007fd72378e929 [ 75.470765][ T5319] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 75.474323][ T5319] RBP: 00007fd723810b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.477796][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.481926][ T5319] R13: 0000000000000000 R14: 00007fd7239b5fa0 R15: 00007ffdde91b298 [ 75.485707][ T5319] [ 75.487091][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.490184][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 75.495223][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.500557][ T5319] Call Trace: [ 75.502406][ T5319] [ 75.504004][ T5319] dump_stack_lvl+0x99/0x250 [ 75.506123][ T5319] ? __asan_memcpy+0x40/0x70 [ 75.508142][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.510400][ T5319] ? __pfx__printk+0x10/0x10 [ 75.512520][ T5319] panic+0x2db/0x790 [ 75.514320][ T5319] ? __pfx_panic+0x10/0x10 [ 75.516577][ T5319] ? show_trace_log_lvl+0x4fb/0x550 [ 75.519499][ T5319] __warn+0x31b/0x4b0 [ 75.521470][ T5319] ? mark_buffer_dirty+0x2a9/0x410 [ 75.523761][ T5319] ? mark_buffer_dirty+0x2a9/0x410 [ 75.526167][ T5319] report_bug+0x2be/0x4f0 [ 75.528233][ T5319] ? mark_buffer_dirty+0x2a9/0x410 [ 75.530719][ T5319] ? mark_buffer_dirty+0x2a9/0x410 [ 75.533529][ T5319] ? mark_buffer_dirty+0x2ab/0x410 [ 75.536449][ T5319] handle_bug+0x84/0x160 [ 75.538799][ T5319] exc_invalid_op+0x1a/0x50 [ 75.540775][ T5319] asm_exc_invalid_op+0x1a/0x20 [ 75.542961][ T5319] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 75.545428][ T5319] Code: 4c 89 f7 e8 a9 bb dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 94 33 fc ff e8 6f 3d 7a ff eb 8c e8 68 3d 7a ff 90 <0f> 0b 90 e9 95 fd ff ff e8 5a 3d 7a ff 90 0f 0b 90 e9 bf fd ff ff [ 75.554152][ T5319] RSP: 0018:ffffc9000d4cfbc8 EFLAGS: 00010283 [ 75.557360][ T5319] RAX: ffffffff82461f18 RBX: ffff8880444ba570 RCX: 0000000000100000 [ 75.560754][ T5319] RDX: ffffc9000e0a2000 RSI: 000000000001194e RDI: 000000000001194f [ 75.563903][ T5319] RBP: 1ffff11003d54401 R08: ffff8880444ba577 R09: 1ffff110088974ae [ 75.567020][ T5319] R10: dffffc0000000000 R11: ffffed10088974af R12: dffffc0000000000 [ 75.570552][ T5319] R13: ffff88801eaa2640 R14: ffff88804d20045b R15: ffff88804d200400 [ 75.574132][ T5319] ? mark_buffer_dirty+0x2a8/0x410 [ 75.576334][ T5319] ? mark_buffer_dirty+0x2a8/0x410 [ 75.578570][ T5319] hfs_mdb_commit+0x489/0x1160 [ 75.580661][ T5319] hfs_sync_fs+0x15/0x20 [ 75.582595][ T5319] sync_filesystem+0x1cf/0x230 [ 75.584829][ T5319] hfs_reconfigure+0x66/0x270 [ 75.586973][ T5319] reconfigure_super+0x224/0x890 [ 75.589253][ T5319] vfs_fsconfig_locked+0x171/0x320 [ 75.591440][ T5319] __se_sys_fsconfig+0x78e/0x8d0 [ 75.593747][ T5319] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 75.596301][ T5319] ? rcu_is_watching+0x15/0xb0 [ 75.598562][ T5319] ? do_syscall_64+0xbe/0x3b0 [ 75.600557][ T5319] ? __x64_sys_fsconfig+0x20/0xc0 [ 75.602701][ T5319] do_syscall_64+0xfa/0x3b0 [ 75.604570][ T5319] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.606792][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.609377][ T5319] ? clear_bhb_loop+0x60/0xb0 [ 75.611408][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.613978][ T5319] RIP: 0033:0x7fd72378e929 [ 75.616211][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.625273][ T5319] RSP: 002b:00007fd71fbf5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 75.629033][ T5319] RAX: ffffffffffffffda RBX: 00007fd7239b5fa0 RCX: 00007fd72378e929 [ 75.632716][ T5319] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 75.636407][ T5319] RBP: 00007fd723810b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.639766][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.643234][ T5319] R13: 0000000000000000 R14: 00007fd7239b5fa0 R15: 00007ffdde91b298 [ 75.647493][ T5319] [ 75.649987][ T5319] Kernel Offset: disabled [ 75.652172][ T5319] Rebooting in 86400 seconds..