program: r0 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x3004048, &(0x7f0000000100)=ANY=[], 0x11, 0x2c6, &(0x7f0000005bc0)="$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") open(&(0x7f0000000000)='./file1\x00', 0x101247, 0x5) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000640)={0x0, {}, 0x0, {}, 0x7fff, 0x0, 0xfffffffd, 0x0, "22536af39b7c7cb7435b0a43852dbc3a9ada34cc97af10fd4fcca15748328c53096c2f359e9ba743d30b59c491a7b3e74d938981061383374a1d79471a2d2dfe", "0410b15a7d62289113be3626f4e23806009c7416000000000019b0cff500", [0x4000003, 0xf9f]}) mount(0x0, &(0x7f0000000580)='.\x00', 0x0, 0x2236824, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8800) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x80ccc0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRES64=r2, @ANYRESDEC=r0, @ANYBLOB="0f7f708d403b4ce71f4c3b0dee9c05ba63988f34e57b8d82e8a8028fbc04a29cf8dc77075aa1e99cde92394385dd1a0fc86c276fcacdd248427fb414a77ff87fd13de0550122bec4232f72759de7f6c043791c611883fd6c9ba5804d5ef1592e5103e3bc3b76016baca817ad5c85c81b3c8075cad65a0f699f4aa28e6911d739652c94f220056eaa1d84159ff763849090f108f8f72c7105e71a83eb9cecd532be7d0f100d403f80fa4be312a500e1370e99ad9b", @ANYRESOCT=r2, @ANYRES8, @ANYRES8=r0, @ANYRESOCT, @ANYRES16=r2], 0xfd, 0x287, &(0x7f0000001d00)="$eJzs3U1rE0Ecx/HfbJIm2lK3DyKIp2rBk/ThIl4KknfgxZOoTYRiqKAV1FP1LL4A730LvgCPnsSz4K0nX0BukZmdmE2ym01Dt5uk3w8kbLrzn53Jznbmv6WsAFxaD+t/TnZP7ctIJZUkPZACSTWpLOm6btTeHh4dHLWajVEVlVyEfRlFkWaozP5hMynUxrkIL7SfylqK/wz5qP3WcdFtQPHc1Z8gkKr+6nT7axfesnxc9kFv2mrrnZaLbgcAoFh+/g/8PL/k1+9BIG36ab9//p/xCbRddANy9j1jf2z+d1lWx9jze83t6uV7LoUrq+KDTnZPJ2nLgqKR1bfANFlZpWtLcOXFQat5b/9VqxHok/a8Sq/YuntvREO3q5vT2u2Pw1Vv+Nx0zPwyXtvZLLo+VGwfduLtjxVZO98jZjM/zE/zxIT6qsb/9V+5Y+xpcmcqHDhTUfu30mt0vVyQK5XSyxV3kJv+CN7IXpaUkpGoO6JWBk5gmNVOF7U6EBX1bjsjai0xaicjan0wqjea0yPzZr6Yx2ZDf/VN9dj6P7Df9qbGuTJtGVfSj4yR/Sm7kqGbT/wdoeNbiSWDSXuECXzWc93X8pv3H14+a7War+d2w16JU9CMqdroDoJpac/cbtgvuZCjd+edyetJ/9XBbfn50TvpZwxkEMwLu+4yUf4Xy1e23GLNvoX96/RqPLaTVXmsxu2U3GDVvV9Nz+D6GHfrYTHhr4vDRxyZc92+K90Z54iR0Ldz+uxNEmTq+qWn3P8HAAAAAAAAAAAAAAAAAACYNef3Lwc1pe0quo8AAAAAAAAAAAAAAAAAAAAAAMy6hOf/Vgt9/u8jRZ94/i+Qu38BAAD//0lmcxY=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff, 0xff, 0xff000000, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) [ 93.975272][ T4653] Bluetooth: hci0: command tx timeout [ 94.062755][ T5330] loop0: detected capacity change from 0 to 64 [ 94.152647][ T5330] ======================================================= [ 94.152647][ T5330] WARNING: The mand mount option has been deprecated and [ 94.152647][ T5330] and is ignored by this kernel. Remove the mand [ 94.152647][ T5330] option from the mount to silence this warning. [ 94.152647][ T5330] ======================================================= [ 94.326018][ T5330] loop0: detected capacity change from 64 to 0 [ 94.340132][ T155] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 94.350761][ T155] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 94.354114][ T155] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 94.359021][ T155] Buffer I/O error on dev loop0, logical block 11, lost async page write [ 94.362452][ T155] Buffer I/O error on dev loop0, logical block 16, lost async page write [ 94.367569][ T155] Buffer I/O error on dev loop0, logical block 17, lost async page write [ 94.387387][ T155] Buffer I/O error on dev loop0, logical block 18, lost async page write [ 94.403035][ T155] Buffer I/O error on dev loop0, logical block 19, lost async page write [ 94.426966][ T5330] Buffer I/O error on dev loop0, logical block 62, lost sync page write qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x98000) [ 94.447417][ T5331] Buffer I/O error on dev loop0, logical block 28, async page read [ 94.452982][ T5330] hfs: unable to read volume bitmap [ 94.457325][ T1028] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 94.460183][ T1028] ata1: failed to read log page 10h (errno=-5) [ 94.462682][ T1028] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 94.473753][ T5330] ------------[ cut here ]------------ [ 94.476496][ T5330] !buffer_uptodate(bh) [ 94.476507][ T5330] WARNING: fs/buffer.c:1093 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5330 [ 94.482352][ T5330] Modules linked in: [ 94.484819][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.488663][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.492806][ T5330] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 94.495284][ T5330] Code: 4c 89 f7 e8 f9 0b d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 04 5e fb ff e8 0f db 69 ff eb 8c e8 08 db 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 fa da 69 ff 90 0f 0b 90 e9 cf fd ff ff [ 94.503325][ T5330] RSP: 0018:ffffc9000e4efbc8 EFLAGS: 00010283 [ 94.505977][ T5330] RAX: ffffffff825d3948 RBX: ffff8880441eb8c0 RCX: 0000000000100000 [ 94.509341][ T5330] RDX: ffffc9000eed2000 RSI: 00000000000017df RDI: 00000000000017e0 [ 94.512518][ T5330] RBP: 1ffff11007b78401 R08: ffff8880441eb8c7 R09: 1ffff1100883d718 [ 94.515858][ T5330] R10: dffffc0000000000 R11: ffffed100883d719 R12: dffffc0000000000 [ 94.519179][ T5330] R13: ffff88803dbc2668 R14: ffff88801fc61c0b R15: ffff88801fc6d492 [ 94.522412][ T5330] FS: 00007f82606746c0(0000) GS:ffff88808c543000(0000) knlGS:0000000000000000 [ 94.526357][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.529162][ T5330] CR2: 00007f8253607c00 CR3: 000000001d119000 CR4: 0000000000352ef0 [ 94.532533][ T5330] Call Trace: [ 94.534049][ T5330] [ 94.535471][ T5330] hfs_mdb_commit+0x860/0x1160 [ 94.537464][ T5330] hfs_sync_fs+0x1d/0x30 [ 94.539265][ T5330] sync_filesystem+0x1cf/0x230 [ 94.541280][ T5330] hfs_reconfigure+0x66/0x270 [ 94.543252][ T5330] reconfigure_super+0x232/0x8f0 [ 94.545530][ T5330] path_mount+0xd4b/0x1040 [ 94.547475][ T5330] ? user_path_at+0xd4/0x160 [ 94.549456][ T5330] __se_sys_mount+0x31d/0x420 [ 94.551450][ T5330] ? __pfx___se_sys_mount+0x10/0x10 [ 94.553568][ T5330] ? __x64_sys_mount+0x20/0xc0 [ 94.555734][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.558306][ T5330] do_syscall_64+0x174/0x580 [ 94.560311][ T5330] ? trace_irq_disable+0x3b/0x140 [ 94.562469][ T5330] ? clear_bhb_loop+0x40/0x90 [ 94.564442][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.567040][ T5330] RIP: 0033:0x7f825f79de99 [ 94.568914][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.576820][ T5330] RSP: 002b:00007f8260673fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.580686][ T5330] RAX: ffffffffffffffda RBX: 00007f825fa25fa0 RCX: 00007f825f79de99 [ 94.584306][ T5330] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000000 [ 94.587774][ T5330] RBP: 00007f825f833eaf R08: 0000000000000000 R09: 0000000000000000 [ 94.591023][ T5330] R10: 0000000002236824 R11: 0000000000000246 R12: 0000000000000000 [ 94.594314][ T5330] R13: 00007f825fa26038 R14: 00007f825fa25fa0 R15: 00007ffd1f9212b8 [ 94.597750][ T5330] [ 94.599081][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.602103][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.605923][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.610095][ T5330] Call Trace: [ 94.611498][ T5330] [ 94.612776][ T5330] vpanic+0x56c/0xa60 [ 94.614476][ T5330] ? __pfx__printk+0x10/0x10 [ 94.616492][ T5330] ? __pfx_vpanic+0x10/0x10 [ 94.618436][ T5330] ? is_bpf_text_address+0x292/0x2b0 [ 94.620648][ T5330] ? is_bpf_text_address+0x26/0x2b0 [ 94.622814][ T5330] panic+0xc5/0xd0 [ 94.624471][ T5330] ? __pfx_panic+0x10/0x10 [ 94.626411][ T5330] __warn+0x315/0x4c0 [ 94.628059][ T5330] ? mark_buffer_dirty+0x299/0x410 [ 94.630243][ T5330] ? mark_buffer_dirty+0x299/0x410 [ 94.632393][ T5330] __report_bug+0x276/0x570 [ 94.634312][ T5330] ? __lock_acquire+0x13e8/0x2cf0 [ 94.636556][ T5330] ? mark_buffer_dirty+0x299/0x410 [ 94.638793][ T5330] ? __pfx___report_bug+0x10/0x10 [ 94.640915][ T5330] ? sync_inodes_sb+0xb6c/0xbf0 [ 94.642959][ T5330] ? __mutex_unlock_slowpath+0x731/0x900 [ 94.645436][ T5330] ? mark_buffer_dirty+0x299/0x410 [ 94.647564][ T5330] report_bug+0x16a/0x220 [ 94.649386][ T5330] ? mark_buffer_dirty+0x299/0x410 [ 94.651569][ T5330] ? mark_buffer_dirty+0x29b/0x410 [ 94.653666][ T5330] handle_bug+0x9c/0x200 [ 94.655555][ T5330] exc_invalid_op+0x1a/0x50 [ 94.657438][ T5330] asm_exc_invalid_op+0x1a/0x20 [ 94.659530][ T5330] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 94.662013][ T5330] Code: 4c 89 f7 e8 f9 0b d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 04 5e fb ff e8 0f db 69 ff eb 8c e8 08 db 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 fa da 69 ff 90 0f 0b 90 e9 cf fd ff ff [ 94.670109][ T5330] RSP: 0018:ffffc9000e4efbc8 EFLAGS: 00010283 [ 94.672706][ T5330] RAX: ffffffff825d3948 RBX: ffff8880441eb8c0 RCX: 0000000000100000 [ 94.676055][ T5330] RDX: ffffc9000eed2000 RSI: 00000000000017df RDI: 00000000000017e0 [ 94.679449][ T5330] RBP: 1ffff11007b78401 R08: ffff8880441eb8c7 R09: 1ffff1100883d718 [ 94.682824][ T5330] R10: dffffc0000000000 R11: ffffed100883d719 R12: dffffc0000000000 [ 94.686118][ T5330] R13: ffff88803dbc2668 R14: ffff88801fc61c0b R15: ffff88801fc6d492 [ 94.689458][ T5330] ? mark_buffer_dirty+0x298/0x410 [ 94.691689][ T5330] ? mark_buffer_dirty+0x298/0x410 [ 94.693848][ T5330] hfs_mdb_commit+0x860/0x1160 [ 94.695753][ T5330] hfs_sync_fs+0x1d/0x30 [ 94.697209][ T5330] sync_filesystem+0x1cf/0x230 [ 94.698838][ T5330] hfs_reconfigure+0x66/0x270 [ 94.700363][ T5330] reconfigure_super+0x232/0x8f0 [ 94.702019][ T5330] path_mount+0xd4b/0x1040 [ 94.703495][ T5330] ? user_path_at+0xd4/0x160 [ 94.705127][ T5330] __se_sys_mount+0x31d/0x420 [ 94.707019][ T5330] ? __pfx___se_sys_mount+0x10/0x10 [ 94.708718][ T5330] ? __x64_sys_mount+0x20/0xc0 [ 94.710310][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.712305][ T5330] do_syscall_64+0x174/0x580 [ 94.713943][ T5330] ? trace_irq_disable+0x3b/0x140 [ 94.715967][ T5330] ? clear_bhb_loop+0x40/0x90 [ 94.717953][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.720287][ T5330] RIP: 0033:0x7f825f79de99 [ 94.722050][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.729376][ T5330] RSP: 002b:00007f8260673fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.732493][ T5330] RAX: ffffffffffffffda RBX: 00007f825fa25fa0 RCX: 00007f825f79de99 [ 94.735616][ T5330] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000000 [ 94.738653][ T5330] RBP: 00007f825f833eaf R08: 0000000000000000 R09: 0000000000000000 [ 94.741553][ T5330] R10: 0000000002236824 R11: 0000000000000246 R12: 0000000000000000 [ 94.744569][ T5330] R13: 00007f825fa26038 R14: 00007f825fa25fa0 R15: 00007ffd1f9212b8 [ 94.747444][ T5330] [ 94.748880][ T5330] Kernel Offset: disabled [ 94.750503][ T5330] Rebooting in 86400 seconds..