program:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180))
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000007c0)={0x1, 0xf, 0x200, 0x10002, 0xffffffffffffffff, 0x8, 0xfffffffffffffffd, 0x200, 0x4, 0x1, 0x100})
r3 = syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x3004048, &(0x7f0000000100)=ANY=[], 0x11, 0x2c6, &(0x7f0000005bc0)="$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")
r4 = open(&(0x7f0000000000)='./file1\x00', 0x101247, 0x5)
r5 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000640)={0x0, {}, 0x0, {}, 0x7fff, 0x9, 0xfffffffd, 0x0, "22536af39b7c7cb7435b0a43852dbc3a9ad734cc97af10fd4fcca15748328c53097c2f357b9b9343d30b59c491a7b3e74d938981061301004a1d79471a2d2dfe", "0410b15a7d62289113be3626f4e23806009c7416000000000019b0cff500", [0x4000003, 0xf9f]})
mount(0x0, &(0x7f0000000580)='.\x00', 0x0, 0x2236824, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r6 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00')
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x10000})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x1})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r10, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2})
fcntl$lock(r10, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x9})
fcntl$lock(r9, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x2})
close_range(r7, 0xffffffffffffffff, 0x0)
pread64(r6, &(0x7f0000000600)=""/4091, 0xffb, 0x12c)
write$uinput_user_dev(r6, &(0x7f0000000880)={'syz0\x00', {0xfff, 0x9, 0xb, 0x9}, 0x44, [0x1ff, 0x7, 0x0, 0x7, 0x8000, 0x0, 0x3, 0x2, 0x2, 0x8, 0x5a92, 0x100, 0x2, 0x40, 0x80, 0x9, 0x8, 0xf94, 0x1, 0x3, 0x8, 0x12000, 0x7, 0x9, 0xa2, 0x9, 0x3ff, 0xffffffff, 0x7, 0x10000, 0x1, 0xbf6, 0x4000, 0x2, 0x7, 0x400, 0xff, 0xfffffff7, 0x8, 0x5, 0x714, 0x10, 0x26de, 0x7, 0x6, 0xfffffff7, 0x7, 0x7, 0x80, 0x5, 0x0, 0x4, 0x4, 0x8ca, 0x5, 0x10000, 0x6, 0x0, 0x2, 0x0, 0x7, 0x2, 0x8000, 0x1], [0xca3, 0x1, 0x7fffffff, 0x7, 0xa, 0x7, 0x4, 0x0, 0x80, 0x4, 0x2, 0x84, 0x64, 0x8, 0x139, 0x2, 0x1, 0x9, 0x8, 0x17d8, 0x5, 0xffffa658, 0x9, 0x8001, 0x1, 0x9a37, 0x9, 0x8, 0xfffffff9, 0xd, 0x8, 0x80, 0x8, 0x9, 0x1, 0x4, 0x7f, 0x0, 0xd3f, 0x6, 0x7, 0x0, 0x10001, 0x9, 0x4, 0x2, 0x7, 0x0, 0x10, 0x5473, 0x4, 0x1ff, 0x400, 0x5, 0x9, 0x2, 0xc, 0x101, 0x3ff, 0x3, 0xa, 0x35, 0x101, 0xfffffffc], [0x7fffffff, 0x4, 0x10001, 0x48ff9819, 0x4, 0x8, 0x0, 0x7, 0x8, 0x8000, 0x1, 0xbf83, 0x1000, 0x8001, 0x7, 0x4, 0x81, 0xffff, 0xfffffffe, 0x7, 0x80000000, 0xff, 0x9, 0x13, 0x3, 0x8, 0x3, 0x5, 0x5, 0x4, 0x7f, 0x8, 0xbd, 0x5, 0x400, 0x7f, 0x0, 0x232f, 0x8001, 0x7, 0x2f20dded, 0x8, 0x2ba5, 0x6, 0x0, 0xe76, 0x1, 0x7ff, 0x2, 0x4, 0xff, 0x7, 0x85af, 0x98e2, 0x6, 0x100, 0x6, 0x4, 0x9, 0x400, 0x400000, 0x40, 0x1000, 0x7b8], [0x4, 0x10001, 0xe9, 0x4, 0x4, 0x100, 0x6, 0x7fff, 0xfffffd5b, 0x3, 0x8000, 0x7fffffff, 0x0, 0x1, 0x5, 0x1, 0x2, 0x100, 0x2, 0x2, 0x9, 0x4, 0x7, 0x0, 0x6af3, 0x9, 0xa267, 0xff, 0x7f, 0x0, 0x9, 0xaac94364, 0xa, 0x2, 0x8000, 0x0, 0x5, 0x303, 0x7f, 0x81, 0x4, 0x6677, 0x1, 0xfffffff7, 0x4, 0x2, 0x4, 0xfff, 0x4, 0xf, 0x9, 0x81c3, 0x1000, 0x2, 0x4, 0x8, 0xdfc1, 0x1, 0x400, 0x7, 0x9, 0x2, 0x6, 0x400]}, 0x45c)
ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000001980)={0x6, @output={0x0, 0x0, {0x9, 0x5}, 0x5, 0x2}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={r4, 0x58, &(0x7f0000001600)}, 0x10)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001840)={r3, &(0x7f0000001740)='\'\x00', 0x202000, &(0x7f0000001780)={@_ha_fsid={[0x8000, 0x5]}, {0x3, 0xec, 0x8, 0x2}}, 0x3, &(0x7f00000017c0)={@_ha_fsid}, &(0x7f0000001800)=0x8001})
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r11)
[ 83.466870][ T4653] Bluetooth: hci0: command tx timeout
[ 83.551173][ T5323] loop0: detected capacity change from 0 to 64
[ 83.559526][ T5323] =======================================================
[ 83.559526][ T5323] WARNING: The mand mount option has been deprecated and
[ 83.559526][ T5323] and is ignored by this kernel. Remove the mand
[ 83.559526][ T5323] option from the mount to silence this warning.
[ 83.559526][ T5323] =======================================================
[ 83.648141][ T5323] loop0: detected capacity change from 64 to 0
[ 83.657858][ T181] Buffer I/O error on dev loop0, logical block 8, lost async page write
[ 83.661482][ T181] Buffer I/O error on dev loop0, logical block 9, lost async page write
[ 83.667600][ T181] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 83.679836][ T181] Buffer I/O error on dev loop0, logical block 11, lost async page write
[ 83.688013][ T181] Buffer I/O error on dev loop0, logical block 16, lost async page write
[ 83.694372][ T181] Buffer I/O error on dev loop0, logical block 17, lost async page write
[ 83.698372][ T181] Buffer I/O error on dev loop0, logical block 18, lost async page write
[ 83.701694][ T181] Buffer I/O error on dev loop0, logical block 19, lost async page write
[ 83.708883][ T5323] Buffer I/O error on dev loop0, logical block 62, lost sync page write
[ 83.717485][ T5323] hfs: unable to read volume bitmap
[ 83.726375][ T1063] Buffer I/O error on dev loop0, logical block 8, lost async page write
[ 83.734559][ T5323] ------------[ cut here ]------------
[ 83.736581][ T5323] !buffer_uptodate(bh)
[ 83.736590][ T5323] WARNING: fs/buffer.c:1093 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5323
[ 83.741851][ T5323] Modules linked in:
[ 83.744490][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 83.748205][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 83.751696][ T5323] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 83.754112][ T5323] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 9f f3 69 ff eb 8c e8 98 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 8a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff
[ 83.763230][ T5323] RSP: 0018:ffffc9000e437bc8 EFLAGS: 00010283
[ 83.765716][ T5323] RAX: ffffffff825c8e78 RBX: ffff888043e21700 RCX: 0000000000100000
[ 83.768813][ T5323] RDX: ffffc9000ec7a000 RSI: 0000000000001885 RDI: 0000000000001886
[ 83.771810][ T5323] RBP: 1ffff110017bcc01 R08: ffff888043e21707 R09: 1ffff110087c42e0
[ 83.774971][ T5323] R10: dffffc0000000000 R11: ffffed10087c42e1 R12: dffffc0000000000
[ 83.778290][ T5323] R13: ffff88800bde6668 R14: ffff888013290c0b R15: ffff88801ad3f492
[ 83.781764][ T5323] FS: 00007facc2bab6c0(0000) GS:ffff88808c54e000(0000) knlGS:0000000000000000
[ 83.786038][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 83.788976][ T5323] CR2: 0000200000002000 CR3: 000000001233b000 CR4: 0000000000352ef0
[ 83.792750][ T5323] Call Trace:
[ 83.794580][ T5323]
[ 83.796242][ T5323] hfs_mdb_commit+0x860/0x1160
[ 83.798979][ T5323] hfs_sync_fs+0x1d/0x30
[ 83.801003][ T5323] sync_filesystem+0x1cf/0x230
[ 83.803029][ T5323] hfs_reconfigure+0x66/0x270
[ 83.805002][ T5323] reconfigure_super+0x232/0x8f0
[ 83.807186][ T5323] path_mount+0xd4b/0x1040
[ 83.809065][ T5323] ? user_path_at+0xd4/0x160
[ 83.810885][ T5323] __se_sys_mount+0x31d/0x420
[ 83.812747][ T5323] ? __pfx___se_sys_mount+0x10/0x10
[ 83.814860][ T5323] ? __x64_sys_mount+0x20/0xc0
[ 83.816911][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.819476][ T5323] do_syscall_64+0x174/0x580
[ 83.821104][ T5323] ? clear_bhb_loop+0x40/0x90
[ 83.822951][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.825586][ T5323] RIP: 0033:0x7facc1d9de59
[ 83.827496][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 83.835826][ T5323] RSP: 002b:00007facc2baafe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 83.839775][ T5323] RAX: ffffffffffffffda RBX: 00007facc2025fa0 RCX: 00007facc1d9de59
[ 83.843152][ T5323] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000000
[ 83.846708][ T5323] RBP: 00007facc1e33e6f R08: 0000000000000000 R09: 0000000000000000
[ 83.851357][ T5323] R10: 0000000002236824 R11: 0000000000000246 R12: 0000000000000000
[ 83.855245][ T5323] R13: 00007facc2026038 R14: 00007facc2025fa0 R15: 00007ffd7ec43288
[ 83.858887][ T5323]
[ 83.860237][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 83.863505][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 83.867103][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 83.871413][ T5323] Call Trace:
[ 83.873167][ T5323]
[ 83.874715][ T5323] vpanic+0x56c/0xa60
[ 83.876468][ T5323] ? __pfx__printk+0x10/0x10
[ 83.878359][ T5323] ? __pfx_vpanic+0x10/0x10
[ 83.880065][ T5323] ? is_bpf_text_address+0x292/0x2b0
[ 83.882103][ T5323] ? is_bpf_text_address+0x26/0x2b0
[ 83.884365][ T5323] panic+0xc5/0xd0
[ 83.885905][ T5323] ? __pfx_panic+0x10/0x10
[ 83.887849][ T5323] __warn+0x315/0x4c0
[ 83.889576][ T5323] ? mark_buffer_dirty+0x299/0x410
[ 83.891621][ T5323] ? mark_buffer_dirty+0x299/0x410
[ 83.893640][ T5323] __report_bug+0x331/0x530
[ 83.895843][ T5323] ? __lock_acquire+0x13e8/0x2cf0
[ 83.898216][ T5323] ? mark_buffer_dirty+0x299/0x410
[ 83.900394][ T5323] ? __pfx___report_bug+0x10/0x10
[ 83.902437][ T5323] ? sync_inodes_sb+0xb6c/0xbf0
[ 83.904420][ T5323] ? __mutex_unlock_slowpath+0x731/0x900
[ 83.906804][ T5323] ? mark_buffer_dirty+0x299/0x410
[ 83.909195][ T5323] report_bug+0x16a/0x220
[ 83.911283][ T5323] ? mark_buffer_dirty+0x299/0x410
[ 83.913761][ T5323] ? mark_buffer_dirty+0x29b/0x410
[ 83.916212][ T5323] handle_bug+0x9c/0x200
[ 83.918286][ T5323] exc_invalid_op+0x1a/0x50
[ 83.920622][ T5323] asm_exc_invalid_op+0x1a/0x20
[ 83.923358][ T5323] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 83.926381][ T5323] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 9f f3 69 ff eb 8c e8 98 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 8a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff
[ 83.938448][ T5323] RSP: 0018:ffffc9000e437bc8 EFLAGS: 00010283
[ 83.941080][ T5323] RAX: ffffffff825c8e78 RBX: ffff888043e21700 RCX: 0000000000100000
[ 83.944429][ T5323] RDX: ffffc9000ec7a000 RSI: 0000000000001885 RDI: 0000000000001886
[ 83.947671][ T5323] RBP: 1ffff110017bcc01 R08: ffff888043e21707 R09: 1ffff110087c42e0
[ 83.951344][ T5323] R10: dffffc0000000000 R11: ffffed10087c42e1 R12: dffffc0000000000
[ 83.955419][ T5323] R13: ffff88800bde6668 R14: ffff888013290c0b R15: ffff88801ad3f492
[ 83.958765][ T5323] ? mark_buffer_dirty+0x298/0x410
[ 83.960887][ T5323] ? mark_buffer_dirty+0x298/0x410
[ 83.962958][ T5323] hfs_mdb_commit+0x860/0x1160
[ 83.964815][ T5323] hfs_sync_fs+0x1d/0x30
[ 83.966692][ T5323] sync_filesystem+0x1cf/0x230
[ 83.968873][ T5323] hfs_reconfigure+0x66/0x270
[ 83.971181][ T5323] reconfigure_super+0x232/0x8f0
[ 83.973714][ T5323] path_mount+0xd4b/0x1040
[ 83.975958][ T5323] ? user_path_at+0xd4/0x160
[ 83.978163][ T5323] __se_sys_mount+0x31d/0x420
[ 83.980104][ T5323] ? __pfx___se_sys_mount+0x10/0x10
[ 83.982220][ T5323] ? __x64_sys_mount+0x20/0xc0
[ 83.984178][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.986503][ T5323] do_syscall_64+0x174/0x580
[ 83.988303][ T5323] ? clear_bhb_loop+0x40/0x90
[ 83.990492][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.993329][ T5323] RIP: 0033:0x7facc1d9de59
[ 83.995338][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 84.002561][ T5323] RSP: 002b:00007facc2baafe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 84.005656][ T5323] RAX: ffffffffffffffda RBX: 00007facc2025fa0 RCX: 00007facc1d9de59
[ 84.008596][ T5323] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000000
[ 84.011806][ T5323] RBP: 00007facc1e33e6f R08: 0000000000000000 R09: 0000000000000000
[ 84.015341][ T5323] R10: 0000000002236824 R11: 0000000000000246 R12: 0000000000000000
[ 84.018425][ T5323] R13: 00007facc2026038 R14: 00007facc2025fa0 R15: 00007ffd7ec43288
[ 84.021554][ T5323]
[ 84.023205][ T5323] Kernel Offset: disabled
[ 84.024883][ T5323] Rebooting in 86400 seconds..