program:
syz_mount_image$udf(&(0x7f0000000e00), &(0x7f0000000180)='./file0\x00', 0x400007, &(0x7f0000000ec0)=ANY=[@ANYBLOB="766f6c756d653d30303030303030303030303030303030303036332c696f636861727365743d63703836342c73657373696f6e3d303030303030303030302c7569643d666f726765742c756e64656c6574652c6e6f7672732c6c6f6e6761642c7569643d666f726765742c757466382c0000000006000000000000"], 0x1, 0xc2d, &(0x7f00000001c0)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000f40)={0x0, {}, 0x0, {}, 0x3fffffe, 0x5, 0x6, 0x9, "9e959f16deab7b08aa26e66c4056a516950773ff0000000000eef40100fcc1d8a6078ed9d5f8643902dd8f6fac274de9d940ffa5e592bbd48685450d004b0b00", "f625c10e6e0080ffffffffffffffff7e904dc8df6aa3a893ec00347f41be6908", [0xa, 0x80000476]})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1e4047c, &(0x7f0000000ec0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) (async)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1e4047c, &(0x7f0000000ec0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
[ 84.921259][ T5330] loop0: detected capacity change from 0 to 2048
[ 84.991234][ T5330] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 85.030169][ T5330] loop0: detected capacity change from 2048 to 0
[ 85.034583][ T5331] =======================================================
[ 85.034583][ T5331] WARNING: The mand mount option has been deprecated and
[ 85.034583][ T5331] and is ignored by this kernel. Remove the mand
[ 85.034583][ T5331] option from the mount to silence this warning.
[ 85.034583][ T5331] =======================================================
[ 85.067797][ T5330] Buffer I/O error on dev loop0, logical block 128, lost sync page write
[ 85.080385][ T5291] Bluetooth: hci0: command tx timeout
[ 85.086110][ T5330] Buffer I/O error on dev loop0, logical block 128, lost sync page write
[ 85.091725][ T5331] ------------[ cut here ]------------
[ 85.094496][ T5331] !buffer_uptodate(bh)
[ 85.094507][ T5331] WARNING: fs/buffer.c:1087 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.0.0/5331
[ 85.100606][ T5331] Modules linked in:
[ 85.103278][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.107242][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.111767][ T5331] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 85.114303][ T5331] Code: 4c 89 f7 e8 99 6b da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 64 63 fb ff e8 6f 87 6d ff eb 8c e8 68 87 6d ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 5a 87 6d ff 90 0f 0b 90 e9 cf fd ff ff
[ 85.122752][ T5331] RSP: 0018:ffffc90005e07bb0 EFLAGS: 00010293
[ 85.126048][ T5331] RAX: ffffffff82583fd8 RBX: ffff88804458dae0 RCX: ffff888000cd2540
[ 85.129811][ T5331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 85.133417][ T5331] RBP: ffffc90005e07c01 R08: ffff88804458dae7 R09: 1ffff110088b1b5c
[ 85.136995][ T5331] R10: dffffc0000000000 R11: ffffed10088b1b5d R12: ffff8880364ad009
[ 85.140611][ T5331] R13: 1ffff92000bc0f84 R14: dffffc0000000000 R15: ffff88804458dae0
[ 85.144032][ T5331] FS: 00007f84dbb8c6c0(0000) GS:ffff88808c894000(0000) knlGS:0000000000000000
[ 85.147923][ T5331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.150836][ T5331] CR2: 00007ffc90b09ff8 CR3: 0000000043aeb000 CR4: 0000000000352ef0
[ 85.154382][ T5331] Call Trace:
[ 85.155906][ T5331]
[ 85.157194][ T5331] udf_open_lvid+0x38a/0x5d0
[ 85.160017][ T5331] ? __pfx_udf_open_lvid+0x10/0x10
[ 85.162451][ T5331] ? udf_reconfigure+0x2e7/0x540
[ 85.164703][ T5331] udf_reconfigure+0x336/0x540
[ 85.166866][ T5331] reconfigure_super+0x227/0x8a0
[ 85.169216][ T5331] vfs_fsconfig_locked+0x171/0x320
[ 85.171397][ T5331] __se_sys_fsconfig+0x6c9/0x820
[ 85.173723][ T5331] ? __pfx___se_sys_fsconfig+0x10/0x10
[ 85.176080][ T5331] ? rcu_is_watching+0x15/0xb0
[ 85.178128][ T5331] ? __x64_sys_fsconfig+0x20/0xc0
[ 85.180572][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.183583][ T5331] do_syscall_64+0x174/0x580
[ 85.186032][ T5331] ? clear_bhb_loop+0x40/0x90
[ 85.188238][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.190878][ T5331] RIP: 0033:0x7f84dad9ce59
[ 85.192940][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.201577][ T5331] RSP: 002b:00007f84dbb8bfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[ 85.205364][ T5331] RAX: ffffffffffffffda RBX: 00007f84db016090 RCX: 00007f84dad9ce59
[ 85.209012][ T5331] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007
[ 85.212491][ T5331] RBP: 00007f84dae32d6f R08: 0000000000000000 R09: 0000000000000000
[ 85.216112][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.219753][ T5331] R13: 00007f84db016128 R14: 00007f84db016090 R15: 00007ffde2888068
[ 85.223276][ T5331]
[ 85.224733][ T5331] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 85.227991][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.231817][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.236110][ T5331] Call Trace:
[ 85.237594][ T5331]
[ 85.239291][ T5331] vpanic+0x56c/0xa60
[ 85.241119][ T5331] ? __pfx__printk+0x10/0x10
[ 85.243203][ T5331] ? __pfx_vpanic+0x10/0x10
[ 85.245183][ T5331] ? is_bpf_text_address+0x292/0x2b0
[ 85.247532][ T5331] ? is_bpf_text_address+0x26/0x2b0
[ 85.249830][ T5331] panic+0xc5/0xd0
[ 85.251516][ T5331] ? __pfx_panic+0x10/0x10
[ 85.253560][ T5331] __warn+0x315/0x4c0
[ 85.255267][ T5331] ? mark_buffer_dirty+0x299/0x410
[ 85.257502][ T5331] ? mark_buffer_dirty+0x299/0x410
[ 85.259674][ T5331] __report_bug+0x29a/0x540
[ 85.261564][ T5331] ? mark_buffer_dirty+0x299/0x410
[ 85.263661][ T5331] ? __pfx___report_bug+0x10/0x10
[ 85.265695][ T5331] ? rcu_is_watching+0x15/0xb0
[ 85.267763][ T5331] ? trace_contention_end+0x3d/0x140
[ 85.270056][ T5331] ? ktime_get_real_ts64+0xa9/0x3e0
[ 85.272293][ T5331] ? mark_buffer_dirty+0x299/0x410
[ 85.274583][ T5331] report_bug+0x16a/0x220
[ 85.276484][ T5331] ? mark_buffer_dirty+0x299/0x410
[ 85.278788][ T5331] ? mark_buffer_dirty+0x29b/0x410
[ 85.281017][ T5331] handle_bug+0x9c/0x200
[ 85.282888][ T5331] exc_invalid_op+0x1a/0x50
[ 85.284912][ T5331] asm_exc_invalid_op+0x1a/0x20
[ 85.287076][ T5331] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 85.289592][ T5331] Code: 4c 89 f7 e8 99 6b da ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 64 63 fb ff e8 6f 87 6d ff eb 8c e8 68 87 6d ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 5a 87 6d ff 90 0f 0b 90 e9 cf fd ff ff
[ 85.297996][ T5331] RSP: 0018:ffffc90005e07bb0 EFLAGS: 00010293
[ 85.300719][ T5331] RAX: ffffffff82583fd8 RBX: ffff88804458dae0 RCX: ffff888000cd2540
[ 85.304129][ T5331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 85.307274][ T5331] RBP: ffffc90005e07c01 R08: ffff88804458dae7 R09: 1ffff110088b1b5c
[ 85.311165][ T5331] R10: dffffc0000000000 R11: ffffed10088b1b5d R12: ffff8880364ad009
[ 85.314552][ T5331] R13: 1ffff92000bc0f84 R14: dffffc0000000000 R15: ffff88804458dae0
[ 85.317966][ T5331] ? mark_buffer_dirty+0x298/0x410
[ 85.320310][ T5331] udf_open_lvid+0x38a/0x5d0
[ 85.322435][ T5331] ? __pfx_udf_open_lvid+0x10/0x10
[ 85.324711][ T5331] ? udf_reconfigure+0x2e7/0x540
[ 85.326762][ T5331] udf_reconfigure+0x336/0x540
[ 85.328775][ T5331] reconfigure_super+0x227/0x8a0
[ 85.330858][ T5331] vfs_fsconfig_locked+0x171/0x320
[ 85.332944][ T5331] __se_sys_fsconfig+0x6c9/0x820
[ 85.334922][ T5331] ? __pfx___se_sys_fsconfig+0x10/0x10
[ 85.337216][ T5331] ? rcu_is_watching+0x15/0xb0
[ 85.339215][ T5331] ? __x64_sys_fsconfig+0x20/0xc0
[ 85.341319][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.343924][ T5331] do_syscall_64+0x174/0x580
[ 85.345955][ T5331] ? clear_bhb_loop+0x40/0x90
[ 85.348057][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.350523][ T5331] RIP: 0033:0x7f84dad9ce59
[ 85.352490][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.360701][ T5331] RSP: 002b:00007f84dbb8bfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[ 85.364378][ T5331] RAX: ffffffffffffffda RBX: 00007f84db016090 RCX: 00007f84dad9ce59
[ 85.367901][ T5331] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007
[ 85.371427][ T5331] RBP: 00007f84dae32d6f R08: 0000000000000000 R09: 0000000000000000
[ 85.374912][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.378478][ T5331] R13: 00007f84db016128 R14: 00007f84db016090 R15: 00007ffde2888068
[ 85.381856][ T5331]
[ 85.383656][ T5331] Kernel Offset: disabled
[ 85.385573][ T5331] Rebooting in 86400 seconds..