program: syz_read_part_table(0x5e2, &(0x7f0000000b00)="$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") r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x45}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8000) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='qnx4\x00', 0x0, 0x0) [ 104.176237][ T5333] loop0: detected capacity change from 0 to 2048 [ 104.218649][ T5333] loop0: p2 p3 < > p4 < p5 > [ 104.221649][ T5333] loop0: partition table partially beyond EOD, truncated [ 104.229073][ T5333] loop0: p3 start 4284289 is beyond EOD, truncated [ 104.240914][ T5298] Bluetooth: hci0: command tx timeout [ 104.288814][ T5333] ------------[ cut here ]------------ [ 104.291746][ T5333] kernel BUG at fs/buffer.c:1479! [ 104.296205][ T5333] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 104.299223][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 104.304278][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.308511][ T5333] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 104.310879][ T5333] Code: 4c 89 e2 e8 86 56 98 02 e9 42 ff ff ff e8 1c 71 6d ff 48 89 df 48 c7 c6 00 28 df 8b e8 cd b8 cf fe 90 0f 0b e8 05 71 6d ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 104.319018][ T5333] RSP: 0018:ffffc90002fef9e0 EFLAGS: 00010283 [ 104.321723][ T5333] RAX: ffffffff8258550b RBX: ffffea00013e40c0 RCX: 0000000000100000 [ 104.325117][ T5333] RDX: ffffc90020802000 RSI: 0000000000000daf RDI: 0000000000000db0 [ 104.328408][ T5333] RBP: dffffc0000000000 R08: ffffea00013e40c7 R09: 1ffffd400027c818 [ 104.331750][ T5333] R10: dffffc0000000000 R11: fffff9400027c819 R12: 0000000000000000 [ 104.335331][ T5333] R13: 0000000000001000 R14: ffff88801ccb1cb0 R15: 0000000000001000 [ 104.339003][ T5333] FS: 00007fa285c6a6c0(0000) GS:ffff88808c891000(0000) knlGS:0000000000000000 [ 104.343266][ T5333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.346529][ T5333] CR2: 000055ed003f4168 CR3: 000000004351b000 CR4: 0000000000352ef0 [ 104.349850][ T5333] Call Trace: [ 104.351360][ T5333] [ 104.352663][ T5333] folio_alloc_buffers+0x228/0x640 [ 104.354907][ T5333] bdev_getblk+0x2cb/0x6e0 [ 104.356614][ T5333] __bread_gfp+0x89/0x3b0 [ 104.358452][ T5333] qnx4_fill_super+0x1c6/0x770 [ 104.360505][ T5333] get_tree_bdev_flags+0x431/0x4f0 [ 104.362736][ T5333] ? __pfx_qnx4_fill_super+0x10/0x10 [ 104.364955][ T5333] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 104.367468][ T5333] vfs_get_tree+0x92/0x2a0 [ 104.369449][ T5333] do_new_mount+0x341/0xd30 [ 104.371442][ T5333] ? apparmor_capable+0x126/0x170 [ 104.373648][ T5333] ? __pfx_do_new_mount+0x10/0x10 [ 104.375791][ T5333] ? ns_capable+0x89/0xe0 [ 104.377583][ T5333] ? user_path_at+0xd4/0x160 [ 104.379510][ T5333] __se_sys_mount+0x31d/0x420 [ 104.381493][ T5333] ? __pfx___se_sys_mount+0x10/0x10 [ 104.383811][ T5333] ? __x64_sys_mount+0x20/0xc0 [ 104.385905][ T5333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.388269][ T5333] do_syscall_64+0x174/0x580 [ 104.390281][ T5333] ? trace_irq_disable+0x3b/0x140 [ 104.392396][ T5333] ? clear_bhb_loop+0x40/0x90 [ 104.394409][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.396853][ T5333] RIP: 0033:0x7fa284d9ce59 [ 104.398819][ T5333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.407031][ T5333] RSP: 002b:00007fa285c69fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.410286][ T5333] RAX: ffffffffffffffda RBX: 00007fa285015fa0 RCX: 00007fa284d9ce59 [ 104.413525][ T5333] RDX: 0000200000000000 RSI: 00002000000002c0 RDI: 0000200000000080 [ 104.416988][ T5333] RBP: 00007fa284e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 104.420436][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.423920][ T5333] R13: 00007fa285016038 R14: 00007fa285015fa0 R15: 00007ffe55cfc4f8 [ 104.426969][ T5333] [ 104.428145][ T5333] Modules linked in: [ 104.430091][ T5333] ---[ end trace 0000000000000000 ]--- [ 104.439375][ T5333] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 104.444325][ T5333] Code: 4c 89 e2 e8 86 56 98 02 e9 42 ff ff ff e8 1c 71 6d ff 48 89 df 48 c7 c6 00 28 df 8b e8 cd b8 cf fe 90 0f 0b e8 05 71 6d ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 104.457090][ T5333] RSP: 0018:ffffc90002fef9e0 EFLAGS: 00010283 [ 104.459892][ T5333] RAX: ffffffff8258550b RBX: ffffea00013e40c0 RCX: 0000000000100000 [ 104.464771][ T5333] RDX: ffffc90020802000 RSI: 0000000000000daf RDI: 0000000000000db0 [ 104.468398][ T5333] RBP: dffffc0000000000 R08: ffffea00013e40c7 R09: 1ffffd400027c818 [ 104.472220][ T5333] R10: dffffc0000000000 R11: fffff9400027c819 R12: 0000000000000000 [ 104.476321][ T5333] R13: 0000000000001000 R14: ffff88801ccb1cb0 R15: 0000000000001000 [ 104.481132][ T5333] FS: 00007fa285c6a6c0(0000) GS:ffff88808c891000(0000) knlGS:0000000000000000 [ 104.485859][ T5333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.489367][ T5333] CR2: 000055ed003f4168 CR3: 000000004351b000 CR4: 0000000000352ef0 [ 104.493632][ T5333] Kernel panic - not syncing: Fatal exception [ 104.496641][ T5333] Kernel Offset: disabled [ 104.498469][ T5333] Rebooting in 86400 seconds..