program: syz_read_part_table(0x5e2, &(0x7f0000000b00)="$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") r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8000) (async) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='omfs\x00', 0x1000040, 0x0) [ 168.413342][ T4651] Bluetooth: hci0: command tx timeout [ 168.513554][ T5343] loop0: detected capacity change from 0 to 2048 [ 168.539869][ T5343] loop0: p2 p3 < > p4 < p5 > [ 168.542484][ T5343] loop0: partition table partially beyond EOD, truncated [ 168.551006][ T5343] loop0: p3 start 4284289 is beyond EOD, truncated [ 168.600803][ T5344] ======================================================= [ 168.600803][ T5344] WARNING: The mand mount option has been deprecated and [ 168.600803][ T5344] and is ignored by this kernel. Remove the mand [ 168.600803][ T5344] option from the mount to silence this warning. [ 168.600803][ T5344] ======================================================= [ 168.685365][ T5344] ------------[ cut here ]------------ [ 168.688998][ T5344] kernel BUG at fs/buffer.c:1479! [ 168.711473][ T5344] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 168.714298][ T5344] CPU: 0 UID: 0 PID: 5344 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 168.718333][ T5344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.722736][ T5344] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 168.725185][ T5344] Code: 4c 89 e2 e8 c6 71 98 02 e9 42 ff ff ff e8 8c 80 6d ff 48 89 df 48 c7 c6 00 28 df 8b e8 bd bd cf fe 90 0f 0b e8 75 80 6d ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 168.733710][ T5344] RSP: 0018:ffffc90004cc79b0 EFLAGS: 00010293 [ 168.736368][ T5344] RAX: ffffffff825850cb RBX: ffffea000140f080 RCX: ffff8880002a2500 [ 168.739991][ T5344] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000001000 [ 168.743515][ T5344] RBP: dffffc0000000000 R08: ffffea000140f087 R09: 1ffffd4000281e10 [ 168.746943][ T5344] R10: dffffc0000000000 R11: fffff94000281e11 R12: 0000000000000000 [ 168.750550][ T5344] R13: 0000000000001000 R14: ffff8880474e79f8 R15: 0000000000001000 [ 168.753831][ T5344] FS: 00007f5a816b76c0(0000) GS:ffff88808c881000(0000) knlGS:0000000000000000 [ 168.757423][ T5344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.760135][ T5344] CR2: 0000564ee0f20238 CR3: 0000000012ce4000 CR4: 0000000000352ef0 [ 168.763440][ T5344] Call Trace: [ 168.764872][ T5344] [ 168.766134][ T5344] folio_alloc_buffers+0x228/0x640 [ 168.768511][ T5344] bdev_getblk+0x2cb/0x6e0 [ 168.770530][ T5344] __bread_gfp+0x89/0x3b0 [ 168.772520][ T5344] omfs_fill_super+0x30d/0x1590 [ 168.774668][ T5344] ? sb_set_blocksize+0x10c/0x240 [ 168.777005][ T5344] ? setup_bdev_super+0x4c1/0x5b0 [ 168.779329][ T5344] get_tree_bdev_flags+0x431/0x4f0 [ 168.781646][ T5344] ? __pfx_omfs_fill_super+0x10/0x10 [ 168.784052][ T5344] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 168.786608][ T5344] vfs_get_tree+0x92/0x2a0 [ 168.788744][ T5344] do_new_mount+0x341/0xd30 [ 168.790821][ T5344] ? __pfx_do_new_mount+0x10/0x10 [ 168.793145][ T5344] ? user_path_at+0xd4/0x160 [ 168.795279][ T5344] __se_sys_mount+0x31d/0x420 [ 168.797421][ T5344] ? __pfx___se_sys_mount+0x10/0x10 [ 168.799777][ T5344] ? __x64_sys_mount+0x20/0xc0 [ 168.801969][ T5344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.804711][ T5344] do_syscall_64+0x15f/0xf80 [ 168.806912][ T5344] ? trace_irq_disable+0x3b/0x140 [ 168.809292][ T5344] ? clear_bhb_loop+0x40/0x90 [ 168.811444][ T5344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.814119][ T5344] RIP: 0033:0x7f5a8079cdd9 [ 168.816155][ T5344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.824510][ T5344] RSP: 002b:00007f5a816b6fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.828284][ T5344] RAX: ffffffffffffffda RBX: 00007f5a80a16090 RCX: 00007f5a8079cdd9 [ 168.832488][ T5344] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00002000000000c0 [ 168.836152][ T5344] RBP: 00007f5a80832d69 R08: 0000000000000000 R09: 0000000000000000 [ 168.839677][ T5344] R10: 0000000001000040 R11: 0000000000000246 R12: 0000000000000000 [ 168.843366][ T5344] R13: 00007f5a80a16128 R14: 00007f5a80a16090 R15: 00007ffe6fd1c6e8 [ 168.846924][ T5344] [ 168.848404][ T5344] Modules linked in: [ 168.852570][ T5344] ---[ end trace 0000000000000000 ]--- [ 168.874045][ T5344] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 168.877087][ T5344] Code: 4c 89 e2 e8 c6 71 98 02 e9 42 ff ff ff e8 8c 80 6d ff 48 89 df 48 c7 c6 00 28 df 8b e8 bd bd cf fe 90 0f 0b e8 75 80 6d ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 168.885167][ T5344] RSP: 0018:ffffc90004cc79b0 EFLAGS: 00010293 [ 168.888015][ T5344] RAX: ffffffff825850cb RBX: ffffea000140f080 RCX: ffff8880002a2500 [ 168.891416][ T5344] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000001000 [ 168.894890][ T5344] RBP: dffffc0000000000 R08: ffffea000140f087 R09: 1ffffd4000281e10 [ 168.898796][ T5344] R10: dffffc0000000000 R11: fffff94000281e11 R12: 0000000000000000 [ 168.902346][ T5344] R13: 0000000000001000 R14: ffff8880474e79f8 R15: 0000000000001000 [ 168.906169][ T5344] FS: 00007f5a816b76c0(0000) GS:ffff88808c881000(0000) knlGS:0000000000000000 [ 168.910414][ T5344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.913488][ T5344] CR2: 0000564ee0f0e870 CR3: 0000000012ce4000 CR4: 0000000000352ef0 [ 168.917600][ T5344] Kernel panic - not syncing: Fatal exception [ 168.920805][ T5344] Kernel Offset: disabled [ 168.922785][ T5344] Rebooting in 86400 seconds..