program: syz_read_part_table(0x5e2, &(0x7f0000000300)="$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") r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a0003000060f6a02632296b78998cf3ffa524823f000000ff2580200081ff00fd0200050000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x120) mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='romfs\x00', 0xa00010, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='squashfs\x00', 0x0, 0x0) [ 85.336919][ T5322] Bluetooth: hci0: command tx timeout [ 85.485427][ T5347] loop0: detected capacity change from 0 to 2048 [ 85.538363][ T5347] loop0: p2 p3 < > p4 < p5 > [ 85.540450][ T5347] loop0: partition table partially beyond EOD, truncated [ 85.564454][ T5347] loop0: p3 start 4284289 is beyond EOD, truncated [ 85.607094][ T5347] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 85.610411][ T5347] ------------[ cut here ]------------ [ 85.612703][ T5347] kernel BUG at fs/buffer.c:1582! [ 85.614805][ T5347] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 85.617481][ T5347] CPU: 0 UID: 0 PID: 5347 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.620771][ T5347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.624986][ T5347] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 85.627406][ T5347] Code: 4c 89 e2 e8 a6 8f 7b 02 e9 42 ff ff ff e8 dc 0f 74 ff 48 89 df 48 c7 c6 80 8a 7a 8b e8 0d 0f db fe 90 0f 0b e8 c5 0f 74 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 85.635880][ T5347] RSP: 0018:ffffc9000de27938 EFLAGS: 00010287 [ 85.638411][ T5347] RAX: ffffffff824cf79b RBX: ffffea0001397440 RCX: 0000000000100000 [ 85.641422][ T5347] RDX: ffffc90020391000 RSI: 00000000000011ef RDI: 00000000000011f0 [ 85.644883][ T5347] RBP: dffffc0000000000 R08: ffffea0001397447 R09: 1ffffd4000272e88 [ 85.647805][ T5347] R10: dffffc0000000000 R11: fffff94000272e89 R12: 0000000000000000 [ 85.651431][ T5347] R13: 0000000000001000 R14: ffff8880454b80e8 R15: 0000000000001000 [ 85.655224][ T5347] FS: 00007f298ebd86c0(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 [ 85.659275][ T5347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.662310][ T5347] CR2: 00007ff49a51d350 CR3: 00000000114da000 CR4: 0000000000352ef0 [ 85.666188][ T5347] Call Trace: [ 85.667814][ T5347] [ 85.669181][ T5347] folio_alloc_buffers+0x3a0/0x640 [ 85.671376][ T5347] bdev_getblk+0x2cc/0x6e0 [ 85.673458][ T5347] __bread_gfp+0x89/0x3b0 [ 85.675464][ T5347] romfs_dev_read+0x22b/0x350 [ 85.677623][ T5347] ? __pfx_romfs_dev_read+0x10/0x10 [ 85.679646][ T5347] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 85.681817][ T5347] romfs_fill_super+0x20e/0x720 [ 85.683705][ T5347] get_tree_bdev_flags+0x40e/0x4d0 [ 85.685659][ T5347] ? __pfx_romfs_fill_super+0x10/0x10 [ 85.687844][ T5347] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.690159][ T5347] vfs_get_tree+0x92/0x2a0 [ 85.692148][ T5347] do_new_mount+0x302/0xa10 [ 85.694090][ T5347] ? apparmor_capable+0x137/0x1a0 [ 85.696049][ T5347] ? __pfx_do_new_mount+0x10/0x10 [ 85.697986][ T5347] ? ns_capable+0x8a/0xf0 [ 85.699624][ T5347] ? kmem_cache_free+0x197/0x620 [ 85.701681][ T5347] __se_sys_mount+0x313/0x410 [ 85.703556][ T5347] ? __pfx___se_sys_mount+0x10/0x10 [ 85.705760][ T5347] ? __x64_sys_mount+0x20/0xc0 [ 85.707809][ T5347] do_syscall_64+0xec/0xf80 [ 85.709761][ T5347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.712301][ T5347] ? trace_irq_disable+0x37/0x100 [ 85.714427][ T5347] ? clear_bhb_loop+0x60/0xb0 [ 85.716502][ T5347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.719240][ T5347] RIP: 0033:0x7f298dd8f7c9 [ 85.721284][ T5347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.729038][ T5347] RSP: 002b:00007f298ebd8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.732690][ T5347] RAX: ffffffffffffffda RBX: 00007f298dfe5fa0 RCX: 00007f298dd8f7c9 [ 85.736307][ T5347] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000200000000500 [ 85.739759][ T5347] RBP: 00007f298de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 85.743272][ T5347] R10: 0000000000a00010 R11: 0000000000000246 R12: 0000000000000000 [ 85.746823][ T5347] R13: 00007f298dfe6038 R14: 00007f298dfe5fa0 R15: 00007ffc71676578 [ 85.750284][ T5347] [ 85.751692][ T5347] Modules linked in: [ 85.753899][ T5347] ---[ end trace 0000000000000000 ]--- [ 85.770809][ T5348] /dev/loop0: Can't open blockdev [ 85.773757][ T5347] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 85.776819][ T5347] Code: 4c 89 e2 e8 a6 8f 7b 02 e9 42 ff ff ff e8 dc 0f 74 ff 48 89 df 48 c7 c6 80 8a 7a 8b e8 0d 0f db fe 90 0f 0b e8 c5 0f 74 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 85.786447][ T5347] RSP: 0018:ffffc9000de27938 EFLAGS: 00010287 [ 85.790142][ T5347] RAX: ffffffff824cf79b RBX: ffffea0001397440 RCX: 0000000000100000 [ 85.794274][ T5347] RDX: ffffc90020391000 RSI: 00000000000011ef RDI: 00000000000011f0 [ 85.799095][ T5347] RBP: dffffc0000000000 R08: ffffea0001397447 R09: 1ffffd4000272e88 [ 85.802791][ T5347] R10: dffffc0000000000 R11: fffff94000272e89 R12: 0000000000000000 [ 85.806683][ T5347] R13: 0000000000001000 R14: ffff8880454b80e8 R15: 0000000000001000 [ 85.810393][ T5347] FS: 00007f298ebd86c0(0000) GS:ffff88808d414000(0000) knlGS:0000000000000000 [ 85.814360][ T5347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.817746][ T5347] CR2: 00007f298ebb6fc8 CR3: 00000000114da000 CR4: 0000000000352ef0 [ 85.821555][ T5347] Kernel panic - not syncing: Fatal exception [ 85.824394][ T5347] Kernel Offset: disabled [ 85.826295][ T5347] Rebooting in 86400 seconds..