program: syz_read_part_table(0x5e2, &(0x7f0000000b00)="$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") r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8000) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='vfat\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDISABIO(r1, 0x4b37) [ 68.101311][ T5334] Bluetooth: hci0: command tx timeout [ 68.183277][ T5353] loop0: detected capacity change from 0 to 2048 [ 68.212942][ T5353] loop0: p2 p3 < > p4 < p5 > [ 68.215155][ T5353] loop0: partition table partially beyond EOD, truncated [ 68.220133][ T5353] loop0: p3 start 4284289 is beyond EOD, truncated [ 68.253958][ T5326] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 68.257919][ T5326] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 68.264762][ T5360] Buffer I/O error on dev loop0p5, logical block 0, async page read [ 68.273051][ T5328] Buffer I/O error on dev loop0p2, logical block 0, async page read [ 68.279262][ T5353] ------------[ cut here ]------------ [ 68.282460][ T5353] kernel BUG at fs/buffer.c:1582! [ 68.285636][ T5353] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 68.288484][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.0.0 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(full) [ 68.293605][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.298359][ T5353] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 68.300983][ T5353] Code: 4c 89 e2 e8 c6 6c b9 02 e9 42 ff ff ff e8 bc 54 78 ff 48 89 df 48 c7 c6 60 01 9a 8b e8 fd 96 e0 fe 90 0f 0b e8 a5 54 78 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 68.310139][ T5353] RSP: 0018:ffffc9000d66f840 EFLAGS: 00010287 [ 68.312805][ T5353] RAX: ffffffff8247658b RBX: ffffea0001339b80 RCX: 0000000000100000 [ 68.316258][ T5353] RDX: ffffc9000e222000 RSI: 0000000000000c2f RDI: 0000000000000c30 [ 68.319765][ T5353] RBP: dffffc0000000000 R08: ffffea0001339b87 R09: 1ffffd4000267370 [ 68.323259][ T5353] R10: dffffc0000000000 R11: fffff94000267371 R12: 0000000000000000 [ 68.327350][ T5353] R13: 0000000000001000 R14: ffff888043b01488 R15: 0000000000001000 [ 68.331001][ T5353] FS: 00007f50459b86c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 68.334320][ T5353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.337008][ T5353] CR2: 0000563865420ff8 CR3: 0000000034983000 CR4: 0000000000352ef0 [ 68.340580][ T5353] Call Trace: [ 68.342133][ T5353] [ 68.343481][ T5353] folio_alloc_buffers+0x3a0/0x640 [ 68.346373][ T5353] bdev_getblk+0x286/0x660 [ 68.348947][ T5353] __bread_gfp+0x89/0x3c0 [ 68.351082][ T5353] fat_fill_super+0x5e2/0x3570 [ 68.353135][ T5353] ? __pfx_setup+0x10/0x10 [ 68.355261][ T5353] ? __pfx_fat_fill_super+0x10/0x10 [ 68.357496][ T5353] ? snprintf+0xda/0x120 [ 68.359412][ T5353] ? sb_set_blocksize+0xc7/0x180 [ 68.361555][ T5353] ? setup_bdev_super+0x4c1/0x5b0 [ 68.363759][ T5353] get_tree_bdev_flags+0x40b/0x4d0 [ 68.366108][ T5353] ? __pfx_vfat_fill_super+0x10/0x10 [ 68.368526][ T5353] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 68.371466][ T5353] vfs_get_tree+0x92/0x2b0 [ 68.373978][ T5353] do_new_mount+0x2a2/0x9e0 [ 68.376176][ T5353] ? ns_capable+0x8a/0xf0 [ 68.378246][ T5353] ? __pfx_do_new_mount+0x10/0x10 [ 68.380550][ T5353] ? path_mount+0x61c/0xfe0 [ 68.382418][ T5353] ? user_path_at+0x44/0x60 [ 68.384721][ T5353] __se_sys_mount+0x317/0x410 [ 68.387052][ T5353] ? __pfx___se_sys_mount+0x10/0x10 [ 68.389632][ T5353] ? rcu_is_watching+0x15/0xb0 [ 68.392650][ T5353] ? rcu_is_watching+0x15/0xb0 [ 68.396113][ T5353] ? __x64_sys_mount+0x20/0xc0 [ 68.398516][ T5353] do_syscall_64+0xfa/0x3b0 [ 68.400479][ T5353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.403650][ T5353] ? clear_bhb_loop+0x60/0xb0 [ 68.406271][ T5353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.409383][ T5353] RIP: 0033:0x7f5044b8ebe9 [ 68.411211][ T5353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.420168][ T5353] RSP: 002b:00007f50459b8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 68.423887][ T5353] RAX: ffffffffffffffda RBX: 00007f5044db5fa0 RCX: 00007f5044b8ebe9 [ 68.427290][ T5353] RDX: 0000200000000080 RSI: 00002000000002c0 RDI: 0000200000000000 [ 68.430926][ T5353] RBP: 00007f5044c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 68.434425][ T5353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.438236][ T5353] R13: 00007f5044db6038 R14: 00007f5044db5fa0 R15: 00007fff13f2c268 [ 68.441815][ T5353] [ 68.443255][ T5353] Modules linked in: [ 68.445381][ T5353] ---[ end trace 0000000000000000 ]--- [ 68.448329][ T5326] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 68.452361][ T5326] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 68.456147][ T5326] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 68.460275][ T5326] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 68.464101][ T5326] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 68.468006][ T5326] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 68.479365][ T5353] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 68.479395][ T5353] Code: 4c 89 e2 e8 c6 6c b9 02 e9 42 ff ff ff e8 bc 54 78 ff 48 89 df 48 c7 c6 60 01 9a 8b e8 fd 96 e0 fe 90 0f 0b e8 a5 54 78 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 68.479406][ T5353] RSP: 0018:ffffc9000d66f840 EFLAGS: 00010287 [ 68.479421][ T5353] RAX: ffffffff8247658b RBX: ffffea0001339b80 RCX: 0000000000100000 [ 68.479431][ T5353] RDX: ffffc9000e222000 RSI: 0000000000000c2f RDI: 0000000000000c30 [ 68.479440][ T5353] RBP: dffffc0000000000 R08: ffffea0001339b87 R09: 1ffffd4000267370 [ 68.479449][ T5353] R10: dffffc0000000000 R11: fffff94000267371 R12: 0000000000000000 [ 68.479458][ T5353] R13: 0000000000001000 R14: ffff888043b01488 R15: 0000000000001000 [ 68.479466][ T5353] FS: 00007f50459b86c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 68.479476][ T5353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.479484][ T5353] CR2: 00007ffda4e7f1d8 CR3: 0000000034983000 CR4: 0000000000352ef0 [ 68.479528][ T5353] Kernel panic - not syncing: Fatal exception [ 68.479878][ T5353] Kernel Offset: disabled