program: syz_read_part_table(0x5e2, &(0x7f0000000b00)="$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") r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x6, r4, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x6, r4, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r4, r4, 0xa93, 0x0, 0x3fff}) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xfe, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x7f, 0x3d, 0x14, {0xffff945a, 0x1}, 0x3, 0xed}}) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0x2d0, 0xfdc, 0x3131354f, 0x7, 0xc4, 0x0, 0xa, 0x80, 0x0, 0x1, 0x1, 0x1}}) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x5333578052521f3b) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8000) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='jfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='jfs\x00', 0x0, 0x0) [ 105.443108][ T4671] Bluetooth: hci0: command tx timeout [ 105.579660][ T5332] loop0: detected capacity change from 0 to 2048 [ 105.605862][ T5305] loop0: p2 p3 < > p4 < p5 > [ 105.608267][ T5305] loop0: partition table partially beyond EOD, truncated [ 105.616504][ T5305] loop0: p3 start 4284289 is beyond EOD, truncated [ 105.638452][ T5332] loop0: p2 p3 < > p4 < p5 > [ 105.640880][ T5332] loop0: partition table partially beyond EOD, truncated [ 105.650294][ T5332] loop0: p3 start 4284289 is beyond EOD, truncated [ 105.688945][ T5333] ------------[ cut here ]------------ [ 105.691746][ T5333] kernel BUG at fs/buffer.c:1579! [ 105.698366][ T5333] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 105.701717][ T5333] CPU: 0 UID: 0 PID: 5333 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 105.705764][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.710268][ T5333] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 105.713122][ T5333] Code: 4c 89 e2 e8 56 e7 95 02 e9 42 ff ff ff e8 9c 09 6e ff 48 89 df 48 c7 c6 20 e8 de 8b e8 1d 56 d0 fe 90 0f 0b e8 85 09 6e ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 105.722063][ T5333] RSP: 0018:ffffc9000e4a78e0 EFLAGS: 00010293 [ 105.725182][ T5333] RAX: ffffffff8257c52b RBX: ffffea000157ac40 RCX: ffff888000298000 [ 105.728976][ T5333] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000001000 [ 105.732713][ T5333] RBP: dffffc0000000000 R08: ffffea000157ac47 R09: 1ffffd40002af588 [ 105.736713][ T5333] R10: dffffc0000000000 R11: fffff940002af589 R12: 0000000000000000 [ 105.740309][ T5333] R13: 0000000000001000 R14: ffff888047d3f0e8 R15: 0000000000001000 [ 105.745451][ T5333] FS: 00007fe82cfd46c0(0000) GS:ffff88808ca49000(0000) knlGS:0000000000000000 [ 105.749856][ T5333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.752737][ T5333] CR2: 000055e29ee61ba0 CR3: 00000000395a7000 CR4: 0000000000352ef0 [ 105.756334][ T5333] Call Trace: [ 105.758241][ T5333] [ 105.759884][ T5333] folio_alloc_buffers+0x39f/0x640 [ 105.762559][ T5333] bdev_getblk+0x2cb/0x6e0 [ 105.764513][ T5333] __bread_gfp+0x89/0x3b0 [ 105.766229][ T5333] readSuper+0xdb/0x270 [ 105.768004][ T5333] chkSuper+0x5d/0xe00 [ 105.769827][ T5333] ? do_raw_spin_unlock+0x4d/0x210 [ 105.772423][ T5333] jfs_mount+0x4b/0x870 [ 105.774726][ T5333] jfs_fill_super+0x6bc/0xd80 [ 105.776884][ T5333] get_tree_bdev_flags+0x431/0x4f0 [ 105.779207][ T5333] ? __pfx_jfs_fill_super+0x10/0x10 [ 105.781673][ T5333] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 105.784764][ T5333] vfs_get_tree+0x92/0x2a0 [ 105.787184][ T5333] do_new_mount+0x341/0xd30 [ 105.789343][ T5333] ? apparmor_capable+0x126/0x170 [ 105.791662][ T5333] ? __pfx_do_new_mount+0x10/0x10 [ 105.794194][ T5333] ? ns_capable+0x89/0xe0 [ 105.796412][ T5333] ? user_path_at+0xd4/0x160 [ 105.798815][ T5333] __se_sys_mount+0x31d/0x420 [ 105.801086][ T5333] ? __pfx___se_sys_mount+0x10/0x10 [ 105.803441][ T5333] ? __x64_sys_mount+0x20/0xc0 [ 105.805632][ T5333] do_syscall_64+0x14d/0xf80 [ 105.808264][ T5333] ? trace_irq_disable+0x3b/0x150 [ 105.811368][ T5333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.814465][ T5333] ? clear_bhb_loop+0x40/0x90 [ 105.816566][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.819154][ T5333] RIP: 0033:0x7fe830b9c819 [ 105.821091][ T5333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.830207][ T5333] RSP: 002b:00007fe82cfd3fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.834503][ T5333] RAX: ffffffffffffffda RBX: 00007fe830e16090 RCX: 00007fe830b9c819 [ 105.837979][ T5333] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000200000000080 [ 105.843150][ T5333] RBP: 00007fe830c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 105.847178][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.850980][ T5333] R13: 00007fe830e16128 R14: 00007fe830e16090 R15: 00007ffd6d7d5a68 [ 105.854417][ T5333] [ 105.855810][ T5333] Modules linked in: [ 105.862742][ T5333] ---[ end trace 0000000000000000 ]--- [ 105.873368][ T5333] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 105.875986][ T5333] Code: 4c 89 e2 e8 56 e7 95 02 e9 42 ff ff ff e8 9c 09 6e ff 48 89 df 48 c7 c6 20 e8 de 8b e8 1d 56 d0 fe 90 0f 0b e8 85 09 6e ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 105.885678][ T5333] RSP: 0018:ffffc9000e4a78e0 EFLAGS: 00010293 [ 105.889939][ T5333] RAX: ffffffff8257c52b RBX: ffffea000157ac40 RCX: ffff888000298000 [ 105.894112][ T5333] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000001000 [ 105.897775][ T5333] RBP: dffffc0000000000 R08: ffffea000157ac47 R09: 1ffffd40002af588 [ 105.902581][ T5333] R10: dffffc0000000000 R11: fffff940002af589 R12: 0000000000000000 [ 105.906361][ T5333] R13: 0000000000001000 R14: ffff888047d3f0e8 R15: 0000000000001000 [ 105.910082][ T5333] FS: 00007fe82cfd46c0(0000) GS:ffff88808ca49000(0000) knlGS:0000000000000000 [ 105.915356][ T5333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.918921][ T5333] CR2: 000055e29ee61ba0 CR3: 00000000395a7000 CR4: 0000000000352ef0 [ 105.923140][ T5333] Kernel panic - not syncing: Fatal exception [ 105.926197][ T5333] Kernel Offset: disabled [ 105.928282][ T5333] Rebooting in 86400 seconds..