program: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x3, 0x0, 0xa, 0x1ff, 0x1}) syz_read_part_table(0x5e3, &(0x7f0000001100)="$eJzs3L+LHVUUB/DvnZn3YyGy+QMsFtKIgivYiYtpdE0XRDsLW4sViYVYyO5DRfDHH5BWtDAKIdYWChLEdFYiLFqI2FuYwnDlzZt5b0Gt3qIEPp/i3XPv3HPODHPbeeH+VneTWpI7/eyjth+6Jpktg1+TdybJ4mKGhWQyJJYkL9x4+pkre1fLbL22XD0Zrs42XabD2GVviL7s8uGNw3f7+CQlxxnCTD6fplvurau863+/6bslbb+H/1n3VV29iGm+zxdJjkq7fPmzZJFPkouZ9/v2k7S11v41nyQ7Sbs+FVu4eXB78dQQ72Q4aZPV7Pi9Uh8brk1Sa61Nji+NmW3y4JP71/6paJ+/yJnDvsyeXBhzm6wP39G9aVdW4ePf/nycxXxdPbXZlDzdSV49fe7R/k7KqsZk+8cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCcPfTaw1834+Ry/1vW8bOfptlsPUn+HOO9+Tn1v3lwe/ett681eePg5R9eefOXw9/ye5I2+4cXktl630ur4db7/dANq+3W/Y/uNdPPPv5mZ70wlC7Jd5d+vFvHDqfD+PoTZ5IPmq37AwAAAAAAAAAAAAAAAAAAwNKtXNm72uT5pOTFbD73r5knpYzTeVJrrX/U3vjx//T6+N38nZ9Slkmp5Wz1y8nuA0mdffBI/7cCq8Raa9e3KP/NM/Lv/goAAP//fn1idw==") r4 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c00028005000100845a30cf5daedc211400018008000100e000000108000200e00000010c0002800500010000000000100016400000000000000000000000080800074000000007"], 0x74}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000001010101000000ff00000000e9b8658aec55eab40d00000000e4ffd90dc6630366a7de29797d27eb13f5cc904d4fa8ca9d068ee16d9e61cf2a5efc07cea71b72dc0f25fc8b3a92f3dcedbedaf62adf7e5f3a172b43b7f2c18a9f2714803e932ab6136b86435d58c8e0fe54e16b7fa051625e24ec54c63989f1c0a2fe492437ad08ec9f96d16ea491bd3e90d59c0d"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x8000) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000002080)='jfs\x00', 0x1800000, 0x0) [ 85.672650][ T5317] Bluetooth: hci0: command tx timeout [ 85.784510][ T5339] use of bytesused == 0 is deprecated and will be removed in the future, [ 85.788038][ T5339] use the actual size instead. [ 85.897541][ T5339] loop0: detected capacity change from 0 to 2048 [ 85.938071][ T5313] loop0: p2 p3 < > p4 < p5 > [ 85.940573][ T5313] loop0: partition table partially beyond EOD, truncated [ 85.961569][ T5313] loop0: p3 start 4225 is beyond EOD, truncated [ 85.992312][ T5339] loop0: p2 p3 < > p4 < p5 > [ 85.994257][ T5339] loop0: partition table partially beyond EOD, truncated [ 86.019661][ T5339] loop0: p3 start 4225 is beyond EOD, truncated [ 86.034798][ T5339] netlink: 60 bytes leftover after parsing attributes in process `syz.0.0'. [ 86.080449][ T5314] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 86.084151][ T5314] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 86.092382][ T5315] Buffer I/O error on dev loop0p5, logical block 0, async page read [ 86.098696][ T5339] ------------[ cut here ]------------ [ 86.101235][ T5339] kernel BUG at fs/buffer.c:1582! [ 86.103437][ T5339] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 86.106269][ T5339] CPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.110197][ T5339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.114740][ T5339] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 86.117108][ T5339] Code: 4c 89 e2 e8 86 8b 7b 02 e9 42 ff ff ff e8 ec 0e 74 ff 48 89 df 48 c7 c6 c0 89 7a 8b e8 6d 0f db fe 90 0f 0b e8 d5 0e 74 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 86.125180][ T5339] RSP: 0018:ffffc9000e93f8e0 EFLAGS: 00010287 [ 86.127810][ T5339] RAX: ffffffff824cf73b RBX: ffffea00008c6540 RCX: 0000000000100000 [ 86.131217][ T5339] RDX: ffffc90020802000 RSI: 0000000000000e4d RDI: 0000000000000e4e [ 86.134517][ T5339] RBP: dffffc0000000000 R08: ffffea00008c6547 R09: 1ffffd4000118ca8 [ 86.137875][ T5339] R10: dffffc0000000000 R11: fffff94000118ca9 R12: 0000000000000000 [ 86.141278][ T5339] R13: 0000000000001000 R14: ffff88801c467910 R15: 0000000000001000 [ 86.144590][ T5339] FS: 00007fdb48f586c0(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000 [ 86.148486][ T5339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.151347][ T5339] CR2: 00007f5c1628038f CR3: 000000001f999000 CR4: 0000000000352ef0 [ 86.154791][ T5339] Call Trace: [ 86.156333][ T5339] [ 86.157583][ T5339] folio_alloc_buffers+0x3a0/0x640 [ 86.159745][ T5339] bdev_getblk+0x2cc/0x6e0 [ 86.161700][ T5339] __bread_gfp+0x89/0x3b0 [ 86.163607][ T5339] readSuper+0xdb/0x270 [ 86.165462][ T5339] chkSuper+0x5d/0xe00 [ 86.167293][ T5339] ? do_raw_spin_unlock+0x4d/0x240 [ 86.169597][ T5339] jfs_mount+0x4b/0x870 [ 86.171486][ T5339] jfs_fill_super+0x6bc/0xd80 [ 86.173557][ T5339] get_tree_bdev_flags+0x40e/0x4d0 [ 86.175827][ T5339] ? __pfx_jfs_fill_super+0x10/0x10 [ 86.178096][ T5339] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 86.180486][ T5339] vfs_get_tree+0x92/0x2a0 [ 86.182559][ T5339] do_new_mount+0x302/0xa10 [ 86.184494][ T5339] ? apparmor_capable+0x137/0x1a0 [ 86.186761][ T5339] ? __pfx_do_new_mount+0x10/0x10 [ 86.188966][ T5339] ? ns_capable+0x8a/0xf0 [ 86.190835][ T5339] ? kmem_cache_free+0x197/0x620 [ 86.192971][ T5339] __se_sys_mount+0x313/0x410 [ 86.195094][ T5339] ? __pfx___se_sys_mount+0x10/0x10 [ 86.197447][ T5339] ? __x64_sys_mount+0x20/0xc0 [ 86.199540][ T5339] do_syscall_64+0xec/0xf80 [ 86.201607][ T5339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.204308][ T5339] ? trace_irq_disable+0x37/0x100 [ 86.206527][ T5339] ? clear_bhb_loop+0x60/0xb0 [ 86.208628][ T5339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.211203][ T5339] RIP: 0033:0x7fdb4818f7c9 [ 86.213237][ T5339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.221427][ T5339] RSP: 002b:00007fdb48f58038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.225033][ T5339] RAX: ffffffffffffffda RBX: 00007fdb483e5fa0 RCX: 00007fdb4818f7c9 [ 86.228263][ T5339] RDX: 0000200000002080 RSI: 00002000000002c0 RDI: 0000200000000400 [ 86.231578][ T5339] RBP: 00007fdb48213f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.234874][ T5339] R10: 0000000001800000 R11: 0000000000000246 R12: 0000000000000000 [ 86.238160][ T5339] R13: 00007fdb483e6038 R14: 00007fdb483e5fa0 R15: 00007ffd0aa7c1a8 [ 86.241509][ T5339] [ 86.242851][ T5339] Modules linked in: [ 86.245244][ T5339] ---[ end trace 0000000000000000 ]--- [ 86.250382][ T5313] Buffer I/O error on dev loop0p2, logical block 0, async page read [ 86.259359][ T5314] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 86.263167][ T5314] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 86.267027][ T5314] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 86.273408][ T5314] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 86.276683][ T5314] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 86.282348][ T5314] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 86.298645][ T5339] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 86.301106][ T5339] Code: 4c 89 e2 e8 86 8b 7b 02 e9 42 ff ff ff e8 ec 0e 74 ff 48 89 df 48 c7 c6 c0 89 7a 8b e8 6d 0f db fe 90 0f 0b e8 d5 0e 74 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 86.310902][ T5339] RSP: 0018:ffffc9000e93f8e0 EFLAGS: 00010287 [ 86.313738][ T5339] RAX: ffffffff824cf73b RBX: ffffea00008c6540 RCX: 0000000000100000 [ 86.317328][ T5339] RDX: ffffc90020802000 RSI: 0000000000000e4d RDI: 0000000000000e4e [ 86.321597][ T5339] RBP: dffffc0000000000 R08: ffffea00008c6547 R09: 1ffffd4000118ca8 [ 86.325001][ T5339] R10: dffffc0000000000 R11: fffff94000118ca9 R12: 0000000000000000 [ 86.328855][ T5339] R13: 0000000000001000 R14: ffff88801c467910 R15: 0000000000001000 [ 86.332460][ T5339] FS: 00007fdb48f586c0(0000) GS:ffff88808d416000(0000) knlGS:0000000000000000 [ 86.336450][ T5339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.340134][ T5339] CR2: 0000565489ba0310 CR3: 000000001f999000 CR4: 0000000000352ef0 [ 86.343725][ T5339] Kernel panic - not syncing: Fatal exception [ 86.346774][ T5339] Kernel Offset: disabled [ 86.348792][ T5339] Rebooting in 86400 seconds..