program: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000000000010000000000000000000300000a14000000180a0101000000000000000001000005140000001100b22b8b0100000000000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10000030) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) syz_read_part_table(0x5e2, &(0x7f0000000b00)="$eJzs3L+rHFUUB/DvndlfD6LPP8DiQRpR8Al24sNY6DNdEO0EbS2eSCzEQnYXFcEff0Ba0cIohFhbKEgQ01mJ8NBCxN7CFIYrOzuzG1CrfSiBz6fYe+6de86Z4U47G+5udT+pJbnZzT5qu2HUJNNV8GvyzjhZvvhkv5CM+8SS5PmrTz198eBSmW7WVquL/up022XSj6Mc9NGXo3x49fjdLl6kZJ4+zPjzSUarvXWdd+XvN32rpO328D8bfVXXBzHJ9/kiyUlpV4c/TZb5JLkvs27fYZK21tod8yLZS9rNW7GDa0c3lk/08V76N228ns3fK/WR/to4tdbaZH5+yGyT+x8/vPxPRbv8Zfd4w1KtdXxuyG22F05uT4bw0W9/nmc521RPbbYlT/eSV0+ffbi7k7KuMd798QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGMPvPbg180wudD9lk38zKdptlsXyZ9DfDA7o/7Xjm7sv/X25SZvHL38wytv/nL8W35P0ubw+Fwy3ex7aT1cf78bRv1qu3P/k9vN5LOPv9nbLPSlS/Ld+R9v1aHDaT++/tgdyUfNzv0BAAAAAAAAAAAAAAAAAABg5XouHlxq8lxS8kK2n/vXzJJShuksqbXWP2pn+Ph/cuXePrr5U8oqKbXcWf1Csn9PUqcfPNT9rcA6sdY66lqU/+YZ+Xd/BQAA//8EFGMK") r5 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0x9, 0x8001, 0xb, 0x4}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}}) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x8000) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='exfat\x00', 0x2, 0x0) [ 69.449962][ T4707] Bluetooth: hci0: command tx timeout [ 69.494472][ T5358] netlink: 'syz.0.0': attribute type 83 has an invalid length. [ 69.566858][ T5359] netlink: 'syz.0.0': attribute type 83 has an invalid length. [ 69.585299][ T5359] loop0: detected capacity change from 0 to 2048 [ 69.611999][ T5333] loop0: p2 p3 < > p4 < p5 > [ 69.614033][ T5333] loop0: partition table partially beyond EOD, truncated [ 69.618222][ T5333] loop0: p3 start 4284289 is beyond EOD, truncated [ 69.628604][ T5359] loop0: p2 p3 < > p4 < p5 > [ 69.630689][ T5359] loop0: partition table partially beyond EOD, truncated [ 69.635925][ T5359] loop0: p3 start 4284289 is beyond EOD, truncated [ 69.674621][ T5359] ------------[ cut here ]------------ [ 69.677474][ T5359] kernel BUG at fs/buffer.c:1582! [ 69.693435][ T5359] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 69.697015][ T5359] CPU: 0 UID: 0 PID: 5359 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 69.700878][ T5359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.705588][ T5359] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 69.709281][ T5359] Code: 4c 89 e2 e8 26 6d b9 02 e9 42 ff ff ff e8 cc 53 78 ff 48 89 df 48 c7 c6 e0 00 9a 8b e8 5d 95 e0 fe 90 0f 0b e8 b5 53 78 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 69.717554][ T5359] RSP: 0018:ffffc9000ecef900 EFLAGS: 00010283 [ 69.720454][ T5359] RAX: ffffffff8247672b RBX: ffffea0001333f40 RCX: 0000000000100000 [ 69.723993][ T5359] RDX: ffffc9000e4c3000 RSI: 0000000000000be9 RDI: 0000000000000bea [ 69.727374][ T5359] RBP: dffffc0000000000 R08: ffffea0001333f47 R09: 1ffffd40002667e8 [ 69.730725][ T5359] R10: dffffc0000000000 R11: fffff940002667e9 R12: 0000000000000000 [ 69.734084][ T5359] R13: 0000000000001000 R14: ffff888043b19570 R15: 0000000000001000 [ 69.737769][ T5359] FS: 00007f3a7c5276c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 69.741908][ T5359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.745030][ T5359] CR2: 0000559207f13b40 CR3: 0000000043074000 CR4: 0000000000352ef0 [ 69.748541][ T5359] Call Trace: [ 69.750072][ T5359] [ 69.751363][ T5359] folio_alloc_buffers+0x3a0/0x640 [ 69.753613][ T5359] bdev_getblk+0x286/0x660 [ 69.755560][ T5359] __bread_gfp+0x89/0x3c0 [ 69.757494][ T5359] exfat_fill_super+0x382/0x2980 [ 69.759994][ T5359] ? __pfx_snprintf+0x10/0x10 [ 69.762631][ T5359] ? set_blocksize+0x158/0x500 [ 69.764943][ T5359] ? __pfx_exfat_fill_super+0x10/0x10 [ 69.767359][ T5359] ? setup_bdev_super+0x4c1/0x5b0 [ 69.769692][ T5359] get_tree_bdev_flags+0x40e/0x4d0 [ 69.772026][ T5359] ? __pfx_exfat_fill_super+0x10/0x10 [ 69.774391][ T5359] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 69.776907][ T5359] vfs_get_tree+0x92/0x2b0 [ 69.778992][ T5359] do_new_mount+0x2a2/0x9e0 [ 69.781029][ T5359] ? ns_capable+0x8a/0xf0 [ 69.783127][ T5359] ? __pfx_do_new_mount+0x10/0x10 [ 69.785593][ T5359] ? path_mount+0x61c/0xfe0 [ 69.787761][ T5359] ? user_path_at+0x44/0x60 [ 69.789752][ T5359] __se_sys_mount+0x317/0x410 [ 69.792006][ T5359] ? __pfx___se_sys_mount+0x10/0x10 [ 69.794379][ T5359] ? rcu_is_watching+0x15/0xb0 [ 69.796541][ T5359] ? rcu_is_watching+0x15/0xb0 [ 69.798679][ T5359] ? __x64_sys_mount+0x20/0xc0 [ 69.801066][ T5359] do_syscall_64+0xfa/0x3b0 [ 69.803489][ T5359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.806206][ T5359] ? clear_bhb_loop+0x60/0xb0 [ 69.808242][ T5359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.810637][ T5359] RIP: 0033:0x7f3a7b78ebe9 [ 69.812552][ T5359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.820860][ T5359] RSP: 002b:00007f3a7c527038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.824501][ T5359] RAX: ffffffffffffffda RBX: 00007f3a7b9b6090 RCX: 00007f3a7b78ebe9 [ 69.828110][ T5359] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 69.831903][ T5359] RBP: 00007f3a7b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 69.835605][ T5359] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 69.839308][ T5359] R13: 00007f3a7b9b6128 R14: 00007f3a7b9b6090 R15: 00007ffd9480c3f8 [ 69.843228][ T5359] [ 69.845144][ T5359] Modules linked in: [ 69.848062][ T5359] ---[ end trace 0000000000000000 ]--- [ 69.855472][ T5359] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 69.857621][ T5359] Code: 4c 89 e2 e8 26 6d b9 02 e9 42 ff ff ff e8 cc 53 78 ff 48 89 df 48 c7 c6 e0 00 9a 8b e8 5d 95 e0 fe 90 0f 0b e8 b5 53 78 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 69.867768][ T5359] RSP: 0018:ffffc9000ecef900 EFLAGS: 00010283 [ 69.870470][ T5359] RAX: ffffffff8247672b RBX: ffffea0001333f40 RCX: 0000000000100000 [ 69.874971][ T5359] RDX: ffffc9000e4c3000 RSI: 0000000000000be9 RDI: 0000000000000bea [ 69.880036][ T5359] RBP: dffffc0000000000 R08: ffffea0001333f47 R09: 1ffffd40002667e8 [ 69.884605][ T5359] R10: dffffc0000000000 R11: fffff940002667e9 R12: 0000000000000000 [ 69.888647][ T5359] R13: 0000000000001000 R14: ffff888043b19570 R15: 0000000000001000 [ 69.893149][ T5359] FS: 00007f3a7c5276c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 69.897661][ T5359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.900500][ T5359] CR2: 0000559207f13b40 CR3: 0000000043074000 CR4: 0000000000352ef0 [ 69.904349][ T5359] Kernel panic - not syncing: Fatal exception [ 69.907461][ T5359] Kernel Offset: disabled [ 69.909871][ T5359] Rebooting in 86400 seconds..