program: syz_read_part_table(0x5e2, &(0x7f0000000b00)="$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") r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000180)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8000) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='qnx4\x00', 0x2, 0x0) [ 85.671130][ T4669] Bluetooth: hci0: command tx timeout [ 85.752319][ T5327] loop0: detected capacity change from 0 to 2048 [ 85.784141][ T5298] loop0: p2 p3 < > p4 < p5 > [ 85.786320][ T5298] loop0: partition table partially beyond EOD, truncated [ 85.793195][ T5298] loop0: p3 start 4284289 is beyond EOD, truncated [ 85.808846][ T5327] loop0: p2 p3 < > p4 < p5 > [ 85.811625][ T5327] loop0: partition table partially beyond EOD, truncated [ 85.816417][ T5327] loop0: p3 start 4284289 is beyond EOD, truncated [ 85.874835][ T5327] ------------[ cut here ]------------ [ 85.877387][ T5327] kernel BUG at fs/buffer.c:1582! [ 85.879796][ T5327] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 85.882560][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.886237][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.890654][ T5327] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 85.892938][ T5327] Code: 4c 89 e2 e8 d6 43 79 02 e9 42 ff ff ff e8 8c aa 75 ff 48 89 df 48 c7 c6 e0 24 7a 8b e8 cd 85 dd fe 90 0f 0b e8 75 aa 75 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 85.900826][ T5327] RSP: 0018:ffffc9000d4279d8 EFLAGS: 00010283 [ 85.903425][ T5327] RAX: ffffffff824a68db RBX: ffffea000130b900 RCX: 0000000000100000 [ 85.906659][ T5327] RDX: ffffc9000e382000 RSI: 0000000000000c7b RDI: 0000000000000c7c [ 85.910179][ T5327] RBP: dffffc0000000000 R08: ffffea000130b907 R09: 1ffffd4000261720 [ 85.913598][ T5327] R10: dffffc0000000000 R11: fffff94000261721 R12: 0000000000000000 [ 85.917050][ T5327] R13: 0000000000001000 R14: ffff888042a7a9f8 R15: 0000000000001000 [ 85.920376][ T5327] FS: 00007f54dc3616c0(0000) GS:ffff88808d72f000(0000) knlGS:0000000000000000 [ 85.924055][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.926807][ T5327] CR2: 0000561888701c60 CR3: 0000000051a80000 CR4: 0000000000352ef0 [ 85.930684][ T5327] Call Trace: [ 85.932154][ T5327] [ 85.933403][ T5327] folio_alloc_buffers+0x3a0/0x640 [ 85.935703][ T5327] bdev_getblk+0x286/0x660 [ 85.937708][ T5327] __bread_gfp+0x89/0x3c0 [ 85.939426][ T5327] qnx4_fill_super+0x1c6/0x770 [ 85.941443][ T5327] get_tree_bdev_flags+0x40e/0x4d0 [ 85.943590][ T5327] ? __pfx_qnx4_fill_super+0x10/0x10 [ 85.945811][ T5327] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.948261][ T5327] vfs_get_tree+0x92/0x2b0 [ 85.950132][ T5327] do_new_mount+0x302/0xa10 [ 85.952025][ T5327] ? apparmor_capable+0x137/0x1b0 [ 85.954010][ T5327] ? __pfx_do_new_mount+0x10/0x10 [ 85.956137][ T5327] ? ns_capable+0x8a/0xf0 [ 85.957987][ T5327] ? kmem_cache_free+0x19b/0x690 [ 85.960167][ T5327] __se_sys_mount+0x313/0x410 [ 85.962364][ T5327] ? __pfx___se_sys_mount+0x10/0x10 [ 85.964568][ T5327] ? do_syscall_64+0xbe/0xfa0 [ 85.966596][ T5327] ? __x64_sys_mount+0x20/0xc0 [ 85.968780][ T5327] do_syscall_64+0xfa/0xfa0 [ 85.970771][ T5327] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.972976][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.975419][ T5327] ? clear_bhb_loop+0x60/0xb0 [ 85.977307][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.979716][ T5327] RIP: 0033:0x7f54db58f749 [ 85.981582][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.989429][ T5327] RSP: 002b:00007f54dc361038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.992919][ T5327] RAX: ffffffffffffffda RBX: 00007f54db7e5fa0 RCX: 00007f54db58f749 [ 85.996288][ T5327] RDX: 0000200000000080 RSI: 00002000000002c0 RDI: 0000200000000000 [ 85.999441][ T5327] RBP: 00007f54db613f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.002555][ T5327] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 86.005587][ T5327] R13: 00007f54db7e6038 R14: 00007f54db7e5fa0 R15: 00007ffe78554818 [ 86.008782][ T5327] [ 86.010145][ T5327] Modules linked in: [ 86.012299][ T5327] ---[ end trace 0000000000000000 ]--- [ 86.022879][ T5327] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 86.026721][ T5327] Code: 4c 89 e2 e8 d6 43 79 02 e9 42 ff ff ff e8 8c aa 75 ff 48 89 df 48 c7 c6 e0 24 7a 8b e8 cd 85 dd fe 90 0f 0b e8 75 aa 75 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 86.035985][ T5327] RSP: 0018:ffffc9000d4279d8 EFLAGS: 00010283 [ 86.038697][ T5327] RAX: ffffffff824a68db RBX: ffffea000130b900 RCX: 0000000000100000 [ 86.042839][ T5327] RDX: ffffc9000e382000 RSI: 0000000000000c7b RDI: 0000000000000c7c [ 86.047699][ T5327] RBP: dffffc0000000000 R08: ffffea000130b907 R09: 1ffffd4000261720 [ 86.052615][ T5327] R10: dffffc0000000000 R11: fffff94000261721 R12: 0000000000000000 [ 86.056456][ T5327] R13: 0000000000001000 R14: ffff888042a7a9f8 R15: 0000000000001000 [ 86.059815][ T5327] FS: 00007f54dc3616c0(0000) GS:ffff88808d72f000(0000) knlGS:0000000000000000 [ 86.063856][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.066625][ T5327] CR2: 0000561888701c60 CR3: 0000000051a80000 CR4: 0000000000352ef0 [ 86.069951][ T5327] Kernel panic - not syncing: Fatal exception [ 86.072669][ T5327] Kernel Offset: disabled [ 86.074525][ T5327] Rebooting in 86400 seconds..