program: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x1000000, 0x0) read$FUSE(r0, &(0x7f0000008280)={0x2020}, 0x2020) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffffff0f000008003950323030302e4c6266b349a34c23df5dc6d7266feec656c964194f134ea28ad22798f3ee5bb562566962e583afe0977365aed45ee3489aa064bf6aad176c396327aa5fdca5cca7b372ac9235f080d706bfd2b9ff286afbe5c54ab34b659b62a6a16c"], 0x15) syz_read_part_table(0x5e2, &(0x7f0000000b00)="$eJzs3L+rHFUUB/DvndlfD6LPP8DiQRpR8Al24sNY6DNdEO0EbS2eSCzEQnYXFcEff0Ba0cIohFhbKEgQ01mJ8NBCxN7CFIYrOzuzG1CrfSiBz6fYe+6de86Z4U47G+5udT+pJbnZzT5qu2HUJNNV8GvyzjhZvvhkv5CM+8SS5PmrTz198eBSmW7WVquL/up022XSj6Mc9NGXo3x49fjdLl6kZJ4+zPjzSUarvXWdd+XvN32rpO328D8bfVXXBzHJ9/kiyUlpV4c/TZb5JLkvs27fYZK21tod8yLZS9rNW7GDa0c3lk/08V76N228ns3fK/WR/to4tdbaZH5+yGyT+x8/vPxPRbv8Zfd4w1KtdXxuyG22F05uT4bw0W9/nmc521RPbbYlT/eSV0+ffbi7k7KuMd798QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGMPvPbg180wudD9lk38zKdptlsXyZ9DfDA7o/7Xjm7sv/X25SZvHL38wytv/nL8W35P0ubw+Fwy3ex7aT1cf78bRv1qu3P/k9vN5LOPv9nbLPSlS/Ld+R9v1aHDaT++/tgdyUfNzv0BAAAAAAAAAAAAAAAAAABg5XouHlxq8lxS8kK2n/vXzJJShuksqbXWP2pn+Ph/cuXePrr5U8oqKbXcWf1Csn9PUqcfPNT9rcA6sdY66lqU/+YZ+Xd/BQAA//8EFGMK") r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8000) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) [ 74.100346][ T4673] Bluetooth: hci0: command tx timeout [ 74.213327][ T5324] loop0: detected capacity change from 0 to 2048 [ 74.258937][ T5324] loop0: p2 p3 < > p4 < p5 > [ 74.261199][ T5324] loop0: partition table partially beyond EOD, truncated [ 74.270157][ T5324] loop0: p3 start 4284289 is beyond EOD, truncated [ 74.311402][ T5324] ------------[ cut here ]------------ [ 74.313964][ T5324] kernel BUG at fs/buffer.c:1582! [ 74.334012][ T5324] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 74.336860][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.340773][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.345832][ T5324] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 74.348327][ T5324] Code: 4c 89 e2 e8 26 6b 83 02 e9 42 ff ff ff e8 ec bb 72 ff 48 89 df 48 c7 c6 c0 b4 9e 8b e8 7d 1b d8 fe 90 0f 0b e8 d5 bb 72 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 74.356409][ T5324] RSP: 0018:ffffc9000af177e0 EFLAGS: 00010283 [ 74.359115][ T5324] RAX: ffffffff824fecdb RBX: ffffea00013ff200 RCX: 0000000000100000 [ 74.362649][ T5324] RDX: ffffc90020802000 RSI: 0000000000000d72 RDI: 0000000000000d73 [ 74.366102][ T5324] RBP: dffffc0000000000 R08: ffffea00013ff207 R09: 1ffffd400027fe40 [ 74.369540][ T5324] R10: dffffc0000000000 R11: fffff9400027fe41 R12: 0000000000000000 [ 74.372847][ T5324] R13: 0000000000001000 R14: ffff888046f980e8 R15: 0000000000001000 [ 74.376266][ T5324] FS: 00007fb248ce26c0(0000) GS:ffff88808cf1b000(0000) knlGS:0000000000000000 [ 74.380095][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.382900][ T5324] CR2: 00007fb247c706c0 CR3: 0000000037c71000 CR4: 0000000000352ef0 [ 74.386559][ T5324] Call Trace: [ 74.388009][ T5324] [ 74.389280][ T5324] folio_alloc_buffers+0x39f/0x640 [ 74.391454][ T5324] bdev_getblk+0x2cb/0x6e0 [ 74.393416][ T5324] __bread_gfp+0x89/0x3b0 [ 74.395330][ T5324] hpfs_map_sector+0x125/0x380 [ 74.397444][ T5324] hpfs_fill_super+0x24c/0x1fa0 [ 74.399701][ T5324] ? vsnprintf+0xdf1/0xee0 [ 74.401806][ T5324] ? snprintf+0xe8/0x140 [ 74.403655][ T5324] ? __pfx_hpfs_fill_super+0x10/0x10 [ 74.405801][ T5324] ? set_blocksize+0x144/0x4b0 [ 74.407748][ T5324] ? sb_set_blocksize+0x10c/0x240 [ 74.409863][ T5324] ? setup_bdev_super+0x4c1/0x5b0 [ 74.412038][ T5324] get_tree_bdev_flags+0x431/0x4f0 [ 74.414289][ T5324] ? __pfx_hpfs_fill_super+0x10/0x10 [ 74.416633][ T5324] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 74.419056][ T5324] vfs_get_tree+0x92/0x2a0 [ 74.421031][ T5324] do_new_mount+0x329/0xa50 [ 74.423018][ T5324] ? apparmor_capable+0x137/0x1a0 [ 74.425486][ T5324] ? __pfx_do_new_mount+0x10/0x10 [ 74.427727][ T5324] ? ns_capable+0x89/0xe0 [ 74.429624][ T5324] ? kmem_cache_free+0x195/0x610 [ 74.431581][ T5324] __se_sys_mount+0x31d/0x420 [ 74.433526][ T5324] ? __pfx___se_sys_mount+0x10/0x10 [ 74.435900][ T5324] ? __x64_sys_mount+0x20/0xc0 [ 74.438025][ T5324] do_syscall_64+0xe2/0xf80 [ 74.440089][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.442737][ T5324] ? trace_irq_disable+0x37/0x100 [ 74.445023][ T5324] ? clear_bhb_loop+0x60/0xb0 [ 74.447028][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.449300][ T5324] RIP: 0033:0x7fb247d9acb9 [ 74.451198][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.459509][ T5324] RSP: 002b:00007fb248ce2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.463105][ T5324] RAX: ffffffffffffffda RBX: 00007fb248015fa0 RCX: 00007fb247d9acb9 [ 74.466779][ T5324] RDX: 00002000000000c0 RSI: 00002000000002c0 RDI: 0000200000000080 [ 74.470353][ T5324] RBP: 00007fb247e08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 74.473670][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.476958][ T5324] R13: 00007fb248016038 R14: 00007fb248015fa0 R15: 00007fff44496fb8 [ 74.480483][ T5324] [ 74.481909][ T5324] Modules linked in: [ 74.484422][ T5324] ---[ end trace 0000000000000000 ]--- [ 74.493609][ T5324] RIP: 0010:folio_set_bh+0x1dc/0x1e0 [ 74.496581][ T5324] Code: 4c 89 e2 e8 26 6b 83 02 e9 42 ff ff ff e8 ec bb 72 ff 48 89 df 48 c7 c6 c0 b4 9e 8b e8 7d 1b d8 fe 90 0f 0b e8 d5 bb 72 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 74.506140][ T5324] RSP: 0018:ffffc9000af177e0 EFLAGS: 00010283 [ 74.508935][ T5324] RAX: ffffffff824fecdb RBX: ffffea00013ff200 RCX: 0000000000100000 [ 74.512451][ T5324] RDX: ffffc90020802000 RSI: 0000000000000d72 RDI: 0000000000000d73 [ 74.516791][ T5324] RBP: dffffc0000000000 R08: ffffea00013ff207 R09: 1ffffd400027fe40 [ 74.520327][ T5324] R10: dffffc0000000000 R11: fffff9400027fe41 R12: 0000000000000000 [ 74.523874][ T5324] R13: 0000000000001000 R14: ffff888046f980e8 R15: 0000000000001000 [ 74.528001][ T5324] FS: 00007fb248ce26c0(0000) GS:ffff88808cf1b000(0000) knlGS:0000000000000000 [ 74.532016][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.534950][ T5324] CR2: 00007fb248cc0ff0 CR3: 0000000037c71000 CR4: 0000000000352ef0 [ 74.538949][ T5324] Kernel panic - not syncing: Fatal exception [ 74.541921][ T5324] Kernel Offset: disabled [ 74.543815][ T5324] Rebooting in 86400 seconds..