program:
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000)
r1 = socket(0x2, 0x1, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0)
[ 85.395007][ T4685] Bluetooth: hci0: command tx timeout
[ 85.684038][ T4685] block nbd0: Receive control failed (result -107)
[ 85.762471][ T5348] syz.0.0: attempt to access beyond end of device
[ 85.762471][ T5348] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0
[ 85.816260][ T5348] ------------[ cut here ]------------
[ 85.826627][ T5348] WARNING: CPU: 0 PID: 5348 at fs/buffer.c:1125 bdev_getblk+0x580/0x660
[ 85.852937][ T5348] Modules linked in:
[ 85.855202][ T5348] CPU: 0 UID: 0 PID: 5348 Comm: syz.0.0 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full)
[ 85.862524][ T5348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 85.867156][ T5348] RIP: 0010:bdev_getblk+0x580/0x660
[ 85.876674][ T5348] Code: 26 fb ff ff e8 91 f8 79 ff 48 c7 c7 60 fb 99 8b 48 c7 c6 4b 14 9f 8d 4c 89 fa 4c 89 e9 e8 18 53 e1 fe eb bd e8 71 f8 79 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89
[ 85.892477][ T5348] RSP: 0018:ffffc9000d2676b0 EFLAGS: 00010283
[ 85.905875][ T5348] RAX: ffffffff82464a1f RBX: ffff888031d8d098 RCX: 0000000000100000
[ 85.909595][ T5348] RDX: ffffc90020001000 RSI: 0000000000001a7b RDI: 0000000000001a7c
[ 85.913236][ T5348] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff82167f3d
[ 85.919649][ T5348] R10: 0000000000000406 R11: 0000000000000002 R12: ffff888031d8d9e8
[ 85.923553][ T5348] R13: ffff888031d8d080 R14: 0000000000000200 R15: 1ffff110063b1a13
[ 85.927790][ T5348] FS: 00007f532a1276c0(0000) GS:ffff88808d1fc000(0000) knlGS:0000000000000000
[ 85.945065][ T5348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.948512][ T5348] CR2: 00007ffcf4330ec8 CR3: 0000000043a54000 CR4: 0000000000352ef0
[ 85.959315][ T5348] Call Trace:
[ 85.961189][ T5348]
[ 85.962675][ T5348] __bread_gfp+0x89/0x3c0
[ 85.964927][ T5348] udf_read_tagged+0xad/0xe00
[ 85.967092][ T5348] udf_check_anchor_block+0x99/0x550
[ 85.977264][ T5348] ? udf_get_last_block+0x286/0x360
[ 85.983737][ T5348] ? __pfx_udf_check_anchor_block+0x10/0x10
[ 85.989870][ T5348] ? __bread_gfp+0x340/0x3c0
[ 85.993608][ T5348] udf_load_vrs+0x6e3/0xf20
[ 86.003022][ T5348] ? __pfx_udf_load_vrs+0x10/0x10
[ 86.009721][ T5348] ? udf_get_last_session+0x100/0x200
[ 86.013108][ T5348] ? __pfx_udf_get_last_session+0x10/0x10
[ 86.021379][ T5348] udf_fill_super+0x5ad/0x17a0
[ 86.026480][ T5348] ? __pfx_udf_fill_super+0x10/0x10
[ 86.030711][ T5348] ? set_blocksize+0x21e/0x500
[ 86.035270][ T5348] ? sb_set_blocksize+0x104/0x180
[ 86.038165][ T5348] ? setup_bdev_super+0x4c1/0x5b0
[ 86.041156][ T5348] get_tree_bdev_flags+0x40e/0x4d0
[ 86.045509][ T5348] ? __pfx_udf_fill_super+0x10/0x10
[ 86.048580][ T5348] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 86.052219][ T5348] vfs_get_tree+0x92/0x2b0
[ 86.056220][ T5348] do_new_mount+0x2a2/0x9e0
[ 86.059543][ T5348] ? ns_capable+0x8a/0xf0
[ 86.075716][ T5348] ? __pfx_do_new_mount+0x10/0x10
[ 86.078315][ T5348] ? path_mount+0x61c/0xfe0
[ 86.094022][ T5348] ? user_path_at+0x44/0x60
[ 86.096047][ T5348] __se_sys_mount+0x317/0x410
[ 86.098124][ T5348] ? __pfx___se_sys_mount+0x10/0x10
[ 86.100713][ T5348] ? do_syscall_64+0xbe/0x3b0
[ 86.103038][ T5348] ? __x64_sys_mount+0x20/0xc0
[ 86.105469][ T5348] do_syscall_64+0xfa/0x3b0
[ 86.108086][ T5348] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.127614][ T5348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.135779][ T5348] ? clear_bhb_loop+0x60/0xb0
[ 86.138817][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.141777][ T5348] RIP: 0033:0x7f532938e9a9
[ 86.144192][ T5348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.160148][ T5348] RSP: 002b:00007f532a127038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 86.167316][ T5348] RAX: ffffffffffffffda RBX: 00007f53295b6160 RCX: 00007f532938e9a9
[ 86.176913][ T5348] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[ 86.189387][ T5348] RBP: 00007f5329410d69 R08: 0000000000000000 R09: 0000000000000000
[ 86.203549][ T5348] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000
[ 86.214936][ T5348] R13: 0000000000000001 R14: 00007f53295b6160 R15: 00007ffcaae35118
[ 86.221278][ T5348]
[ 86.224418][ T5348] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.236478][ T5348] CPU: 0 UID: 0 PID: 5348 Comm: syz.0.0 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full)
[ 86.246781][ T5348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 86.254595][ T5348] Call Trace:
[ 86.256852][ T5348]
[ 86.259280][ T5348] dump_stack_lvl+0x99/0x250
[ 86.263373][ T5348] ? __asan_memcpy+0x40/0x70
[ 86.266727][ T5348] ? __pfx_dump_stack_lvl+0x10/0x10
[ 86.270662][ T5348] ? __pfx__printk+0x10/0x10
[ 86.275610][ T5348] panic+0x2db/0x790
[ 86.279864][ T5348] ? __pfx_panic+0x10/0x10
[ 86.293819][ T5348] __warn+0x31b/0x4b0
[ 86.295490][ T5348] ? bdev_getblk+0x580/0x660
[ 86.297419][ T5348] ? bdev_getblk+0x580/0x660
[ 86.308159][ T5348] report_bug+0x2be/0x4f0
[ 86.310736][ T5348] ? bdev_getblk+0x580/0x660
[ 86.315889][ T5348] ? bdev_getblk+0x580/0x660
[ 86.318698][ T5348] ? bdev_getblk+0x582/0x660
[ 86.321052][ T5348] handle_bug+0x84/0x160
[ 86.324949][ T5348] exc_invalid_op+0x1a/0x50
[ 86.327134][ T5348] asm_exc_invalid_op+0x1a/0x20
[ 86.329912][ T5348] RIP: 0010:bdev_getblk+0x580/0x660
[ 86.335171][ T5348] Code: 26 fb ff ff e8 91 f8 79 ff 48 c7 c7 60 fb 99 8b 48 c7 c6 4b 14 9f 8d 4c 89 fa 4c 89 e9 e8 18 53 e1 fe eb bd e8 71 f8 79 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89
[ 86.346347][ T5348] RSP: 0018:ffffc9000d2676b0 EFLAGS: 00010283
[ 86.349805][ T5348] RAX: ffffffff82464a1f RBX: ffff888031d8d098 RCX: 0000000000100000
[ 86.358264][ T5348] RDX: ffffc90020001000 RSI: 0000000000001a7b RDI: 0000000000001a7c
[ 86.370113][ T5348] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff82167f3d
[ 86.374755][ T5348] R10: 0000000000000406 R11: 0000000000000002 R12: ffff888031d8d9e8
[ 86.378711][ T5348] R13: ffff888031d8d080 R14: 0000000000000200 R15: 1ffff110063b1a13
[ 86.382996][ T5348] ? fs_reclaim_acquire+0x7d/0x100
[ 86.385430][ T5348] ? bdev_getblk+0x57f/0x660
[ 86.387791][ T5348] __bread_gfp+0x89/0x3c0
[ 86.392956][ T5348] udf_read_tagged+0xad/0xe00
[ 86.395093][ T5348] udf_check_anchor_block+0x99/0x550
[ 86.397568][ T5348] ? udf_get_last_block+0x286/0x360
[ 86.402777][ T5348] ? __pfx_udf_check_anchor_block+0x10/0x10
[ 86.406282][ T5348] ? __bread_gfp+0x340/0x3c0
[ 86.408863][ T5348] udf_load_vrs+0x6e3/0xf20
[ 86.414808][ T5348] ? __pfx_udf_load_vrs+0x10/0x10
[ 86.417232][ T5348] ? udf_get_last_session+0x100/0x200
[ 86.430214][ T5348] ? __pfx_udf_get_last_session+0x10/0x10
[ 86.432833][ T5348] udf_fill_super+0x5ad/0x17a0
[ 86.435002][ T5348] ? __pfx_udf_fill_super+0x10/0x10
[ 86.437500][ T5348] ? set_blocksize+0x21e/0x500
[ 86.439968][ T5348] ? sb_set_blocksize+0x104/0x180
[ 86.450794][ T5348] ? setup_bdev_super+0x4c1/0x5b0
[ 86.453154][ T5348] get_tree_bdev_flags+0x40e/0x4d0
[ 86.455586][ T5348] ? __pfx_udf_fill_super+0x10/0x10
[ 86.460425][ T5348] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 86.462855][ T5348] vfs_get_tree+0x92/0x2b0
[ 86.464727][ T5348] do_new_mount+0x2a2/0x9e0
[ 86.466712][ T5348] ? ns_capable+0x8a/0xf0
[ 86.478836][ T5348] ? __pfx_do_new_mount+0x10/0x10
[ 86.481162][ T5348] ? path_mount+0x61c/0xfe0
[ 86.483389][ T5348] ? user_path_at+0x44/0x60
[ 86.491148][ T5348] __se_sys_mount+0x317/0x410
[ 86.493515][ T5348] ? __pfx___se_sys_mount+0x10/0x10
[ 86.512978][ T5348] ? do_syscall_64+0xbe/0x3b0
[ 86.515204][ T5348] ? __x64_sys_mount+0x20/0xc0
[ 86.517355][ T5348] do_syscall_64+0xfa/0x3b0
[ 86.519511][ T5348] ? lockdep_hardirqs_on+0x9c/0x150
[ 86.521896][ T5348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.524806][ T5348] ? clear_bhb_loop+0x60/0xb0
[ 86.530780][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.540215][ T5348] RIP: 0033:0x7f532938e9a9
[ 86.542610][ T5348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 86.564021][ T5348] RSP: 002b:00007f532a127038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 86.567751][ T5348] RAX: ffffffffffffffda RBX: 00007f53295b6160 RCX: 00007f532938e9a9
[ 86.582772][ T5348] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[ 86.586500][ T5348] RBP: 00007f5329410d69 R08: 0000000000000000 R09: 0000000000000000
[ 86.600378][ T5348] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000
[ 86.604422][ T5348] R13: 0000000000000001 R14: 00007f53295b6160 R15: 00007ffcaae35118
[ 86.608039][ T5348]
[ 86.620168][ T5348] Kernel Offset: disabled
[ 86.622738][ T5348] Rebooting in 86400 seconds..