program:
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000)
r1 = socket(0x2, 0x1, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r2, 0xab03) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], "1b8d2069162baf34"}}}}}}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0)
recvmmsg(r4, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x1a4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_USERDATA={0x75, 0xd, 0x1, 0x0, "dfa0dc236f80efb60b6c8b5075b40eccd75cb2d3be3a819ecd34956563656da9164cd75bb2894415f0e8ab3440c38269ec445a0cb35fc26e0cfbda1179e406dbaa59fe96758fa032f2540fc71ad0014041f03f0d2fa0746c3d6b6e8dd59503ca976e3f4a5facef99c67df9f5d26edcc58d"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_EXPRESSIONS={0x9c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xb0}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", ""]}}}, {0x30, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_USERDATA={0x43, 0xd, 0x1, 0x0, "d06767099a97bfae12d97d9d8fdb2f896ed918b8a62b5ce12ddb5ea5f53835ee2dd167d6882ca49a4ba6a12b7d57fe33450bda7df7bea8cca7a19508e4f69c"}]}], {0x14, 0x10}}, 0x1f4}}, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) (async, rerun: 32)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) (rerun: 32)
[ 68.199599][ T4707] Bluetooth: hci0: command tx timeout
[ 68.277510][ T5360] block nbd0: Send control failed (result -32)
[ 68.280251][ T5360] block nbd0: Request send failed, requeueing
[ 68.284508][ T4707] block nbd0: Receive control failed (result -107)
[ 68.290154][ T49] block nbd0: Dead connection, failed to find a fallback
[ 68.293145][ T49] block nbd0: shutting down sockets
[ 68.295533][ T49] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 68.346660][ T5359] nbd0: detected capacity change from 0 to 8589934592
[ 68.350009][ T5360] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 68.355248][ T5360] ------------[ cut here ]------------
[ 68.357651][ T5360] WARNING: CPU: 0 PID: 5360 at fs/buffer.c:1125 bdev_getblk+0x580/0x660
[ 68.361336][ T5360] Modules linked in:
[ 68.363121][ T5360] CPU: 0 UID: 0 PID: 5360 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 68.367377][ T5360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.372226][ T5360] RIP: 0010:bdev_getblk+0x580/0x660
[ 68.374379][ T5360] Code: 26 fb ff ff e8 a1 2d 78 ff 48 c7 c7 60 05 9a 8b 48 c7 c6 d1 e5 a0 8d 4c 89 fa 4c 89 e9 e8 08 0f e0 fe eb bd e8 81 2d 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89
[ 68.382285][ T5360] RSP: 0018:ffffc9000d4ff6b0 EFLAGS: 00010293
[ 68.384693][ T5360] RAX: ffffffff8247910f RBX: ffff888031c4d098 RCX: ffff888000fd4880
[ 68.387886][ T5360] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[ 68.391182][ T5360] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217598d
[ 68.394584][ T5360] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888031c4d9f0
[ 68.398102][ T5360] R13: ffff888031c4d080 R14: 0000000000000200 R15: 1ffff11006389a13
[ 68.401328][ T5360] FS: 00007ffac517a6c0(0000) GS:ffff88808d20a000(0000) knlGS:0000000000000000
[ 68.405229][ T5360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.408802][ T5360] CR2: 00007ffc47b83ef8 CR3: 0000000042d61000 CR4: 0000000000352ef0
[ 68.412662][ T5360] Call Trace:
[ 68.414330][ T5360]
[ 68.415769][ T5360] ? __pfx__udf_err+0x10/0x10
[ 68.418106][ T5360] __bread_gfp+0x89/0x3c0
[ 68.419600][ T5360] udf_read_tagged+0xad/0xe00
[ 68.421438][ T5360] udf_check_anchor_block+0x99/0x550
[ 68.423544][ T5360] ? udf_get_last_block+0x286/0x360
[ 68.425655][ T5360] ? __pfx_udf_check_anchor_block+0x10/0x10
[ 68.428253][ T5360] udf_load_vrs+0x96d/0xf20
[ 68.430228][ T5360] ? __pfx_udf_load_vrs+0x10/0x10
[ 68.433457][ T5360] ? udf_get_last_session+0x100/0x200
[ 68.436069][ T5360] udf_fill_super+0x5ad/0x17a0
[ 68.438122][ T5360] ? __pfx_udf_fill_super+0x10/0x10
[ 68.440275][ T5360] ? set_blocksize+0x21e/0x500
[ 68.442268][ T5360] ? sb_set_blocksize+0x104/0x180
[ 68.444249][ T5360] ? setup_bdev_super+0x4c1/0x5b0
[ 68.446357][ T5360] get_tree_bdev_flags+0x40e/0x4d0
[ 68.448427][ T5360] ? __pfx_udf_fill_super+0x10/0x10
[ 68.450597][ T5360] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 68.452922][ T5360] vfs_get_tree+0x92/0x2b0
[ 68.454728][ T5360] do_new_mount+0x2a2/0x9e0
[ 68.456684][ T5360] ? ns_capable+0x8a/0xf0
[ 68.458439][ T5360] ? __pfx_do_new_mount+0x10/0x10
[ 68.460529][ T5360] ? path_mount+0x61c/0xfe0
[ 68.462292][ T5360] ? user_path_at+0x44/0x60
[ 68.464161][ T5360] __se_sys_mount+0x317/0x410
[ 68.466181][ T5360] ? __pfx___se_sys_mount+0x10/0x10
[ 68.468285][ T5360] ? rcu_is_watching+0x15/0xb0
[ 68.470284][ T5360] ? do_syscall_64+0xbe/0x3b0
[ 68.472273][ T5360] ? __x64_sys_mount+0x20/0xc0
[ 68.474809][ T5360] do_syscall_64+0xfa/0x3b0
[ 68.477108][ T5360] ? lockdep_hardirqs_on+0x9c/0x150
[ 68.479334][ T5360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.481815][ T5360] ? clear_bhb_loop+0x60/0xb0
[ 68.483703][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.486287][ T5360] RIP: 0033:0x7ffac438eba9
[ 68.488066][ T5360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.495679][ T5360] RSP: 002b:00007ffac517a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 68.499218][ T5360] RAX: ffffffffffffffda RBX: 00007ffac45d6180 RCX: 00007ffac438eba9
[ 68.502409][ T5360] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[ 68.505586][ T5360] RBP: 00007ffac4411e19 R08: 0000000000000000 R09: 0000000000000000
[ 68.508844][ T5360] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000
[ 68.512078][ T5360] R13: 00007ffac45d6218 R14: 00007ffac45d6180 R15: 00007ffeea6d1248
[ 68.515289][ T5360]
[ 68.516653][ T5360] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 68.519499][ T5360] CPU: 0 UID: 0 PID: 5360 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 68.523224][ T5360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.528130][ T5360] Call Trace:
[ 68.529546][ T5360]
[ 68.530783][ T5360] dump_stack_lvl+0x99/0x250
[ 68.532688][ T5360] ? __asan_memcpy+0x40/0x70
[ 68.534562][ T5360] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.536651][ T5360] ? __pfx__printk+0x10/0x10
[ 68.538568][ T5360] vpanic+0x281/0x750
[ 68.540294][ T5360] ? __pfx__printk+0x10/0x10
[ 68.542245][ T5360] ? __pfx_vpanic+0x10/0x10
[ 68.544124][ T5360] ? is_bpf_text_address+0x292/0x2b0
[ 68.546350][ T5360] panic+0xb9/0xc0
[ 68.547899][ T5360] ? __pfx_panic+0x10/0x10
[ 68.550145][ T5360] __warn+0x31b/0x4b0
[ 68.552212][ T5360] ? bdev_getblk+0x580/0x660
[ 68.554233][ T5360] ? bdev_getblk+0x580/0x660
[ 68.556217][ T5360] report_bug+0x2be/0x4f0
[ 68.558087][ T5360] ? bdev_getblk+0x580/0x660
[ 68.560060][ T5360] ? bdev_getblk+0x580/0x660
[ 68.562514][ T5360] ? bdev_getblk+0x582/0x660
[ 68.564897][ T5360] handle_bug+0x84/0x160
[ 68.567016][ T5360] exc_invalid_op+0x1a/0x50
[ 68.568711][ T5360] asm_exc_invalid_op+0x1a/0x20
[ 68.570631][ T5360] RIP: 0010:bdev_getblk+0x580/0x660
[ 68.572848][ T5360] Code: 26 fb ff ff e8 a1 2d 78 ff 48 c7 c7 60 05 9a 8b 48 c7 c6 d1 e5 a0 8d 4c 89 fa 4c 89 e9 e8 08 0f e0 fe eb bd e8 81 2d 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89
[ 68.580429][ T5360] RSP: 0018:ffffc9000d4ff6b0 EFLAGS: 00010293
[ 68.583207][ T5360] RAX: ffffffff8247910f RBX: ffff888031c4d098 RCX: ffff888000fd4880
[ 68.586535][ T5360] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[ 68.590369][ T5360] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217598d
[ 68.593868][ T5360] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888031c4d9f0
[ 68.597240][ T5360] R13: ffff888031c4d080 R14: 0000000000000200 R15: 1ffff11006389a13
[ 68.600691][ T5360] ? fs_reclaim_acquire+0x7d/0x100
[ 68.602891][ T5360] ? bdev_getblk+0x57f/0x660
[ 68.604860][ T5360] ? __pfx__udf_err+0x10/0x10
[ 68.606847][ T5360] __bread_gfp+0x89/0x3c0
[ 68.608520][ T5360] udf_read_tagged+0xad/0xe00
[ 68.610194][ T5360] udf_check_anchor_block+0x99/0x550
[ 68.612425][ T5360] ? udf_get_last_block+0x286/0x360
[ 68.614614][ T5360] ? __pfx_udf_check_anchor_block+0x10/0x10
[ 68.617161][ T5360] udf_load_vrs+0x96d/0xf20
[ 68.619139][ T5360] ? __pfx_udf_load_vrs+0x10/0x10
[ 68.621214][ T5360] ? udf_get_last_session+0x100/0x200
[ 68.623334][ T5360] udf_fill_super+0x5ad/0x17a0
[ 68.625294][ T5360] ? __pfx_udf_fill_super+0x10/0x10
[ 68.627398][ T5360] ? set_blocksize+0x21e/0x500
[ 68.629241][ T5360] ? sb_set_blocksize+0x104/0x180
[ 68.631225][ T5360] ? setup_bdev_super+0x4c1/0x5b0
[ 68.633283][ T5360] get_tree_bdev_flags+0x40e/0x4d0
[ 68.635311][ T5360] ? __pfx_udf_fill_super+0x10/0x10
[ 68.637477][ T5360] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 68.639805][ T5360] vfs_get_tree+0x92/0x2b0
[ 68.641665][ T5360] do_new_mount+0x2a2/0x9e0
[ 68.643714][ T5360] ? ns_capable+0x8a/0xf0
[ 68.645622][ T5360] ? __pfx_do_new_mount+0x10/0x10
[ 68.647739][ T5360] ? path_mount+0x61c/0xfe0
[ 68.649639][ T5360] ? user_path_at+0x44/0x60
[ 68.651491][ T5360] __se_sys_mount+0x317/0x410
[ 68.653452][ T5360] ? __pfx___se_sys_mount+0x10/0x10
[ 68.655597][ T5360] ? rcu_is_watching+0x15/0xb0
[ 68.657616][ T5360] ? do_syscall_64+0xbe/0x3b0
[ 68.659848][ T5360] ? __x64_sys_mount+0x20/0xc0
[ 68.661868][ T5360] do_syscall_64+0xfa/0x3b0
[ 68.663589][ T5360] ? lockdep_hardirqs_on+0x9c/0x150
[ 68.665819][ T5360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.668342][ T5360] ? clear_bhb_loop+0x60/0xb0
[ 68.670309][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.672782][ T5360] RIP: 0033:0x7ffac438eba9
[ 68.674544][ T5360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.681952][ T5360] RSP: 002b:00007ffac517a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 68.685482][ T5360] RAX: ffffffffffffffda RBX: 00007ffac45d6180 RCX: 00007ffac438eba9
[ 68.688826][ T5360] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[ 68.692198][ T5360] RBP: 00007ffac4411e19 R08: 0000000000000000 R09: 0000000000000000
[ 68.695576][ T5360] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000
[ 68.698452][ T5360] R13: 00007ffac45d6218 R14: 00007ffac45d6180 R15: 00007ffeea6d1248
[ 68.701585][ T5360]
[ 68.703173][ T5360] Kernel Offset: disabled
[ 68.704961][ T5360] Rebooting in 86400 seconds..