program: openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x44, r2, 0xb97534d5fe9704cf, 0x800004, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x782}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) (async) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r5 = socket(0x2, 0x1, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_DO_IT(r6, 0xab03) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x100000000) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x168, r2, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x153, 0x2a, [@dsss={0x3, 0x1, 0x68}, @ibss={0x6, 0x2, 0x80}, @mic={0x8c, 0x10, {0x529, "65759a264ad7", @short="1858ea8c7e058a73"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0x2, @device_b, 0x5, @value, 0x2, 0x9, @broadcast, 0x6}}, @dsss={0x3, 0x1, 0x34}, @ht={0x2d, 0x1a, {0x300, 0x0, 0x2, 0x0, {0xfffffffffffffffb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x6, 0x6, 0xc4}}, @random={0x25, 0x7, "b5ff65fca6f9c4"}, @random_vendor={0xdd, 0x52, "bc1238a154e2ccd0e3ab8fc36ddc25ae1bafb75e12bd1a340ebe57455f2c7b7f1a0c39f7c34a813ecb3a114d9e2ba1989d9b67eb1e82f15e791387613ec9c719faa30a7b836d134e34f227731ef8a3cfa032"}, @random_vendor={0xdd, 0x91, "bd5d1bb2f0011ca2fbeee74d315604f70599804ca9dd7506094238802ec953cbaba38a1455af4a942ddfcc1281fef7c882b5a25df540487c1b39394ab3f45b801472f80e726e520d176647889a40a8138814b7d4d7b1d61b02dbe9af80676579b1f185fb3b3806ac3332b3c90e16fc66f862e56626b87b46f55ab6a9b751a46bcf9b5f3c8831b27cb9788426fa4104ebca"}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x50}, 0x40000) [ 75.662087][ T4702] block nbd0: Receive control failed (result -107) [ 75.670227][ T4702] Bluetooth: hci0: command tx timeout [ 75.728825][ T5354] nbd0: detected capacity change from 0 to 8589934592 [ 75.732179][ T5355] ------------[ cut here ]------------ [ 75.734568][ T5355] WARNING: CPU: 0 PID: 5355 at fs/buffer.c:1125 bdev_getblk+0x580/0x660 [ 75.738584][ T5355] Modules linked in: [ 75.740271][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.743915][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.748810][ T5355] RIP: 0010:bdev_getblk+0x580/0x660 [ 75.751091][ T5355] Code: 26 fb ff ff e8 51 1e 78 ff 48 c7 c7 60 08 ba 8b 48 c7 c6 8f ed c0 8d 4c 89 fa 4c 89 e9 e8 08 01 e0 fe eb bd e8 31 1e 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 75.759363][ T5355] RSP: 0018:ffffc9000d3bf6b0 EFLAGS: 00010293 [ 75.761988][ T5355] RAX: ffffffff82479f0f RBX: ffff888031c4d098 RCX: ffff88803683c880 [ 75.765074][ T5355] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 75.768268][ T5355] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217644d [ 75.771555][ T5355] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888031c4d9f0 [ 75.774913][ T5355] R13: ffff888031c4d080 R14: 0000000000000200 R15: 1ffff11006389a13 [ 75.778401][ T5355] FS: 00007ffaacd396c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 75.782312][ T5355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.785154][ T5355] CR2: 00007ffc6345fde8 CR3: 000000003e2bd000 CR4: 0000000000352ef0 [ 75.788727][ T5355] Call Trace: [ 75.790221][ T5355] [ 75.791492][ T5355] ? blk_cgroup_bio_start+0x59d/0x640 [ 75.793841][ T5355] __bread_gfp+0x89/0x3c0 [ 75.795669][ T5355] udf_read_tagged+0xad/0xe00 [ 75.797782][ T5355] udf_check_anchor_block+0x99/0x550 [ 75.800059][ T5355] ? udf_get_last_block+0x1c6/0x360 [ 75.802204][ T5355] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 75.804726][ T5355] ? __bread_gfp+0x340/0x3c0 [ 75.806734][ T5355] udf_load_vrs+0x6e3/0xf20 [ 75.809076][ T5355] ? __pfx_udf_load_vrs+0x10/0x10 [ 75.811248][ T5355] ? udf_get_last_session+0x100/0x200 [ 75.813547][ T5355] ? __pfx_udf_get_last_session+0x10/0x10 [ 75.815860][ T5355] udf_fill_super+0x5ad/0x17a0 [ 75.817647][ T5355] ? __pfx_udf_fill_super+0x10/0x10 [ 75.820159][ T5355] ? set_blocksize+0x21e/0x500 [ 75.822174][ T5355] ? sb_set_blocksize+0x104/0x180 [ 75.824464][ T5355] ? setup_bdev_super+0x4c1/0x5b0 [ 75.826635][ T5355] get_tree_bdev_flags+0x40e/0x4d0 [ 75.828988][ T5355] ? __pfx_udf_fill_super+0x10/0x10 [ 75.831185][ T5355] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 75.833641][ T5355] vfs_get_tree+0x92/0x2b0 [ 75.835558][ T5355] do_new_mount+0x2a2/0x9e0 [ 75.837508][ T5355] ? ns_capable+0x8a/0xf0 [ 75.839445][ T5355] ? __pfx_do_new_mount+0x10/0x10 [ 75.841628][ T5355] ? path_mount+0x61c/0xfe0 [ 75.843647][ T5355] ? user_path_at+0x44/0x60 [ 75.845726][ T5355] __se_sys_mount+0x317/0x410 [ 75.847675][ T5355] ? __pfx___se_sys_mount+0x10/0x10 [ 75.850026][ T5355] ? do_syscall_64+0xbe/0x3b0 [ 75.852088][ T5355] ? __x64_sys_mount+0x20/0xc0 [ 75.854150][ T5355] do_syscall_64+0xfa/0x3b0 [ 75.856092][ T5355] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.858499][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.861069][ T5355] ? clear_bhb_loop+0x60/0xb0 [ 75.863182][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.865734][ T5355] RIP: 0033:0x7ffaabf8ec29 [ 75.867679][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.875918][ T5355] RSP: 002b:00007ffaacd39038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.879483][ T5355] RAX: ffffffffffffffda RBX: 00007ffaac1d6180 RCX: 00007ffaabf8ec29 [ 75.882909][ T5355] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 75.886379][ T5355] RBP: 00007ffaac011e41 R08: 0000000000000000 R09: 0000000000000000 [ 75.889875][ T5355] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 75.893262][ T5355] R13: 00007ffaac1d6218 R14: 00007ffaac1d6180 R15: 00007ffd08947ba8 [ 75.896656][ T5355] [ 75.898070][ T5355] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.901283][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.905135][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.909539][ T5355] Call Trace: [ 75.910958][ T5355] [ 75.912211][ T5355] dump_stack_lvl+0x99/0x250 [ 75.914204][ T5355] ? __asan_memcpy+0x40/0x70 [ 75.916214][ T5355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.918375][ T5355] ? __pfx__printk+0x10/0x10 [ 75.920401][ T5355] vpanic+0x281/0x750 [ 75.922097][ T5355] ? __pfx__printk+0x10/0x10 [ 75.924152][ T5355] ? __pfx_vpanic+0x10/0x10 [ 75.926194][ T5355] ? is_bpf_text_address+0x292/0x2b0 [ 75.928464][ T5355] panic+0xb9/0xc0 [ 75.930076][ T5355] ? __pfx_panic+0x10/0x10 [ 75.932013][ T5355] __warn+0x31b/0x4b0 [ 75.933773][ T5355] ? bdev_getblk+0x580/0x660 [ 75.935746][ T5355] ? bdev_getblk+0x580/0x660 [ 75.937697][ T5355] report_bug+0x2be/0x4f0 [ 75.939560][ T5355] ? bdev_getblk+0x580/0x660 [ 75.941585][ T5355] ? bdev_getblk+0x580/0x660 [ 75.943623][ T5355] ? bdev_getblk+0x582/0x660 [ 75.945675][ T5355] handle_bug+0x84/0x160 [ 75.947484][ T5355] exc_invalid_op+0x1a/0x50 [ 75.949463][ T5355] asm_exc_invalid_op+0x1a/0x20 [ 75.951545][ T5355] RIP: 0010:bdev_getblk+0x580/0x660 [ 75.953761][ T5355] Code: 26 fb ff ff e8 51 1e 78 ff 48 c7 c7 60 08 ba 8b 48 c7 c6 8f ed c0 8d 4c 89 fa 4c 89 e9 e8 08 01 e0 fe eb bd e8 31 1e 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 75.962163][ T5355] RSP: 0018:ffffc9000d3bf6b0 EFLAGS: 00010293 [ 75.964780][ T5355] RAX: ffffffff82479f0f RBX: ffff888031c4d098 RCX: ffff88803683c880 [ 75.968138][ T5355] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 75.971527][ T5355] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217644d [ 75.974825][ T5355] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888031c4d9f0 [ 75.977971][ T5355] R13: ffff888031c4d080 R14: 0000000000000200 R15: 1ffff11006389a13 [ 75.981132][ T5355] ? fs_reclaim_acquire+0x7d/0x100 [ 75.983262][ T5355] ? bdev_getblk+0x57f/0x660 [ 75.985184][ T5355] ? blk_cgroup_bio_start+0x59d/0x640 [ 75.987448][ T5355] __bread_gfp+0x89/0x3c0 [ 75.989327][ T5355] udf_read_tagged+0xad/0xe00 [ 75.991360][ T5355] udf_check_anchor_block+0x99/0x550 [ 75.993640][ T5355] ? udf_get_last_block+0x1c6/0x360 [ 75.995951][ T5355] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 75.998586][ T5355] ? __bread_gfp+0x340/0x3c0 [ 76.000654][ T5355] udf_load_vrs+0x6e3/0xf20 [ 76.002747][ T5355] ? __pfx_udf_load_vrs+0x10/0x10 [ 76.005012][ T5355] ? udf_get_last_session+0x100/0x200 [ 76.007360][ T5355] ? __pfx_udf_get_last_session+0x10/0x10 [ 76.009787][ T5355] udf_fill_super+0x5ad/0x17a0 [ 76.011845][ T5355] ? __pfx_udf_fill_super+0x10/0x10 [ 76.014160][ T5355] ? set_blocksize+0x21e/0x500 [ 76.016172][ T5355] ? sb_set_blocksize+0x104/0x180 [ 76.018329][ T5355] ? setup_bdev_super+0x4c1/0x5b0 [ 76.020499][ T5355] get_tree_bdev_flags+0x40e/0x4d0 [ 76.022714][ T5355] ? __pfx_udf_fill_super+0x10/0x10 [ 76.025046][ T5355] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 76.027488][ T5355] vfs_get_tree+0x92/0x2b0 [ 76.029422][ T5355] do_new_mount+0x2a2/0x9e0 [ 76.031428][ T5355] ? ns_capable+0x8a/0xf0 [ 76.033288][ T5355] ? __pfx_do_new_mount+0x10/0x10 [ 76.035498][ T5355] ? path_mount+0x61c/0xfe0 [ 76.037497][ T5355] ? user_path_at+0x44/0x60 [ 76.039471][ T5355] __se_sys_mount+0x317/0x410 [ 76.041573][ T5355] ? __pfx___se_sys_mount+0x10/0x10 [ 76.043872][ T5355] ? do_syscall_64+0xbe/0x3b0 [ 76.046024][ T5355] ? __x64_sys_mount+0x20/0xc0 [ 76.048111][ T5355] do_syscall_64+0xfa/0x3b0 [ 76.050120][ T5355] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.052391][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.055031][ T5355] ? clear_bhb_loop+0x60/0xb0 [ 76.057075][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.059664][ T5355] RIP: 0033:0x7ffaabf8ec29 [ 76.061638][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.070199][ T5355] RSP: 002b:00007ffaacd39038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.073845][ T5355] RAX: ffffffffffffffda RBX: 00007ffaac1d6180 RCX: 00007ffaabf8ec29 [ 76.077338][ T5355] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 76.080880][ T5355] RBP: 00007ffaac011e41 R08: 0000000000000000 R09: 0000000000000000 [ 76.084309][ T5355] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 76.087722][ T5355] R13: 00007ffaac1d6218 R14: 00007ffaac1d6180 R15: 00007ffd08947ba8 [ 76.090838][ T5355] [ 76.092491][ T5355] Kernel Offset: disabled [ 76.094419][ T5355] Rebooting in 86400 seconds..