program: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0xa0003b40, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40042, 0x0) (async) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000003e0009000000000b000800000300000001800c00108008000200", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) r5 = socket(0x2, 0x1, 0x0) (async) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) (async) ioctl$NBD_DO_IT(r6, 0xab03) (async) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x100000000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) [ 87.761125][ T4703] Bluetooth: hci0: command tx timeout [ 87.925545][ T5359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.0'. [ 87.929241][ T5359] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 87.957676][ T5358] block nbd0: Send control failed (result -32) [ 87.962880][ T5336] block nbd0: Receive control failed (result -107) [ 87.966555][ T5358] block nbd0: Request send failed, requeueing [ 87.974056][ T51] block nbd0: Dead connection, failed to find a fallback [ 87.977232][ T51] block nbd0: shutting down sockets [ 87.979756][ T51] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.990582][ T5359] nbd0: detected capacity change from 0 to 8589934592 [ 88.002983][ T5358] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 88.010875][ T5359] netlink: 'syz.0.0': attribute type 4 has an invalid length. [ 88.015867][ T5367] Buffer I/O error on dev nbd0, logical block 0, async page read [ 88.019108][ T5367] Buffer I/O error on dev nbd0, logical block 1, async page read [ 88.023719][ T5367] Buffer I/O error on dev nbd0, logical block 2, async page read [ 88.026777][ T5367] Buffer I/O error on dev nbd0, logical block 3, async page read [ 88.031569][ T5367] Buffer I/O error on dev nbd0, logical block 4, async page read [ 88.034867][ T5367] Buffer I/O error on dev nbd0, logical block 5, async page read [ 88.038384][ T5367] Buffer I/O error on dev nbd0, logical block 6, async page read [ 88.042964][ T5367] Buffer I/O error on dev nbd0, logical block 7, async page read [ 88.051077][ T5358] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 88.055035][ T5358] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 88.059112][ T5367] Buffer I/O error on dev nbd0, logical block 0, async page read [ 88.063612][ T5358] ------------[ cut here ]------------ [ 88.065837][ T5358] WARNING: CPU: 0 PID: 5358 at fs/buffer.c:1125 bdev_getblk+0x580/0x660 [ 88.069201][ T5358] Modules linked in: [ 88.071123][ T5358] CPU: 0 UID: 0 PID: 5358 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 88.074695][ T5358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.079110][ T5358] RIP: 0010:bdev_getblk+0x580/0x660 [ 88.081585][ T5358] Code: 26 fb ff ff e8 61 2d 78 ff 48 c7 c7 60 05 9a 8b 48 c7 c6 55 e0 a0 8d 4c 89 fa 4c 89 e9 e8 58 0f e0 fe eb bd e8 41 2d 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 88.089643][ T5358] RSP: 0018:ffffc9000d4976b0 EFLAGS: 00010293 [ 88.092565][ T5358] RAX: ffffffff824790bf RBX: ffff8880004d5098 RCX: ffff888000eb4880 [ 88.095967][ T5358] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 88.099305][ T5358] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217593d [ 88.102753][ T5358] R10: 0000000000000406 R11: 0000000000000000 R12: ffff8880004d59f0 [ 88.105989][ T5358] R13: ffff8880004d5080 R14: 0000000000000200 R15: 1ffff1100009aa13 [ 88.109204][ T5358] FS: 00007f9e30c6a6c0(0000) GS:ffff88808d20c000(0000) knlGS:0000000000000000 [ 88.113078][ T5358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.115865][ T5358] CR2: 00007f684e112a90 CR3: 0000000043f63000 CR4: 0000000000352ef0 [ 88.119242][ T5358] Call Trace: [ 88.120740][ T5358] [ 88.121999][ T5358] ? __pfx__udf_err+0x10/0x10 [ 88.124046][ T5358] __bread_gfp+0x89/0x3c0 [ 88.125916][ T5358] udf_read_tagged+0xad/0xe00 [ 88.127963][ T5358] udf_check_anchor_block+0x99/0x550 [ 88.130185][ T5358] ? udf_get_last_block+0x286/0x360 [ 88.132539][ T5358] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 88.135079][ T5358] udf_load_vrs+0xa83/0xf20 [ 88.137016][ T5358] ? __pfx_udf_load_vrs+0x10/0x10 [ 88.139186][ T5358] ? udf_get_last_session+0x100/0x200 [ 88.141560][ T5358] udf_fill_super+0x5ad/0x17a0 [ 88.143631][ T5358] ? __pfx_udf_fill_super+0x10/0x10 [ 88.145893][ T5358] ? set_blocksize+0x21e/0x500 [ 88.148458][ T5358] ? sb_set_blocksize+0x104/0x180 [ 88.150957][ T5358] ? setup_bdev_super+0x4c1/0x5b0 [ 88.153029][ T5358] get_tree_bdev_flags+0x40e/0x4d0 [ 88.155126][ T5358] ? __pfx_udf_fill_super+0x10/0x10 [ 88.157173][ T5358] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 88.159444][ T5358] vfs_get_tree+0x8f/0x2b0 [ 88.161398][ T5358] do_new_mount+0x2a2/0x9e0 [ 88.163203][ T5358] ? ns_capable+0x8a/0xf0 [ 88.164928][ T5358] ? __pfx_do_new_mount+0x10/0x10 [ 88.167085][ T5358] ? path_mount+0x61c/0xfe0 [ 88.169045][ T5358] ? user_path_at+0x44/0x60 [ 88.171125][ T5358] __se_sys_mount+0x317/0x410 [ 88.173206][ T5358] ? __pfx___se_sys_mount+0x10/0x10 [ 88.175412][ T5358] ? rcu_is_watching+0x15/0xb0 [ 88.177531][ T5358] ? do_syscall_64+0xbe/0x3b0 [ 88.179624][ T5358] ? __x64_sys_mount+0x20/0xc0 [ 88.181849][ T5358] do_syscall_64+0xfa/0x3b0 [ 88.183828][ T5358] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.186082][ T5358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.188727][ T5358] ? clear_bhb_loop+0x60/0xb0 [ 88.190900][ T5358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.193517][ T5358] RIP: 0033:0x7f9e2fd8ebe9 [ 88.195471][ T5358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.203895][ T5358] RSP: 002b:00007f9e30c6a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.207588][ T5358] RAX: ffffffffffffffda RBX: 00007f9e2ffc5fa0 RCX: 00007f9e2fd8ebe9 [ 88.211144][ T5358] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 88.214638][ T5358] RBP: 00007f9e2fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 88.218090][ T5358] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 88.221568][ T5358] R13: 00007f9e2ffc6038 R14: 00007f9e2ffc5fa0 R15: 00007ffdb8120468 [ 88.225046][ T5358] [ 88.226429][ T5358] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.229510][ T5358] CPU: 0 UID: 0 PID: 5358 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 88.233349][ T5358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.237848][ T5358] Call Trace: [ 88.239332][ T5358] [ 88.240640][ T5358] dump_stack_lvl+0x99/0x250 [ 88.242583][ T5358] ? __asan_memcpy+0x40/0x70 [ 88.244570][ T5358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.246815][ T5358] ? __pfx__printk+0x10/0x10 [ 88.248907][ T5358] vpanic+0x281/0x750 [ 88.250708][ T5358] ? __pfx__printk+0x10/0x10 [ 88.252733][ T5358] ? __pfx_vpanic+0x10/0x10 [ 88.254696][ T5358] ? is_bpf_text_address+0x292/0x2b0 [ 88.257006][ T5358] panic+0xb9/0xc0 [ 88.258635][ T5358] ? __pfx_panic+0x10/0x10 [ 88.260621][ T5358] __warn+0x31b/0x4b0 [ 88.262429][ T5358] ? bdev_getblk+0x580/0x660 [ 88.264428][ T5358] ? bdev_getblk+0x580/0x660 [ 88.266107][ T5358] report_bug+0x2be/0x4f0 [ 88.267760][ T5358] ? bdev_getblk+0x580/0x660 [ 88.269664][ T5358] ? bdev_getblk+0x580/0x660 [ 88.271699][ T5358] ? bdev_getblk+0x582/0x660 [ 88.273702][ T5358] handle_bug+0x84/0x160 [ 88.275530][ T5358] exc_invalid_op+0x1a/0x50 [ 88.277572][ T5358] asm_exc_invalid_op+0x1a/0x20 [ 88.279670][ T5358] RIP: 0010:bdev_getblk+0x580/0x660 [ 88.281942][ T5358] Code: 26 fb ff ff e8 61 2d 78 ff 48 c7 c7 60 05 9a 8b 48 c7 c6 55 e0 a0 8d 4c 89 fa 4c 89 e9 e8 58 0f e0 fe eb bd e8 41 2d 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 88.290185][ T5358] RSP: 0018:ffffc9000d4976b0 EFLAGS: 00010293 [ 88.292499][ T5358] RAX: ffffffff824790bf RBX: ffff8880004d5098 RCX: ffff888000eb4880 [ 88.295431][ T5358] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 88.298837][ T5358] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217593d [ 88.302233][ T5358] R10: 0000000000000406 R11: 0000000000000000 R12: ffff8880004d59f0 [ 88.305514][ T5358] R13: ffff8880004d5080 R14: 0000000000000200 R15: 1ffff1100009aa13 [ 88.308862][ T5358] ? fs_reclaim_acquire+0x7d/0x100 [ 88.311080][ T5358] ? bdev_getblk+0x57f/0x660 [ 88.313093][ T5358] ? __pfx__udf_err+0x10/0x10 [ 88.315139][ T5358] __bread_gfp+0x89/0x3c0 [ 88.317086][ T5358] udf_read_tagged+0xad/0xe00 [ 88.319195][ T5358] udf_check_anchor_block+0x99/0x550 [ 88.321302][ T5358] ? udf_get_last_block+0x286/0x360 [ 88.323382][ T5358] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 88.325924][ T5358] udf_load_vrs+0xa83/0xf20 [ 88.327960][ T5358] ? __pfx_udf_load_vrs+0x10/0x10 [ 88.330197][ T5358] ? udf_get_last_session+0x100/0x200 [ 88.332502][ T5358] udf_fill_super+0x5ad/0x17a0 [ 88.334572][ T5358] ? __pfx_udf_fill_super+0x10/0x10 [ 88.336843][ T5358] ? set_blocksize+0x21e/0x500 [ 88.338936][ T5358] ? sb_set_blocksize+0x104/0x180 [ 88.341104][ T5358] ? setup_bdev_super+0x4c1/0x5b0 [ 88.343338][ T5358] get_tree_bdev_flags+0x40e/0x4d0 [ 88.345615][ T5358] ? __pfx_udf_fill_super+0x10/0x10 [ 88.347932][ T5358] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 88.350333][ T5358] vfs_get_tree+0x8f/0x2b0 [ 88.352373][ T5358] do_new_mount+0x2a2/0x9e0 [ 88.354379][ T5358] ? ns_capable+0x8a/0xf0 [ 88.356351][ T5358] ? __pfx_do_new_mount+0x10/0x10 [ 88.358534][ T5358] ? path_mount+0x61c/0xfe0 [ 88.360536][ T5358] ? user_path_at+0x44/0x60 [ 88.362484][ T5358] __se_sys_mount+0x317/0x410 [ 88.364541][ T5358] ? __pfx___se_sys_mount+0x10/0x10 [ 88.366733][ T5358] ? rcu_is_watching+0x15/0xb0 [ 88.368749][ T5358] ? do_syscall_64+0xbe/0x3b0 [ 88.370772][ T5358] ? __x64_sys_mount+0x20/0xc0 [ 88.372839][ T5358] do_syscall_64+0xfa/0x3b0 [ 88.374828][ T5358] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.377099][ T5358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.379790][ T5358] ? clear_bhb_loop+0x60/0xb0 [ 88.381855][ T5358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.384376][ T5358] RIP: 0033:0x7f9e2fd8ebe9 [ 88.386269][ T5358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.394407][ T5358] RSP: 002b:00007f9e30c6a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.398085][ T5358] RAX: ffffffffffffffda RBX: 00007f9e2ffc5fa0 RCX: 00007f9e2fd8ebe9 [ 88.401067][ T5358] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 88.404398][ T5358] RBP: 00007f9e2fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 88.407354][ T5358] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 88.410456][ T5358] R13: 00007f9e2ffc6038 R14: 00007f9e2ffc5fa0 R15: 00007ffdb8120468 [ 88.413816][ T5358] [ 88.415494][ T5358] Kernel Offset: disabled [ 88.417421][ T5358] Rebooting in 86400 seconds..