program: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$udf(&(0x7f0000000e00), &(0x7f0000000180)='./file0\x00', 0x400007, &(0x7f0000000ec0)={[{@volume={'volume', 0x3d, 0x3f}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@session}, {@uid_forget}, {@undelete}, {}, {@longad}, {@uid_forget}, {@utf8}]}, 0x1, 0xc2d, &(0x7f00000001c0)="$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") syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8000) (async) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1e4047c, &(0x7f0000000ec0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000040007800c0002000000000000000000"], 0x24}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x294040, 0x0) [ 73.622916][ T5316] Bluetooth: hci0: command tx timeout [ 73.682210][ T5336] loop0: detected capacity change from 0 to 2048 [ 73.738600][ T5336] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.783765][ T5338] ======================================================= [ 73.783765][ T5338] WARNING: The mand mount option has been deprecated and [ 73.783765][ T5338] and is ignored by this kernel. Remove the mand [ 73.783765][ T5338] option from the mount to silence this warning. [ 73.783765][ T5338] ======================================================= [ 73.803907][ T5338] Buffer I/O error on dev loop0, logical block 128, lost sync page write [ 73.817243][ T5336] Buffer I/O error on dev loop0, logical block 128, lost sync page write [ 73.821621][ T5337] ------------[ cut here ]------------ [ 73.824275][ T5337] WARNING: CPU: 0 PID: 5337 at fs/buffer.c:1189 mark_buffer_dirty+0x2a9/0x410 [ 73.828478][ T5337] Modules linked in: [ 73.830555][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 73.835465][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.841026][ T5337] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 73.843986][ T5337] Code: 4c 89 f7 e8 19 b3 dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 84 33 fc ff e8 5f 32 7a ff eb 8c e8 58 32 7a ff 90 <0f> 0b 90 e9 95 fd ff ff e8 4a 32 7a ff 90 0f 0b 90 e9 bf fd ff ff [ 73.852692][ T5337] RSP: 0018:ffffc9000d5e7bb0 EFLAGS: 00010293 [ 73.855294][ T5337] RAX: ffffffff8245fea8 RBX: ffff888044d749f8 RCX: ffff88803f108000 [ 73.858586][ T5337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 73.861931][ T5337] RBP: ffffc9000d5e7c01 R08: ffff888044d749ff R09: 1ffff110089ae93f [ 73.865476][ T5337] R10: dffffc0000000000 R11: ffffed10089ae940 R12: ffff88804d144009 [ 73.869971][ T5337] R13: ffff888011e48640 R14: dffffc0000000000 R15: ffff888044d749f8 [ 73.874491][ T5337] FS: 00007fbbb69256c0(0000) GS:ffff88808d218000(0000) knlGS:0000000000000000 [ 73.877749][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.880563][ T5337] CR2: 00007ff2c0d909c0 CR3: 0000000011504000 CR4: 0000000000352ef0 [ 73.883883][ T5337] Call Trace: [ 73.885232][ T5337] [ 73.886381][ T5337] udf_open_lvid+0x363/0x5b0 [ 73.888256][ T5337] ? __pfx_udf_open_lvid+0x10/0x10 [ 73.890261][ T5337] ? udf_reconfigure+0x2e7/0x540 [ 73.892308][ T5337] udf_reconfigure+0x336/0x540 [ 73.894519][ T5337] reconfigure_super+0x224/0x890 [ 73.896763][ T5337] vfs_fsconfig_locked+0x171/0x320 [ 73.898881][ T5337] __se_sys_fsconfig+0x78e/0x8d0 [ 73.900944][ T5337] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 73.903196][ T5337] ? rcu_is_watching+0x15/0xb0 [ 73.905403][ T5337] ? do_syscall_64+0xbe/0x3b0 [ 73.907593][ T5337] ? __x64_sys_fsconfig+0x20/0xc0 [ 73.909542][ T5337] do_syscall_64+0xfa/0x3b0 [ 73.911637][ T5337] ? lockdep_hardirqs_on+0x9c/0x150 [ 73.914086][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.916668][ T5337] ? clear_bhb_loop+0x60/0xb0 [ 73.918888][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.921667][ T5337] RIP: 0033:0x7fbbb5b8e9a9 [ 73.923759][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.931379][ T5337] RSP: 002b:00007fbbb6925038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 73.935312][ T5337] RAX: ffffffffffffffda RBX: 00007fbbb5db6080 RCX: 00007fbbb5b8e9a9 [ 73.938034][ T5337] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 73.941148][ T5337] RBP: 00007fbbb5c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 73.944532][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.947806][ T5337] R13: 0000000000000000 R14: 00007fbbb5db6080 R15: 00007ffc568f3638 [ 73.951258][ T5337] [ 73.952778][ T5337] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.955937][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 73.960325][ T5337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.965533][ T5337] Call Trace: [ 73.967278][ T5337] [ 73.969045][ T5337] dump_stack_lvl+0x99/0x250 [ 73.971536][ T5337] ? __asan_memcpy+0x40/0x70 [ 73.973980][ T5337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.976903][ T5337] ? __pfx__printk+0x10/0x10 [ 73.979381][ T5337] panic+0x2db/0x790 [ 73.981152][ T5337] ? __pfx_panic+0x10/0x10 [ 73.983756][ T5337] __warn+0x31b/0x4b0 [ 73.986304][ T5337] ? mark_buffer_dirty+0x2a9/0x410 [ 73.989361][ T5337] ? mark_buffer_dirty+0x2a9/0x410 [ 73.991951][ T5337] report_bug+0x2be/0x4f0 [ 73.994128][ T5337] ? mark_buffer_dirty+0x2a9/0x410 [ 73.996428][ T5337] ? mark_buffer_dirty+0x2a9/0x410 [ 73.998822][ T5337] ? mark_buffer_dirty+0x2ab/0x410 [ 74.001112][ T5337] handle_bug+0x84/0x160 [ 74.002683][ T5337] exc_invalid_op+0x1a/0x50 [ 74.004580][ T5337] asm_exc_invalid_op+0x1a/0x20 [ 74.006481][ T5337] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 74.008555][ T5337] Code: 4c 89 f7 e8 19 b3 dd ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 84 33 fc ff e8 5f 32 7a ff eb 8c e8 58 32 7a ff 90 <0f> 0b 90 e9 95 fd ff ff e8 4a 32 7a ff 90 0f 0b 90 e9 bf fd ff ff [ 74.014958][ T5337] RSP: 0018:ffffc9000d5e7bb0 EFLAGS: 00010293 [ 74.017150][ T5337] RAX: ffffffff8245fea8 RBX: ffff888044d749f8 RCX: ffff88803f108000 [ 74.019974][ T5337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 74.022897][ T5337] RBP: ffffc9000d5e7c01 R08: ffff888044d749ff R09: 1ffff110089ae93f [ 74.025984][ T5337] R10: dffffc0000000000 R11: ffffed10089ae940 R12: ffff88804d144009 [ 74.028898][ T5337] R13: ffff888011e48640 R14: dffffc0000000000 R15: ffff888044d749f8 [ 74.031928][ T5337] ? mark_buffer_dirty+0x2a8/0x410 [ 74.033902][ T5337] udf_open_lvid+0x363/0x5b0 [ 74.035616][ T5337] ? __pfx_udf_open_lvid+0x10/0x10 [ 74.037481][ T5337] ? udf_reconfigure+0x2e7/0x540 [ 74.039535][ T5337] udf_reconfigure+0x336/0x540 [ 74.041474][ T5337] reconfigure_super+0x224/0x890 [ 74.043705][ T5337] vfs_fsconfig_locked+0x171/0x320 [ 74.045804][ T5337] __se_sys_fsconfig+0x78e/0x8d0 [ 74.047796][ T5337] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 74.049920][ T5337] ? rcu_is_watching+0x15/0xb0 [ 74.051858][ T5337] ? do_syscall_64+0xbe/0x3b0 [ 74.053605][ T5337] ? __x64_sys_fsconfig+0x20/0xc0 [ 74.055883][ T5337] do_syscall_64+0xfa/0x3b0 [ 74.057753][ T5337] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.059997][ T5337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.062890][ T5337] ? clear_bhb_loop+0x60/0xb0 [ 74.065220][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.067723][ T5337] RIP: 0033:0x7fbbb5b8e9a9 [ 74.069706][ T5337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.077698][ T5337] RSP: 002b:00007fbbb6925038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 74.081098][ T5337] RAX: ffffffffffffffda RBX: 00007fbbb5db6080 RCX: 00007fbbb5b8e9a9 [ 74.084582][ T5337] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 74.088367][ T5337] RBP: 00007fbbb5c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 74.091550][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.094642][ T5337] R13: 0000000000000000 R14: 00007fbbb5db6080 R15: 00007ffc568f3638 [ 74.097788][ T5337] [ 74.099464][ T5337] Kernel Offset: disabled [ 74.101196][ T5337] Rebooting in 86400 seconds..