program: openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x5, 0x2, "1b6a"}, 0xa) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) [ 92.829455][ T38] cfg80211: failed to load regulatory.db [ 92.837956][ T5335] Bluetooth: hci0: command tx timeout [ 92.995135][ T4701] block nbd0: Receive control failed (result -107) [ 93.020299][ T5357] ------------[ cut here ]------------ [ 93.022974][ T5357] WARNING: CPU: 0 PID: 5357 at fs/buffer.c:1125 bdev_getblk+0x580/0x660 [ 93.027128][ T5357] Modules linked in: [ 93.029504][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.033538][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.038293][ T5357] RIP: 0010:bdev_getblk+0x580/0x660 [ 93.040934][ T5357] Code: 26 fb ff ff e8 81 30 78 ff 48 c7 c7 a0 04 9a 8b 48 c7 c6 be c9 a0 8d 4c 89 fa 4c 89 e9 e8 38 15 e0 fe eb bd e8 61 30 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 93.049673][ T5357] RSP: 0018:ffffc9000d2ef6b0 EFLAGS: 00010283 [ 93.052948][ T5357] RAX: ffffffff82478adf RBX: ffff888031c4d098 RCX: 0000000000100000 [ 93.056316][ T5357] RDX: ffffc9000deea000 RSI: 0000000000001dbb RDI: 0000000000001dbc [ 93.059594][ T5357] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217539d [ 93.062958][ T5357] R10: 0000000000000406 R11: 0000000000000002 R12: ffff888031c4d9f0 [ 93.066198][ T5357] R13: ffff888031c4d080 R14: 0000000000000200 R15: 1ffff11006389a13 [ 93.069602][ T5357] FS: 00007f14924d66c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 93.073720][ T5357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.076707][ T5357] CR2: 000055626100d660 CR3: 00000000422eb000 CR4: 0000000000352ef0 [ 93.080334][ T5357] Call Trace: [ 93.081892][ T5357] [ 93.083264][ T5357] ? blk_cgroup_bio_start+0x59d/0x640 [ 93.085938][ T5357] __bread_gfp+0x89/0x3c0 [ 93.088240][ T5357] udf_read_tagged+0xad/0xe00 [ 93.090971][ T5357] udf_check_anchor_block+0x99/0x550 [ 93.093376][ T5357] ? udf_get_last_block+0x286/0x360 [ 93.095710][ T5357] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 93.098453][ T5357] ? __bread_gfp+0x340/0x3c0 [ 93.100540][ T5357] udf_load_vrs+0x6e3/0xf20 [ 93.102676][ T5357] ? __pfx_udf_load_vrs+0x10/0x10 [ 93.104982][ T5357] ? udf_get_last_session+0x100/0x200 [ 93.107407][ T5357] ? __pfx_udf_get_last_session+0x10/0x10 [ 93.110504][ T5357] udf_fill_super+0x5ad/0x17a0 [ 93.112812][ T5357] ? __pfx_udf_fill_super+0x10/0x10 [ 93.115394][ T5357] ? set_blocksize+0x21e/0x500 [ 93.117690][ T5357] ? sb_set_blocksize+0x104/0x180 [ 93.120415][ T5357] ? setup_bdev_super+0x4c1/0x5b0 [ 93.122715][ T5357] get_tree_bdev_flags+0x40b/0x4d0 [ 93.124979][ T5357] ? __pfx_udf_fill_super+0x10/0x10 [ 93.127293][ T5357] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 93.129812][ T5357] vfs_get_tree+0x92/0x2b0 [ 93.131877][ T5357] do_new_mount+0x2a2/0x9e0 [ 93.133953][ T5357] ? ns_capable+0x8a/0xf0 [ 93.135913][ T5357] ? __pfx_do_new_mount+0x10/0x10 [ 93.138288][ T5357] ? path_mount+0x61c/0xfe0 [ 93.140626][ T5357] ? user_path_at+0x44/0x60 [ 93.142897][ T5357] __se_sys_mount+0x317/0x410 [ 93.145321][ T5357] ? __pfx___se_sys_mount+0x10/0x10 [ 93.147559][ T5357] ? rcu_is_watching+0x15/0xb0 [ 93.149695][ T5357] ? do_syscall_64+0xbe/0x3b0 [ 93.151764][ T5357] ? __x64_sys_mount+0x20/0xc0 [ 93.153732][ T5357] do_syscall_64+0xfa/0x3b0 [ 93.155857][ T5357] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.158103][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.160745][ T5357] ? clear_bhb_loop+0x60/0xb0 [ 93.162739][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.165313][ T5357] RIP: 0033:0x7f149158ebe9 [ 93.167329][ T5357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.175410][ T5357] RSP: 002b:00007f14924d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.179036][ T5357] RAX: ffffffffffffffda RBX: 00007f14917b5fa0 RCX: 00007f149158ebe9 [ 93.183186][ T5357] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 93.186583][ T5357] RBP: 00007f1491611e19 R08: 0000000000000000 R09: 0000000000000000 [ 93.190162][ T5357] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 93.193809][ T5357] R13: 00007f14917b6038 R14: 00007f14917b5fa0 R15: 00007ffe55ad7548 [ 93.197412][ T5357] [ 93.198867][ T5357] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.201813][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.205546][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.210201][ T5357] Call Trace: [ 93.211663][ T5357] [ 93.213033][ T5357] dump_stack_lvl+0x99/0x250 [ 93.215069][ T5357] ? __asan_memcpy+0x40/0x70 [ 93.217056][ T5357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.219376][ T5357] ? __pfx__printk+0x10/0x10 [ 93.221460][ T5357] vpanic+0x281/0x750 [ 93.223230][ T5357] ? __pfx__printk+0x10/0x10 [ 93.225163][ T5357] ? __pfx_vpanic+0x10/0x10 [ 93.227138][ T5357] ? is_bpf_text_address+0x292/0x2b0 [ 93.229403][ T5357] panic+0xb9/0xc0 [ 93.231039][ T5357] ? __pfx_panic+0x10/0x10 [ 93.233146][ T5357] __warn+0x31b/0x4b0 [ 93.235036][ T5357] ? bdev_getblk+0x580/0x660 [ 93.237103][ T5357] ? bdev_getblk+0x580/0x660 [ 93.239225][ T5357] report_bug+0x2be/0x4f0 [ 93.241137][ T5357] ? bdev_getblk+0x580/0x660 [ 93.243273][ T5357] ? bdev_getblk+0x580/0x660 [ 93.245290][ T5357] ? bdev_getblk+0x582/0x660 [ 93.247403][ T5357] handle_bug+0x84/0x160 [ 93.249449][ T5357] exc_invalid_op+0x1a/0x50 [ 93.251761][ T5357] asm_exc_invalid_op+0x1a/0x20 [ 93.254169][ T5357] RIP: 0010:bdev_getblk+0x580/0x660 [ 93.256509][ T5357] Code: 26 fb ff ff e8 81 30 78 ff 48 c7 c7 a0 04 9a 8b 48 c7 c6 be c9 a0 8d 4c 89 fa 4c 89 e9 e8 38 15 e0 fe eb bd e8 61 30 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 93.264722][ T5357] RSP: 0018:ffffc9000d2ef6b0 EFLAGS: 00010283 [ 93.267648][ T5357] RAX: ffffffff82478adf RBX: ffff888031c4d098 RCX: 0000000000100000 [ 93.271219][ T5357] RDX: ffffc9000deea000 RSI: 0000000000001dbb RDI: 0000000000001dbc [ 93.274847][ T5357] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217539d [ 93.278181][ T5357] R10: 0000000000000406 R11: 0000000000000002 R12: ffff888031c4d9f0 [ 93.281732][ T5357] R13: ffff888031c4d080 R14: 0000000000000200 R15: 1ffff11006389a13 [ 93.285378][ T5357] ? fs_reclaim_acquire+0x7d/0x100 [ 93.287747][ T5357] ? bdev_getblk+0x57f/0x660 [ 93.289740][ T5357] ? blk_cgroup_bio_start+0x59d/0x640 [ 93.292186][ T5357] __bread_gfp+0x89/0x3c0 [ 93.294107][ T5357] udf_read_tagged+0xad/0xe00 [ 93.296267][ T5357] udf_check_anchor_block+0x99/0x550 [ 93.298776][ T5357] ? udf_get_last_block+0x286/0x360 [ 93.301557][ T5357] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 93.304445][ T5357] ? __bread_gfp+0x340/0x3c0 [ 93.306578][ T5357] udf_load_vrs+0x6e3/0xf20 [ 93.308611][ T5357] ? __pfx_udf_load_vrs+0x10/0x10 [ 93.310828][ T5357] ? udf_get_last_session+0x100/0x200 [ 93.313169][ T5357] ? __pfx_udf_get_last_session+0x10/0x10 [ 93.315670][ T5357] udf_fill_super+0x5ad/0x17a0 [ 93.317733][ T5357] ? __pfx_udf_fill_super+0x10/0x10 [ 93.319928][ T5357] ? set_blocksize+0x21e/0x500 [ 93.322003][ T5357] ? sb_set_blocksize+0x104/0x180 [ 93.324291][ T5357] ? setup_bdev_super+0x4c1/0x5b0 [ 93.326444][ T5357] get_tree_bdev_flags+0x40b/0x4d0 [ 93.328733][ T5357] ? __pfx_udf_fill_super+0x10/0x10 [ 93.331276][ T5357] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 93.333686][ T5357] vfs_get_tree+0x92/0x2b0 [ 93.335772][ T5357] do_new_mount+0x2a2/0x9e0 [ 93.337711][ T5357] ? ns_capable+0x8a/0xf0 [ 93.339554][ T5357] ? __pfx_do_new_mount+0x10/0x10 [ 93.341727][ T5357] ? path_mount+0x61c/0xfe0 [ 93.343747][ T5357] ? user_path_at+0x44/0x60 [ 93.345718][ T5357] __se_sys_mount+0x317/0x410 [ 93.347905][ T5357] ? __pfx___se_sys_mount+0x10/0x10 [ 93.350343][ T5357] ? rcu_is_watching+0x15/0xb0 [ 93.352600][ T5357] ? do_syscall_64+0xbe/0x3b0 [ 93.354729][ T5357] ? __x64_sys_mount+0x20/0xc0 [ 93.356886][ T5357] do_syscall_64+0xfa/0x3b0 [ 93.358868][ T5357] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.361078][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.363652][ T5357] ? clear_bhb_loop+0x60/0xb0 [ 93.365793][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.368370][ T5357] RIP: 0033:0x7f149158ebe9 [ 93.370509][ T5357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.378617][ T5357] RSP: 002b:00007f14924d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.382399][ T5357] RAX: ffffffffffffffda RBX: 00007f14917b5fa0 RCX: 00007f149158ebe9 [ 93.386324][ T5357] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 93.390128][ T5357] RBP: 00007f1491611e19 R08: 0000000000000000 R09: 0000000000000000 [ 93.393576][ T5357] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 93.397069][ T5357] R13: 00007f14917b6038 R14: 00007f14917b5fa0 R15: 00007ffe55ad7548 [ 93.400298][ T5357] [ 93.401902][ T5357] Kernel Offset: disabled [ 93.403725][ T5357] Rebooting in 86400 seconds..