program:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000002000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1], 0xfc}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async)
r3 = socket(0x2, 0x1, 0x0)
r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async)
ioctl$NBD_DO_IT(r4, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x100000000) (async)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) (async)
sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2240, 0x1a2)
fcntl$getflags(r6, 0x40a) (async, rerun: 32)
ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000200)={0x2, @sdr={0x4f565559, 0x5}}) (rerun: 32)
recvfrom(r5, 0x0, 0x0, 0x240, 0x0, 0x0) (async)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000140)=0xfff) (async)
sync_file_range(r2, 0xb6, 0x8, 0x5) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_delneigh={0x20, 0x1e, 0x1, 0xfffffffc, 0x0, {0xa}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x44010)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
[ 75.360054][ T5301] Bluetooth: hci0: command tx timeout
[ 75.385895][ T5322] netlink: 68 bytes leftover after parsing attributes in process `syz.0.0'.
[ 75.442289][ T5301] block nbd0: Receive control failed (result -107)
[ 75.468594][ T5323] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[ 75.477730][ T5323] ------------[ cut here ]------------
[ 75.480307][ T5323] WARNING: CPU: 0 PID: 5323 at fs/buffer.c:1125 bdev_getblk+0x580/0x660
[ 75.483906][ T5323] Modules linked in:
[ 75.485827][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 75.489893][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.494407][ T5323] RIP: 0010:bdev_getblk+0x580/0x660
[ 75.497103][ T5323] Code: 26 fb ff ff e8 51 a6 75 ff 48 c7 c7 20 29 7a 8b 48 c7 c6 d4 c7 83 8d 4c 89 fa 4c 89 e9 e8 f8 e3 dc fe eb bd e8 31 a6 75 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89
[ 75.506830][ T5323] RSP: 0000:ffffc9000d46f670 EFLAGS: 00010293
[ 75.509572][ T5323] RAX: ffffffff824aad5f RBX: ffff888031c6d098 RCX: ffff888000208000
[ 75.513313][ T5323] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[ 75.516646][ T5323] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff82199b3d
[ 75.520523][ T5323] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888031c6d9f0
[ 75.523963][ T5323] R13: ffff888031c6d080 R14: 0000000000000200 R15: 1ffff1100638da13
[ 75.527428][ T5323] FS: 00007fedc4bf56c0(0000) GS:ffff88808d301000(0000) knlGS:0000000000000000
[ 75.531401][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 75.534264][ T5323] CR2: 00007f5a49e55d00 CR3: 00000000431e9000 CR4: 0000000000352ef0
[ 75.537615][ T5323] Call Trace:
[ 75.539153][ T5323]
[ 75.540690][ T5323] ? __pfx__udf_err+0x10/0x10
[ 75.542798][ T5323] ? kmem_cache_free+0x4b5/0x690
[ 75.545011][ T5323] __bread_gfp+0x89/0x3c0
[ 75.546970][ T5323] udf_read_tagged+0xad/0xe00
[ 75.549060][ T5323] udf_check_anchor_block+0x99/0x550
[ 75.551515][ T5323] ? __phys_addr+0xd3/0x180
[ 75.553497][ T5323] ? udf_get_last_block+0x286/0x360
[ 75.555688][ T5323] ? __pfx_udf_check_anchor_block+0x10/0x10
[ 75.558263][ T5323] udf_load_vrs+0xa83/0xf20
[ 75.560401][ T5323] ? __pfx_udf_load_vrs+0x10/0x10
[ 75.562649][ T5323] ? udf_get_last_session+0x100/0x200
[ 75.564905][ T5323] udf_fill_super+0x5ad/0x17a0
[ 75.567008][ T5323] ? __pfx_udf_fill_super+0x10/0x10
[ 75.569244][ T5323] ? set_blocksize+0x21e/0x500
[ 75.571485][ T5323] ? sb_set_blocksize+0x104/0x180
[ 75.573686][ T5323] ? setup_bdev_super+0x4c1/0x5b0
[ 75.575913][ T5323] get_tree_bdev_flags+0x40e/0x4d0
[ 75.578052][ T5323] ? __pfx_udf_fill_super+0x10/0x10
[ 75.580610][ T5323] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 75.582923][ T5323] vfs_get_tree+0x92/0x2b0
[ 75.584839][ T5323] do_new_mount+0x302/0xa10
[ 75.586761][ T5323] ? apparmor_capable+0x137/0x1b0
[ 75.589032][ T5323] ? __pfx_do_new_mount+0x10/0x10
[ 75.591313][ T5323] ? ns_capable+0x8a/0xf0
[ 75.593190][ T5323] ? kmem_cache_free+0x19b/0x690
[ 75.595371][ T5323] __se_sys_mount+0x313/0x410
[ 75.597357][ T5323] ? __pfx___se_sys_mount+0x10/0x10
[ 75.599805][ T5323] ? do_syscall_64+0xbe/0xfa0
[ 75.601978][ T5323] ? __x64_sys_mount+0x20/0xc0
[ 75.604435][ T5323] do_syscall_64+0xfa/0xfa0
[ 75.606961][ T5323] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.609853][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.612574][ T5323] ? clear_bhb_loop+0x60/0xb0
[ 75.614985][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.617617][ T5323] RIP: 0033:0x7fedc878eec9
[ 75.619988][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.628289][ T5323] RSP: 002b:00007fedc4bf5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 75.632126][ T5323] RAX: ffffffffffffffda RBX: 00007fedc89e6090 RCX: 00007fedc878eec9
[ 75.635604][ T5323] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[ 75.639120][ T5323] RBP: 00007fedc8811f91 R08: 0000000000000000 R09: 0000000000000000
[ 75.642889][ T5323] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000
[ 75.646326][ T5323] R13: 00007fedc89e6128 R14: 00007fedc89e6090 R15: 00007fff0bd631f8
[ 75.649901][ T5323]
[ 75.651245][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 75.654659][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 75.658508][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.662804][ T5323] Call Trace:
[ 75.664013][ T5323]
[ 75.665157][ T5323] dump_stack_lvl+0x99/0x250
[ 75.666933][ T5323] ? __asan_memcpy+0x40/0x70
[ 75.668760][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10
[ 75.670693][ T5323] ? __pfx__printk+0x10/0x10
[ 75.672545][ T5323] vpanic+0x237/0x6d0
[ 75.674407][ T5323] ? __pfx_vpanic+0x10/0x10
[ 75.676585][ T5323] panic+0xb9/0xc0
[ 75.678222][ T5323] ? __pfx_panic+0x10/0x10
[ 75.680185][ T5323] __warn+0x31b/0x4b0
[ 75.681849][ T5323] ? bdev_getblk+0x580/0x660
[ 75.683939][ T5323] ? bdev_getblk+0x580/0x660
[ 75.685873][ T5323] report_bug+0x2be/0x4f0
[ 75.687608][ T5323] ? bdev_getblk+0x580/0x660
[ 75.689474][ T5323] ? bdev_getblk+0x580/0x660
[ 75.691419][ T5323] ? bdev_getblk+0x582/0x660
[ 75.693274][ T5323] handle_bug+0x84/0x160
[ 75.695062][ T5323] exc_invalid_op+0x1a/0x50
[ 75.696919][ T5323] asm_exc_invalid_op+0x1a/0x20
[ 75.698917][ T5323] RIP: 0010:bdev_getblk+0x580/0x660
[ 75.701239][ T5323] Code: 26 fb ff ff e8 51 a6 75 ff 48 c7 c7 20 29 7a 8b 48 c7 c6 d4 c7 83 8d 4c 89 fa 4c 89 e9 e8 f8 e3 dc fe eb bd e8 31 a6 75 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89
[ 75.710035][ T5323] RSP: 0000:ffffc9000d46f670 EFLAGS: 00010293
[ 75.712950][ T5323] RAX: ffffffff824aad5f RBX: ffff888031c6d098 RCX: ffff888000208000
[ 75.716891][ T5323] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[ 75.720896][ T5323] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff82199b3d
[ 75.724519][ T5323] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888031c6d9f0
[ 75.727886][ T5323] R13: ffff888031c6d080 R14: 0000000000000200 R15: 1ffff1100638da13
[ 75.731339][ T5323] ? fs_reclaim_acquire+0x7d/0x100
[ 75.733532][ T5323] ? bdev_getblk+0x57f/0x660
[ 75.735582][ T5323] ? __pfx__udf_err+0x10/0x10
[ 75.737681][ T5323] ? kmem_cache_free+0x4b5/0x690
[ 75.739895][ T5323] __bread_gfp+0x89/0x3c0
[ 75.741787][ T5323] udf_read_tagged+0xad/0xe00
[ 75.744020][ T5323] udf_check_anchor_block+0x99/0x550
[ 75.746368][ T5323] ? __phys_addr+0xd3/0x180
[ 75.748381][ T5323] ? udf_get_last_block+0x286/0x360
[ 75.750656][ T5323] ? __pfx_udf_check_anchor_block+0x10/0x10
[ 75.753267][ T5323] udf_load_vrs+0xa83/0xf20
[ 75.755387][ T5323] ? __pfx_udf_load_vrs+0x10/0x10
[ 75.757619][ T5323] ? udf_get_last_session+0x100/0x200
[ 75.759998][ T5323] udf_fill_super+0x5ad/0x17a0
[ 75.762085][ T5323] ? __pfx_udf_fill_super+0x10/0x10
[ 75.764415][ T5323] ? set_blocksize+0x21e/0x500
[ 75.766612][ T5323] ? sb_set_blocksize+0x104/0x180
[ 75.768870][ T5323] ? setup_bdev_super+0x4c1/0x5b0
[ 75.771141][ T5323] get_tree_bdev_flags+0x40e/0x4d0
[ 75.773353][ T5323] ? __pfx_udf_fill_super+0x10/0x10
[ 75.775605][ T5323] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 75.778110][ T5323] vfs_get_tree+0x92/0x2b0
[ 75.780145][ T5323] do_new_mount+0x302/0xa10
[ 75.782063][ T5323] ? apparmor_capable+0x137/0x1b0
[ 75.784087][ T5323] ? __pfx_do_new_mount+0x10/0x10
[ 75.786012][ T5323] ? ns_capable+0x8a/0xf0
[ 75.787726][ T5323] ? kmem_cache_free+0x19b/0x690
[ 75.790161][ T5323] __se_sys_mount+0x313/0x410
[ 75.792119][ T5323] ? __pfx___se_sys_mount+0x10/0x10
[ 75.794137][ T5323] ? do_syscall_64+0xbe/0xfa0
[ 75.795959][ T5323] ? __x64_sys_mount+0x20/0xc0
[ 75.797948][ T5323] do_syscall_64+0xfa/0xfa0
[ 75.800021][ T5323] ? lockdep_hardirqs_on+0x9c/0x150
[ 75.802116][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.804680][ T5323] ? clear_bhb_loop+0x60/0xb0
[ 75.806720][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 75.809994][ T5323] RIP: 0033:0x7fedc878eec9
[ 75.812495][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 75.821358][ T5323] RSP: 002b:00007fedc4bf5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 75.824905][ T5323] RAX: ffffffffffffffda RBX: 00007fedc89e6090 RCX: 00007fedc878eec9
[ 75.828144][ T5323] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000
[ 75.831618][ T5323] RBP: 00007fedc8811f91 R08: 0000000000000000 R09: 0000000000000000
[ 75.834885][ T5323] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000
[ 75.838295][ T5323] R13: 00007fedc89e6128 R14: 00007fedc89e6090 R15: 00007fff0bd631f8
[ 75.841784][ T5323]
[ 75.843467][ T5323] Kernel Offset: disabled
[ 75.845333][ T5323] Rebooting in 86400 seconds..