program: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async) r2 = socket(0x2, 0x1, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x100000000) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x20001}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x68, 0x0, 0x1, 0x6, 0x0, @empty=0x7f000000, @dev={0xac, 0x14, 0x14, 0x43}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x6, 0x0, 0x3f9}}}}}}, 0x0) [ 86.153426][ T4703] Bluetooth: hci0: command tx timeout [ 86.411688][ T4703] block nbd0: Receive control failed (result -107) [ 86.475986][ T5365] ------------[ cut here ]------------ [ 86.493155][ T5365] WARNING: CPU: 0 PID: 5365 at fs/buffer.c:1125 bdev_getblk+0x580/0x660 [ 86.498968][ T5365] Modules linked in: [ 86.502102][ T5365] CPU: 0 UID: 0 PID: 5365 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.517187][ T5365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.531592][ T5365] RIP: 0010:bdev_getblk+0x580/0x660 [ 86.534546][ T5365] Code: 26 fb ff ff e8 31 1e 78 ff 48 c7 c7 60 08 ba 8b 48 c7 c6 d8 ed c0 8d 4c 89 fa 4c 89 e9 e8 e8 00 e0 fe eb bd e8 11 1e 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 86.559375][ T5365] RSP: 0018:ffffc9000d3f76b0 EFLAGS: 00010293 [ 86.586318][ T5365] RAX: ffffffff82479f2f RBX: ffff888000c45098 RCX: ffff888000988000 [ 86.590343][ T5365] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 86.594045][ T5365] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217646d [ 86.602652][ T5365] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888000c459f0 [ 86.606063][ T5365] R13: ffff888000c45080 R14: 0000000000000200 R15: 1ffff11000188a13 [ 86.632091][ T5365] FS: 00007f1dcb8716c0(0000) GS:ffff88808d007000(0000) knlGS:0000000000000000 [ 86.637125][ T5365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.641468][ T5365] CR2: 000055a0d75a9660 CR3: 0000000042735000 CR4: 0000000000352ef0 [ 86.645973][ T5365] Call Trace: [ 86.647564][ T5365] [ 86.648977][ T5365] ? blk_cgroup_bio_start+0x59d/0x640 [ 86.658612][ T5365] __bread_gfp+0x89/0x3c0 [ 86.661334][ T5365] udf_read_tagged+0xad/0xe00 [ 86.667104][ T5365] udf_check_anchor_block+0x99/0x550 [ 86.679360][ T5365] ? udf_get_last_block+0x286/0x360 [ 86.683973][ T5365] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 86.689770][ T5365] ? __bread_gfp+0x340/0x3c0 [ 86.696541][ T5365] udf_load_vrs+0x6e3/0xf20 [ 86.699902][ T5365] ? __pfx_udf_load_vrs+0x10/0x10 [ 86.702370][ T5365] ? udf_get_last_session+0x100/0x200 [ 86.718264][ T5365] ? __pfx_udf_get_last_session+0x10/0x10 [ 86.720768][ T5365] udf_fill_super+0x5ad/0x17a0 [ 86.730367][ T5365] ? __pfx_udf_fill_super+0x10/0x10 [ 86.733028][ T5365] ? set_blocksize+0x21e/0x500 [ 86.747244][ T5365] ? sb_set_blocksize+0x104/0x180 [ 86.754007][ T5365] ? setup_bdev_super+0x4c1/0x5b0 [ 86.773451][ T5365] get_tree_bdev_flags+0x40b/0x4d0 [ 86.775567][ T5365] ? __pfx_udf_fill_super+0x10/0x10 [ 86.783615][ T5365] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 86.786166][ T5365] vfs_get_tree+0x8f/0x2b0 [ 86.794193][ T5365] do_new_mount+0x2a2/0x9e0 [ 86.797073][ T5365] ? ns_capable+0x8a/0xf0 [ 86.801054][ T5365] ? __pfx_do_new_mount+0x10/0x10 [ 86.803446][ T5365] ? path_mount+0x61c/0xfe0 [ 86.805474][ T5365] ? user_path_at+0x44/0x60 [ 86.807572][ T5365] __se_sys_mount+0x317/0x410 [ 86.817554][ T5365] ? __pfx___se_sys_mount+0x10/0x10 [ 86.822159][ T5365] ? do_syscall_64+0xbe/0x3b0 [ 86.824279][ T5365] ? __x64_sys_mount+0x20/0xc0 [ 86.837935][ T5365] do_syscall_64+0xfa/0x3b0 [ 86.839810][ T5365] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.842307][ T5365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.854833][ T5365] ? clear_bhb_loop+0x60/0xb0 [ 86.861541][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.866272][ T5365] RIP: 0033:0x7f1dca98eec9 [ 86.870039][ T5365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.890487][ T5365] RSP: 002b:00007f1dcb871038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.900316][ T5365] RAX: ffffffffffffffda RBX: 00007f1dcabe6180 RCX: 00007f1dca98eec9 [ 86.910913][ T5365] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 86.914832][ T5365] RBP: 00007f1dcaa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.928459][ T5365] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 86.934101][ T5365] R13: 00007f1dcabe6218 R14: 00007f1dcabe6180 R15: 00007fff553c54c8 [ 86.957471][ T5365] [ 86.958914][ T5365] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.961825][ T5365] CPU: 0 UID: 0 PID: 5365 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.965415][ T5365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.974180][ T5365] Call Trace: [ 86.975840][ T5365] [ 86.977164][ T5365] dump_stack_lvl+0x99/0x250 [ 86.979387][ T5365] ? __asan_memcpy+0x40/0x70 [ 86.981578][ T5365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.983966][ T5365] ? __pfx__printk+0x10/0x10 [ 86.986155][ T5365] vpanic+0x281/0x750 [ 86.989716][ T5365] ? __pfx__printk+0x10/0x10 [ 86.991579][ T5365] ? __pfx_vpanic+0x10/0x10 [ 86.994005][ T5365] ? is_bpf_text_address+0x292/0x2b0 [ 87.000233][ T5365] panic+0xb9/0xc0 [ 87.002069][ T5365] ? __pfx_panic+0x10/0x10 [ 87.004593][ T5365] __warn+0x31b/0x4b0 [ 87.006951][ T5365] ? bdev_getblk+0x580/0x660 [ 87.012768][ T5365] ? bdev_getblk+0x580/0x660 [ 87.014876][ T5365] report_bug+0x2be/0x4f0 [ 87.016836][ T5365] ? bdev_getblk+0x580/0x660 [ 87.030743][ T5365] ? bdev_getblk+0x580/0x660 [ 87.032606][ T5365] ? bdev_getblk+0x582/0x660 [ 87.034494][ T5365] handle_bug+0x84/0x160 [ 87.036239][ T5365] exc_invalid_op+0x1a/0x50 [ 87.039866][ T5365] asm_exc_invalid_op+0x1a/0x20 [ 87.042193][ T5365] RIP: 0010:bdev_getblk+0x580/0x660 [ 87.049799][ T5365] Code: 26 fb ff ff e8 31 1e 78 ff 48 c7 c7 60 08 ba 8b 48 c7 c6 d8 ed c0 8d 4c 89 fa 4c 89 e9 e8 e8 00 e0 fe eb bd e8 11 1e 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 87.061282][ T5365] RSP: 0018:ffffc9000d3f76b0 EFLAGS: 00010293 [ 87.064657][ T5365] RAX: ffffffff82479f2f RBX: ffff888000c45098 RCX: ffff888000988000 [ 87.067974][ T5365] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 87.071180][ T5365] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217646d [ 87.076033][ T5365] R10: 0000000000000406 R11: 0000000000000000 R12: ffff888000c459f0 [ 87.082064][ T5365] R13: ffff888000c45080 R14: 0000000000000200 R15: 1ffff11000188a13 [ 87.086551][ T5365] ? fs_reclaim_acquire+0x7d/0x100 [ 87.102625][ T5365] ? bdev_getblk+0x57f/0x660 [ 87.104558][ T5365] ? blk_cgroup_bio_start+0x59d/0x640 [ 87.106784][ T5365] __bread_gfp+0x89/0x3c0 [ 87.108539][ T5365] udf_read_tagged+0xad/0xe00 [ 87.110493][ T5365] udf_check_anchor_block+0x99/0x550 [ 87.112664][ T5365] ? udf_get_last_block+0x286/0x360 [ 87.116457][ T5365] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 87.120843][ T5365] ? __bread_gfp+0x340/0x3c0 [ 87.123935][ T5365] udf_load_vrs+0x6e3/0xf20 [ 87.127104][ T5365] ? __pfx_udf_load_vrs+0x10/0x10 [ 87.129709][ T5365] ? udf_get_last_session+0x100/0x200 [ 87.133232][ T5365] ? __pfx_udf_get_last_session+0x10/0x10 [ 87.135594][ T5365] udf_fill_super+0x5ad/0x17a0 [ 87.137821][ T5365] ? __pfx_udf_fill_super+0x10/0x10 [ 87.140804][ T5365] ? set_blocksize+0x21e/0x500 [ 87.143586][ T5365] ? sb_set_blocksize+0x104/0x180 [ 87.148663][ T5365] ? setup_bdev_super+0x4c1/0x5b0 [ 87.151728][ T5365] get_tree_bdev_flags+0x40b/0x4d0 [ 87.156140][ T5365] ? __pfx_udf_fill_super+0x10/0x10 [ 87.162411][ T5365] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 87.165051][ T5365] vfs_get_tree+0x8f/0x2b0 [ 87.178068][ T5365] do_new_mount+0x2a2/0x9e0 [ 87.180209][ T5365] ? ns_capable+0x8a/0xf0 [ 87.182250][ T5365] ? __pfx_do_new_mount+0x10/0x10 [ 87.184588][ T5365] ? path_mount+0x61c/0xfe0 [ 87.196868][ T5365] ? user_path_at+0x44/0x60 [ 87.207278][ T5365] __se_sys_mount+0x317/0x410 [ 87.209343][ T5365] ? __pfx___se_sys_mount+0x10/0x10 [ 87.211739][ T5365] ? do_syscall_64+0xbe/0x3b0 [ 87.213902][ T5365] ? __x64_sys_mount+0x20/0xc0 [ 87.226323][ T5365] do_syscall_64+0xfa/0x3b0 [ 87.228454][ T5365] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.230926][ T5365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.234198][ T5365] ? clear_bhb_loop+0x60/0xb0 [ 87.253733][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.256484][ T5365] RIP: 0033:0x7f1dca98eec9 [ 87.270461][ T5365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.278968][ T5365] RSP: 002b:00007f1dcb871038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.282860][ T5365] RAX: ffffffffffffffda RBX: 00007f1dcabe6180 RCX: 00007f1dca98eec9 [ 87.286187][ T5365] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 87.289768][ T5365] RBP: 00007f1dcaa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 87.306641][ T5365] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 87.310383][ T5365] R13: 00007f1dcabe6218 R14: 00007f1dcabe6180 R15: 00007fff553c54c8 [ 87.329894][ T5365] [ 87.331585][ T5365] Kernel Offset: disabled [ 87.333552][ T5365] Rebooting in 86400 seconds..