program: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x108) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000bc0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20442, 0x36) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x20007, 0x0, 0x200000, 0xd, "22536af39b7c7cb7435b0a43852dbc3a9ada34cc97af10fd4fcca15748328c53096c2f359e9ba743d30b59c491a7b3e74d938981061383374a1d79471a2d2dfe", "0410b1617b6217917d72322c0c5aa9263626c0240010f9db74161ccff2c5cf5e", [0x3, 0x800]}) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e1a, @rand_addr=0x64010108}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x40, r7, 0x5, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000007b2176a899a9857b000000000000004df200000079120000f0ffffff9500000000001091599e129d3f64b543acf382407400fcec64b56b0734c1c03d8560138a4d1500674353582efe261e46ebeddf1354ff4fe9b3eed7eedf0644fd651a6ec2dc1995dea37ba16a90605d770994411dc7a8b4f05efd6e276dc5175f3b0c5416dd0f9951267b819f80f52a6b60fffc7eadd94940d4c3ec9f9264d0a7b232780ee05ee401358c4b5a8e2eefbe19f385c0"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect(r0, &(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x4, 0x2, {0xa, 0x0, 0x1, @loopback, 0x2}}}, 0x80) [ 75.821032][ T46] Bluetooth: hci0: command tx timeout [ 75.895813][ T5335] loop0: detected capacity change from 0 to 64 [ 76.034369][ T5335] loop0: detected capacity change from 64 to 11 [ 76.047976][ T5335] Dev loop0: unable to read RDB block 11 [ 76.050469][ T5335] loop0: unable to read partition table [ 76.054748][ T5336] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 76.060000][ T5336] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 76.063011][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.066222][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.070084][ T5336] RIP: 0010:bfs_get_block+0x589/0xae0 [ 76.072068][ T5336] Code: f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 20 71 8b ff 49 8b 5d 20 4d 8d 66 28 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 6c 24 18 74 08 4c 89 e7 e8 f4 70 8b ff 4c 89 ef [ 76.079449][ T5336] RSP: 0018:ffffc9000de77638 EFLAGS: 00010206 [ 76.082070][ T5336] RAX: 0000000000000005 RBX: 0000000000000200 RCX: dffffc0000000000 [ 76.085018][ T5336] RDX: ffffc900211e3000 RSI: 0000000000000287 RDI: ffff888012040ea0 [ 76.088227][ T5336] RBP: ffff8880008d4e70 R08: ffffea00007f19b7 R09: 1ffffd40000fe336 [ 76.091561][ T5336] R10: dffffc0000000000 R11: fffff940000fe337 R12: 0000000000000028 [ 76.094737][ T5336] R13: ffff888012040e80 R14: 0000000000000000 R15: 000000000000000a [ 76.097813][ T5336] FS: 00007f60b42f06c0(0000) GS:ffff88808d239000(0000) knlGS:0000000000000000 [ 76.101621][ T5336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.104458][ T5336] CR2: 00007f60b42effc8 CR3: 000000001174e000 CR4: 0000000000352ef0 [ 76.107685][ T5336] Call Trace: [ 76.109142][ T5336] [ 76.110318][ T5336] __block_write_begin_int+0x6b5/0x1900 [ 76.112534][ T5336] ? __pfx_bfs_get_block+0x10/0x10 [ 76.114933][ T5336] ? __pfx___block_write_begin_int+0x10/0x10 [ 76.117688][ T5336] ? __pfx_bfs_get_block+0x10/0x10 [ 76.119914][ T5336] block_write_begin+0x8d/0x120 [ 76.122222][ T5336] ? bfs_write_begin+0x1e/0xd0 [ 76.124257][ T5336] bfs_write_begin+0x35/0xd0 [ 76.126306][ T5336] generic_perform_write+0x2c5/0x900 [ 76.128472][ T5336] ? __pfx_generic_perform_write+0x10/0x10 [ 76.131076][ T5336] ? file_update_time_flags+0x2cb/0x4e0 [ 76.133513][ T5336] ? __generic_file_write_iter+0xf9/0x230 [ 76.135899][ T5336] ? generic_file_write_iter+0x103/0x550 [ 76.138355][ T5336] generic_file_write_iter+0x117/0x550 [ 76.140656][ T5336] ? __pfx_generic_file_write_iter+0x10/0x10 [ 76.143358][ T5336] ? __lock_acquire+0x6b6/0x2cf0 [ 76.145818][ T5336] ? __pfx_aa_file_perm+0x10/0x10 [ 76.148434][ T5336] ? rcu_read_lock_any_held+0xb3/0x120 [ 76.151112][ T5336] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 76.153921][ T5336] vfs_write+0x5c9/0xb30 [ 76.155540][ T5336] ? __pfx_generic_file_write_iter+0x10/0x10 [ 76.158081][ T5336] ? __pfx_vfs_write+0x10/0x10 [ 76.160054][ T5336] ? __fget_files+0x2a/0x420 [ 76.161979][ T5336] __x64_sys_pwrite64+0x193/0x220 [ 76.164097][ T5336] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 76.166461][ T5336] ? do_syscall_64+0xbe/0xf80 [ 76.168490][ T5336] do_syscall_64+0xfa/0xf80 [ 76.170614][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.173149][ T5336] ? clear_bhb_loop+0x60/0xb0 [ 76.175103][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.177570][ T5336] RIP: 0033:0x7f60b338f7c9 [ 76.179489][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.187778][ T5336] RSP: 002b:00007f60b42f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 76.191085][ T5336] RAX: ffffffffffffffda RBX: 00007f60b35e6090 RCX: 00007f60b338f7c9 [ 76.194446][ T5336] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000007 [ 76.198080][ T5336] RBP: 00007f60b3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 76.201619][ T5336] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 76.204673][ T5336] R13: 00007f60b35e6128 R14: 00007f60b35e6090 R15: 00007fffe3a8c548 [ 76.207846][ T5336] [ 76.209231][ T5336] Modules linked in: [ 76.211538][ T5336] ---[ end trace 0000000000000000 ]--- [ 76.219742][ T5335] loop0: partition table beyond EOD, truncated [ 76.225841][ T5335] loop_reread_partitions: partition scan of loop0 ("Sj||C[ [ 76.225841][ T5335] C-:4̗O̡WH2S l/5C YđM7JyG--) failed (rc=-5) [ 76.239322][ T5336] RIP: 0010:bfs_get_block+0x589/0xae0 [ 76.241880][ T5336] Code: f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 20 71 8b ff 49 8b 5d 20 4d 8d 66 28 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 6c 24 18 74 08 4c 89 e7 e8 f4 70 8b ff 4c 89 ef [ 76.250937][ T5336] RSP: 0018:ffffc9000de77638 EFLAGS: 00010206 [ 76.253795][ T5336] RAX: 0000000000000005 RBX: 0000000000000200 RCX: dffffc0000000000 [ 76.257947][ T5336] RDX: ffffc900211e3000 RSI: 0000000000000287 RDI: ffff888012040ea0 [ 76.262813][ T5336] RBP: ffff8880008d4e70 R08: ffffea00007f19b7 R09: 1ffffd40000fe336 [ 76.266615][ T5336] R10: dffffc0000000000 R11: fffff940000fe337 R12: 0000000000000028 [ 76.270366][ T5336] R13: ffff888012040e80 R14: 0000000000000000 R15: 000000000000000a [ 76.290674][ T5335] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.293734][ T5335] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.308774][ T5336] FS: 00007f60b42f06c0(0000) GS:ffff88808d239000(0000) knlGS:0000000000000000 [ 76.317895][ T5336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.325750][ T5336] CR2: 00007f36b8786d50 CR3: 000000001174e000 CR4: 0000000000352ef0 [ 76.329257][ T5336] Kernel panic - not syncing: Fatal exception [ 76.332180][ T5336] Kernel Offset: disabled [ 76.334061][ T5336] Rebooting in 86400 seconds..