program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x41009432, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'nicvf0\x00'}], 0xa, "949d5221ab0a0f26e0dbc7a481768592a3f7c7a2fc9ea6921f87f278c1216fbcbdeae65eef8fdbc4dfea9453137e6c7f3198198377305a60568fc1355c7d61719f047797095b527f08ba6e7837ef566ea5a9a88e578111e98fbabe2fd70291cdea5fdf4129f2765e17c8bfbb5dd282569c7c88056e5393b32c86cd5ccddcbc2d357ad0ca6612e2f915d3d3f23f031e51df3d07a5e990a0dfbb289a75156b0999f901289cefe0a2aa"}, 0xbb) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x40}}, 0x80000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r5 = socket(0x2, 0x1, 0x0) (async) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) (async) ioctl$NBD_DO_IT(r6, 0xab03) (async) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x100000000) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0x100) (async) socket(0x1a, 0x5, 0x200) [ 76.444583][ T4701] Bluetooth: hci0: command tx timeout [ 76.448443][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.451007][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.528085][ T4701] block nbd0: Receive control failed (result -107) [ 76.566108][ T5356] nbd0: detected capacity change from 0 to 8589934592 [ 76.572238][ T5330] Buffer I/O error on dev nbd0, logical block 0, async page read [ 76.577039][ T5355] ------------[ cut here ]------------ [ 76.579372][ T5355] WARNING: CPU: 0 PID: 5355 at fs/buffer.c:1125 bdev_getblk+0x580/0x660 [ 76.582925][ T5355] Modules linked in: [ 76.584876][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.588548][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.592814][ T5355] RIP: 0010:bdev_getblk+0x580/0x660 [ 76.595207][ T5355] Code: 26 fb ff ff e8 31 2d 78 ff 48 c7 c7 60 05 9a 8b 48 c7 c6 f5 e3 a0 8d 4c 89 fa 4c 89 e9 e8 98 0e e0 fe eb bd e8 11 2d 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 76.602916][ T5355] RSP: 0018:ffffc9000d31f6b0 EFLAGS: 00010293 [ 76.605614][ T5355] RAX: ffffffff8247917f RBX: ffff88803233d098 RCX: ffff888039c8a440 [ 76.608935][ T5355] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 76.612292][ T5355] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff821759fd [ 76.615691][ T5355] R10: 0000000000000406 R11: 0000000000000000 R12: ffff88803233d9f0 [ 76.618893][ T5355] R13: ffff88803233d080 R14: 0000000000000200 R15: 1ffff11006467a13 [ 76.622645][ T5355] FS: 00007f10599996c0(0000) GS:ffff88808d20c000(0000) knlGS:0000000000000000 [ 76.626984][ T5355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.629776][ T5355] CR2: 00007ffdda0d6f40 CR3: 0000000044249000 CR4: 0000000000352ef0 [ 76.633128][ T5355] Call Trace: [ 76.634690][ T5355] [ 76.635948][ T5355] ? blk_cgroup_bio_start+0x59d/0x640 [ 76.638146][ T5355] __bread_gfp+0x89/0x3c0 [ 76.639865][ T5355] udf_read_tagged+0xad/0xe00 [ 76.641765][ T5355] udf_check_anchor_block+0x99/0x550 [ 76.643875][ T5355] ? udf_get_last_block+0x1c6/0x360 [ 76.646089][ T5355] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 76.648616][ T5355] ? __bread_gfp+0x340/0x3c0 [ 76.650640][ T5355] udf_load_vrs+0x6e3/0xf20 [ 76.652555][ T5355] ? __pfx_udf_load_vrs+0x10/0x10 [ 76.654963][ T5355] ? udf_get_last_session+0x100/0x200 [ 76.657273][ T5355] ? __pfx_udf_get_last_session+0x10/0x10 [ 76.659724][ T5355] udf_fill_super+0x5ad/0x17a0 [ 76.661855][ T5355] ? __pfx_udf_fill_super+0x10/0x10 [ 76.664111][ T5355] ? set_blocksize+0x21e/0x500 [ 76.666397][ T5355] ? sb_set_blocksize+0x104/0x180 [ 76.668539][ T5355] ? setup_bdev_super+0x4c1/0x5b0 [ 76.670779][ T5355] get_tree_bdev_flags+0x40e/0x4d0 [ 76.672945][ T5355] ? __pfx_udf_fill_super+0x10/0x10 [ 76.675334][ T5355] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 76.677711][ T5355] vfs_get_tree+0x8f/0x2b0 [ 76.679575][ T5355] do_new_mount+0x2a2/0x9e0 [ 76.681485][ T5355] ? ns_capable+0x8a/0xf0 [ 76.683306][ T5355] ? __pfx_do_new_mount+0x10/0x10 [ 76.685597][ T5355] ? path_mount+0x61c/0xfe0 [ 76.687580][ T5355] ? user_path_at+0x44/0x60 [ 76.689603][ T5355] __se_sys_mount+0x317/0x410 [ 76.691677][ T5355] ? __pfx___se_sys_mount+0x10/0x10 [ 76.693653][ T5355] ? rcu_is_watching+0x15/0xb0 [ 76.695554][ T5355] ? do_syscall_64+0xbe/0x3b0 [ 76.697627][ T5355] ? __x64_sys_mount+0x20/0xc0 [ 76.699685][ T5355] do_syscall_64+0xfa/0x3b0 [ 76.701675][ T5355] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.703923][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.706687][ T5355] ? clear_bhb_loop+0x60/0xb0 [ 76.708754][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.711356][ T5355] RIP: 0033:0x7f1058b8ebe9 [ 76.713318][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.721683][ T5355] RSP: 002b:00007f1059999038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.725675][ T5355] RAX: ffffffffffffffda RBX: 00007f1058dc6090 RCX: 00007f1058b8ebe9 [ 76.729077][ T5355] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 76.732504][ T5355] RBP: 00007f1058c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 76.736268][ T5355] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 76.739705][ T5355] R13: 00007f1058dc6128 R14: 00007f1058dc6090 R15: 00007ffdda0d7ad8 [ 76.742861][ T5355] [ 76.744235][ T5355] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.747164][ T5355] CPU: 0 UID: 0 PID: 5355 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.750717][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.755258][ T5355] Call Trace: [ 76.756685][ T5355] [ 76.758011][ T5355] dump_stack_lvl+0x99/0x250 [ 76.760020][ T5355] ? __asan_memcpy+0x40/0x70 [ 76.762025][ T5355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.764254][ T5355] ? __pfx__printk+0x10/0x10 [ 76.766291][ T5355] vpanic+0x281/0x750 [ 76.768088][ T5355] ? __pfx__printk+0x10/0x10 [ 76.770174][ T5355] ? __pfx_vpanic+0x10/0x10 [ 76.772192][ T5355] ? is_bpf_text_address+0x292/0x2b0 [ 76.774531][ T5355] panic+0xb9/0xc0 [ 76.776127][ T5355] ? __pfx_panic+0x10/0x10 [ 76.777968][ T5355] __warn+0x31b/0x4b0 [ 76.779581][ T5355] ? bdev_getblk+0x580/0x660 [ 76.781483][ T5355] ? bdev_getblk+0x580/0x660 [ 76.783344][ T5355] report_bug+0x2be/0x4f0 [ 76.785120][ T5355] ? bdev_getblk+0x580/0x660 [ 76.787122][ T5355] ? bdev_getblk+0x580/0x660 [ 76.789183][ T5355] ? bdev_getblk+0x582/0x660 [ 76.791219][ T5355] handle_bug+0x84/0x160 [ 76.792826][ T5355] exc_invalid_op+0x1a/0x50 [ 76.794534][ T5355] asm_exc_invalid_op+0x1a/0x20 [ 76.796552][ T5355] RIP: 0010:bdev_getblk+0x580/0x660 [ 76.798866][ T5355] Code: 26 fb ff ff e8 31 2d 78 ff 48 c7 c7 60 05 9a 8b 48 c7 c6 f5 e3 a0 8d 4c 89 fa 4c 89 e9 e8 98 0e e0 fe eb bd e8 11 2d 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 76.807126][ T5355] RSP: 0018:ffffc9000d31f6b0 EFLAGS: 00010293 [ 76.809843][ T5355] RAX: ffffffff8247917f RBX: ffff88803233d098 RCX: ffff888039c8a440 [ 76.813245][ T5355] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 76.816544][ T5355] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff821759fd [ 76.819943][ T5355] R10: 0000000000000406 R11: 0000000000000000 R12: ffff88803233d9f0 [ 76.823328][ T5355] R13: ffff88803233d080 R14: 0000000000000200 R15: 1ffff11006467a13 [ 76.826662][ T5355] ? fs_reclaim_acquire+0x7d/0x100 [ 76.828839][ T5355] ? bdev_getblk+0x57f/0x660 [ 76.830906][ T5355] ? blk_cgroup_bio_start+0x59d/0x640 [ 76.833260][ T5355] __bread_gfp+0x89/0x3c0 [ 76.835169][ T5355] udf_read_tagged+0xad/0xe00 [ 76.837191][ T5355] udf_check_anchor_block+0x99/0x550 [ 76.839442][ T5355] ? udf_get_last_block+0x1c6/0x360 [ 76.841681][ T5355] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 76.844249][ T5355] ? __bread_gfp+0x340/0x3c0 [ 76.846356][ T5355] udf_load_vrs+0x6e3/0xf20 [ 76.848340][ T5355] ? __pfx_udf_load_vrs+0x10/0x10 [ 76.850538][ T5355] ? udf_get_last_session+0x100/0x200 [ 76.852879][ T5355] ? __pfx_udf_get_last_session+0x10/0x10 [ 76.855316][ T5355] udf_fill_super+0x5ad/0x17a0 [ 76.857442][ T5355] ? __pfx_udf_fill_super+0x10/0x10 [ 76.859657][ T5355] ? set_blocksize+0x21e/0x500 [ 76.861698][ T5355] ? sb_set_blocksize+0x104/0x180 [ 76.863777][ T5355] ? setup_bdev_super+0x4c1/0x5b0 [ 76.866043][ T5355] get_tree_bdev_flags+0x40e/0x4d0 [ 76.868352][ T5355] ? __pfx_udf_fill_super+0x10/0x10 [ 76.870691][ T5355] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 76.873146][ T5355] vfs_get_tree+0x8f/0x2b0 [ 76.875142][ T5355] do_new_mount+0x2a2/0x9e0 [ 76.877127][ T5355] ? ns_capable+0x8a/0xf0 [ 76.879028][ T5355] ? __pfx_do_new_mount+0x10/0x10 [ 76.881238][ T5355] ? path_mount+0x61c/0xfe0 [ 76.883231][ T5355] ? user_path_at+0x44/0x60 [ 76.885280][ T5355] __se_sys_mount+0x317/0x410 [ 76.887376][ T5355] ? __pfx___se_sys_mount+0x10/0x10 [ 76.889699][ T5355] ? rcu_is_watching+0x15/0xb0 [ 76.891842][ T5355] ? do_syscall_64+0xbe/0x3b0 [ 76.893887][ T5355] ? __x64_sys_mount+0x20/0xc0 [ 76.895719][ T5355] do_syscall_64+0xfa/0x3b0 [ 76.897694][ T5355] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.899764][ T5355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.902081][ T5355] ? clear_bhb_loop+0x60/0xb0 [ 76.904061][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.906574][ T5355] RIP: 0033:0x7f1058b8ebe9 [ 76.908476][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.916246][ T5355] RSP: 002b:00007f1059999038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.919705][ T5355] RAX: ffffffffffffffda RBX: 00007f1058dc6090 RCX: 00007f1058b8ebe9 [ 76.922891][ T5355] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 76.926004][ T5355] RBP: 00007f1058c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 76.929208][ T5355] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 76.932704][ T5355] R13: 00007f1058dc6128 R14: 00007f1058dc6090 R15: 00007ffdda0d7ad8 [ 76.936084][ T5355] [ 76.937709][ T5355] Kernel Offset: disabled [ 76.939419][ T5355] Rebooting in 86400 seconds..