program: openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async, rerun: 64) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (rerun: 64) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x90}, 0x1, 0x7}, 0x0) [ 76.005712][ T4709] Bluetooth: hci0: command tx timeout [ 76.099377][ T4709] block nbd0: Receive control failed (result -107) [ 76.109436][ T5361] block nbd0: Dead connection, failed to find a fallback [ 76.113468][ T5361] block nbd0: shutting down sockets [ 76.119921][ T5361] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.175814][ T5360] nbd0: detected capacity change from 0 to 8589934592 [ 76.182348][ T5335] Buffer I/O error on dev nbd0, logical block 0, async page read [ 76.195610][ T5361] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 76.201350][ T5335] Buffer I/O error on dev nbd0, logical block 1, async page read [ 76.216160][ T5335] Buffer I/O error on dev nbd0, logical block 2, async page read [ 76.219935][ T5335] Buffer I/O error on dev nbd0, logical block 3, async page read [ 76.228549][ T5335] Buffer I/O error on dev nbd0, logical block 4, async page read [ 76.239161][ T5335] Buffer I/O error on dev nbd0, logical block 5, async page read [ 76.251409][ T5335] Buffer I/O error on dev nbd0, logical block 6, async page read [ 76.265525][ T5335] Buffer I/O error on dev nbd0, logical block 7, async page read [ 76.270290][ T5361] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 76.274599][ T5335] Buffer I/O error on dev nbd0, logical block 0, async page read [ 76.286867][ T5335] Buffer I/O error on dev nbd0, logical block 1, async page read [ 76.292087][ T5361] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 76.301457][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.304448][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.313254][ T5335] ldm_validate_partition_table(): Disk read failed. [ 76.322832][ T5361] ------------[ cut here ]------------ [ 76.325634][ T5361] WARNING: CPU: 0 PID: 5361 at fs/buffer.c:1125 bdev_getblk+0x580/0x660 [ 76.330023][ T5361] Modules linked in: [ 76.332236][ T5361] CPU: 0 UID: 0 PID: 5361 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.336623][ T5361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.341669][ T5361] RIP: 0010:bdev_getblk+0x580/0x660 [ 76.344378][ T5361] Code: 26 fb ff ff e8 51 1e 78 ff 48 c7 c7 60 08 ba 8b 48 c7 c6 0b ed c0 8d 4c 89 fa 4c 89 e9 e8 08 01 e0 fe eb bd e8 31 1e 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 76.353571][ T5361] RSP: 0018:ffffc9000d4176b0 EFLAGS: 00010293 [ 76.356551][ T5361] RAX: ffffffff82479f0f RBX: ffff88803204d098 RCX: ffff88801fbac880 [ 76.360882][ T5361] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 76.365008][ T5361] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217644d [ 76.368562][ T5361] R10: 0000000000000406 R11: 0000000000000000 R12: ffff88803204d9f0 [ 76.371861][ T5361] R13: ffff88803204d080 R14: 0000000000000200 R15: 1ffff11006409a13 [ 76.376018][ T5361] FS: 00007f254a26d6c0(0000) GS:ffff88808d009000(0000) knlGS:0000000000000000 [ 76.380354][ T5361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.383076][ T5361] CR2: 00007f76e79b1e9c CR3: 000000003ff25000 CR4: 0000000000352ef0 [ 76.386383][ T5361] Call Trace: [ 76.387889][ T5361] [ 76.389406][ T5361] ? __pfx__udf_err+0x10/0x10 [ 76.391954][ T5361] __bread_gfp+0x89/0x3c0 [ 76.394066][ T5361] udf_read_tagged+0xad/0xe00 [ 76.396111][ T5361] udf_check_anchor_block+0x99/0x550 [ 76.398391][ T5361] ? udf_get_last_block+0x286/0x360 [ 76.400608][ T5361] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 76.403288][ T5361] udf_load_vrs+0xa83/0xf20 [ 76.405998][ T5361] ? __pfx_udf_load_vrs+0x10/0x10 [ 76.408872][ T5361] ? udf_get_last_session+0x100/0x200 [ 76.411366][ T5361] udf_fill_super+0x5ad/0x17a0 [ 76.413540][ T5361] ? __pfx_udf_fill_super+0x10/0x10 [ 76.415850][ T5361] ? set_blocksize+0x21e/0x500 [ 76.418105][ T5361] ? sb_set_blocksize+0x104/0x180 [ 76.420898][ T5361] ? setup_bdev_super+0x4c1/0x5b0 [ 76.423790][ T5361] get_tree_bdev_flags+0x40e/0x4d0 [ 76.426474][ T5361] ? __pfx_udf_fill_super+0x10/0x10 [ 76.428808][ T5361] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 76.431256][ T5361] vfs_get_tree+0x92/0x2b0 [ 76.433374][ T5361] do_new_mount+0x2a2/0x9e0 [ 76.435742][ T5361] ? ns_capable+0x8a/0xf0 [ 76.438054][ T5361] ? __pfx_do_new_mount+0x10/0x10 [ 76.440811][ T5361] ? path_mount+0x61c/0xfe0 [ 76.443006][ T5361] ? user_path_at+0x44/0x60 [ 76.444958][ T5361] __se_sys_mount+0x317/0x410 [ 76.447218][ T5361] ? __pfx___se_sys_mount+0x10/0x10 [ 76.449596][ T5361] ? do_syscall_64+0xbe/0x3b0 [ 76.452823][ T5361] ? __x64_sys_mount+0x20/0xc0 [ 76.456174][ T5361] do_syscall_64+0xfa/0x3b0 [ 76.458924][ T5361] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.461625][ T5361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.464295][ T5361] ? clear_bhb_loop+0x60/0xb0 [ 76.466476][ T5361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.469075][ T5361] RIP: 0033:0x7f254938ec29 [ 76.470995][ T5361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.479793][ T5361] RSP: 002b:00007f254a26d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.483354][ T5361] RAX: ffffffffffffffda RBX: 00007f25495d6180 RCX: 00007f254938ec29 [ 76.486862][ T5361] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 76.491009][ T5361] RBP: 00007f2549411e41 R08: 0000000000000000 R09: 0000000000000000 [ 76.494964][ T5361] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 76.498476][ T5361] R13: 00007f25495d6218 R14: 00007f25495d6180 R15: 00007ffc1bd461c8 [ 76.501718][ T5361] [ 76.503111][ T5361] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.506138][ T5361] CPU: 0 UID: 0 PID: 5361 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.510769][ T5361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.515388][ T5361] Call Trace: [ 76.516706][ T5361] [ 76.517890][ T5361] dump_stack_lvl+0x99/0x250 [ 76.519876][ T5361] ? __asan_memcpy+0x40/0x70 [ 76.521923][ T5361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.524144][ T5361] ? __pfx__printk+0x10/0x10 [ 76.526221][ T5361] vpanic+0x281/0x750 [ 76.528137][ T5361] ? __pfx__printk+0x10/0x10 [ 76.530610][ T5361] ? __pfx_vpanic+0x10/0x10 [ 76.533135][ T5361] ? is_bpf_text_address+0x292/0x2b0 [ 76.535257][ T5361] panic+0xb9/0xc0 [ 76.536631][ T5361] ? __pfx_panic+0x10/0x10 [ 76.538460][ T5361] __warn+0x31b/0x4b0 [ 76.540129][ T5361] ? bdev_getblk+0x580/0x660 [ 76.541973][ T5361] ? bdev_getblk+0x580/0x660 [ 76.544091][ T5361] report_bug+0x2be/0x4f0 [ 76.546101][ T5361] ? bdev_getblk+0x580/0x660 [ 76.548374][ T5361] ? bdev_getblk+0x580/0x660 [ 76.550812][ T5361] ? bdev_getblk+0x582/0x660 [ 76.552655][ T5361] handle_bug+0x84/0x160 [ 76.554266][ T5361] exc_invalid_op+0x1a/0x50 [ 76.556123][ T5361] asm_exc_invalid_op+0x1a/0x20 [ 76.558165][ T5361] RIP: 0010:bdev_getblk+0x580/0x660 [ 76.560805][ T5361] Code: 26 fb ff ff e8 51 1e 78 ff 48 c7 c7 60 08 ba 8b 48 c7 c6 0b ed c0 8d 4c 89 fa 4c 89 e9 e8 08 01 e0 fe eb bd e8 31 1e 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 76.570269][ T5361] RSP: 0018:ffffc9000d4176b0 EFLAGS: 00010293 [ 76.572967][ T5361] RAX: ffffffff82479f0f RBX: ffff88803204d098 RCX: ffff88801fbac880 [ 76.576298][ T5361] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 76.579704][ T5361] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217644d [ 76.583065][ T5361] R10: 0000000000000406 R11: 0000000000000000 R12: ffff88803204d9f0 [ 76.587016][ T5361] R13: ffff88803204d080 R14: 0000000000000200 R15: 1ffff11006409a13 [ 76.590806][ T5361] ? fs_reclaim_acquire+0x7d/0x100 [ 76.593094][ T5361] ? bdev_getblk+0x57f/0x660 [ 76.594906][ T5361] ? __pfx__udf_err+0x10/0x10 [ 76.596897][ T5361] __bread_gfp+0x89/0x3c0 [ 76.598814][ T5361] udf_read_tagged+0xad/0xe00 [ 76.601550][ T5361] udf_check_anchor_block+0x99/0x550 [ 76.604502][ T5361] ? udf_get_last_block+0x286/0x360 [ 76.607220][ T5361] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 76.609716][ T5361] udf_load_vrs+0xa83/0xf20 [ 76.611606][ T5361] ? __pfx_udf_load_vrs+0x10/0x10 [ 76.613788][ T5361] ? udf_get_last_session+0x100/0x200 [ 76.616031][ T5361] udf_fill_super+0x5ad/0x17a0 [ 76.617827][ T5361] ? __pfx_udf_fill_super+0x10/0x10 [ 76.620000][ T5361] ? set_blocksize+0x21e/0x500 [ 76.623138][ T5361] ? sb_set_blocksize+0x104/0x180 [ 76.625874][ T5361] ? setup_bdev_super+0x4c1/0x5b0 [ 76.628263][ T5361] get_tree_bdev_flags+0x40e/0x4d0 [ 76.630456][ T5361] ? __pfx_udf_fill_super+0x10/0x10 [ 76.632773][ T5361] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 76.635026][ T5361] vfs_get_tree+0x92/0x2b0 [ 76.636963][ T5361] do_new_mount+0x2a2/0x9e0 [ 76.638944][ T5361] ? ns_capable+0x8a/0xf0 [ 76.640850][ T5361] ? __pfx_do_new_mount+0x10/0x10 [ 76.643177][ T5361] ? path_mount+0x61c/0xfe0 [ 76.645281][ T5361] ? user_path_at+0x44/0x60 [ 76.647326][ T5361] __se_sys_mount+0x317/0x410 [ 76.649405][ T5361] ? __pfx___se_sys_mount+0x10/0x10 [ 76.651841][ T5361] ? do_syscall_64+0xbe/0x3b0 [ 76.654574][ T5361] ? __x64_sys_mount+0x20/0xc0 [ 76.657351][ T5361] do_syscall_64+0xfa/0x3b0 [ 76.660292][ T5361] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.663115][ T5361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.665679][ T5361] ? clear_bhb_loop+0x60/0xb0 [ 76.667846][ T5361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.670240][ T5361] RIP: 0033:0x7f254938ec29 [ 76.672049][ T5361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.681696][ T5361] RSP: 002b:00007f254a26d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.685911][ T5361] RAX: ffffffffffffffda RBX: 00007f25495d6180 RCX: 00007f254938ec29 [ 76.689296][ T5361] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 76.692859][ T5361] RBP: 00007f2549411e41 R08: 0000000000000000 R09: 0000000000000000 [ 76.696349][ T5361] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 76.701104][ T5361] R13: 00007f25495d6218 R14: 00007f25495d6180 R15: 00007ffc1bd461c8 [ 76.704820][ T5361] [ 76.706566][ T5361] Kernel Offset: disabled [ 76.708488][ T5361] Rebooting in 86400 seconds..