program: openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) [ 85.042660][ T5342] Bluetooth: hci0: command tx timeout [ 85.146564][ T4709] block nbd0: Receive control failed (result -107) [ 85.154584][ T5367] block nbd0: Dead connection, failed to find a fallback [ 85.170962][ T5367] block nbd0: shutting down sockets [ 85.174607][ T5367] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.183721][ T5366] nbd0: detected capacity change from 0 to 8589934592 [ 85.194266][ T5337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.197717][ T5337] Buffer I/O error on dev nbd0, logical block 1, async page read [ 85.201121][ T5337] Buffer I/O error on dev nbd0, logical block 2, async page read [ 85.204735][ T5367] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.211645][ T5337] Buffer I/O error on dev nbd0, logical block 3, async page read [ 85.216078][ T5337] Buffer I/O error on dev nbd0, logical block 4, async page read [ 85.219466][ T5337] Buffer I/O error on dev nbd0, logical block 5, async page read [ 85.223850][ T5337] Buffer I/O error on dev nbd0, logical block 6, async page read [ 85.227429][ T5337] Buffer I/O error on dev nbd0, logical block 7, async page read [ 85.231655][ T5367] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 85.236347][ T5337] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.240419][ T5337] Buffer I/O error on dev nbd0, logical block 1, async page read [ 85.246247][ T5367] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 85.255198][ T5337] ldm_validate_partition_table(): Disk read failed. [ 85.259350][ T5367] ------------[ cut here ]------------ [ 85.261766][ T5367] WARNING: CPU: 0 PID: 5367 at fs/buffer.c:1125 bdev_getblk+0x580/0x660 [ 85.265518][ T5367] Modules linked in: [ 85.267326][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.271173][ T5367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.275825][ T5367] RIP: 0010:bdev_getblk+0x580/0x660 [ 85.278138][ T5367] Code: 26 fb ff ff e8 91 2a 78 ff 48 c7 c7 a0 07 ba 8b 48 c7 c6 c8 ec c0 8d 4c 89 fa 4c 89 e9 e8 78 fd df fe eb bd e8 71 2a 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 85.286595][ T5367] RSP: 0018:ffffc9000d3876b0 EFLAGS: 00010293 [ 85.289197][ T5367] RAX: ffffffff8247a29f RBX: ffff8880008cd098 RCX: ffff8880003ac880 [ 85.292592][ T5367] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 85.296109][ T5367] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217694d [ 85.299468][ T5367] R10: 0000000000000406 R11: 0000000000000000 R12: ffff8880008cd9f0 [ 85.302921][ T5367] R13: ffff8880008cd080 R14: 0000000000000200 R15: 1ffff11000119a13 [ 85.306287][ T5367] FS: 00007f1f2278d6c0(0000) GS:ffff88808d00a000(0000) knlGS:0000000000000000 [ 85.310054][ T5367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.312990][ T5367] CR2: 00007ffc0cb62250 CR3: 0000000042ff9000 CR4: 0000000000352ef0 [ 85.316403][ T5367] Call Trace: [ 85.317885][ T5367] [ 85.319054][ T5367] ? __pfx__udf_err+0x10/0x10 [ 85.321013][ T5367] __bread_gfp+0x89/0x3c0 [ 85.323110][ T5367] udf_read_tagged+0xad/0xe00 [ 85.325230][ T5367] udf_check_anchor_block+0x99/0x550 [ 85.327475][ T5367] ? udf_get_last_block+0x286/0x360 [ 85.329752][ T5367] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 85.332418][ T5367] udf_load_vrs+0xa83/0xf20 [ 85.334308][ T5367] ? __pfx_udf_load_vrs+0x10/0x10 [ 85.336367][ T5367] ? udf_get_last_session+0x100/0x200 [ 85.338703][ T5367] udf_fill_super+0x5ad/0x17a0 [ 85.340762][ T5367] ? __pfx_udf_fill_super+0x10/0x10 [ 85.343105][ T5367] ? set_blocksize+0x21e/0x500 [ 85.345102][ T5367] ? sb_set_blocksize+0x104/0x180 [ 85.347198][ T5367] ? setup_bdev_super+0x4c1/0x5b0 [ 85.349270][ T5367] get_tree_bdev_flags+0x40b/0x4d0 [ 85.351405][ T5367] ? __pfx_udf_fill_super+0x10/0x10 [ 85.353743][ T5367] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.356106][ T5367] vfs_get_tree+0x92/0x2b0 [ 85.358074][ T5367] do_new_mount+0x2a2/0x9e0 [ 85.359952][ T5367] ? ns_capable+0x8a/0xf0 [ 85.362575][ T5367] ? __pfx_do_new_mount+0x10/0x10 [ 85.364739][ T5367] ? path_mount+0x61c/0xfe0 [ 85.366551][ T5367] ? user_path_at+0x44/0x60 [ 85.368519][ T5367] __se_sys_mount+0x317/0x410 [ 85.370660][ T5367] ? __pfx___se_sys_mount+0x10/0x10 [ 85.373072][ T5367] ? rcu_is_watching+0x15/0xb0 [ 85.375069][ T5367] ? do_syscall_64+0xbe/0x3b0 [ 85.378402][ T5367] ? __x64_sys_mount+0x20/0xc0 [ 85.380415][ T5367] do_syscall_64+0xfa/0x3b0 [ 85.382405][ T5367] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.384534][ T5367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.387020][ T5367] ? clear_bhb_loop+0x60/0xb0 [ 85.389111][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.391615][ T5367] RIP: 0033:0x7f1f2198eba9 [ 85.393673][ T5367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.401679][ T5367] RSP: 002b:00007f1f2278d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.405279][ T5367] RAX: ffffffffffffffda RBX: 00007f1f21bd6090 RCX: 00007f1f2198eba9 [ 85.408745][ T5367] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 85.412951][ T5367] RBP: 00007f1f21a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 85.416453][ T5367] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 85.419997][ T5367] R13: 00007f1f21bd6128 R14: 00007f1f21bd6090 R15: 00007ffe372472e8 [ 85.423506][ T5367] [ 85.424796][ T5367] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.427745][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.431575][ T5367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.436043][ T5367] Call Trace: [ 85.437474][ T5367] [ 85.438772][ T5367] dump_stack_lvl+0x99/0x250 [ 85.440676][ T5367] ? __asan_memcpy+0x40/0x70 [ 85.442594][ T5367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.444825][ T5367] ? __pfx__printk+0x10/0x10 [ 85.446851][ T5367] vpanic+0x281/0x750 [ 85.448432][ T5367] ? __pfx__printk+0x10/0x10 [ 85.450343][ T5367] ? __pfx_vpanic+0x10/0x10 [ 85.452352][ T5367] ? is_bpf_text_address+0x292/0x2b0 [ 85.454499][ T5367] panic+0xb9/0xc0 [ 85.456172][ T5367] ? __pfx_panic+0x10/0x10 [ 85.458205][ T5367] __warn+0x31b/0x4b0 [ 85.459948][ T5367] ? bdev_getblk+0x580/0x660 [ 85.461967][ T5367] ? bdev_getblk+0x580/0x660 [ 85.463968][ T5367] report_bug+0x2be/0x4f0 [ 85.465881][ T5367] ? bdev_getblk+0x580/0x660 [ 85.468017][ T5367] ? bdev_getblk+0x580/0x660 [ 85.469970][ T5367] ? bdev_getblk+0x582/0x660 [ 85.472153][ T5367] handle_bug+0x84/0x160 [ 85.473999][ T5367] exc_invalid_op+0x1a/0x50 [ 85.475991][ T5367] asm_exc_invalid_op+0x1a/0x20 [ 85.478030][ T5367] RIP: 0010:bdev_getblk+0x580/0x660 [ 85.480273][ T5367] Code: 26 fb ff ff e8 91 2a 78 ff 48 c7 c7 a0 07 ba 8b 48 c7 c6 c8 ec c0 8d 4c 89 fa 4c 89 e9 e8 78 fd df fe eb bd e8 71 2a 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 85.488691][ T5367] RSP: 0018:ffffc9000d3876b0 EFLAGS: 00010293 [ 85.491222][ T5367] RAX: ffffffff8247a29f RBX: ffff8880008cd098 RCX: ffff8880003ac880 [ 85.494360][ T5367] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 85.497930][ T5367] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217694d [ 85.501432][ T5367] R10: 0000000000000406 R11: 0000000000000000 R12: ffff8880008cd9f0 [ 85.504666][ T5367] R13: ffff8880008cd080 R14: 0000000000000200 R15: 1ffff11000119a13 [ 85.508492][ T5367] ? fs_reclaim_acquire+0x7d/0x100 [ 85.511310][ T5367] ? bdev_getblk+0x57f/0x660 [ 85.513808][ T5367] ? __pfx__udf_err+0x10/0x10 [ 85.516359][ T5367] __bread_gfp+0x89/0x3c0 [ 85.518727][ T5367] udf_read_tagged+0xad/0xe00 [ 85.521129][ T5367] udf_check_anchor_block+0x99/0x550 [ 85.523900][ T5367] ? udf_get_last_block+0x286/0x360 [ 85.526629][ T5367] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 85.529667][ T5367] udf_load_vrs+0xa83/0xf20 [ 85.531952][ T5367] ? __pfx_udf_load_vrs+0x10/0x10 [ 85.534162][ T5367] ? udf_get_last_session+0x100/0x200 [ 85.536499][ T5367] udf_fill_super+0x5ad/0x17a0 [ 85.538734][ T5367] ? __pfx_udf_fill_super+0x10/0x10 [ 85.540969][ T5367] ? set_blocksize+0x21e/0x500 [ 85.543092][ T5367] ? sb_set_blocksize+0x104/0x180 [ 85.545203][ T5367] ? setup_bdev_super+0x4c1/0x5b0 [ 85.547381][ T5367] get_tree_bdev_flags+0x40b/0x4d0 [ 85.549608][ T5367] ? __pfx_udf_fill_super+0x10/0x10 [ 85.551740][ T5367] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 85.554321][ T5367] vfs_get_tree+0x92/0x2b0 [ 85.556252][ T5367] do_new_mount+0x2a2/0x9e0 [ 85.558210][ T5367] ? ns_capable+0x8a/0xf0 [ 85.560098][ T5367] ? __pfx_do_new_mount+0x10/0x10 [ 85.562310][ T5367] ? path_mount+0x61c/0xfe0 [ 85.564185][ T5367] ? user_path_at+0x44/0x60 [ 85.566136][ T5367] __se_sys_mount+0x317/0x410 [ 85.568104][ T5367] ? __pfx___se_sys_mount+0x10/0x10 [ 85.570306][ T5367] ? rcu_is_watching+0x15/0xb0 [ 85.572336][ T5367] ? do_syscall_64+0xbe/0x3b0 [ 85.574271][ T5367] ? __x64_sys_mount+0x20/0xc0 [ 85.576275][ T5367] do_syscall_64+0xfa/0x3b0 [ 85.578157][ T5367] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.580330][ T5367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.582956][ T5367] ? clear_bhb_loop+0x60/0xb0 [ 85.584990][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.587607][ T5367] RIP: 0033:0x7f1f2198eba9 [ 85.589508][ T5367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.597528][ T5367] RSP: 002b:00007f1f2278d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.600872][ T5367] RAX: ffffffffffffffda RBX: 00007f1f21bd6090 RCX: 00007f1f2198eba9 [ 85.604982][ T5367] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 85.608456][ T5367] RBP: 00007f1f21a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 85.611839][ T5367] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 85.615196][ T5367] R13: 00007f1f21bd6128 R14: 00007f1f21bd6090 R15: 00007ffe372472e8 [ 85.618692][ T5367] [ 85.620386][ T5367] Kernel Offset: disabled [ 85.622337][ T5367] Rebooting in 86400 seconds..