program: openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20}, 0x50) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async) r2 = socket(0x2, 0x1, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r3, 0xab03) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x100000000) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) [ 85.741025][ T4706] Bluetooth: hci0: command tx timeout [ 85.864534][ T5366] block nbd0: Send control failed (result -32) [ 85.867619][ T5366] block nbd0: Request send failed, requeueing [ 85.906358][ T5338] block nbd0: Receive control failed (result -107) [ 85.917858][ T49] block nbd0: Dead connection, failed to find a fallback [ 85.921862][ T49] block nbd0: shutting down sockets [ 85.924385][ T49] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.940796][ T5359] nbd0: detected capacity change from 0 to 8589934592 [ 85.945412][ T5366] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.955564][ T5334] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.959138][ T5334] Buffer I/O error on dev nbd0, logical block 1, async page read [ 85.965265][ T5334] Buffer I/O error on dev nbd0, logical block 2, async page read [ 85.968751][ T5334] Buffer I/O error on dev nbd0, logical block 3, async page read [ 85.974421][ T5334] Buffer I/O error on dev nbd0, logical block 4, async page read [ 85.978049][ T5334] Buffer I/O error on dev nbd0, logical block 5, async page read [ 85.983532][ T5334] Buffer I/O error on dev nbd0, logical block 6, async page read [ 85.987174][ T5334] Buffer I/O error on dev nbd0, logical block 7, async page read [ 85.991808][ T5366] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 85.995945][ T5334] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.999545][ T5334] Buffer I/O error on dev nbd0, logical block 1, async page read [ 86.004571][ T5366] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 86.013460][ T5334] ldm_validate_partition_table(): Disk read failed. [ 86.017879][ T5334] Dev nbd0: unable to read RDB block 0 [ 86.020924][ T5366] ------------[ cut here ]------------ [ 86.023556][ T5366] WARNING: CPU: 0 PID: 5366 at fs/buffer.c:1125 bdev_getblk+0x580/0x660 [ 86.027368][ T5366] Modules linked in: [ 86.029225][ T5366] CPU: 0 UID: 0 PID: 5366 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.033691][ T5366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.038539][ T5366] RIP: 0010:bdev_getblk+0x580/0x660 [ 86.040975][ T5366] Code: 26 fb ff ff e8 81 30 78 ff 48 c7 c7 60 05 9a 8b 48 c7 c6 1d d3 a0 8d 4c 89 fa 4c 89 e9 e8 b8 12 e0 fe eb bd e8 61 30 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 86.051668][ T5366] RSP: 0018:ffffc9000d40f6b0 EFLAGS: 00010293 [ 86.054359][ T5366] RAX: ffffffff82478d5f RBX: ffff88803204d098 RCX: ffff8880007f2440 [ 86.057721][ T5366] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 86.061411][ T5366] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217561d [ 86.064932][ T5366] R10: 0000000000000406 R11: 0000000000000000 R12: ffff88803204d9f0 [ 86.068440][ T5366] R13: ffff88803204d080 R14: 0000000000000200 R15: 1ffff11006409a13 [ 86.072094][ T5366] FS: 00007f5ba5e156c0(0000) GS:ffff88808d20d000(0000) knlGS:0000000000000000 [ 86.075930][ T5366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.078756][ T5366] CR2: 00007fffab803020 CR3: 0000000043d9f000 CR4: 0000000000352ef0 [ 86.082600][ T5366] Call Trace: [ 86.084245][ T5366] [ 86.085542][ T5366] ? __pfx__udf_err+0x10/0x10 [ 86.087681][ T5366] __bread_gfp+0x89/0x3c0 [ 86.089588][ T5366] udf_read_tagged+0xad/0xe00 [ 86.092165][ T5366] udf_check_anchor_block+0x99/0x550 [ 86.094577][ T5366] ? udf_get_last_block+0x286/0x360 [ 86.096895][ T5366] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 86.099485][ T5366] udf_load_vrs+0xa83/0xf20 [ 86.101693][ T5366] ? __pfx_udf_load_vrs+0x10/0x10 [ 86.104003][ T5366] ? udf_get_last_session+0x100/0x200 [ 86.106331][ T5366] udf_fill_super+0x5ad/0x17a0 [ 86.108582][ T5366] ? __pfx_udf_fill_super+0x10/0x10 [ 86.111043][ T5366] ? set_blocksize+0x21e/0x500 [ 86.113281][ T5366] ? sb_set_blocksize+0x104/0x180 [ 86.115596][ T5366] ? setup_bdev_super+0x4c1/0x5b0 [ 86.117766][ T5366] get_tree_bdev_flags+0x40b/0x4d0 [ 86.120073][ T5366] ? __pfx_udf_fill_super+0x10/0x10 [ 86.122567][ T5366] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 86.125417][ T5366] vfs_get_tree+0x92/0x2b0 [ 86.127478][ T5366] do_new_mount+0x2a2/0x9e0 [ 86.129545][ T5366] ? ns_capable+0x8a/0xf0 [ 86.131912][ T5366] ? __pfx_do_new_mount+0x10/0x10 [ 86.134114][ T5366] ? path_mount+0x61c/0xfe0 [ 86.136214][ T5366] ? user_path_at+0x44/0x60 [ 86.138090][ T5366] __se_sys_mount+0x317/0x410 [ 86.140047][ T5366] ? __pfx___se_sys_mount+0x10/0x10 [ 86.142560][ T5366] ? rcu_is_watching+0x15/0xb0 [ 86.144706][ T5366] ? do_syscall_64+0xbe/0x3b0 [ 86.146883][ T5366] ? __x64_sys_mount+0x20/0xc0 [ 86.148927][ T5366] do_syscall_64+0xfa/0x3b0 [ 86.151101][ T5366] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.153458][ T5366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.156098][ T5366] ? clear_bhb_loop+0x60/0xb0 [ 86.158038][ T5366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.160846][ T5366] RIP: 0033:0x7f5ba4f8ebe9 [ 86.162760][ T5366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.171318][ T5366] RSP: 002b:00007f5ba5e15038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.175101][ T5366] RAX: ffffffffffffffda RBX: 00007f5ba51c6180 RCX: 00007f5ba4f8ebe9 [ 86.178510][ T5366] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 86.182021][ T5366] RBP: 00007f5ba5011e19 R08: 0000000000000000 R09: 0000000000000000 [ 86.185550][ T5366] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 86.188962][ T5366] R13: 00007f5ba51c6218 R14: 00007f5ba51c6180 R15: 00007ffc1012b178 [ 86.192434][ T5366] [ 86.193758][ T5366] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.196878][ T5366] CPU: 0 UID: 0 PID: 5366 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.200569][ T5366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.205174][ T5366] Call Trace: [ 86.206591][ T5366] [ 86.207833][ T5366] dump_stack_lvl+0x99/0x250 [ 86.209891][ T5366] ? __asan_memcpy+0x40/0x70 [ 86.212016][ T5366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.214179][ T5366] ? __pfx__printk+0x10/0x10 [ 86.216231][ T5366] vpanic+0x281/0x750 [ 86.217897][ T5366] ? __pfx__printk+0x10/0x10 [ 86.219852][ T5366] ? __pfx_vpanic+0x10/0x10 [ 86.221759][ T5366] ? is_bpf_text_address+0x292/0x2b0 [ 86.224024][ T5366] panic+0xb9/0xc0 [ 86.225614][ T5366] ? __pfx_panic+0x10/0x10 [ 86.227571][ T5366] __warn+0x31b/0x4b0 [ 86.229436][ T5366] ? bdev_getblk+0x580/0x660 [ 86.231375][ T5366] ? bdev_getblk+0x580/0x660 [ 86.233071][ T5366] report_bug+0x2be/0x4f0 [ 86.234916][ T5366] ? bdev_getblk+0x580/0x660 [ 86.236835][ T5366] ? bdev_getblk+0x580/0x660 [ 86.238939][ T5366] ? bdev_getblk+0x582/0x660 [ 86.240997][ T5366] handle_bug+0x84/0x160 [ 86.242931][ T5366] exc_invalid_op+0x1a/0x50 [ 86.244976][ T5366] asm_exc_invalid_op+0x1a/0x20 [ 86.247449][ T5366] RIP: 0010:bdev_getblk+0x580/0x660 [ 86.250122][ T5366] Code: 26 fb ff ff e8 81 30 78 ff 48 c7 c7 60 05 9a 8b 48 c7 c6 1d d3 a0 8d 4c 89 fa 4c 89 e9 e8 b8 12 e0 fe eb bd e8 61 30 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 86.258487][ T5366] RSP: 0018:ffffc9000d40f6b0 EFLAGS: 00010293 [ 86.261050][ T5366] RAX: ffffffff82478d5f RBX: ffff88803204d098 RCX: ffff8880007f2440 [ 86.264628][ T5366] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 86.268138][ T5366] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217561d [ 86.271638][ T5366] R10: 0000000000000406 R11: 0000000000000000 R12: ffff88803204d9f0 [ 86.275033][ T5366] R13: ffff88803204d080 R14: 0000000000000200 R15: 1ffff11006409a13 [ 86.278565][ T5366] ? fs_reclaim_acquire+0x7d/0x100 [ 86.280906][ T5366] ? bdev_getblk+0x57f/0x660 [ 86.283042][ T5366] ? __pfx__udf_err+0x10/0x10 [ 86.285203][ T5366] __bread_gfp+0x89/0x3c0 [ 86.287064][ T5366] udf_read_tagged+0xad/0xe00 [ 86.289148][ T5366] udf_check_anchor_block+0x99/0x550 [ 86.291575][ T5366] ? udf_get_last_block+0x286/0x360 [ 86.294036][ T5366] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 86.296763][ T5366] udf_load_vrs+0xa83/0xf20 [ 86.298808][ T5366] ? __pfx_udf_load_vrs+0x10/0x10 [ 86.301048][ T5366] ? udf_get_last_session+0x100/0x200 [ 86.303543][ T5366] udf_fill_super+0x5ad/0x17a0 [ 86.305631][ T5366] ? __pfx_udf_fill_super+0x10/0x10 [ 86.307816][ T5366] ? set_blocksize+0x21e/0x500 [ 86.309779][ T5366] ? sb_set_blocksize+0x104/0x180 [ 86.311928][ T5366] ? setup_bdev_super+0x4c1/0x5b0 [ 86.314066][ T5366] get_tree_bdev_flags+0x40b/0x4d0 [ 86.316373][ T5366] ? __pfx_udf_fill_super+0x10/0x10 [ 86.318579][ T5366] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 86.321034][ T5366] vfs_get_tree+0x92/0x2b0 [ 86.323125][ T5366] do_new_mount+0x2a2/0x9e0 [ 86.325203][ T5366] ? ns_capable+0x8a/0xf0 [ 86.327102][ T5366] ? __pfx_do_new_mount+0x10/0x10 [ 86.329294][ T5366] ? path_mount+0x61c/0xfe0 [ 86.331423][ T5366] ? user_path_at+0x44/0x60 [ 86.333568][ T5366] __se_sys_mount+0x317/0x410 [ 86.335710][ T5366] ? __pfx___se_sys_mount+0x10/0x10 [ 86.338020][ T5366] ? rcu_is_watching+0x15/0xb0 [ 86.340218][ T5366] ? do_syscall_64+0xbe/0x3b0 [ 86.342407][ T5366] ? __x64_sys_mount+0x20/0xc0 [ 86.344499][ T5366] do_syscall_64+0xfa/0x3b0 [ 86.346408][ T5366] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.348665][ T5366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.351320][ T5366] ? clear_bhb_loop+0x60/0xb0 [ 86.353447][ T5366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.356007][ T5366] RIP: 0033:0x7f5ba4f8ebe9 [ 86.357894][ T5366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.366270][ T5366] RSP: 002b:00007f5ba5e15038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.369805][ T5366] RAX: ffffffffffffffda RBX: 00007f5ba51c6180 RCX: 00007f5ba4f8ebe9 [ 86.373256][ T5366] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 86.376667][ T5366] RBP: 00007f5ba5011e19 R08: 0000000000000000 R09: 0000000000000000 [ 86.380151][ T5366] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 86.383998][ T5366] R13: 00007f5ba51c6218 R14: 00007f5ba51c6180 R15: 00007ffc1012b178 [ 86.387516][ T5366] [ 86.389265][ T5366] Kernel Offset: disabled [ 86.391276][ T5366] Rebooting in 86400 seconds..