program:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a0101000073797a30000000000c0010400000000000000001140000001000010000000000000000000084000a27ef4e622620bfc53413271cdceb80658d89db"], 0xb0}}, 0x0)
r1 = socket(0x2, 0x1, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r1) (async)
setsockopt(r0, 0x784, 0xfffffff9, &(0x7f0000000340)="e03c90c89313f428b520ad175086662c2dced5e7a65bf49f50379ab34dcb06fa48430d268db88ffe04f5d84fe559118b9c1cc3927b74fa20f40abd0e212546afa6ee6e3a6ec4496fb8749e4a3234abcd652d0a58c15119b2cfe331a4bcd5913024e72c3af81ebf49bf4351d1e9bc680991e33779c1672001c6eb922107415c5b0e459856dd146de8ffd13bb49f27c7def54f83cb06d72ee102700399dd6551cd1a7994d1c16b5bd11159bb6c5c3586aa54a3bcb87154cfcd17586ec7e8f9bbb1c50672d2575a55bba33e7d5cccbfe5e4051053f2b771698acc5bbc9b3c8abb549b5d8855e937e491859cd14113b42d0b8a30c5abde57", 0xf6) (async)
ioctl$NBD_DO_IT(r2, 0xab03) (async)
sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
[ 85.348943][ T5325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.0'.
[ 85.359861][ T5288] Bluetooth: hci0: command tx timeout
[ 85.364647][ T5325] ------------[ cut here ]------------
[ 85.367055][ T5325] !sock_allow_reclassification(sk)
[ 85.367067][ T5325] WARNING: drivers/block/nbd.c:1249 at nbd_add_socket+0xf35/0x12c0, CPU#0: syz.0.0/5325
[ 85.373891][ T5325] Modules linked in:
[ 85.376390][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.381918][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.386202][ T5325] RIP: 0010:nbd_add_socket+0xf35/0x12c0
[ 85.389454][ T5325] Code: f7 e8 2f 54 1d fc bf e0 01 00 00 49 03 3e 48 c7 c6 a0 6c 55 8c e8 9b 33 14 fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ec 3b ae fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 ce 4a 98 05 44 89 e9 80 e1 07 fe c1 38
[ 85.399793][ T5325] RSP: 0018:ffffc9000e357be0 EFLAGS: 00010293
[ 85.407593][ T5325] RAX: ffffffff86180914 RBX: 1ffff11003fa0039 RCX: ffff888000bf0000
[ 85.412178][ T5325] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 85.416064][ T5325] RBP: ffffc9000e357cd0 R08: ffff8880358b6bdf R09: 1ffff11006b16d7b
[ 85.419456][ T5325] R10: dffffc0000000000 R11: ffffed1006b16d7c R12: ffff88801fd00000
[ 85.422739][ T5325] R13: 1ffff92001c6af88 R14: dffffc0000000000 R15: 0000000000000001
[ 85.426142][ T5325] FS: 00007fed76b746c0(0000) GS:ffff88808c848000(0000) knlGS:0000000000000000
[ 85.430059][ T5325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.433346][ T5325] CR2: 00007fed75d86480 CR3: 000000001fc4c000 CR4: 0000000000352ef0
[ 85.437366][ T5325] Call Trace:
[ 85.438922][ T5325]
[ 85.440134][ T5325] ? __pfx___mutex_lock+0x10/0x10
[ 85.442395][ T5325] ? __pfx_nbd_add_socket+0x10/0x10
[ 85.444580][ T5325] ? bpf_lsm_capable+0x9/0x20
[ 85.446590][ T5325] ? security_capable+0x7e/0x2c0
[ 85.449050][ T5325] nbd_ioctl+0x4c1/0xe50
[ 85.451203][ T5325] ? __pfx_nbd_ioctl+0x10/0x10
[ 85.453413][ T5325] ? lock_release+0x4b/0x3c0
[ 85.455291][ T5325] ? __pfx_nbd_ioctl+0x10/0x10
[ 85.457450][ T5325] blkdev_ioctl+0x5e3/0x740
[ 85.459469][ T5325] ? __pfx_blkdev_ioctl+0x10/0x10
[ 85.461560][ T5325] ? __fget_files+0x2a/0x420
[ 85.463528][ T5325] ? bpf_lsm_file_ioctl+0x9/0x20
[ 85.465513][ T5325] ? __pfx_blkdev_ioctl+0x10/0x10
[ 85.467589][ T5325] __se_sys_ioctl+0xfc/0x170
[ 85.469626][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.472106][ T5325] do_syscall_64+0x174/0x580
[ 85.474286][ T5325] ? trace_irq_disable+0x3b/0x140
[ 85.476630][ T5325] ? clear_bhb_loop+0x40/0x90
[ 85.478623][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.481127][ T5325] RIP: 0033:0x7fed75d9ce59
[ 85.482952][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.490671][ T5325] RSP: 002b:00007fed76b73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 85.493947][ T5325] RAX: ffffffffffffffda RBX: 00007fed76015fa0 RCX: 00007fed75d9ce59
[ 85.497150][ T5325] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000005
[ 85.500411][ T5325] RBP: 00007fed75e32e6f R08: 0000000000000000 R09: 0000000000000000
[ 85.503566][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.506751][ T5325] R13: 00007fed76016038 R14: 00007fed76015fa0 R15: 00007ffe6eb84c18
[ 85.509974][ T5325]
[ 85.511214][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 85.514141][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.517748][ T5325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.521714][ T5325] Call Trace:
[ 85.523118][ T5325]
[ 85.524350][ T5325] vpanic+0x56c/0xa60
[ 85.526027][ T5325] ? __pfx__printk+0x10/0x10
[ 85.527961][ T5325] ? __pfx_vpanic+0x10/0x10
[ 85.529862][ T5325] ? is_bpf_text_address+0x292/0x2b0
[ 85.531998][ T5325] ? is_bpf_text_address+0x26/0x2b0
[ 85.534128][ T5325] panic+0xc5/0xd0
[ 85.535690][ T5325] ? __pfx_panic+0x10/0x10
[ 85.537704][ T5325] __warn+0x315/0x4c0
[ 85.539335][ T5325] ? nbd_add_socket+0xf35/0x12c0
[ 85.541357][ T5325] ? nbd_add_socket+0xf35/0x12c0
[ 85.543321][ T5325] __report_bug+0x331/0x530
[ 85.545718][ T5325] ? __se_sys_ioctl+0x47/0x170
[ 85.547980][ T5325] ? do_syscall_64+0x174/0x580
[ 85.549978][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.552529][ T5325] ? nbd_add_socket+0xf35/0x12c0
[ 85.554581][ T5325] ? __pfx___report_bug+0x10/0x10
[ 85.556662][ T5325] ? blk_get_meta_cap+0x19d/0x780
[ 85.558669][ T5325] ? __pfx_blk_get_meta_cap+0x10/0x10
[ 85.561007][ T5325] ? __fget_files+0x2a/0x420
[ 85.562892][ T5325] ? nbd_add_socket+0xf35/0x12c0
[ 85.565003][ T5325] report_bug+0x16a/0x220
[ 85.566835][ T5325] ? nbd_add_socket+0xf35/0x12c0
[ 85.568935][ T5325] ? nbd_add_socket+0xf37/0x12c0
[ 85.571128][ T5325] handle_bug+0x9c/0x200
[ 85.572925][ T5325] exc_invalid_op+0x1a/0x50
[ 85.574994][ T5325] asm_exc_invalid_op+0x1a/0x20
[ 85.577177][ T5325] RIP: 0010:nbd_add_socket+0xf35/0x12c0
[ 85.579609][ T5325] Code: f7 e8 2f 54 1d fc bf e0 01 00 00 49 03 3e 48 c7 c6 a0 6c 55 8c e8 9b 33 14 fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ec 3b ae fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 ce 4a 98 05 44 89 e9 80 e1 07 fe c1 38
[ 85.588033][ T5325] RSP: 0018:ffffc9000e357be0 EFLAGS: 00010293
[ 85.590446][ T5325] RAX: ffffffff86180914 RBX: 1ffff11003fa0039 RCX: ffff888000bf0000
[ 85.593686][ T5325] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 85.596899][ T5325] RBP: ffffc9000e357cd0 R08: ffff8880358b6bdf R09: 1ffff11006b16d7b
[ 85.600238][ T5325] R10: dffffc0000000000 R11: ffffed1006b16d7c R12: ffff88801fd00000
[ 85.603614][ T5325] R13: 1ffff92001c6af88 R14: dffffc0000000000 R15: 0000000000000001
[ 85.606955][ T5325] ? nbd_add_socket+0xf34/0x12c0
[ 85.609007][ T5325] ? __pfx___mutex_lock+0x10/0x10
[ 85.611007][ T5325] ? __pfx_nbd_add_socket+0x10/0x10
[ 85.613076][ T5325] ? bpf_lsm_capable+0x9/0x20
[ 85.614900][ T5325] ? security_capable+0x7e/0x2c0
[ 85.616966][ T5325] nbd_ioctl+0x4c1/0xe50
[ 85.618704][ T5325] ? __pfx_nbd_ioctl+0x10/0x10
[ 85.620690][ T5325] ? lock_release+0x4b/0x3c0
[ 85.622558][ T5325] ? __pfx_nbd_ioctl+0x10/0x10
[ 85.624537][ T5325] blkdev_ioctl+0x5e3/0x740
[ 85.626485][ T5325] ? __pfx_blkdev_ioctl+0x10/0x10
[ 85.628676][ T5325] ? __fget_files+0x2a/0x420
[ 85.630610][ T5325] ? bpf_lsm_file_ioctl+0x9/0x20
[ 85.632606][ T5325] ? __pfx_blkdev_ioctl+0x10/0x10
[ 85.634729][ T5325] __se_sys_ioctl+0xfc/0x170
[ 85.636800][ T5325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.639312][ T5325] do_syscall_64+0x174/0x580
[ 85.641346][ T5325] ? trace_irq_disable+0x3b/0x140
[ 85.643476][ T5325] ? clear_bhb_loop+0x40/0x90
[ 85.645434][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.647883][ T5325] RIP: 0033:0x7fed75d9ce59
[ 85.649966][ T5325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 85.657872][ T5325] RSP: 002b:00007fed76b73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 85.661222][ T5325] RAX: ffffffffffffffda RBX: 00007fed76015fa0 RCX: 00007fed75d9ce59
[ 85.664421][ T5325] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000005
[ 85.667752][ T5325] RBP: 00007fed75e32e6f R08: 0000000000000000 R09: 0000000000000000
[ 85.671037][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 85.674338][ T5325] R13: 00007fed76016038 R14: 00007fed76015fa0 R15: 00007ffe6eb84c18
[ 85.677614][ T5325]
[ 85.679241][ T5325] Kernel Offset: disabled
[ 85.681015][ T5325] Rebooting in 86400 seconds..