program: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x402, &(0x7f00000001c0), 0x0, 0x274, &(0x7f0000000280)="$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") r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7fffffff, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 67.528194][ T5279] Bluetooth: hci0: command tx timeout [ 67.562419][ T5315] loop0: detected capacity change from 0 to 128 [ 67.602577][ T5315] ------------[ cut here ]------------ [ 67.605599][ T5315] !sock_allow_reclassification(sk) [ 67.605612][ T5315] WARNING: drivers/block/nbd.c:1249 at nbd_add_socket+0xf35/0x12c0, CPU#0: syz.0.0/5315 [ 67.613024][ T5315] Modules linked in: [ 67.614767][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 67.618870][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.624013][ T5315] RIP: 0010:nbd_add_socket+0xf35/0x12c0 [ 67.626429][ T5315] Code: f7 e8 7f 53 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 25 55 8c e8 7b a8 19 fb b8 f0 ff ff ff e9 b2 fd ff ff e8 6c 71 b3 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 1e 9e 94 05 44 89 e9 80 e1 07 fe c1 38 [ 67.634131][ T5315] RSP: 0018:ffffc9000500fbe0 EFLAGS: 00010293 [ 67.636955][ T5315] RAX: ffffffff861295b4 RBX: 1ffff110086361d9 RCX: ffff888034c0a540 [ 67.641215][ T5315] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 67.644647][ T5315] RBP: ffffc9000500fcd0 R08: ffff888043b92f5f R09: 1ffff110087725eb [ 67.647951][ T5315] R10: dffffc0000000000 R11: ffffed10087725ec R12: ffff8880431b0d00 [ 67.651399][ T5315] R13: 1ffff92000a01f88 R14: dffffc0000000000 R15: 0000000000000001 [ 67.655344][ T5315] FS: 00007f239ebf56c0(0000) GS:ffff88808c883000(0000) knlGS:0000000000000000 [ 67.660208][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.663421][ T5315] CR2: 00007f239ebd3ff8 CR3: 0000000043516000 CR4: 0000000000352ef0 [ 67.667046][ T5315] Call Trace: [ 67.668553][ T5315] [ 67.669928][ T5315] ? __pfx___mutex_lock+0x10/0x10 [ 67.672202][ T5315] ? __pfx_nbd_add_socket+0x10/0x10 [ 67.674523][ T5315] ? bpf_lsm_capable+0x9/0x20 [ 67.676784][ T5315] ? security_capable+0x7e/0x2c0 [ 67.679280][ T5315] nbd_ioctl+0x4c1/0xe50 [ 67.681512][ T5315] ? __pfx_nbd_ioctl+0x10/0x10 [ 67.683646][ T5315] ? lock_release+0x4b/0x3c0 [ 67.685655][ T5315] ? __pfx_nbd_ioctl+0x10/0x10 [ 67.687612][ T5315] blkdev_ioctl+0x5e3/0x740 [ 67.689432][ T5315] ? __pfx_blkdev_ioctl+0x10/0x10 [ 67.691753][ T5315] ? __fget_files+0x2a/0x420 [ 67.694172][ T5315] ? bpf_lsm_file_ioctl+0x9/0x20 [ 67.696451][ T5315] ? __pfx_blkdev_ioctl+0x10/0x10 [ 67.698749][ T5315] __se_sys_ioctl+0xfc/0x170 [ 67.701121][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.703873][ T5315] do_syscall_64+0x174/0x580 [ 67.706018][ T5315] ? trace_irq_disable+0x3b/0x140 [ 67.708707][ T5315] ? clear_bhb_loop+0x40/0x90 [ 67.711242][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.713701][ T5315] RIP: 0033:0x7f23a279ce59 [ 67.715759][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.724690][ T5315] RSP: 002b:00007f239ebf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.728149][ T5315] RAX: ffffffffffffffda RBX: 00007f23a2a15fa0 RCX: 00007f23a279ce59 [ 67.731399][ T5315] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000005 [ 67.734586][ T5315] RBP: 00007f23a2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 67.738321][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.742053][ T5315] R13: 00007f23a2a16038 R14: 00007f23a2a15fa0 R15: 00007ffe9ed25cf8 [ 67.745469][ T5315] [ 67.746865][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 67.749937][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 67.754164][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.758760][ T5315] Call Trace: [ 67.760209][ T5315] [ 67.761450][ T5315] vpanic+0x56c/0xa60 [ 67.763178][ T5315] ? __pfx__printk+0x10/0x10 [ 67.765460][ T5315] ? __pfx_vpanic+0x10/0x10 [ 67.767717][ T5315] ? is_bpf_text_address+0x292/0x2b0 [ 67.770062][ T5315] ? is_bpf_text_address+0x26/0x2b0 [ 67.772180][ T5315] panic+0xc5/0xd0 [ 67.773845][ T5315] ? __pfx_panic+0x10/0x10 [ 67.775746][ T5315] __warn+0x315/0x4c0 [ 67.777611][ T5315] ? nbd_add_socket+0xf35/0x12c0 [ 67.779873][ T5315] ? nbd_add_socket+0xf35/0x12c0 [ 67.782085][ T5315] __report_bug+0x331/0x530 [ 67.784063][ T5315] ? __se_sys_ioctl+0x47/0x170 [ 67.786173][ T5315] ? do_syscall_64+0x174/0x580 [ 67.788632][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.791958][ T5315] ? nbd_add_socket+0xf35/0x12c0 [ 67.794195][ T5315] ? __pfx___report_bug+0x10/0x10 [ 67.796313][ T5315] ? blk_get_meta_cap+0x19d/0x780 [ 67.798441][ T5315] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 67.800768][ T5315] ? __fget_files+0x2a/0x420 [ 67.802998][ T5315] ? nbd_add_socket+0xf35/0x12c0 [ 67.805358][ T5315] report_bug+0x16a/0x220 [ 67.807212][ T5315] ? nbd_add_socket+0xf35/0x12c0 [ 67.809286][ T5315] ? nbd_add_socket+0xf37/0x12c0 [ 67.811320][ T5315] handle_bug+0x9c/0x200 [ 67.813307][ T5315] exc_invalid_op+0x1a/0x50 [ 67.815512][ T5315] asm_exc_invalid_op+0x1a/0x20 [ 67.818048][ T5315] RIP: 0010:nbd_add_socket+0xf35/0x12c0 [ 67.820496][ T5315] Code: f7 e8 7f 53 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 25 55 8c e8 7b a8 19 fb b8 f0 ff ff ff e9 b2 fd ff ff e8 6c 71 b3 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 1e 9e 94 05 44 89 e9 80 e1 07 fe c1 38 [ 67.828917][ T5315] RSP: 0018:ffffc9000500fbe0 EFLAGS: 00010293 [ 67.831722][ T5315] RAX: ffffffff861295b4 RBX: 1ffff110086361d9 RCX: ffff888034c0a540 [ 67.835159][ T5315] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 67.838621][ T5315] RBP: ffffc9000500fcd0 R08: ffff888043b92f5f R09: 1ffff110087725eb [ 67.843036][ T5315] R10: dffffc0000000000 R11: ffffed10087725ec R12: ffff8880431b0d00 [ 67.846536][ T5315] R13: 1ffff92000a01f88 R14: dffffc0000000000 R15: 0000000000000001 [ 67.849992][ T5315] ? nbd_add_socket+0xf34/0x12c0 [ 67.852201][ T5315] ? __pfx___mutex_lock+0x10/0x10 [ 67.854783][ T5315] ? __pfx_nbd_add_socket+0x10/0x10 [ 67.857492][ T5315] ? bpf_lsm_capable+0x9/0x20 [ 67.859681][ T5315] ? security_capable+0x7e/0x2c0 [ 67.861869][ T5315] nbd_ioctl+0x4c1/0xe50 [ 67.863795][ T5315] ? __pfx_nbd_ioctl+0x10/0x10 [ 67.866177][ T5315] ? lock_release+0x4b/0x3c0 [ 67.868621][ T5315] ? __pfx_nbd_ioctl+0x10/0x10 [ 67.871032][ T5315] blkdev_ioctl+0x5e3/0x740 [ 67.873062][ T5315] ? __pfx_blkdev_ioctl+0x10/0x10 [ 67.875334][ T5315] ? __fget_files+0x2a/0x420 [ 67.877502][ T5315] ? bpf_lsm_file_ioctl+0x9/0x20 [ 67.879923][ T5315] ? __pfx_blkdev_ioctl+0x10/0x10 [ 67.882392][ T5315] __se_sys_ioctl+0xfc/0x170 [ 67.884552][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.887238][ T5315] do_syscall_64+0x174/0x580 [ 67.889304][ T5315] ? trace_irq_disable+0x3b/0x140 [ 67.891910][ T5315] ? clear_bhb_loop+0x40/0x90 [ 67.894395][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.896919][ T5315] RIP: 0033:0x7f23a279ce59 [ 67.898874][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.907553][ T5315] RSP: 002b:00007f239ebf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.910780][ T5315] RAX: ffffffffffffffda RBX: 00007f23a2a15fa0 RCX: 00007f23a279ce59 [ 67.914312][ T5315] RDX: 0000000000000004 RSI: 000000000000ab00 RDI: 0000000000000005 [ 67.917854][ T5315] RBP: 00007f23a2832d6f R08: 0000000000000000 R09: 0000000000000000 [ 67.921317][ T5315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.924876][ T5315] R13: 00007f23a2a16038 R14: 00007f23a2a15fa0 R15: 00007ffe9ed25cf8 [ 67.928514][ T5315] [ 67.930357][ T5315] Kernel Offset: disabled [ 67.932337][ T5315] Rebooting in 86400 seconds..