program: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @result}], 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r3, 0x3, r2, 0xffffffff}) r4 = openat$ipvs(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x5f, 0x30, 0x30, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000140)=""/17, 0x21, 0x11, 0x0, 0x80000, 0x10000, @value=r4}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001bc0)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000200)={'veth0_to_batadv\x00', {0x2, 0x4e21, @multicast2}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400210010003b154b5aa8ee008d2dc2ee2f9213000000000000000000000000f43dc2097c884af42261018f7d29cec1fe9d0cbf73a5eb09ac6a5b58ce047a81b992579b8df3a9a8b32eb7544f08e65b4e1f89c8fa89ffc8b1b5fc9da790325d9b", @ANYRESHEX=r5, @ANYBLOB="0000000000b5a00024000014000280040003000000001b79c1855e00000000"], 0x44}}, 0x14) [ 70.620146][ T4533] Bluetooth: hci0: command tx timeout [ 71.151792][ T29] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x27a pfn:0x11a0f [ 71.156794][ T2905] list_add corruption. next->prev should be prev (ffffe8ffffc31ed0), but was ffff8880354f5000. (next=ffff88801aa39400). [ 71.164889][ T2905] ------------[ cut here ]------------ [ 71.167479][ T2905] kernel BUG at lib/list_debug.c:31! [ 71.169766][ T2905] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 71.172663][ T2905] CPU: 0 UID: 0 PID: 2905 Comm: kworker/u4:10 Not tainted 6.12.0-rc1-syzkaller #0 [ 71.176038][ T2905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.179915][ T2905] Workqueue: zswap1 compact_page_work [ 71.181940][ T2905] RIP: 0010:__list_add_valid_or_report+0xd6/0xf0 [ 71.184521][ T2905] Code: e8 6f 08 00 07 90 0f 0b 48 c7 c7 00 f9 60 8c e8 60 08 00 07 90 0f 0b 48 c7 c7 60 f9 60 8c 4c 89 e6 4c 89 f1 e8 4b 08 00 07 90 <0f> 0b 48 c7 c7 e0 f9 60 8c 4c 89 f6 4c 89 e1 e8 36 08 00 07 90 0f [ 71.193153][ T2905] RSP: 0018:ffffc9000c497ad0 EFLAGS: 00010246 [ 71.195573][ T2905] RAX: 0000000000000075 RBX: ffff88801aa39408 RCX: da664adfef8a5100 [ 71.198734][ T2905] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 71.202312][ T2905] RBP: ffffe8ffffc31ed0 R08: ffffffff81749dec R09: 1ffff92001892ef4 [ 71.205807][ T2905] R10: dffffc0000000000 R11: fffff52001892ef5 R12: ffffe8ffffc31ed0 [ 71.208972][ T2905] R13: dffffc0000000000 R14: ffff88801aa39400 R15: ffff888011a0f000 [ 71.212102][ T2905] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 71.215557][ T2905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.218574][ T2905] CR2: 00007f01a6b44348 CR3: 000000003f8a4000 CR4: 0000000000352ef0 [ 71.222704][ T2905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.225850][ T2905] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.228924][ T2905] Call Trace: [ 71.230300][ T2905] [ 71.231488][ T2905] ? __die_body+0x5f/0xb0 [ 71.233271][ T2905] ? die+0x9e/0xc0 [ 71.234737][ T2905] ? do_trap+0x15a/0x3a0 [ 71.236596][ T2905] ? __list_add_valid_or_report+0xd6/0xf0 [ 71.239643][ T2905] ? do_error_trap+0x1dc/0x2c0 [ 71.241857][ T2905] ? __list_add_valid_or_report+0xd6/0xf0 [ 71.244203][ T2905] ? __pfx_do_error_trap+0x10/0x10 [ 71.246288][ T2905] ? handle_invalid_op+0x34/0x40 [ 71.248415][ T2905] ? __list_add_valid_or_report+0xd6/0xf0 [ 71.250777][ T2905] ? exc_invalid_op+0x38/0x50 [ 71.252769][ T2905] ? asm_exc_invalid_op+0x1a/0x20 [ 71.254838][ T2905] ? __wake_up_klogd+0xcc/0x110 [ 71.257622][ T2905] ? __list_add_valid_or_report+0xd6/0xf0 [ 71.260826][ T2905] add_to_unbuddied+0x2e4/0x4d0 [ 71.263058][ T2905] do_compact_page+0x924/0xc50 [ 71.265000][ T2905] ? process_scheduled_works+0x976/0x1850 [ 71.267250][ T2905] process_scheduled_works+0xa63/0x1850 [ 71.269358][ T2905] ? __pfx_process_scheduled_works+0x10/0x10 [ 71.271763][ T2905] ? assign_work+0x364/0x3d0 [ 71.273606][ T2905] worker_thread+0x870/0xd30 [ 71.275509][ T2905] ? __kthread_parkme+0x169/0x1d0 [ 71.277655][ T2905] ? __pfx_worker_thread+0x10/0x10 [ 71.280143][ T2905] kthread+0x2f0/0x390 [ 71.282158][ T2905] ? __pfx_worker_thread+0x10/0x10 [ 71.284201][ T2905] ? __pfx_kthread+0x10/0x10 [ 71.286039][ T2905] ret_from_fork+0x4b/0x80 [ 71.287841][ T2905] ? __pfx_kthread+0x10/0x10 [ 71.289709][ T2905] ret_from_fork_asm+0x1a/0x30 [ 71.291620][ T2905] [ 71.292862][ T2905] Modules linked in: [ 71.295797][ T2905] ---[ end trace 0000000000000000 ]--- [ 71.299058][ T2905] RIP: 0010:__list_add_valid_or_report+0xd6/0xf0 [ 71.301749][ T2905] Code: e8 6f 08 00 07 90 0f 0b 48 c7 c7 00 f9 60 8c e8 60 08 00 07 90 0f 0b 48 c7 c7 60 f9 60 8c 4c 89 e6 4c 89 f1 e8 4b 08 00 07 90 <0f> 0b 48 c7 c7 e0 f9 60 8c 4c 89 f6 4c 89 e1 e8 36 08 00 07 90 0f [ 71.309582][ T2905] RSP: 0018:ffffc9000c497ad0 EFLAGS: 00010246 [ 71.312069][ T2905] RAX: 0000000000000075 RBX: ffff88801aa39408 RCX: da664adfef8a5100 [ 71.315447][ T2905] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 71.319481][ T2905] RBP: ffffe8ffffc31ed0 R08: ffffffff81749dec R09: 1ffff92001892ef4 [ 71.322994][ T2905] R10: dffffc0000000000 R11: fffff52001892ef5 R12: ffffe8ffffc31ed0 [ 71.326199][ T2905] R13: dffffc0000000000 R14: ffff88801aa39400 R15: ffff888011a0f000 [ 71.329505][ T2905] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 71.333130][ T2905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.336275][ T2905] CR2: 00007f01a6b44348 CR3: 000000003f8a4000 CR4: 0000000000352ef0 [ 71.340119][ T2905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.343443][ T2905] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.346645][ T2905] Kernel panic - not syncing: Fatal exception [ 71.349435][ T2905] Kernel Offset: disabled [ 71.351189][ T2905] Rebooting in 86400 seconds..