program: arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet(r0, &(0x7f0000000080)="f4f06c", 0x3, 0xe010, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_USERDATA={0x81, 0xd, 0x1, 0x0, "5a187ec6c3ac043b9f10acaedf6b56b9bb103ac1a859ed92d4b1c988b422936f120ca534a5dc8252a35903c0d9eb66b2408511d6568426ecbb9ef6c920c670b11d3cd5a9d38af780b189b39c7af1887582b4b927334f81fb900d90436a63cea80d93550a8e84e80740ed7b46751f3e2be15baaef2d4c8a1edc51d8055a"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe3ed}]}, @NFT_MSG_NEWSET={0x170, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_USERDATA={0x46, 0xd, 0x1, 0x0, "2b81fd44ff8e8de5db5c6d0f7bc7e180b63760d172a8a55acea46bbdd9a919577fd49ab5a100ebd09395f0d71d44236d32378c49dd2bf24d3d8fee4053110ae964ae"}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xfb, 0xd, 0x1, 0x0, "d094307fee4a174bcdc1d5f329d07c3af4c6d87c61c7a4d8a834f10d2ac3bae26cdac83efd31608de97fb19444b9d551f63c43fd91a243467a2e958dc150a8813afa4c46b8372ad8dcc5e8a0ecd907e5763c4f1b28346605dee594cde3ff750aca11d9077a94d74566d4b7ac6daf2afee5930ee1b65ad4af0e495782a274c47a42c6aa1610aa8cae1b4296672276afb5b65f7214a5739532b734f25f332745ce52ef8623785c92bb1fb00029cf2c09d9535918013022830d001e533075e0fc97e533b79f256c2b7d9be75dbc82c3619ba4ac986764ab2c7e758ee5941c55c7545bc32bf0cac108e376b98bb71788e134c61139b63b6f3d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2c0}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, r6}, 0x14) [ 70.620469][ T4533] Bluetooth: hci0: command tx timeout [ 70.740458][ T5108] hsr_slave_0: left promiscuous mode [ 70.743456][ T5108] hsr_slave_1: left promiscuous mode [ 71.143218][ T29] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x55a51d60c pfn:0x11a19 [ 71.150651][ T2905] list_add corruption. next->prev should be prev (ffffe8ffffc31ed0), but was ffff8880354f5000. (next=ffff88801aa39400). [ 71.157281][ T2905] ------------[ cut here ]------------ [ 71.159884][ T2905] kernel BUG at lib/list_debug.c:31! [ 71.162247][ T2905] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 71.165081][ T2905] CPU: 0 UID: 0 PID: 2905 Comm: kworker/u4:10 Not tainted 6.12.0-rc1-syzkaller #0 [ 71.168669][ T2905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.173064][ T2905] Workqueue: zswap1 compact_page_work [ 71.175657][ T2905] RIP: 0010:__list_add_valid_or_report+0xd6/0xf0 [ 71.178831][ T2905] Code: e8 6f 08 00 07 90 0f 0b 48 c7 c7 00 f9 60 8c e8 60 08 00 07 90 0f 0b 48 c7 c7 60 f9 60 8c 4c 89 e6 4c 89 f1 e8 4b 08 00 07 90 <0f> 0b 48 c7 c7 e0 f9 60 8c 4c 89 f6 4c 89 e1 e8 36 08 00 07 90 0f [ 71.186832][ T2905] RSP: 0000:ffffc9000c497ad0 EFLAGS: 00010246 [ 71.189340][ T2905] RAX: 0000000000000075 RBX: ffff88801aa39408 RCX: da664adfef8a5100 [ 71.192437][ T2905] RDX: 0000000000000000 RSI: 0000000080000002 RDI: 0000000000000000 [ 71.195264][ T2905] RBP: ffffe8ffffc31ed0 R08: ffffffff81749dec R09: 1ffff92001892ef4 [ 71.198397][ T2905] R10: dffffc0000000000 R11: fffff52001892ef5 R12: ffffe8ffffc31ed0 [ 71.201639][ T2905] R13: dffffc0000000000 R14: ffff88801aa39400 R15: ffff888011a19000 [ 71.204558][ T2905] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 71.207875][ T2905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.210457][ T2905] CR2: 00007f01a6997768 CR3: 000000003f8a4000 CR4: 0000000000352ef0 [ 71.214062][ T2905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.217314][ T2905] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.220443][ T2905] Call Trace: [ 71.221784][ T2905] [ 71.222972][ T2905] ? __die_body+0x5f/0xb0 [ 71.224705][ T2905] ? die+0x9e/0xc0 [ 71.226088][ T2905] ? do_trap+0x15a/0x3a0 [ 71.227765][ T2905] ? __list_add_valid_or_report+0xd6/0xf0 [ 71.229883][ T2905] ? do_error_trap+0x1dc/0x2c0 [ 71.232088][ T2905] ? __list_add_valid_or_report+0xd6/0xf0 [ 71.234886][ T2905] ? __pfx_do_error_trap+0x10/0x10 [ 71.236931][ T2905] ? handle_invalid_op+0x34/0x40 [ 71.238871][ T2905] ? __list_add_valid_or_report+0xd6/0xf0 [ 71.240968][ T2905] ? exc_invalid_op+0x38/0x50 [ 71.242811][ T2905] ? asm_exc_invalid_op+0x1a/0x20 [ 71.244718][ T2905] ? __wake_up_klogd+0xcc/0x110 [ 71.246632][ T2905] ? __list_add_valid_or_report+0xd6/0xf0 [ 71.248943][ T2905] add_to_unbuddied+0x2e4/0x4d0 [ 71.251486][ T2905] do_compact_page+0x924/0xc50 [ 71.253878][ T2905] ? process_scheduled_works+0x976/0x1850 [ 71.256219][ T2905] process_scheduled_works+0xa63/0x1850 [ 71.258359][ T2905] ? __pfx_process_scheduled_works+0x10/0x10 [ 71.260741][ T2905] ? assign_work+0x364/0x3d0 [ 71.262419][ T2905] worker_thread+0x870/0xd30 [ 71.264068][ T2905] ? __kthread_parkme+0x169/0x1d0 [ 71.265851][ T2905] ? __pfx_worker_thread+0x10/0x10 [ 71.267473][ T2905] kthread+0x2f0/0x390 [ 71.269032][ T2905] ? __pfx_worker_thread+0x10/0x10 [ 71.271011][ T2905] ? __pfx_kthread+0x10/0x10 [ 71.272714][ T2905] ret_from_fork+0x4b/0x80 [ 71.274499][ T2905] ? __pfx_kthread+0x10/0x10 [ 71.276188][ T2905] ret_from_fork_asm+0x1a/0x30 [ 71.277917][ T2905] [ 71.279052][ T2905] Modules linked in: [ 71.280941][ T2905] ---[ end trace 0000000000000000 ]--- [ 71.283075][ T2905] RIP: 0010:__list_add_valid_or_report+0xd6/0xf0 [ 71.286070][ T2905] Code: e8 6f 08 00 07 90 0f 0b 48 c7 c7 00 f9 60 8c e8 60 08 00 07 90 0f 0b 48 c7 c7 60 f9 60 8c 4c 89 e6 4c 89 f1 e8 4b 08 00 07 90 <0f> 0b 48 c7 c7 e0 f9 60 8c 4c 89 f6 4c 89 e1 e8 36 08 00 07 90 0f [ 71.294541][ T2905] RSP: 0000:ffffc9000c497ad0 EFLAGS: 00010246 [ 71.296934][ T2905] RAX: 0000000000000075 RBX: ffff88801aa39408 RCX: da664adfef8a5100 [ 71.300163][ T2905] RDX: 0000000000000000 RSI: 0000000080000002 RDI: 0000000000000000 [ 71.303659][ T2905] RBP: ffffe8ffffc31ed0 R08: ffffffff81749dec R09: 1ffff92001892ef4 [ 71.307714][ T2905] R10: dffffc0000000000 R11: fffff52001892ef5 R12: ffffe8ffffc31ed0 [ 71.310822][ T2905] R13: dffffc0000000000 R14: ffff88801aa39400 R15: ffff888011a19000 [ 71.313942][ T2905] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 71.317425][ T2905] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.320111][ T2905] CR2: 00007f01a6997768 CR3: 000000003f8a4000 CR4: 0000000000352ef0 [ 71.323870][ T2905] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.327356][ T2905] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.330505][ T2905] Kernel panic - not syncing: Fatal exception [ 71.332983][ T2905] Kernel Offset: disabled [ 71.334546][ T2905] Rebooting in 86400 seconds..