program: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000020600000000000000000000000000000500040000000000050001000700000011000300686173683a69702cf06f7274000000000c000780080012"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 77.086758][ T48] Bluetooth: hci0: command tx timeout [ 77.090656][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.093675][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.353553][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.0'. [ 77.357230][ T5112] netlink: 'syz.0.0': attribute type 15 has an invalid length. [ 77.360318][ T5112] netlink: 'syz.0.0': attribute type 18 has an invalid length. [ 78.165251][ T29] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x55740c39e pfn:0x1fea0 [ 78.176040][ T46] list_add corruption. next->prev should be prev (ffffe8ffffc31c60), but was ffff88803c0a1000. (next=ffff88801fd65000). [ 78.181774][ T46] ------------[ cut here ]------------ [ 78.183961][ T46] kernel BUG at lib/list_debug.c:31! [ 78.186096][ T46] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 78.188928][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u4:3 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 78.193015][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.197355][ T46] Workqueue: zswap1 compact_page_work [ 78.199584][ T46] RIP: 0010:__list_add_valid_or_report+0xd6/0xf0 [ 78.202193][ T46] Code: e8 af 7a fc 06 90 0f 0b 48 c7 c7 a0 8e 60 8c e8 a0 7a fc 06 90 0f 0b 48 c7 c7 00 8f 60 8c 4c 89 e6 4c 89 f1 e8 8b 7a fc 06 90 <0f> 0b 48 c7 c7 80 8f 60 8c 4c 89 f6 4c 89 e1 e8 76 7a fc 06 90 0f [ 78.209761][ T46] RSP: 0000:ffffc9000060fad0 EFLAGS: 00010246 [ 78.211598][ T46] RAX: 0000000000000075 RBX: ffff88801fd65008 RCX: c9fdeb5c17a6f400 [ 78.213879][ T46] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 78.216816][ T46] RBP: ffffe8ffffc31c60 R08: ffffffff817401bc R09: 1ffff920000c1ef8 [ 78.219990][ T46] R10: dffffc0000000000 R11: fffff520000c1ef9 R12: ffffe8ffffc31c60 [ 78.223233][ T46] R13: dffffc0000000000 R14: ffff88801fd65000 R15: ffff88801fea0000 [ 78.226446][ T46] FS: 0000000000000000(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000 [ 78.229940][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.232322][ T46] CR2: 00007f82ae50103f CR3: 0000000012332000 CR4: 0000000000350ef0 [ 78.235234][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.238269][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.240971][ T46] Call Trace: [ 78.242123][ T46] [ 78.243397][ T46] ? __die_body+0x88/0xe0 [ 78.245119][ T46] ? die+0xcf/0x110 [ 78.246812][ T46] ? do_trap+0x15a/0x3a0 [ 78.248565][ T46] ? __list_add_valid_or_report+0xd6/0xf0 [ 78.250739][ T46] ? do_error_trap+0x1dc/0x2c0 [ 78.252594][ T46] ? __list_add_valid_or_report+0xd6/0xf0 [ 78.254791][ T46] ? __pfx_do_error_trap+0x10/0x10 [ 78.256911][ T46] ? handle_invalid_op+0x34/0x40 [ 78.258905][ T46] ? __list_add_valid_or_report+0xd6/0xf0 [ 78.261005][ T46] ? exc_invalid_op+0x38/0x50 [ 78.262825][ T46] ? asm_exc_invalid_op+0x1a/0x20 [ 78.264768][ T46] ? __wake_up_klogd+0xcc/0x110 [ 78.266700][ T46] ? __list_add_valid_or_report+0xd6/0xf0 [ 78.268853][ T46] add_to_unbuddied+0x2e4/0x4d0 [ 78.270630][ T46] do_compact_page+0x924/0xc50 [ 78.272125][ T46] ? process_scheduled_works+0x945/0x1830 [ 78.273984][ T46] process_scheduled_works+0xa2c/0x1830 [ 78.276019][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 78.278315][ T46] ? assign_work+0x364/0x3d0 [ 78.280186][ T46] worker_thread+0x86d/0xd10 [ 78.282151][ T46] ? __kthread_parkme+0x169/0x1d0 [ 78.284124][ T46] ? __pfx_worker_thread+0x10/0x10 [ 78.286079][ T46] kthread+0x2f0/0x390 [ 78.287697][ T46] ? __pfx_worker_thread+0x10/0x10 [ 78.289716][ T46] ? __pfx_kthread+0x10/0x10 [ 78.291583][ T46] ret_from_fork+0x4b/0x80 [ 78.293314][ T46] ? __pfx_kthread+0x10/0x10 [ 78.295105][ T46] ret_from_fork_asm+0x1a/0x30 [ 78.296934][ T46] [ 78.298029][ T46] Modules linked in: [ 78.299924][ T46] ---[ end trace 0000000000000000 ]--- [ 78.301409][ T46] RIP: 0010:__list_add_valid_or_report+0xd6/0xf0 [ 78.303541][ T46] Code: e8 af 7a fc 06 90 0f 0b 48 c7 c7 a0 8e 60 8c e8 a0 7a fc 06 90 0f 0b 48 c7 c7 00 8f 60 8c 4c 89 e6 4c 89 f1 e8 8b 7a fc 06 90 <0f> 0b 48 c7 c7 80 8f 60 8c 4c 89 f6 4c 89 e1 e8 76 7a fc 06 90 0f [ 78.310156][ T46] RSP: 0000:ffffc9000060fad0 EFLAGS: 00010246 [ 78.312245][ T46] RAX: 0000000000000075 RBX: ffff88801fd65008 RCX: c9fdeb5c17a6f400 [ 78.314905][ T46] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 78.317898][ T46] RBP: ffffe8ffffc31c60 R08: ffffffff817401bc R09: 1ffff920000c1ef8 [ 78.320990][ T46] R10: dffffc0000000000 R11: fffff520000c1ef9 R12: ffffe8ffffc31c60 [ 78.324059][ T46] R13: dffffc0000000000 R14: ffff88801fd65000 R15: ffff88801fea0000 [ 78.327053][ T46] FS: 0000000000000000(0000) GS:ffff88801fe00000(0000) knlGS:0000000000000000 [ 78.330214][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.332409][ T46] CR2: 00007f82ae50103f CR3: 0000000012332000 CR4: 0000000000350ef0 [ 78.334956][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.337682][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.340346][ T46] Kernel panic - not syncing: Fatal exception [ 78.342571][ T46] Kernel Offset: disabled [ 78.344076][ T46] Rebooting in 86400 seconds..