program: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x9}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) [ 76.875616][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.878499][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.882152][ T4702] Bluetooth: hci0: command tx timeout [ 76.936054][ T5354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.939413][ T5354] IPv6: NLM_F_CREATE should be set when creating new route [ 76.942555][ T5354] IPv6: NLM_F_CREATE should be set when creating new route [ 76.957444][ T5354] ------------[ cut here ]------------ [ 76.959903][ T5354] WARNING: CPU: 0 PID: 5354 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080 [ 76.964720][ T5354] Modules linked in: [ 76.966535][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.970554][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.975689][ T5354] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 76.978230][ T5354] Code: fa be 02 00 00 00 eb 0a e8 25 77 a6 fa be 01 00 00 00 4c 89 f7 e8 68 8d b0 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 09 77 a6 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 76.986879][ T5354] RSP: 0018:ffffc9000d3bf008 EFLAGS: 00010283 [ 76.989509][ T5354] RAX: ffffffff87194787 RBX: 0000000000000002 RCX: 0000000000100000 [ 76.992985][ T5354] RDX: ffffc9000df7a000 RSI: 0000000000001b63 RDI: 0000000000001b64 [ 76.996644][ T5354] RBP: dffffc0000000000 R08: ffff888011a5d02f R09: 1ffff1100234ba05 [ 76.999921][ T5354] R10: dffffc0000000000 R11: ffffed100234ba06 R12: ffff888052bd1000 [ 77.003159][ T5354] R13: ffffc9000d3bf180 R14: 0000000000000001 R15: ffffc9000d3bf198 [ 77.006731][ T5354] FS: 00007fbc2e4df6c0(0000) GS:ffff88808d20c000(0000) knlGS:0000000000000000 [ 77.010621][ T5354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.013626][ T5354] CR2: 0000200000002000 CR3: 0000000042927000 CR4: 0000000000352ef0 [ 77.016863][ T5354] Call Trace: [ 77.018317][ T5354] [ 77.019672][ T5354] notifier_call_chain+0x1b3/0x3e0 [ 77.022849][ T5354] ? atomic_notifier_call_chain+0x26/0x180 [ 77.025526][ T5354] atomic_notifier_call_chain+0xda/0x180 [ 77.028182][ T5354] call_fib_notifiers+0x31/0x60 [ 77.030508][ T5354] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 77.033823][ T5354] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 77.037030][ T5354] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 77.039318][ T5354] inet6_rtm_newroute+0x12f5/0x18c0 [ 77.041678][ T5354] ? nlmon_xmit+0xb0/0x100 [ 77.043822][ T5354] ? kmem_cache_free+0x18f/0x400 [ 77.045958][ T5354] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 77.048397][ T5354] ? __local_bh_enable_ip+0x12d/0x1c0 [ 77.050687][ T5354] ? __dev_queue_xmit+0x27b/0x3b50 [ 77.052979][ T5354] ? __dev_queue_xmit+0x1d79/0x3b50 [ 77.055427][ T5354] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 77.057885][ T5354] rtnetlink_rcv_msg+0x7cf/0xb70 [ 77.060071][ T5354] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 77.062370][ T5354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.064820][ T5354] ? ref_tracker_free+0x63a/0x7d0 [ 77.067004][ T5354] ? __asan_memcpy+0x40/0x70 [ 77.069016][ T5354] ? __pfx_ref_tracker_free+0x10/0x10 [ 77.071294][ T5354] ? __skb_clone+0x63/0x7a0 [ 77.073224][ T5354] netlink_rcv_skb+0x205/0x470 [ 77.075821][ T5354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.078278][ T5354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.080679][ T5354] ? netlink_deliver_tap+0x2e/0x1b0 [ 77.082979][ T5354] netlink_unicast+0x82f/0x9e0 [ 77.085477][ T5354] ? __pfx_netlink_unicast+0x10/0x10 [ 77.087871][ T5354] ? netlink_sendmsg+0x642/0xb30 [ 77.090079][ T5354] ? skb_put+0x11b/0x210 [ 77.091995][ T5354] netlink_sendmsg+0x805/0xb30 [ 77.094356][ T5354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.096687][ T5354] ? aa_sock_msg_perm+0xf1/0x1d0 [ 77.098767][ T5354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 77.101124][ T5354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.103668][ T5354] __sock_sendmsg+0x21c/0x270 [ 77.105770][ T5354] ____sys_sendmsg+0x505/0x830 [ 77.107981][ T5354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.110352][ T5354] ? import_iovec+0x74/0xa0 [ 77.112406][ T5354] ___sys_sendmsg+0x21f/0x2a0 [ 77.114745][ T5354] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.117165][ T5354] ? __fget_files+0x2a/0x420 [ 77.119209][ T5354] ? __fget_files+0x3a0/0x420 [ 77.121220][ T5354] __x64_sys_sendmsg+0x19b/0x260 [ 77.123461][ T5354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 77.125867][ T5354] ? rcu_is_watching+0x15/0xb0 [ 77.128030][ T5354] ? do_syscall_64+0xbe/0x3b0 [ 77.130172][ T5354] do_syscall_64+0xfa/0x3b0 [ 77.132182][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.134554][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.137251][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 77.139322][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.141931][ T5354] RIP: 0033:0x7fbc2d58ebe9 [ 77.144040][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.152262][ T5354] RSP: 002b:00007fbc2e4df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.155873][ T5354] RAX: ffffffffffffffda RBX: 00007fbc2d7c5fa0 RCX: 00007fbc2d58ebe9 [ 77.159474][ T5354] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 77.162986][ T5354] RBP: 00007fbc2d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 77.166529][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.170019][ T5354] R13: 00007fbc2d7c6038 R14: 00007fbc2d7c5fa0 R15: 00007ffd6696c258 [ 77.173735][ T5354] [ 77.175143][ T5354] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.178430][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.182360][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.186899][ T5354] Call Trace: [ 77.188424][ T5354] [ 77.189770][ T5354] dump_stack_lvl+0x99/0x250 [ 77.191776][ T5354] ? __asan_memcpy+0x40/0x70 [ 77.193760][ T5354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.195982][ T5354] ? __pfx__printk+0x10/0x10 [ 77.197955][ T5354] vpanic+0x281/0x750 [ 77.199713][ T5354] ? __pfx__printk+0x10/0x10 [ 77.201689][ T5354] ? __pfx_vpanic+0x10/0x10 [ 77.203687][ T5354] ? is_bpf_text_address+0x26/0x2b0 [ 77.205939][ T5354] panic+0xb9/0xc0 [ 77.207886][ T5354] ? __pfx_panic+0x10/0x10 [ 77.209993][ T5354] __warn+0x31b/0x4b0 [ 77.211803][ T5354] ? nsim_fib_event_nb+0xed8/0x1080 [ 77.214148][ T5354] ? nsim_fib_event_nb+0xed8/0x1080 [ 77.216579][ T5354] report_bug+0x2be/0x4f0 [ 77.218569][ T5354] ? nsim_fib_event_nb+0xed8/0x1080 [ 77.220905][ T5354] ? nsim_fib_event_nb+0xed8/0x1080 [ 77.223137][ T5354] ? nsim_fib_event_nb+0xeda/0x1080 [ 77.225230][ T5354] handle_bug+0x84/0x160 [ 77.226996][ T5354] exc_invalid_op+0x1a/0x50 [ 77.228846][ T5354] asm_exc_invalid_op+0x1a/0x20 [ 77.230848][ T5354] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 77.233247][ T5354] Code: fa be 02 00 00 00 eb 0a e8 25 77 a6 fa be 01 00 00 00 4c 89 f7 e8 68 8d b0 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 09 77 a6 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 77.241024][ T5354] RSP: 0018:ffffc9000d3bf008 EFLAGS: 00010283 [ 77.243683][ T5354] RAX: ffffffff87194787 RBX: 0000000000000002 RCX: 0000000000100000 [ 77.247141][ T5354] RDX: ffffc9000df7a000 RSI: 0000000000001b63 RDI: 0000000000001b64 [ 77.250477][ T5354] RBP: dffffc0000000000 R08: ffff888011a5d02f R09: 1ffff1100234ba05 [ 77.253990][ T5354] R10: dffffc0000000000 R11: ffffed100234ba06 R12: ffff888052bd1000 [ 77.257476][ T5354] R13: ffffc9000d3bf180 R14: 0000000000000001 R15: ffffc9000d3bf198 [ 77.261457][ T5354] ? nsim_fib_event_nb+0xed7/0x1080 [ 77.263750][ T5354] ? nsim_fib_event_nb+0xed7/0x1080 [ 77.266046][ T5354] notifier_call_chain+0x1b3/0x3e0 [ 77.268296][ T5354] ? atomic_notifier_call_chain+0x26/0x180 [ 77.270766][ T5354] atomic_notifier_call_chain+0xda/0x180 [ 77.273204][ T5354] call_fib_notifiers+0x31/0x60 [ 77.275331][ T5354] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 77.278126][ T5354] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 77.281160][ T5354] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 77.283521][ T5354] inet6_rtm_newroute+0x12f5/0x18c0 [ 77.285743][ T5354] ? nlmon_xmit+0xb0/0x100 [ 77.287720][ T5354] ? kmem_cache_free+0x18f/0x400 [ 77.289809][ T5354] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 77.292342][ T5354] ? __local_bh_enable_ip+0x12d/0x1c0 [ 77.294715][ T5354] ? __dev_queue_xmit+0x27b/0x3b50 [ 77.296962][ T5354] ? __dev_queue_xmit+0x1d79/0x3b50 [ 77.299226][ T5354] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 77.301582][ T5354] rtnetlink_rcv_msg+0x7cf/0xb70 [ 77.303809][ T5354] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 77.305934][ T5354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.308182][ T5354] ? ref_tracker_free+0x63a/0x7d0 [ 77.310139][ T5354] ? __asan_memcpy+0x40/0x70 [ 77.311928][ T5354] ? __pfx_ref_tracker_free+0x10/0x10 [ 77.314032][ T5354] ? __skb_clone+0x63/0x7a0 [ 77.315857][ T5354] netlink_rcv_skb+0x205/0x470 [ 77.317774][ T5354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.319999][ T5354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.322156][ T5354] ? netlink_deliver_tap+0x2e/0x1b0 [ 77.324373][ T5354] netlink_unicast+0x82f/0x9e0 [ 77.326435][ T5354] ? __pfx_netlink_unicast+0x10/0x10 [ 77.328765][ T5354] ? netlink_sendmsg+0x642/0xb30 [ 77.330858][ T5354] ? skb_put+0x11b/0x210 [ 77.332698][ T5354] netlink_sendmsg+0x805/0xb30 [ 77.334738][ T5354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.337034][ T5354] ? aa_sock_msg_perm+0xf1/0x1d0 [ 77.339102][ T5354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 77.341307][ T5354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.343583][ T5354] __sock_sendmsg+0x21c/0x270 [ 77.345624][ T5354] ____sys_sendmsg+0x505/0x830 [ 77.347677][ T5354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.349975][ T5354] ? import_iovec+0x74/0xa0 [ 77.351955][ T5354] ___sys_sendmsg+0x21f/0x2a0 [ 77.353986][ T5354] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.356799][ T5354] ? __fget_files+0x2a/0x420 [ 77.358794][ T5354] ? __fget_files+0x3a0/0x420 [ 77.360878][ T5354] __x64_sys_sendmsg+0x19b/0x260 [ 77.363088][ T5354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 77.365458][ T5354] ? rcu_is_watching+0x15/0xb0 [ 77.367582][ T5354] ? do_syscall_64+0xbe/0x3b0 [ 77.369651][ T5354] do_syscall_64+0xfa/0x3b0 [ 77.371641][ T5354] ? lockdep_hardirqs_on+0x9c/0x150 [ 77.373894][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.376700][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 77.378957][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.381545][ T5354] RIP: 0033:0x7fbc2d58ebe9 [ 77.383159][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.390992][ T5354] RSP: 002b:00007fbc2e4df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.394484][ T5354] RAX: ffffffffffffffda RBX: 00007fbc2d7c5fa0 RCX: 00007fbc2d58ebe9 [ 77.397897][ T5354] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 77.401249][ T5354] RBP: 00007fbc2d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 77.404620][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.408029][ T5354] R13: 00007fbc2d7c6038 R14: 00007fbc2d7c5fa0 R15: 00007ffd6696c258 [ 77.411866][ T5354] [ 77.413614][ T5354] Kernel Offset: disabled [ 77.415254][ T5354] Rebooting in 86400 seconds..