program: mkdir(&(0x7f00000001c0)='./file1\x00', 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) [ 86.535951][ T5306] Bluetooth: hci0: command tx timeout [ 86.576979][ T5327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.580984][ T5327] IPv6: NLM_F_CREATE should be set when creating new route [ 86.592748][ T5327] IPv6: NLM_F_CREATE should be set when creating new route [ 86.616589][ T5327] ------------[ cut here ]------------ [ 86.618697][ T5327] WARNING: CPU: 0 PID: 5327 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080 [ 86.622760][ T5327] Modules linked in: [ 86.624483][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.628398][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.633649][ T5327] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 86.637189][ T5327] Code: fa be 02 00 00 00 eb 0a e8 a5 88 d9 fa be 01 00 00 00 4c 89 f7 e8 28 5c ab fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 89 88 d9 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 86.645834][ T5327] RSP: 0018:ffffc9000d397008 EFLAGS: 00010283 [ 86.648614][ T5327] RAX: ffffffff86e61b17 RBX: 0000000000000002 RCX: 0000000000100000 [ 86.652043][ T5327] RDX: ffffc9000e072000 RSI: 00000000000011f3 RDI: 00000000000011f4 [ 86.655595][ T5327] RBP: dffffc0000000000 R08: ffff888000e8dc2f R09: 1ffff110001d1b85 [ 86.658948][ T5327] R10: dffffc0000000000 R11: ffffed10001d1b86 R12: ffff888033436000 [ 86.662293][ T5327] R13: ffffc9000d397180 R14: 0000000000000001 R15: ffffc9000d397198 [ 86.665858][ T5327] FS: 00007fb04aec36c0(0000) GS:ffff88808d306000(0000) knlGS:0000000000000000 [ 86.669829][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.672675][ T5327] CR2: 0000000000000000 CR3: 0000000011515000 CR4: 0000000000352ef0 [ 86.676120][ T5327] Call Trace: [ 86.677682][ T5327] [ 86.678998][ T5327] notifier_call_chain+0x1b6/0x3e0 [ 86.681108][ T5327] ? atomic_notifier_call_chain+0x26/0x180 [ 86.683601][ T5327] atomic_notifier_call_chain+0xda/0x180 [ 86.686038][ T5327] call_fib_notifiers+0x31/0x60 [ 86.688180][ T5327] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 86.690951][ T5327] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 86.693949][ T5327] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 86.696460][ T5327] inet6_rtm_newroute+0x12f5/0x18c0 [ 86.698790][ T5327] ? kmem_cache_free+0x19b/0x690 [ 86.701030][ T5327] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 86.703357][ T5327] ? __local_bh_enable_ip+0x12d/0x1c0 [ 86.705764][ T5327] ? __dev_queue_xmit+0x27b/0x3b50 [ 86.707980][ T5327] ? __dev_queue_xmit+0x1d79/0x3b50 [ 86.710181][ T5327] ? kasan_save_track+0x3e/0x80 [ 86.712357][ T5327] ? __kasan_slab_alloc+0x6c/0x80 [ 86.714852][ T5327] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 86.717629][ T5327] rtnetlink_rcv_msg+0x7cc/0xb70 [ 86.719896][ T5327] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 86.722125][ T5327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.724559][ T5327] ? ref_tracker_free+0x63a/0x7d0 [ 86.726749][ T5327] ? __asan_memcpy+0x40/0x70 [ 86.728644][ T5327] ? __pfx_ref_tracker_free+0x10/0x10 [ 86.730792][ T5327] ? __skb_clone+0x63/0x7a0 [ 86.732629][ T5327] netlink_rcv_skb+0x205/0x470 [ 86.734594][ T5327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.736916][ T5327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.738936][ T5327] ? netlink_deliver_tap+0x2e/0x1b0 [ 86.740893][ T5327] netlink_unicast+0x82c/0x9e0 [ 86.742953][ T5327] ? __pfx_netlink_unicast+0x10/0x10 [ 86.745361][ T5327] ? netlink_sendmsg+0x642/0xb30 [ 86.747582][ T5327] ? skb_put+0x11b/0x210 [ 86.749506][ T5327] netlink_sendmsg+0x805/0xb30 [ 86.751639][ T5327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.753834][ T5327] ? aa_sock_msg_perm+0xf1/0x1d0 [ 86.756069][ T5327] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 86.758297][ T5327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.760590][ T5327] __sock_sendmsg+0x219/0x270 [ 86.762548][ T5327] ____sys_sendmsg+0x505/0x830 [ 86.764578][ T5327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.767046][ T5327] ? import_iovec+0x74/0xa0 [ 86.769059][ T5327] ___sys_sendmsg+0x21f/0x2a0 [ 86.771067][ T5327] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.773321][ T5327] ? __fget_files+0x2a/0x420 [ 86.775308][ T5327] ? __fget_files+0x3a0/0x420 [ 86.777473][ T5327] __x64_sys_sendmsg+0x19b/0x260 [ 86.779655][ T5327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 86.782018][ T5327] ? do_syscall_64+0xbe/0xfa0 [ 86.784425][ T5327] do_syscall_64+0xfa/0xfa0 [ 86.786475][ T5327] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.788740][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.791370][ T5327] ? clear_bhb_loop+0x60/0xb0 [ 86.793424][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.796369][ T5327] RIP: 0033:0x7fb049f8eec9 [ 86.797992][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.805526][ T5327] RSP: 002b:00007fb04aec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.808517][ T5327] RAX: ffffffffffffffda RBX: 00007fb04a1e5fa0 RCX: 00007fb049f8eec9 [ 86.811600][ T5327] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 86.815047][ T5327] RBP: 00007fb04a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.818986][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.822272][ T5327] R13: 00007fb04a1e6038 R14: 00007fb04a1e5fa0 R15: 00007ffd0ff238a8 [ 86.826191][ T5327] [ 86.827588][ T5327] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.830487][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.834277][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.838896][ T5327] Call Trace: [ 86.840424][ T5327] [ 86.841735][ T5327] dump_stack_lvl+0x99/0x250 [ 86.843882][ T5327] ? __asan_memcpy+0x40/0x70 [ 86.845831][ T5327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.847991][ T5327] ? __pfx__printk+0x10/0x10 [ 86.849998][ T5327] vpanic+0x237/0x6d0 [ 86.851776][ T5327] ? __pfx_vpanic+0x10/0x10 [ 86.853770][ T5327] panic+0xb9/0xc0 [ 86.855333][ T5327] ? __pfx_panic+0x10/0x10 [ 86.857406][ T5327] __warn+0x31b/0x4b0 [ 86.859109][ T5327] ? nsim_fib_event_nb+0xed8/0x1080 [ 86.861332][ T5327] ? nsim_fib_event_nb+0xed8/0x1080 [ 86.863607][ T5327] report_bug+0x2be/0x4f0 [ 86.865474][ T5327] ? nsim_fib_event_nb+0xed8/0x1080 [ 86.867676][ T5327] ? nsim_fib_event_nb+0xed8/0x1080 [ 86.869979][ T5327] ? nsim_fib_event_nb+0xeda/0x1080 [ 86.872294][ T5327] handle_bug+0x84/0x160 [ 86.874197][ T5327] exc_invalid_op+0x1a/0x50 [ 86.876363][ T5327] asm_exc_invalid_op+0x1a/0x20 [ 86.878640][ T5327] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 86.881267][ T5327] Code: fa be 02 00 00 00 eb 0a e8 a5 88 d9 fa be 01 00 00 00 4c 89 f7 e8 28 5c ab fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 89 88 d9 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 86.889342][ T5327] RSP: 0018:ffffc9000d397008 EFLAGS: 00010283 [ 86.891940][ T5327] RAX: ffffffff86e61b17 RBX: 0000000000000002 RCX: 0000000000100000 [ 86.895066][ T5327] RDX: ffffc9000e072000 RSI: 00000000000011f3 RDI: 00000000000011f4 [ 86.898187][ T5327] RBP: dffffc0000000000 R08: ffff888000e8dc2f R09: 1ffff110001d1b85 [ 86.901335][ T5327] R10: dffffc0000000000 R11: ffffed10001d1b86 R12: ffff888033436000 [ 86.904577][ T5327] R13: ffffc9000d397180 R14: 0000000000000001 R15: ffffc9000d397198 [ 86.907953][ T5327] ? nsim_fib_event_nb+0xed7/0x1080 [ 86.910238][ T5327] ? nsim_fib_event_nb+0xed7/0x1080 [ 86.912544][ T5327] notifier_call_chain+0x1b6/0x3e0 [ 86.914736][ T5327] ? atomic_notifier_call_chain+0x26/0x180 [ 86.917221][ T5327] atomic_notifier_call_chain+0xda/0x180 [ 86.919658][ T5327] call_fib_notifiers+0x31/0x60 [ 86.921802][ T5327] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 86.924628][ T5327] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 86.927694][ T5327] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 86.930054][ T5327] inet6_rtm_newroute+0x12f5/0x18c0 [ 86.932371][ T5327] ? kmem_cache_free+0x19b/0x690 [ 86.934585][ T5327] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 86.937031][ T5327] ? __local_bh_enable_ip+0x12d/0x1c0 [ 86.939475][ T5327] ? __dev_queue_xmit+0x27b/0x3b50 [ 86.941758][ T5327] ? __dev_queue_xmit+0x1d79/0x3b50 [ 86.944133][ T5327] ? kasan_save_track+0x3e/0x80 [ 86.946312][ T5327] ? __kasan_slab_alloc+0x6c/0x80 [ 86.948585][ T5327] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 86.950984][ T5327] rtnetlink_rcv_msg+0x7cc/0xb70 [ 86.953166][ T5327] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 86.955388][ T5327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.957827][ T5327] ? ref_tracker_free+0x63a/0x7d0 [ 86.960079][ T5327] ? __asan_memcpy+0x40/0x70 [ 86.962146][ T5327] ? __pfx_ref_tracker_free+0x10/0x10 [ 86.964572][ T5327] ? __skb_clone+0x63/0x7a0 [ 86.966616][ T5327] netlink_rcv_skb+0x205/0x470 [ 86.968774][ T5327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.971112][ T5327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.973433][ T5327] ? netlink_deliver_tap+0x2e/0x1b0 [ 86.975801][ T5327] netlink_unicast+0x82c/0x9e0 [ 86.977965][ T5327] ? __pfx_netlink_unicast+0x10/0x10 [ 86.980398][ T5327] ? netlink_sendmsg+0x642/0xb30 [ 86.982629][ T5327] ? skb_put+0x11b/0x210 [ 86.984591][ T5327] netlink_sendmsg+0x805/0xb30 [ 86.986744][ T5327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.989082][ T5327] ? aa_sock_msg_perm+0xf1/0x1d0 [ 86.991273][ T5327] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 86.993548][ T5327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.995909][ T5327] __sock_sendmsg+0x219/0x270 [ 86.997952][ T5327] ____sys_sendmsg+0x505/0x830 [ 87.000081][ T5327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.002428][ T5327] ? import_iovec+0x74/0xa0 [ 87.004529][ T5327] ___sys_sendmsg+0x21f/0x2a0 [ 87.006578][ T5327] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.008785][ T5327] ? __fget_files+0x2a/0x420 [ 87.010663][ T5327] ? __fget_files+0x3a0/0x420 [ 87.012728][ T5327] __x64_sys_sendmsg+0x19b/0x260 [ 87.014775][ T5327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 87.017024][ T5327] ? do_syscall_64+0xbe/0xfa0 [ 87.019047][ T5327] do_syscall_64+0xfa/0xfa0 [ 87.021119][ T5327] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.023470][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.025971][ T5327] ? clear_bhb_loop+0x60/0xb0 [ 87.028011][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.030614][ T5327] RIP: 0033:0x7fb049f8eec9 [ 87.032456][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.040667][ T5327] RSP: 002b:00007fb04aec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.044410][ T5327] RAX: ffffffffffffffda RBX: 00007fb04a1e5fa0 RCX: 00007fb049f8eec9 [ 87.047887][ T5327] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 87.051235][ T5327] RBP: 00007fb04a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 87.054493][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.057899][ T5327] R13: 00007fb04a1e6038 R14: 00007fb04a1e5fa0 R15: 00007ffd0ff238a8 [ 87.061312][ T5327] [ 87.062840][ T5327] Kernel Offset: disabled [ 87.064594][ T5327] Rebooting in 86400 seconds..