Warning: Permanently added '[localhost]:13081' (ED25519) to the list of known hosts. 2025/08/12 23:20:09 ignoring optional flag "sandboxArg"="0" 2025/08/12 23:20:10 parsed 1 programs syzkaller login: [ 65.116678][ T5858] cgroup: Unknown subsys name 'net' [ 65.263322][ T5858] cgroup: Unknown subsys name 'cpuset' [ 65.269300][ T5858] cgroup: Unknown subsys name 'rlimit' [ 67.583613][ T5858] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.098006][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.244436][ T1364] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.247042][ T1364] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.979595][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 72.074262][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.078001][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.081132][ T5882] bridge_slave_0: entered allmulticast mode [ 72.085028][ T5882] bridge_slave_0: entered promiscuous mode [ 72.092298][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.095015][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.097845][ T5882] bridge_slave_1: entered allmulticast mode [ 72.102534][ T5882] bridge_slave_1: entered promiscuous mode [ 72.136427][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.143092][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.175219][ T5882] team0: Port device team_slave_0 added [ 72.181092][ T5882] team0: Port device team_slave_1 added [ 72.211841][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.214470][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.224337][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.231643][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.234374][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.244207][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.290071][ T5882] hsr_slave_0: entered promiscuous mode [ 72.292937][ T5882] hsr_slave_1: entered promiscuous mode [ 72.425970][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.432584][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.437684][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.442808][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.478842][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.482011][ T5882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.485675][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.488506][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.548901][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.565934][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.571679][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.583408][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.592178][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.594663][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.603953][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.606766][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.732806][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.766640][ T5882] veth0_vlan: entered promiscuous mode [ 72.773173][ T5882] veth1_vlan: entered promiscuous mode [ 72.793164][ T5882] veth0_macvtap: entered promiscuous mode [ 72.797255][ T5882] veth1_macvtap: entered promiscuous mode [ 72.809570][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.817255][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.826905][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.831239][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.838455][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.844220][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.925372][ T5882] syz-executor (5882) used greatest stack depth: 20600 bytes left [ 72.946879][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.950532][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.953744][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.962153][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.967055][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.972195][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.061705][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.132368][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.181316][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.724966][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.728223][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.747072][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.749910][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/12 23:20:23 executed programs: 0 [ 75.182473][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.185917][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.191384][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.195648][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.200668][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.314117][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 75.371220][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.373602][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.375970][ T5964] bridge_slave_0: entered allmulticast mode [ 75.379842][ T5964] bridge_slave_0: entered promiscuous mode [ 75.384160][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.386462][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.389453][ T5964] bridge_slave_1: entered allmulticast mode [ 75.392541][ T5964] bridge_slave_1: entered promiscuous mode [ 75.417953][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.425054][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.448467][ T5964] team0: Port device team_slave_0 added [ 75.452801][ T5964] team0: Port device team_slave_1 added [ 75.473827][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.475980][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.484975][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.490040][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.492148][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.500266][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.532878][ T5964] hsr_slave_0: entered promiscuous mode [ 75.538098][ T5964] hsr_slave_1: entered promiscuous mode [ 75.540534][ T5964] debugfs: 'hsr0' already exists in 'hsr' [ 75.542447][ T5964] Cannot create hsr debugfs directory [ 76.329881][ T12] bridge_slave_1: left allmulticast mode [ 76.332435][ T12] bridge_slave_1: left promiscuous mode [ 76.335194][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.343719][ T12] bridge_slave_0: left allmulticast mode [ 76.345875][ T12] bridge_slave_0: left promiscuous mode [ 76.348069][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.653250][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.660473][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.665174][ T12] bond0 (unregistering): Released all slaves [ 76.760508][ T12] hsr_slave_0: left promiscuous mode [ 76.763250][ T12] hsr_slave_1: left promiscuous mode [ 76.765876][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.769166][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.782179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.785015][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.800522][ T12] veth1_macvtap: left promiscuous mode [ 76.802798][ T12] veth0_macvtap: left promiscuous mode [ 76.804940][ T12] veth1_vlan: left promiscuous mode [ 76.806998][ T12] veth0_vlan: left promiscuous mode [ 77.215823][ T12] team0 (unregistering): Port device team_slave_1 removed [ 77.241235][ T54] Bluetooth: hci0: command tx timeout [ 77.254085][ T12] team0 (unregistering): Port device team_slave_0 removed [ 77.735069][ T5964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.747997][ T5964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.760676][ T5964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.768439][ T5964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.848066][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.865622][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.874162][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.877210][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.890277][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.893263][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.527047][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.621928][ T5964] veth0_vlan: entered promiscuous mode [ 78.632068][ T5964] veth1_vlan: entered promiscuous mode [ 78.664818][ T5964] veth0_macvtap: entered promiscuous mode [ 78.694142][ T5964] veth1_macvtap: entered promiscuous mode [ 78.704371][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.711330][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.717867][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.722380][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.729994][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.733646][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.872920][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.875937][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.907851][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.911796][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.120709][ C1] ------------[ cut here ]------------ [ 79.123148][ C1] WARNING: CPU: 1 PID: 5901 at ./include/linux/skbuff.h:1165 nf_reject_fill_skb_dst+0x2a4/0x330 [ 79.127096][ C1] Modules linked in: [ 79.128939][ C1] CPU: 1 UID: 0 PID: 5901 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) [ 79.134690][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 79.138767][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 79.141210][ C1] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 79.143684][ C1] Code: 8b 0d 60 b1 8b 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 03 8d 67 01 cc e8 cd 6c ab f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 79.151388][ C1] RSP: 0018:ffffc900001e0360 EFLAGS: 00010246 [ 79.153852][ C1] RAX: ffffffff8a143ee3 RBX: ffff888110b91200 RCX: ffff88810a3d8000 [ 79.157070][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.160335][ C1] RBP: ffffc900001e0490 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6 [ 79.163545][ C1] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffff888011c5c101 [ 79.166597][ C1] R13: dffffc0000000001 R14: 1ffff9200003c070 R15: 0000000000000000 [ 79.169914][ C1] FS: 0000000000000000(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000 [ 79.173427][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.175961][ C1] CR2: 000000c003cc5000 CR3: 000000010fc16000 CR4: 00000000000006f0 [ 79.179162][ C1] Call Trace: [ 79.180503][ C1] [ 79.181673][ C1] ? __napi_poll+0xc7/0x360 [ 79.183462][ C1] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 79.185812][ C1] ? ndisc_send_skb+0xb96/0x1470 [ 79.187848][ C1] ? addrconf_dad_work+0xaae/0x14b0 [ 79.190042][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 79.192343][ C1] ? worker_thread+0x8a0/0xda0 [ 79.194311][ C1] nf_send_unreach+0x17b/0x6e0 [ 79.196241][ C1] ? __pfx_nf_send_unreach+0x10/0x10 [ 79.198402][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.200680][ C1] nft_reject_inet_eval+0x4bc/0x690 [ 79.202810][ C1] nft_do_chain+0x40c/0x1920 [ 79.204719][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 79.206767][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 79.208893][ C1] nft_do_chain_inet+0x25d/0x340 [ 79.210914][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 79.213124][ C1] ? __lock_acquire+0xab9/0xd20 [ 79.215105][ C1] ? NF_HOOK+0x9a/0x3a0 [ 79.216831][ C1] ? NF_HOOK+0x9a/0x3a0 [ 79.218447][ C1] ? ip_sabotage_in+0x57/0x270 [ 79.220449][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 79.222690][ C1] nf_hook_slow+0xc5/0x220 [ 79.224465][ C1] NF_HOOK+0x206/0x3a0 [ 79.226078][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 79.228126][ C1] ? NF_HOOK+0x9a/0x3a0 [ 79.229973][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 79.231822][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 79.233724][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 79.235804][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 79.237673][ C1] __netif_receive_skb+0x143/0x380 [ 79.239871][ C1] ? process_backlog+0x2d5/0x14f0 [ 79.241955][ C1] process_backlog+0x60e/0x14f0 [ 79.243988][ C1] ? __pfx_process_backlog+0x10/0x10 [ 79.246141][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 79.248321][ C1] __napi_poll+0xc7/0x360 [ 79.250172][ C1] ? net_rx_action+0x46d/0xe30 [ 79.252085][ C1] net_rx_action+0x707/0xe30 [ 79.254013][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 79.256081][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 79.258235][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 79.260495][ C1] handle_softirqs+0x286/0x870 [ 79.262459][ C1] ? do_softirq+0xec/0x180 [ 79.264257][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 79.266405][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.268469][ C1] do_softirq+0xec/0x180 [ 79.270303][ C1] [ 79.271524][ C1] [ 79.272739][ C1] ? __pfx_do_softirq+0x10/0x10 [ 79.274716][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 79.276868][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 79.279100][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 79.281404][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.283525][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.285579][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.287588][ C1] __dev_queue_xmit+0x1d79/0x3b50 [ 79.289764][ C1] ? register_lock_class+0x51/0x320 [ 79.291876][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.293922][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 79.296012][ C1] ? read_seqbegin+0x122/0x250 [ 79.298027][ C1] ? neigh_resolve_output+0x438/0x750 [ 79.300296][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.302323][ C1] ? read_seqbegin+0x1ac/0x250 [ 79.304208][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 79.306219][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 79.308348][ C1] ? eth_header+0x11b/0x200 [ 79.310178][ C1] ? __asan_memcpy+0x40/0x70 [ 79.311938][ C1] ? eth_header+0x11b/0x200 [ 79.313748][ C1] ? __pfx_eth_header+0x10/0x10 [ 79.315725][ C1] ? neigh_resolve_output+0x624/0x750 [ 79.317924][ C1] ip6_finish_output2+0x11fe/0x16a0 [ 79.320163][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 79.322297][ C1] ? ip6_mtu+0x7d/0x3f0 [ 79.323959][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 79.326183][ C1] ? ip6_mtu+0x7d/0x3f0 [ 79.327855][ C1] ? ip6_mtu+0x321/0x3f0 [ 79.329721][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 79.331758][ C1] ndisc_send_skb+0xb96/0x1470 [ 79.333736][ C1] ? ndisc_send_skb+0x1e4/0x1470 [ 79.335770][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 79.337850][ C1] ? ndisc_ns_create+0x4ea/0x650 [ 79.339924][ C1] ? __asan_memcpy+0x40/0x70 [ 79.341823][ C1] ? mod_delayed_work_on+0x128/0x200 [ 79.343957][ C1] ndisc_send_ns+0xcb/0x150 [ 79.345805][ C1] ? __pfx_ndisc_send_ns+0x10/0x10 [ 79.347860][ C1] ? addrconf_dad_work+0xa04/0x14b0 [ 79.350085][ C1] addrconf_dad_work+0xaae/0x14b0 [ 79.352140][ C1] ? __lock_acquire+0xab9/0xd20 [ 79.354134][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 79.356350][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 79.358790][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.360907][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 79.363198][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 79.365478][ C1] process_scheduled_works+0xae1/0x17b0 [ 79.367746][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 79.370277][ C1] worker_thread+0x8a0/0xda0 [ 79.372201][ C1] kthread+0x711/0x8a0 [ 79.373859][ C1] ? __pfx_worker_thread+0x10/0x10 [ 79.375908][ C1] ? __pfx_kthread+0x10/0x10 [ 79.377749][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.379972][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.382082][ C1] ? __pfx_kthread+0x10/0x10 [ 79.383957][ C1] ret_from_fork+0x3fc/0x770 [ 79.385830][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 79.387861][ C1] ? __switch_to_asm+0x39/0x70 [ 79.389913][ C1] ? __switch_to_asm+0x33/0x70 [ 79.391864][ C1] ? __pfx_kthread+0x10/0x10 [ 79.393771][ C1] ret_from_fork_asm+0x1a/0x30 [ 79.395726][ C1] [ 79.396996][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.399898][ C1] CPU: 1 UID: 0 PID: 5901 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) [ 79.404664][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 79.408630][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 79.410953][ C1] Call Trace: [ 79.412271][ C1] [ 79.413442][ C1] dump_stack_lvl+0x99/0x250 [ 79.415332][ C1] ? __asan_memcpy+0x40/0x70 [ 79.417240][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.419336][ C1] ? __pfx__printk+0x10/0x10 [ 79.421241][ C1] vpanic+0x281/0x750 [ 79.422866][ C1] ? __pfx__printk+0x10/0x10 [ 79.424881][ C1] ? __pfx_vpanic+0x10/0x10 [ 79.426754][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 79.428819][ C1] panic+0xb9/0xc0 [ 79.430308][ C1] ? __pfx_panic+0x10/0x10 [ 79.432125][ C1] __warn+0x31b/0x4b0 [ 79.433751][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 79.435981][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 79.438252][ C1] report_bug+0x2be/0x4f0 [ 79.440032][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 79.442158][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 79.444308][ C1] ? nf_reject_fill_skb_dst+0x2a6/0x330 [ 79.446540][ C1] handle_bug+0x84/0x160 [ 79.448279][ C1] exc_invalid_op+0x1a/0x50 [ 79.450069][ C1] asm_exc_invalid_op+0x1a/0x20 [ 79.452034][ C1] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 79.454473][ C1] Code: 8b 0d 60 b1 8b 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 03 8d 67 01 cc e8 cd 6c ab f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 79.462065][ C1] RSP: 0018:ffffc900001e0360 EFLAGS: 00010246 [ 79.464520][ C1] RAX: ffffffff8a143ee3 RBX: ffff888110b91200 RCX: ffff88810a3d8000 [ 79.467630][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.470876][ C1] RBP: ffffc900001e0490 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6 [ 79.473923][ C1] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffff888011c5c101 [ 79.476978][ C1] R13: dffffc0000000001 R14: 1ffff9200003c070 R15: 0000000000000000 [ 79.480078][ C1] ? nf_reject_fill_skb_dst+0x2a3/0x330 [ 79.482251][ C1] ? __napi_poll+0xc7/0x360 [ 79.484050][ C1] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 79.486391][ C1] ? ndisc_send_skb+0xb96/0x1470 [ 79.488395][ C1] ? addrconf_dad_work+0xaae/0x14b0 [ 79.490519][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 79.492780][ C1] ? worker_thread+0x8a0/0xda0 [ 79.494723][ C1] nf_send_unreach+0x17b/0x6e0 [ 79.496680][ C1] ? __pfx_nf_send_unreach+0x10/0x10 [ 79.498801][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.500966][ C1] nft_reject_inet_eval+0x4bc/0x690 [ 79.503064][ C1] nft_do_chain+0x40c/0x1920 [ 79.504934][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 79.506960][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 79.508954][ C1] nft_do_chain_inet+0x25d/0x340 [ 79.510879][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 79.513005][ C1] ? __lock_acquire+0xab9/0xd20 [ 79.515000][ C1] ? NF_HOOK+0x9a/0x3a0 [ 79.516722][ C1] ? NF_HOOK+0x9a/0x3a0 [ 79.518349][ C1] ? ip_sabotage_in+0x57/0x270 [ 79.519924][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 79.521584][ C1] nf_hook_slow+0xc5/0x220 [ 79.522972][ C1] NF_HOOK+0x206/0x3a0 [ 79.524239][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 79.525838][ C1] ? NF_HOOK+0x9a/0x3a0 [ 79.527461][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 79.529227][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 79.531055][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 79.533058][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 79.534780][ C1] __netif_receive_skb+0x143/0x380 [ 79.536807][ C1] ? process_backlog+0x2d5/0x14f0 [ 79.538765][ C1] process_backlog+0x60e/0x14f0 [ 79.540467][ C1] ? __pfx_process_backlog+0x10/0x10 [ 79.542138][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 79.543813][ C1] __napi_poll+0xc7/0x360 [ 79.545164][ C1] ? net_rx_action+0x46d/0xe30 [ 79.546860][ C1] net_rx_action+0x707/0xe30 [ 79.548747][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 79.550837][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 79.552963][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 79.555088][ C1] handle_softirqs+0x286/0x870 [ 79.557016][ C1] ? do_softirq+0xec/0x180 [ 79.558812][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 79.560924][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.562993][ C1] do_softirq+0xec/0x180 [ 79.564692][ C1] [ 79.565860][ C1] [ 79.567062][ C1] ? __pfx_do_softirq+0x10/0x10 [ 79.569046][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 79.571148][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 79.573159][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 79.575007][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.577049][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.579106][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.581162][ C1] __dev_queue_xmit+0x1d79/0x3b50 [ 79.583204][ C1] ? register_lock_class+0x51/0x320 [ 79.585353][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.587499][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 79.589575][ C1] ? read_seqbegin+0x122/0x250 [ 79.591440][ C1] ? neigh_resolve_output+0x438/0x750 [ 79.593628][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.595751][ C1] ? read_seqbegin+0x1ac/0x250 [ 79.597707][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 79.599762][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 79.601894][ C1] ? eth_header+0x11b/0x200 [ 79.603719][ C1] ? __asan_memcpy+0x40/0x70 [ 79.605643][ C1] ? eth_header+0x11b/0x200 [ 79.607508][ C1] ? __pfx_eth_header+0x10/0x10 [ 79.609437][ C1] ? neigh_resolve_output+0x624/0x750 [ 79.611520][ C1] ip6_finish_output2+0x11fe/0x16a0 [ 79.613671][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 79.615830][ C1] ? ip6_mtu+0x7d/0x3f0 [ 79.617545][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 79.619766][ C1] ? ip6_mtu+0x7d/0x3f0 [ 79.621491][ C1] ? ip6_mtu+0x321/0x3f0 [ 79.623170][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 79.625199][ C1] ndisc_send_skb+0xb96/0x1470 [ 79.627172][ C1] ? ndisc_send_skb+0x1e4/0x1470 [ 79.629193][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 79.631211][ C1] ? ndisc_ns_create+0x4ea/0x650 [ 79.633193][ C1] ? __asan_memcpy+0x40/0x70 [ 79.635139][ C1] ? mod_delayed_work_on+0x128/0x200 [ 79.637274][ C1] ndisc_send_ns+0xcb/0x150 [ 79.639006][ C1] ? __pfx_ndisc_send_ns+0x10/0x10 [ 79.641029][ C1] ? addrconf_dad_work+0xa04/0x14b0 [ 79.643053][ C1] addrconf_dad_work+0xaae/0x14b0 [ 79.645090][ C1] ? __lock_acquire+0xab9/0xd20 [ 79.647072][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 79.649243][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 79.651552][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.653566][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 79.655770][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 79.657979][ C1] process_scheduled_works+0xae1/0x17b0 [ 79.660175][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 79.662587][ C1] worker_thread+0x8a0/0xda0 [ 79.664450][ C1] kthread+0x711/0x8a0 [ 79.666113][ C1] ? __pfx_worker_thread+0x10/0x10 [ 79.668151][ C1] ? __pfx_kthread+0x10/0x10 [ 79.670003][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 79.672092][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.674168][ C1] ? __pfx_kthread+0x10/0x10 [ 79.676041][ C1] ret_from_fork+0x3fc/0x770 [ 79.677926][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 79.679979][ C1] ? __switch_to_asm+0x39/0x70 [ 79.681874][ C1] ? __switch_to_asm+0x33/0x70 [ 79.683798][ C1] ? __pfx_kthread+0x10/0x10 [ 79.685665][ C1] ret_from_fork_asm+0x1a/0x30 [ 79.687588][ C1] [ 79.689495][ C1] Kernel Offset: disabled [ 79.691228][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:20:27 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff8184623c RBX=ffffc9000321ece0 RCX=8d520c1d366c2500 RDX=0000000000000001 RSI=ffffffff8184623c RDI=ffffc9000321ece0 RBP=ffffc9000321ecb0 RSP=ffffc9000321ec20 R8 =ffffc9000321fc30 R9 =0000000000000000 R10=ffffc9000321ec78 R11=ffffffff81ac3890 R12=ffff888020a8b980 R13=1ffff92000643db0 R14=ffffffff81ac3890 R15=ffffc9000321ec28 RIP=ffffffff8b7bc100 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c000a66898 ffffffff 00c00000 GS =0000 ffff8880b8621000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc70c4fca8 CR3=00000001084ac000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000 XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000 XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000002021 0000000000002131 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=0000000000002021 0000000000003031 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfb10 R8 =ffff88801f740237 R9 =1ffff11003ee8046 R10=dffffc0000000000 R11=ffffffff854e71d0 R12=dffffc0000000000 R13=ffffffff99af48e5 R14=ffffffff99de94e0 R15=0000000000000000 RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8881a3c21000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c003cc5000 CR3=000000010fc16000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020 XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000