Warning: Permanently added '[localhost]:9369' (ED25519) to the list of known hosts. 2025/08/18 19:13:38 ignoring optional flag "sandboxArg"="0" 2025/08/18 19:13:40 parsed 1 programs syzkaller login: [ 54.216317][ T5848] cgroup: Unknown subsys name 'net' [ 54.317637][ T5848] cgroup: Unknown subsys name 'cpuset' [ 54.323056][ T5848] cgroup: Unknown subsys name 'rlimit' [ 56.040601][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.369696][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.360518][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.364770][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.367615][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.371025][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.375756][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.594194][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.596636][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.614360][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.617188][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.225925][ T5908] chnl_net:caif_netlink_parms(): no params data found [ 60.293551][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.296638][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.298796][ T5908] bridge_slave_0: entered allmulticast mode [ 60.302249][ T5908] bridge_slave_0: entered promiscuous mode [ 60.307265][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.309475][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.311839][ T5908] bridge_slave_1: entered allmulticast mode [ 60.316352][ T5908] bridge_slave_1: entered promiscuous mode [ 60.345855][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.350781][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.370650][ T5908] team0: Port device team_slave_0 added [ 60.374011][ T5908] team0: Port device team_slave_1 added [ 60.392407][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.395099][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.402585][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.410554][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.412972][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.421460][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.478417][ T5908] hsr_slave_0: entered promiscuous mode [ 60.480892][ T5908] hsr_slave_1: entered promiscuous mode [ 60.626384][ T5908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.632351][ T5908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.637278][ T5908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.641406][ T5908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.697451][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.710841][ T5908] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.716766][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.719289][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.729628][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.732137][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.760848][ T5908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.867496][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.896399][ T5908] veth0_vlan: entered promiscuous mode [ 60.902123][ T5908] veth1_vlan: entered promiscuous mode [ 60.921056][ T5908] veth0_macvtap: entered promiscuous mode [ 60.926540][ T5908] veth1_macvtap: entered promiscuous mode [ 60.938053][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.945962][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.955331][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.958775][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.962106][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.967542][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.060760][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.136073][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.185266][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.244821][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/18 19:13:49 executed programs: 0 [ 62.036111][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.039396][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.042785][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.047227][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.050527][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.172330][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 62.232511][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.235406][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.238027][ T5955] bridge_slave_0: entered allmulticast mode [ 62.241620][ T5955] bridge_slave_0: entered promiscuous mode [ 62.246734][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.248951][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.251237][ T5955] bridge_slave_1: entered allmulticast mode [ 62.254721][ T5955] bridge_slave_1: entered promiscuous mode [ 62.276920][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.281707][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.306112][ T5955] team0: Port device team_slave_0 added [ 62.310562][ T5955] team0: Port device team_slave_1 added [ 62.337465][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.339970][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.348872][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.354895][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.357582][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.367724][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.413912][ T5955] hsr_slave_0: entered promiscuous mode [ 62.416897][ T5955] hsr_slave_1: entered promiscuous mode [ 62.419728][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 62.422094][ T5955] Cannot create hsr debugfs directory [ 64.084232][ T55] Bluetooth: hci0: command tx timeout [ 64.453743][ T12] bridge_slave_1: left allmulticast mode [ 64.455795][ T12] bridge_slave_1: left promiscuous mode [ 64.458466][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.468730][ T12] bridge_slave_0: left allmulticast mode [ 64.470511][ T12] bridge_slave_0: left promiscuous mode [ 64.473013][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.659880][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.664397][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.668470][ T12] bond0 (unregistering): Released all slaves [ 64.816679][ T12] hsr_slave_0: left promiscuous mode [ 64.819386][ T12] hsr_slave_1: left promiscuous mode [ 64.822054][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.825651][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.829149][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.831471][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.842964][ T12] veth1_macvtap: left promiscuous mode [ 64.844879][ T12] veth0_macvtap: left promiscuous mode [ 64.846844][ T12] veth1_vlan: left promiscuous mode [ 64.848461][ T12] veth0_vlan: left promiscuous mode [ 65.115444][ T12] team0 (unregistering): Port device team_slave_1 removed [ 65.147481][ T12] team0 (unregistering): Port device team_slave_0 removed [ 65.585832][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.591359][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.596151][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.601773][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.695192][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.716658][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.721993][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.724206][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.732573][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.734936][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.009412][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.044285][ T5955] veth0_vlan: entered promiscuous mode [ 66.050549][ T5955] veth1_vlan: entered promiscuous mode [ 66.078770][ T5955] veth0_macvtap: entered promiscuous mode [ 66.085143][ T5955] veth1_macvtap: entered promiscuous mode [ 66.099153][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.114903][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.122678][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.126124][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.130051][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.134723][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.153409][ T55] Bluetooth: hci0: command tx timeout [ 66.182123][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.188037][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.205604][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.208577][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.265268][ C1] ------------[ cut here ]------------ [ 66.267347][ C1] WARNING: CPU: 1 PID: 5862 at ./include/linux/skbuff.h:1165 nf_reject_fill_skb_dst+0x2a4/0x330 [ 66.270958][ C1] Modules linked in: [ 66.272338][ C1] CPU: 1 UID: 0 PID: 5862 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) [ 66.277411][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 66.281150][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 66.283476][ C1] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 66.285955][ C1] Code: 8b 0d 60 75 8b 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 03 91 67 01 cc e8 ad d0 aa f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 66.293422][ C1] RSP: 0018:ffffc900001e0360 EFLAGS: 00010246 [ 66.295811][ C1] RAX: ffffffff8a14dae3 RBX: ffff88810f943b00 RCX: ffff888109618000 [ 66.298799][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.301694][ C1] RBP: ffffc900001e0490 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 66.304706][ C1] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88810ec56101 [ 66.307406][ C1] R13: dffffc0000000001 R14: 1ffff9200003c070 R15: 0000000000000000 [ 66.309833][ C1] FS: 0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000 [ 66.312467][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.314617][ C1] CR2: 0000000002f6a520 CR3: 0000000027716000 CR4: 00000000000006f0 [ 66.317231][ C1] Call Trace: [ 66.318481][ C1] [ 66.319607][ C1] ? __napi_poll+0xc7/0x360 [ 66.321350][ C1] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 66.323433][ C1] ? ndisc_send_skb+0xb96/0x1470 [ 66.325197][ C1] ? addrconf_dad_work+0xaae/0x14b0 [ 66.327085][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 66.329064][ C1] ? worker_thread+0x8a0/0xda0 [ 66.330744][ C1] nf_send_unreach+0x17b/0x6e0 [ 66.332211][ C1] ? __pfx_nf_send_unreach+0x10/0x10 [ 66.333937][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 66.335532][ C1] nft_reject_inet_eval+0x4bc/0x690 [ 66.337150][ C1] nft_do_chain+0x40c/0x1920 [ 66.338809][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 66.340507][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 66.342208][ C1] nft_do_chain_inet+0x25d/0x340 [ 66.344133][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 66.345841][ C1] ? __lock_acquire+0xab9/0xd20 [ 66.347390][ C1] ? NF_HOOK+0x9a/0x3a0 [ 66.348689][ C1] ? NF_HOOK+0x9a/0x3a0 [ 66.349975][ C1] ? ip_sabotage_in+0x57/0x270 [ 66.351469][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 66.353510][ C1] nf_hook_slow+0xc5/0x220 [ 66.355156][ C1] NF_HOOK+0x206/0x3a0 [ 66.356362][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 66.357958][ C1] ? NF_HOOK+0x9a/0x3a0 [ 66.359261][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 66.360675][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 66.362172][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 66.364042][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 66.365440][ C1] __netif_receive_skb+0x143/0x380 [ 66.367028][ C1] ? process_backlog+0x2d5/0x14f0 [ 66.368618][ C1] process_backlog+0x60e/0x14f0 [ 66.370095][ C1] ? __pfx_process_backlog+0x10/0x10 [ 66.371715][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 66.373457][ C1] __napi_poll+0xc7/0x360 [ 66.374769][ C1] ? net_rx_action+0x46d/0xe30 [ 66.376269][ C1] net_rx_action+0x707/0xe30 [ 66.377713][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 66.379265][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 66.380872][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 66.382669][ C1] handle_softirqs+0x286/0x870 [ 66.384421][ C1] ? do_softirq+0xec/0x180 [ 66.385820][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 66.387426][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 66.389060][ C1] do_softirq+0xec/0x180 [ 66.390361][ C1] [ 66.391268][ C1] [ 66.392176][ C1] ? __pfx_do_softirq+0x10/0x10 [ 66.393800][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 66.395407][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 66.396988][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 66.398796][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 66.400375][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 66.401993][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 66.403921][ C1] __dev_queue_xmit+0x1d79/0x3b50 [ 66.405397][ C1] ? register_lock_class+0x51/0x320 [ 66.406954][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 66.408504][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 66.410105][ C1] ? read_seqbegin+0x122/0x250 [ 66.411509][ C1] ? neigh_resolve_output+0x438/0x750 [ 66.413211][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 66.414769][ C1] ? read_seqbegin+0x1ac/0x250 [ 66.416253][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 66.417764][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 66.419389][ C1] ? eth_header+0x11b/0x200 [ 66.420749][ C1] ? __asan_memcpy+0x40/0x70 [ 66.422232][ C1] ? eth_header+0x11b/0x200 [ 66.423891][ C1] ? __pfx_eth_header+0x10/0x10 [ 66.425301][ C1] ? neigh_resolve_output+0x624/0x750 [ 66.426868][ C1] ip6_finish_output2+0x11fe/0x16a0 [ 66.428407][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 66.430002][ C1] ? ip6_mtu+0x7d/0x3f0 [ 66.431369][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 66.433294][ C1] ? ip6_mtu+0x7d/0x3f0 [ 66.434612][ C1] ? ip6_mtu+0x321/0x3f0 [ 66.436092][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 66.437958][ C1] ndisc_send_skb+0xb96/0x1470 [ 66.439446][ C1] ? ndisc_send_skb+0x1e4/0x1470 [ 66.440986][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 66.442732][ C1] ? ndisc_ns_create+0x4ea/0x650 [ 66.444466][ C1] ? __asan_memcpy+0x40/0x70 [ 66.445875][ C1] ? mod_delayed_work_on+0x128/0x200 [ 66.447399][ C1] ndisc_send_ns+0xcb/0x150 [ 66.448774][ C1] ? __pfx_ndisc_send_ns+0x10/0x10 [ 66.450334][ C1] ? addrconf_dad_work+0xa04/0x14b0 [ 66.451860][ C1] addrconf_dad_work+0xaae/0x14b0 [ 66.453393][ C1] ? __lock_acquire+0xab9/0xd20 [ 66.454912][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 66.456830][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 66.458936][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 66.460639][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 66.462281][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 66.464214][ C1] process_scheduled_works+0xae1/0x17b0 [ 66.465952][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 66.468245][ C1] worker_thread+0x8a0/0xda0 [ 66.470049][ C1] kthread+0x711/0x8a0 [ 66.471658][ C1] ? __pfx_worker_thread+0x10/0x10 [ 66.473699][ C1] ? __pfx_kthread+0x10/0x10 [ 66.475312][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 66.477170][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 66.479028][ C1] ? __pfx_kthread+0x10/0x10 [ 66.480830][ C1] ret_from_fork+0x3fc/0x770 [ 66.482660][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 66.484816][ C1] ? __switch_to_asm+0x39/0x70 [ 66.486758][ C1] ? __switch_to_asm+0x33/0x70 [ 66.488650][ C1] ? __pfx_kthread+0x10/0x10 [ 66.490439][ C1] ret_from_fork_asm+0x1a/0x30 [ 66.492085][ C1] [ 66.493364][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 66.496102][ C1] CPU: 1 UID: 0 PID: 5862 Comm: kworker/u8:2 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) [ 66.500251][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 66.503565][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 66.505387][ C1] Call Trace: [ 66.506494][ C1] [ 66.507602][ C1] dump_stack_lvl+0x99/0x250 [ 66.509347][ C1] ? __asan_memcpy+0x40/0x70 [ 66.511118][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.513080][ C1] ? __pfx__printk+0x10/0x10 [ 66.514865][ C1] vpanic+0x281/0x750 [ 66.516421][ C1] ? __pfx__printk+0x10/0x10 [ 66.518244][ C1] ? __pfx_vpanic+0x10/0x10 [ 66.520019][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 66.522016][ C1] panic+0xb9/0xc0 [ 66.523447][ C1] ? __pfx_panic+0x10/0x10 [ 66.525160][ C1] __warn+0x31b/0x4b0 [ 66.526697][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 66.528863][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 66.531015][ C1] report_bug+0x2be/0x4f0 [ 66.532731][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 66.534859][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 66.536977][ C1] ? nf_reject_fill_skb_dst+0x2a6/0x330 [ 66.539080][ C1] handle_bug+0x84/0x160 [ 66.540731][ C1] exc_invalid_op+0x1a/0x50 [ 66.542460][ C1] asm_exc_invalid_op+0x1a/0x20 [ 66.544311][ C1] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 66.546667][ C1] Code: 8b 0d 60 75 8b 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 03 91 67 01 cc e8 ad d0 aa f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 66.553772][ C1] RSP: 0018:ffffc900001e0360 EFLAGS: 00010246 [ 66.556027][ C1] RAX: ffffffff8a14dae3 RBX: ffff88810f943b00 RCX: ffff888109618000 [ 66.558943][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.561958][ C1] RBP: ffffc900001e0490 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 66.564544][ C1] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88810ec56101 [ 66.567199][ C1] R13: dffffc0000000001 R14: 1ffff9200003c070 R15: 0000000000000000 [ 66.569883][ C1] ? nf_reject_fill_skb_dst+0x2a3/0x330 [ 66.571592][ C1] ? __napi_poll+0xc7/0x360 [ 66.573232][ C1] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 66.575322][ C1] ? ndisc_send_skb+0xb96/0x1470 [ 66.577119][ C1] ? addrconf_dad_work+0xaae/0x14b0 [ 66.578852][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 66.580844][ C1] ? worker_thread+0x8a0/0xda0 [ 66.582444][ C1] nf_send_unreach+0x17b/0x6e0 [ 66.584156][ C1] ? __pfx_nf_send_unreach+0x10/0x10 [ 66.585989][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 66.587916][ C1] nft_reject_inet_eval+0x4bc/0x690 [ 66.589700][ C1] nft_do_chain+0x40c/0x1920 [ 66.591306][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 66.593095][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 66.594865][ C1] nft_do_chain_inet+0x25d/0x340 [ 66.596557][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 66.598534][ C1] ? __lock_acquire+0xab9/0xd20 [ 66.600213][ C1] ? NF_HOOK+0x9a/0x3a0 [ 66.601776][ C1] ? NF_HOOK+0x9a/0x3a0 [ 66.603321][ C1] ? ip_sabotage_in+0x57/0x270 [ 66.604955][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 66.606793][ C1] nf_hook_slow+0xc5/0x220 [ 66.608232][ C1] NF_HOOK+0x206/0x3a0 [ 66.609483][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 66.611279][ C1] ? NF_HOOK+0x9a/0x3a0 [ 66.612689][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 66.614252][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 66.615821][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 66.617675][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 66.619195][ C1] __netif_receive_skb+0x143/0x380 [ 66.620691][ C1] ? process_backlog+0x2d5/0x14f0 [ 66.622171][ C1] process_backlog+0x60e/0x14f0 [ 66.623598][ C1] ? __pfx_process_backlog+0x10/0x10 [ 66.625163][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 66.626732][ C1] __napi_poll+0xc7/0x360 [ 66.628011][ C1] ? net_rx_action+0x46d/0xe30 [ 66.629417][ C1] net_rx_action+0x707/0xe30 [ 66.630827][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 66.632354][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 66.633952][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 66.635554][ C1] handle_softirqs+0x286/0x870 [ 66.636999][ C1] ? do_softirq+0xec/0x180 [ 66.638351][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 66.639909][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 66.641402][ C1] do_softirq+0xec/0x180 [ 66.642691][ C1] [ 66.643548][ C1] [ 66.644455][ C1] ? __pfx_do_softirq+0x10/0x10 [ 66.645973][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 66.647574][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 66.649151][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 66.650849][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 66.652469][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 66.654146][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 66.655942][ C1] __dev_queue_xmit+0x1d79/0x3b50 [ 66.657451][ C1] ? register_lock_class+0x51/0x320 [ 66.659274][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 66.661054][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 66.662833][ C1] ? read_seqbegin+0x122/0x250 [ 66.664523][ C1] ? neigh_resolve_output+0x438/0x750 [ 66.666508][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 66.668258][ C1] ? read_seqbegin+0x1ac/0x250 [ 66.669997][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 66.671648][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 66.673356][ C1] ? eth_header+0x11b/0x200 [ 66.674817][ C1] ? __asan_memcpy+0x40/0x70 [ 66.676496][ C1] ? eth_header+0x11b/0x200 [ 66.678085][ C1] ? __pfx_eth_header+0x10/0x10 [ 66.679702][ C1] ? neigh_resolve_output+0x624/0x750 [ 66.681509][ C1] ip6_finish_output2+0x11fe/0x16a0 [ 66.683120][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 66.684934][ C1] ? ip6_mtu+0x7d/0x3f0 [ 66.686212][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 66.687906][ C1] ? ip6_mtu+0x7d/0x3f0 [ 66.689187][ C1] ? ip6_mtu+0x321/0x3f0 [ 66.690438][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 66.692102][ C1] ndisc_send_skb+0xb96/0x1470 [ 66.693490][ C1] ? ndisc_send_skb+0x1e4/0x1470 [ 66.694921][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 66.696584][ C1] ? ndisc_ns_create+0x4ea/0x650 [ 66.698403][ C1] ? __asan_memcpy+0x40/0x70 [ 66.699920][ C1] ? mod_delayed_work_on+0x128/0x200 [ 66.701726][ C1] ndisc_send_ns+0xcb/0x150 [ 66.703265][ C1] ? __pfx_ndisc_send_ns+0x10/0x10 [ 66.704793][ C1] ? addrconf_dad_work+0xa04/0x14b0 [ 66.706464][ C1] addrconf_dad_work+0xaae/0x14b0 [ 66.708194][ C1] ? __lock_acquire+0xab9/0xd20 [ 66.709842][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 66.711731][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 66.713798][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 66.715505][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 66.717265][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 66.718901][ C1] process_scheduled_works+0xae1/0x17b0 [ 66.720497][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 66.722225][ C1] worker_thread+0x8a0/0xda0 [ 66.723572][ C1] kthread+0x711/0x8a0 [ 66.724752][ C1] ? __pfx_worker_thread+0x10/0x10 [ 66.726315][ C1] ? __pfx_kthread+0x10/0x10 [ 66.727687][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 66.729206][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 66.730719][ C1] ? __pfx_kthread+0x10/0x10 [ 66.732086][ C1] ret_from_fork+0x3fc/0x770 [ 66.733447][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 66.735002][ C1] ? __switch_to_asm+0x39/0x70 [ 66.736497][ C1] ? __switch_to_asm+0x33/0x70 [ 66.738183][ C1] ? __pfx_kthread+0x10/0x10 [ 66.739559][ C1] ret_from_fork_asm+0x1a/0x30 [ 66.740959][ C1] [ 66.742510][ C1] Kernel Offset: disabled [ 66.743832][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:13:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff90414901 RCX=43b41898af8b7300 RDX=ffffc90000007701 RSI=ffffffff8be333e0 RDI=ffffffff8be333a0 RBP=dffffc0000000000 RSP=ffffc90000007640 R8 =ffffc90000007a20 R9 =0000000000000000 R10=ffffc900000077f8 R11=fffff52000000f01 R12=ffffc90000007a30 R13=ffffffff8172c195 R14=ffffffff8e139ee0 R15=ffffffff8172c195 RIP=ffffffff8b79a199 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c00007b098 ffffffff 00c00000 GS =0000 ffff8880b861b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000003168d40 CR3=0000000027716000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=9d615df19d615df1 9d615df19d615df1 XMM01=8a668df68a668df6 8a668df68a668df6 XMM02=cd8ec0d0cd8ec0d0 cd8ec0d0cd8ec0d0 XMM03=0f59b8bb0f59b8bb 0f59b8bb0f59b8bb XMM04=696e02b3fe1329e3 91fcffaf0ef7b761 XMM05=785c0ce145e2b9fc 0ec22390ac215063 XMM06=8ba4465f5115be3c f2c9d62a12c84191 XMM07=b5be450455f817ab f24ef5ac19274a33 XMM08=d34255d93264c3ad de6d7e63a4363bd5 XMM09=d4b5c994861081d5 b12e6cb10f5a7f70 XMM10=7a44f78fa81b344c 9ac5562e93faa6d0 XMM11=87774c3f76ed3395 c3ede7f1abf315aa XMM12=e07fab9de07fab9d e07fab9de07fab9d XMM13=9733f3cc9733f3cc 9733f3cc9733f3cc XMM14=01a52ca401a52ca4 01a52ca401a52ca4 XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfb10 R8 =ffff8881065a0237 R9 =1ffff11020cb4046 R10=dffffc0000000000 R11=ffffffff854efeb0 R12=dffffc0000000000 R13=ffffffff99afa8ff R14=ffffffff99def3a0 R15=0000000000000000 RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8881a3c1b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000002f6a520 CR3=0000000027716000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 40aa6f3cba4ddb21 XMM02=21679afb21679afb 21679afb21679afb XMM03=2498a94f2498a94f 2498a94f2498a94f XMM04=7949e02281280651 bfd52e3e1be165e8 XMM05=5160045b4e1ba7c8 8e2ec68bc3895c0e XMM06=82da5e6ec1dc92dd ccdd080d3784a36b XMM07=c209e56f381715e7 8e461e279a690d65 XMM08=ac0e61128943cee3 f2e2dec890caf521 XMM09=6ff07c522fd16b3c d6c89359cd322695 XMM10=73a1431e1ec142db de1b93ba7bc59daf XMM11=0ab348dcc21f9221 0db6bd122067e136 XMM12=c13ae5bdc13ae5bd c13ae5bdc13ae5bd XMM13=5c210d515c210d51 5c210d515c210d51 XMM14=d0a22657d0a22657 d0a22657d0a22657 XMM15=0000000000000000 0000000000000000