last executing test programs:
0s ago: executing program 0 (id=1):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x11}}], 0x1, 0x24008094)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts.
[ 85.816233][ T5855] cgroup: Unknown subsys name 'net'
[ 85.951879][ T5855] cgroup: Unknown subsys name 'cpuset'
[ 85.961858][ T5855] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 87.651520][ T5855] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 90.379637][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 90.388624][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 90.408284][ T5881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 90.411239][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 90.423258][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 90.431134][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 90.440573][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.448490][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 90.448501][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 90.463477][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.471291][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 90.480125][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.487232][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 90.495191][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 90.500502][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 90.502650][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.511754][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 90.517966][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 90.531211][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.542818][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 91.083959][ T5866] chnl_net:caif_netlink_parms(): no params data found
[ 91.163325][ T5865] chnl_net:caif_netlink_parms(): no params data found
[ 91.269443][ T5868] chnl_net:caif_netlink_parms(): no params data found
[ 91.371218][ T5864] chnl_net:caif_netlink_parms(): no params data found
[ 91.425610][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.433035][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.441436][ T5865] bridge_slave_0: entered allmulticast mode
[ 91.449118][ T5865] bridge_slave_0: entered promiscuous mode
[ 91.458597][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.465780][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.473154][ T5865] bridge_slave_1: entered allmulticast mode
[ 91.481409][ T5865] bridge_slave_1: entered promiscuous mode
[ 91.488905][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.496048][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.503984][ T5866] bridge_slave_0: entered allmulticast mode
[ 91.511740][ T5866] bridge_slave_0: entered promiscuous mode
[ 91.559148][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.566343][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.574060][ T5866] bridge_slave_1: entered allmulticast mode
[ 91.582771][ T5866] bridge_slave_1: entered promiscuous mode
[ 91.652864][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 91.698768][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.724733][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 91.734190][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.741767][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.749111][ T5868] bridge_slave_0: entered allmulticast mode
[ 91.756412][ T5868] bridge_slave_0: entered promiscuous mode
[ 91.795281][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 91.820644][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.828110][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.835276][ T5868] bridge_slave_1: entered allmulticast mode
[ 91.843858][ T5868] bridge_slave_1: entered promiscuous mode
[ 91.866711][ T5865] team0: Port device team_slave_0 added
[ 91.899565][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.906791][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.914719][ T5864] bridge_slave_0: entered allmulticast mode
[ 91.922918][ T5864] bridge_slave_0: entered promiscuous mode
[ 91.933491][ T5865] team0: Port device team_slave_1 added
[ 91.941381][ T5866] team0: Port device team_slave_0 added
[ 91.967419][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.974636][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.982361][ T5864] bridge_slave_1: entered allmulticast mode
[ 91.989806][ T5864] bridge_slave_1: entered promiscuous mode
[ 92.011330][ T5866] team0: Port device team_slave_1 added
[ 92.021844][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.077513][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.114051][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.130345][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.141177][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.170841][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.184415][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.191913][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.218413][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.265923][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.303993][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.311338][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.337774][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.415963][ T5864] team0: Port device team_slave_0 added
[ 92.423245][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.432475][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.459466][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.483649][ T5868] team0: Port device team_slave_0 added
[ 92.512049][ T5864] team0: Port device team_slave_1 added
[ 92.536830][ T5868] team0: Port device team_slave_1 added
[ 92.550417][ T5865] hsr_slave_0: entered promiscuous mode
[ 92.557014][ T5865] hsr_slave_1: entered promiscuous mode
[ 92.567978][ T5878] Bluetooth: hci2: command tx timeout
[ 92.568219][ T5881] Bluetooth: hci0: command tx timeout
[ 92.573848][ T5188] Bluetooth: hci3: command tx timeout
[ 92.595832][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.603520][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.629975][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.647291][ T5188] Bluetooth: hci1: command tx timeout
[ 92.688018][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.695016][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.721481][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.748004][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.754999][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.781086][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.821630][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.828819][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.854768][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.884774][ T5866] hsr_slave_0: entered promiscuous mode
[ 92.892724][ T5866] hsr_slave_1: entered promiscuous mode
[ 92.899171][ T5866] debugfs: 'hsr0' already exists in 'hsr'
[ 92.904988][ T5866] Cannot create hsr debugfs directory
[ 92.999192][ T5864] hsr_slave_0: entered promiscuous mode
[ 93.005856][ T5864] hsr_slave_1: entered promiscuous mode
[ 93.012355][ T5864] debugfs: 'hsr0' already exists in 'hsr'
[ 93.018184][ T5864] Cannot create hsr debugfs directory
[ 93.115074][ T5868] hsr_slave_0: entered promiscuous mode
[ 93.122666][ T5868] hsr_slave_1: entered promiscuous mode
[ 93.129362][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[ 93.135239][ T5868] Cannot create hsr debugfs directory
[ 93.551000][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.587564][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.614576][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.634015][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.673667][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 93.697486][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 93.709353][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 93.730663][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 93.792433][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 93.824729][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 93.845227][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 93.870904][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 93.916708][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 93.943859][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 93.955936][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 93.987792][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 94.151038][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.219850][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.232427][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.252496][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.286000][ T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.293380][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.311109][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.318344][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.333503][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.366645][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.373951][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.401989][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.413466][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.431635][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.438933][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.454456][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.461767][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.500909][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.531557][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.538820][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.551261][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.558445][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.569438][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.576785][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.648600][ T5878] Bluetooth: hci3: command tx timeout
[ 94.654187][ T5878] Bluetooth: hci2: command tx timeout
[ 94.661744][ T5188] Bluetooth: hci0: command tx timeout
[ 94.696285][ T5864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 94.706853][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 94.727441][ T5188] Bluetooth: hci1: command tx timeout
[ 95.076064][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.217345][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.319674][ T5865] veth0_vlan: entered promiscuous mode
[ 95.349760][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.373784][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.386988][ T5865] veth1_vlan: entered promiscuous mode
[ 95.435409][ T5864] veth0_vlan: entered promiscuous mode
[ 95.456770][ T5864] veth1_vlan: entered promiscuous mode
[ 95.487105][ T5865] veth0_macvtap: entered promiscuous mode
[ 95.513664][ T5865] veth1_macvtap: entered promiscuous mode
[ 95.555695][ T5866] veth0_vlan: entered promiscuous mode
[ 95.576154][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.584751][ T5868] veth0_vlan: entered promiscuous mode
[ 95.599101][ T5866] veth1_vlan: entered promiscuous mode
[ 95.614882][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.636837][ T5864] veth0_macvtap: entered promiscuous mode
[ 95.660415][ T5868] veth1_vlan: entered promiscuous mode
[ 95.669641][ T5864] veth1_macvtap: entered promiscuous mode
[ 95.676642][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.694286][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.706532][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.716724][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.769542][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.820329][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.866182][ T5866] veth0_macvtap: entered promiscuous mode
[ 95.880261][ T5868] veth0_macvtap: entered promiscuous mode
[ 95.898485][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.909410][ T5866] veth1_macvtap: entered promiscuous mode
[ 95.925719][ T3036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.932922][ T5868] veth1_macvtap: entered promiscuous mode
[ 95.940863][ T3036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.946352][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.959500][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.985844][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.034792][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.049666][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.066213][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.091198][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.108257][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.119036][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.161128][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 96.193656][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.202812][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.221533][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.230191][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.245298][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.258934][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.297859][ T1165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.343884][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.392973][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.404115][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.433180][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.436830][ T5959] ------------[ cut here ]------------
[ 96.446762][ T5959] 'send_pkt()' returns 0, but 65536 expected
[ 96.456582][ T5959] WARNING: net/vmw_vsock/virtio_transport_common.c:428 at virtio_transport_send_pkt_info+0xd11/0xf00, CPU#0: syz.0.1/5959
[ 96.469717][ T5959] Modules linked in:
[ 96.474044][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: syz.0.1 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full)
[ 96.485254][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 96.495681][ T5959] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00
[ 96.502660][ T5959] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 0a bb 5d f6 c6 05 c7 7a 6c 04 01 90 48 c7 c7 c0 67 da 8c 44 89 f6 4c 89 ea e8 60 51 21 f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 e1 ba 5d f6 90 0f 0b 90 e9 c5 f7 ff
[ 96.522553][ T5959] RSP: 0018:ffffc9000456f530 EFLAGS: 00010246
[ 96.528714][ T5959] RAX: f21f5a94a4a1b700 RBX: 0000000000010000 RCX: 0000000000080000
[ 96.536732][ T5959] RDX: ffffc9000bc92000 RSI: 0000000000017581 RDI: 0000000000017582
[ 96.544974][ T5959] RBP: ffffffff8fc8be10 R08: 0000000000000003 R09: 0000000000000004
[ 96.553043][ T5959] R10: dffffc0000000000 R11: fffffbfff1c7a1ec R12: dffffc0000000000
[ 96.560763][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.561242][ T5959] R13: 0000000000010000 R14: 0000000000000000 R15: ffff888058c393a4
[ 96.576937][ T5959] FS: 00007f1b9ebc46c0(0000) GS:ffff8881257db000(0000) knlGS:0000000000000000
[ 96.586308][ T5959] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 96.593010][ T5959] CR2: 000020000003f000 CR3: 0000000076b98000 CR4: 00000000003526f0
[ 96.601101][ T5959] Call Trace:
[ 96.604514][ T5959]
[ 96.607527][ T5959] ? lockdep_hardirqs_on+0x9c/0x150
[ 96.612900][ T5959] virtio_transport_seqpacket_enqueue+0x143/0x1c0
[ 96.619452][ T5959] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10
[ 96.626438][ T5959] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 96.632997][ T5959] ? do_raw_spin_unlock+0x122/0x240
[ 96.638339][ T5959] ? remove_wait_queue+0x33/0x120
[ 96.643436][ T5959] vsock_connectible_sendmsg+0xac7/0x1050
[ 96.649914][ T5959] ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[ 96.652549][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.656146][ T5959] ? __pfx_aa_sk_perm+0x10/0x10
[ 96.656185][ T5959] ? __pfx_woken_wake_function+0x10/0x10
[ 96.674826][ T5959] ? aa_sock_msg_perm+0xf1/0x1d0
[ 96.680124][ T5959] ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 96.685657][ T5959] ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[ 96.692625][ T5959] __sock_sendmsg+0x21c/0x270
[ 96.696864][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.697509][ T5959] ____sys_sendmsg+0x52d/0x830
[ 96.697549][ T5959] ? __pfx_____sys_sendmsg+0x10/0x10
[ 96.697587][ T5959] ? import_iovec+0x74/0xa0
[ 96.697621][ T5959] ___sys_sendmsg+0x21f/0x2a0
[ 96.697651][ T5959] ? __pfx____sys_sendmsg+0x10/0x10
[ 96.697716][ T5959] ? __fget_files+0x2a/0x420
[ 96.733438][ T5188] Bluetooth: hci3: command tx timeout
[ 96.734613][ T5959] ? __fget_files+0x3a0/0x420
[ 96.742575][ T5188] Bluetooth: hci0: command tx timeout
[ 96.744957][ T5959] __sys_sendmmsg+0x227/0x430
[ 96.750559][ T5878] Bluetooth: hci2: command tx timeout
[ 96.755114][ T5959] ? __pfx___sys_sendmmsg+0x10/0x10
[ 96.765756][ T5959] ? do_futex+0x395/0x420
[ 96.770284][ T5959] ? rcu_is_watching+0x15/0xb0
[ 96.775119][ T5959] __x64_sys_sendmmsg+0xa0/0xc0
[ 96.780317][ T5959] do_syscall_64+0xfa/0x3b0
[ 96.785187][ T5959] ? lockdep_hardirqs_on+0x9c/0x150
[ 96.790552][ T5959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.796674][ T5959] ? clear_bhb_loop+0x60/0xb0
[ 96.801547][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.808861][ T5959] RIP: 0033:0x7f1b9dd8ebe9
[ 96.813349][ T5959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 96.813860][ T5868] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht'
[ 96.833161][ T5959] RSP: 002b:00007f1b9ebc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 96.833194][ T5959] RAX: ffffffffffffffda RBX: 00007f1b9dfb5fa0 RCX: 00007f1b9dd8ebe9
[ 96.833213][ T5959] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[ 96.833229][ T5959] RBP: 00007f1b9de11e19 R08: 0000000000000000 R09: 0000000000000000
[ 96.833244][ T5959] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000
[ 96.833259][ T5959] R13: 00007f1b9dfb6038 R14: 00007f1b9dfb5fa0 R15: 00007ffda9c2ee38
[ 96.833297][ T5959]
[ 96.833310][ T5959] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 96.833327][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: syz.0.1 Not tainted 6.16.0-next-20250808-syzkaller #0 PREEMPT(full)
[ 96.833354][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 96.833369][ T5959] Call Trace:
[ 96.833378][ T5959]
[ 96.833388][ T5959] dump_stack_lvl+0x99/0x250
[ 96.833428][ T5959] ? __asan_memcpy+0x40/0x70
[ 96.833463][ T5959] ? __pfx_dump_stack_lvl+0x10/0x10
[ 96.833497][ T5959] ? __pfx__printk+0x10/0x10
[ 96.833546][ T5959] vpanic+0x281/0x750
[ 96.833575][ T5959] ? __pfx__printk+0x10/0x10
[ 96.833608][ T5959] ? __pfx_vpanic+0x10/0x10
[ 96.833635][ T5959] ? is_bpf_text_address+0x292/0x2b0
[ 96.833662][ T5959] ? is_bpf_text_address+0x26/0x2b0
[ 96.833711][ T5959] panic+0xb9/0xc0
[ 96.833736][ T5959] ? __pfx_panic+0x10/0x10
[ 96.833780][ T5959] __warn+0x334/0x4c0
[ 96.833806][ T5959] ? virtio_transport_send_pkt_info+0xd11/0xf00
[ 96.833842][ T5959] ? virtio_transport_send_pkt_info+0xd11/0xf00
[ 96.833869][ T5959] report_bug+0x2be/0x4f0
[ 96.833894][ T5959] ? virtio_transport_send_pkt_info+0xd11/0xf00
[ 96.833925][ T5959] ? virtio_transport_send_pkt_info+0xd11/0xf00
[ 96.833959][ T5959] ? virtio_transport_send_pkt_info+0xd13/0xf00
[ 96.833995][ T5959] handle_bug+0x84/0x160
[ 96.834024][ T5959] exc_invalid_op+0x1a/0x50
[ 96.834048][ T5959] asm_exc_invalid_op+0x1a/0x20
[ 96.834072][ T5959] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00
[ 96.834107][ T5959] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 0a bb 5d f6 c6 05 c7 7a 6c 04 01 90 48 c7 c7 c0 67 da 8c 44 89 f6 4c 89 ea e8 60 51 21 f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 e1 ba 5d f6 90 0f 0b 90 e9 c5 f7 ff
[ 96.834128][ T5959] RSP: 0018:ffffc9000456f530 EFLAGS: 00010246
[ 96.834158][ T5959] RAX: f21f5a94a4a1b700 RBX: 0000000000010000 RCX: 0000000000080000
[ 96.834176][ T5959] RDX: ffffc9000bc92000 RSI: 0000000000017581 RDI: 0000000000017582
[ 96.834194][ T5959] RBP: ffffffff8fc8be10 R08: 0000000000000003 R09: 0000000000000004
[ 96.834209][ T5959] R10: dffffc0000000000 R11: fffffbfff1c7a1ec R12: dffffc0000000000
[ 96.834229][ T5959] R13: 0000000000010000 R14: 0000000000000000 R15: ffff888058c393a4
[ 96.834269][ T5959] ? lockdep_hardirqs_on+0x9c/0x150
[ 96.834326][ T5959] virtio_transport_seqpacket_enqueue+0x143/0x1c0
[ 96.834363][ T5959] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10
[ 96.834398][ T5959] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 96.834430][ T5959] ? do_raw_spin_unlock+0x122/0x240
[ 96.834473][ T5959] ? remove_wait_queue+0x33/0x120
[ 96.834517][ T5959] vsock_connectible_sendmsg+0xac7/0x1050
[ 96.834578][ T5959] ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[ 96.834617][ T5959] ? __pfx_aa_sk_perm+0x10/0x10
[ 96.834651][ T5959] ? __pfx_woken_wake_function+0x10/0x10
[ 96.834681][ T5959] ? aa_sock_msg_perm+0xf1/0x1d0
[ 96.834719][ T5959] ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 96.834753][ T5959] ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[ 96.834792][ T5959] __sock_sendmsg+0x21c/0x270
[ 96.834833][ T5959] ____sys_sendmsg+0x52d/0x830
[ 96.834868][ T5959] ? __pfx_____sys_sendmsg+0x10/0x10
[ 96.834907][ T5959] ? import_iovec+0x74/0xa0
[ 96.834941][ T5959] ___sys_sendmsg+0x21f/0x2a0
[ 96.834973][ T5959] ? __pfx____sys_sendmsg+0x10/0x10
[ 96.835044][ T5959] ? __fget_files+0x2a/0x420
[ 96.835077][ T5959] ? __fget_files+0x3a0/0x420
[ 96.835123][ T5959] __sys_sendmmsg+0x227/0x430
[ 96.835165][ T5959] ? __pfx___sys_sendmmsg+0x10/0x10
[ 96.835189][ T5959] ? do_futex+0x395/0x420
[ 96.835250][ T5959] ? rcu_is_watching+0x15/0xb0
[ 96.835291][ T5959] __x64_sys_sendmmsg+0xa0/0xc0
[ 96.835322][ T5959] do_syscall_64+0xfa/0x3b0
[ 96.835343][ T5959] ? lockdep_hardirqs_on+0x9c/0x150
[ 96.835380][ T5959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.835405][ T5959] ? clear_bhb_loop+0x60/0xb0
[ 96.835437][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 96.835461][ T5959] RIP: 0033:0x7f1b9dd8ebe9
[ 96.835485][ T5959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 96.835505][ T5959] RSP: 002b:00007f1b9ebc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 96.835529][ T5959] RAX: ffffffffffffffda RBX: 00007f1b9dfb5fa0 RCX: 00007f1b9dd8ebe9
[ 96.835548][ T5959] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004
[ 96.835564][ T5959] RBP: 00007f1b9de11e19 R08: 0000000000000000 R09: 0000000000000000
[ 96.835580][ T5959] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000
[ 96.835594][ T5959] R13: 00007f1b9dfb6038 R14: 00007f1b9dfb5fa0 R15: 00007ffda9c2ee38
[ 96.835633][ T5959]
[ 96.841932][ T5959] Kernel Offset: disabled