DUID 00:04:83:15:3d:b3:f9:44:11:d6:e6:e1:d9:1f:49:4d:f4:66 forked to background, child pid 3173 [ 32.677122][ T3174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.695035][ T3174] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts. executing program executing program executing program executing program syzkaller login: [ 55.569669][ T3597] ------------[ cut here ]------------ [ 55.575428][ T3597] kernel BUG at drivers/vhost/vhost.c:2335! [ 55.581581][ T3597] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 55.587937][ T3597] CPU: 1 PID: 3597 Comm: vhost-3596 Not tainted 5.17.0-rc4-syzkaller-00054-gf71077a4d84b #0 [ 55.598098][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.608401][ T3597] RIP: 0010:vhost_get_vq_desc+0x1d43/0x22c0 [ 55.614319][ T3597] Code: 00 00 00 48 c7 c6 20 2c 9d 8a 48 c7 c7 98 a6 8e 8d 48 89 ca 48 c1 e1 04 48 01 d9 e8 b7 59 28 fd e9 74 ff ff ff e8 5d c8 a1 fa <0f> 0b e8 56 c8 a1 fa 48 8b 54 24 18 48 b8 00 00 00 00 00 fc ff df [ 55.633936][ T3597] RSP: 0018:ffffc90001d1fb88 EFLAGS: 00010293 [ 55.639989][ T3597] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 55.647952][ T3597] RDX: ffff8880234b0000 RSI: ffffffff86d715c3 RDI: 0000000000000003 [ 55.655916][ T3597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 55.663881][ T3597] R10: ffffffff86d706bc R11: 0000000000000000 R12: ffff888072c24d68 [ 55.672576][ T3597] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888072c24bb0 [ 55.680559][ T3597] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 55.689577][ T3597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.697247][ T3597] CR2: 0000000000000002 CR3: 000000007902c000 CR4: 00000000003506e0 [ 55.706082][ T3597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.714137][ T3597] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.722604][ T3597] Call Trace: [ 55.726096][ T3597] [ 55.729221][ T3597] ? mark_held_locks+0x9f/0xe0 [ 55.733981][ T3597] ? vhost_add_used_and_signal+0x1a0/0x1a0 [ 55.740237][ T3597] ? kasan_quarantine_put+0xf5/0x210 [ 55.746478][ T3597] ? slab_free_freelist_hook+0x8b/0x1c0 [ 55.752146][ T3597] ? vhost_vsock_handle_tx_kick+0x7db/0xa20 [ 55.758260][ T3597] ? kfree+0xd0/0x390 [ 55.762241][ T3597] vhost_vsock_handle_tx_kick+0x277/0xa20 [ 55.767965][ T3597] ? vhost_vsock_dev_release+0x4b0/0x4b0 [ 55.773598][ T3597] ? rwlock_bug.part.0+0x90/0x90 [ 55.778727][ T3597] ? lockdep_hardirqs_on+0x79/0x100 [ 55.783966][ T3597] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 55.789796][ T3597] vhost_worker+0x23d/0x3d0 [ 55.794411][ T3597] ? vhost_dev_reset_owner+0x160/0x160 [ 55.800252][ T3597] kthread+0x2e9/0x3a0 [ 55.804448][ T3597] ? kthread_complete_and_exit+0x40/0x40 [ 55.810356][ T3597] ret_from_fork+0x1f/0x30 [ 55.814831][ T3597] [ 55.818068][ T3597] Modules linked in: [ 55.822500][ T3597] ---[ end trace 0000000000000000 ]--- [ 55.828245][ T3597] RIP: 0010:vhost_get_vq_desc+0x1d43/0x22c0 [ 55.835153][ T3597] Code: 00 00 00 48 c7 c6 20 2c 9d 8a 48 c7 c7 98 a6 8e 8d 48 89 ca 48 c1 e1 04 48 01 d9 e8 b7 59 28 fd e9 74 ff ff ff e8 5d c8 a1 fa <0f> 0b e8 56 c8 a1 fa 48 8b 54 24 18 48 b8 00 00 00 00 00 fc ff df [ 55.855532][ T3597] RSP: 0018:ffffc90001d1fb88 EFLAGS: 00010293 [ 55.861590][ T3597] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 55.869598][ T3597] RDX: ffff8880234b0000 RSI: ffffffff86d715c3 RDI: 0000000000000003 [ 55.877591][ T3597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 55.885589][ T3597] R10: ffffffff86d706bc R11: 0000000000000000 R12: ffff888072c24d68 [ 55.893597][ T3597] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888072c24bb0 [ 55.901773][ T3597] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 55.911169][ T3597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.917788][ T3597] CR2: 0000000000000002 CR3: 000000007902c000 CR4: 00000000003506e0 [ 55.925782][ T3597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.933938][ T3597] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.942334][ T3597] Kernel panic - not syncing: Fatal exception [ 55.948584][ T3597] Kernel Offset: disabled [ 55.952901][ T3597] Rebooting in 86400 seconds..