Warning: Permanently added '[localhost]:20606' (ED25519) to the list of known hosts. 2025/08/12 08:53:49 ignoring optional flag "sandboxArg"="0" 2025/08/12 08:53:51 parsed 1 programs [ 136.307120][ T5721] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 138.085483][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.088644][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.264043][ T5742] chnl_net:caif_netlink_parms(): no params data found [ 141.373583][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.376731][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.379794][ T5742] bridge_slave_0: entered allmulticast mode [ 141.390988][ T5742] bridge_slave_0: entered promiscuous mode [ 141.403277][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.410380][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.417406][ T5742] bridge_slave_1: entered allmulticast mode [ 141.426464][ T5742] bridge_slave_1: entered promiscuous mode [ 141.454151][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.462453][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.488145][ T5742] team0: Port device team_slave_0 added [ 141.494875][ T5742] team0: Port device team_slave_1 added [ 141.515647][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.521147][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.546158][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.554486][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.557739][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.570890][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.605730][ T5742] hsr_slave_0: entered promiscuous mode [ 141.608877][ T5742] hsr_slave_1: entered promiscuous mode [ 142.293883][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.314468][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.333562][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.339897][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.498634][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.544635][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.553154][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.556648][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.574602][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.578479][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.943344][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.014277][ T5742] veth0_vlan: entered promiscuous mode [ 143.045795][ T5742] veth1_vlan: entered promiscuous mode [ 143.091006][ T5742] veth0_macvtap: entered promiscuous mode [ 143.106891][ T5742] veth1_macvtap: entered promiscuous mode [ 143.145138][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.166422][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.197432][ T3075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.225505][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.264694][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.270059][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.487260][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.578315][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.664696][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.435050][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.438475][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.524240][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.557206][ T3075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.560719][ T3075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.044891][ T12] bridge_slave_1: left allmulticast mode [ 146.047536][ T12] bridge_slave_1: left promiscuous mode [ 146.050588][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.153220][ T12] bridge_slave_0: left allmulticast mode [ 146.156001][ T12] bridge_slave_0: left promiscuous mode [ 146.158848][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.733206][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.739242][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.744864][ T12] bond0 (unregistering): Released all slaves [ 146.865206][ T12] hsr_slave_0: left promiscuous mode [ 146.872616][ T12] hsr_slave_1: left promiscuous mode [ 146.882209][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.885676][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.899518][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.903422][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.926715][ T12] veth1_macvtap: left promiscuous mode [ 146.929657][ T12] veth0_macvtap: left promiscuous mode [ 146.942073][ T12] veth1_vlan: left promiscuous mode [ 146.944653][ T12] veth0_vlan: left promiscuous mode [ 147.611959][ T12] team0 (unregistering): Port device team_slave_1 removed [ 147.652853][ T12] team0 (unregistering): Port device team_slave_0 removed [ 149.400799][ T4705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.408955][ T4705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.413617][ T4705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.420135][ T4705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.424835][ T4705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/08/12 08:54:11 executed programs: 0 [ 152.238573][ T5370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.244966][ T5370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.249264][ T5370] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.254249][ T5370] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.257996][ T5370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.647909][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 152.781201][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.793405][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.796539][ T5938] bridge_slave_0: entered allmulticast mode [ 152.812636][ T5938] bridge_slave_0: entered promiscuous mode [ 152.817586][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.820813][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.830908][ T5938] bridge_slave_1: entered allmulticast mode [ 152.843258][ T5938] bridge_slave_1: entered promiscuous mode [ 152.892644][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.914656][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.963881][ T5938] team0: Port device team_slave_0 added [ 152.980074][ T5938] team0: Port device team_slave_1 added [ 153.027712][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.031023][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.053974][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.066048][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.069010][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.102418][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.183977][ T5938] hsr_slave_0: entered promiscuous mode [ 153.193058][ T5938] hsr_slave_1: entered promiscuous mode [ 153.699126][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.722186][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.738008][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.753500][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.900904][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.929769][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.949832][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.953452][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.997470][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.000372][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.036552][ T5938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.040998][ T5938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.287807][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.322625][ T5370] Bluetooth: hci0: command tx timeout [ 154.327574][ T5938] veth0_vlan: entered promiscuous mode [ 154.338913][ T5938] veth1_vlan: entered promiscuous mode [ 154.368250][ T5938] veth0_macvtap: entered promiscuous mode [ 154.374690][ T5938] veth1_macvtap: entered promiscuous mode [ 154.390672][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.404102][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.414674][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.418816][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.428842][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.443620][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.504228][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.507688][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.539920][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.546425][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.617201][ T5984] DEBUG: virtio_transport_alloc_skb: calling fill_skb with payload_len=65536, zcopy=1 [ 154.622454][ T5984] DEBUG: zerocopy_fill_skb_from_iter: initial length=65536, iov_iter_count=262144, iter_type=1 [ 154.627066][ T5984] DEBUG: IOVEC iterator: nr_segs=17, iov_offset=0 [ 154.629732][ T5984] DEBUG: Current iovec[0]: base=0000200000000000, len=262144 [ 154.633553][ T5984] DEBUG: Next iovec[1]: base=0000000000000000, len=0 [ 154.638152][ T5984] DEBUG: zerocopy loop: length=65536, iov_iter_count=262144, frag=0 [ 154.644231][ T5984] DEBUG: iov_iter_get_pages2: maxsize=65536, maxpages=17, iter_count=262144, iter_type=1 [ 154.648499][ T5984] DEBUG: __iov_iter_get_pages_alloc: initial maxsize=65536, i->count=262144 [ 154.652899][ T5984] DEBUG: first_iovec_segment returned addr=200000000000, maxsize_after=65536 [ 154.656883][ T5984] DEBUG: want_pages_array returned n=16, addr=200000000000, start=0 [ 154.660645][ T5984] DEBUG: get_user_pages_fast returned res=16 (requested n=16) [ 154.665784][ T5984] DEBUG: final maxsize=65536, advancing iterator [ 154.668600][ T5984] DEBUG: iov_iter_get_pages2: returning result=65536, start=0, iter_count_after=196608 [ 154.673617][ T5984] DEBUG: iov_iter_get_pages2 returned copied=65536, start=0 [ 154.676983][ T5984] DEBUG: iterator state after get_pages2: iov_iter_count=196608 [ 154.680881][ T5984] DEBUG: after processing: length=0, iov_iter_count=196608, copied=65536 [ 154.686410][ T5984] DEBUG: zerocopy_fill_skb_from_iter: loop exit - length=0, iov_iter_count=196608 [ 154.690376][ T5984] DEBUG: zerocopy_fill_skb_from_iter: final skb->len=65536, skb->data_len=65536 [ 154.696242][ T5984] DEBUG: virtio_transport_fill_skb returned err=0, skb->len=65536 [ 154.699870][ T5984] DEBUG: virtio_transport_alloc_skb: calling fill_skb with payload_len=65536, zcopy=1 [ 154.705769][ T5984] DEBUG: zerocopy_fill_skb_from_iter: initial length=65536, iov_iter_count=196608, iter_type=1 [ 154.710440][ T5984] DEBUG: IOVEC iterator: nr_segs=17, iov_offset=65536 [ 154.714271][ T5984] DEBUG: Current iovec[0]: base=0000200000000000, len=262144 [ 154.717805][ T5984] DEBUG: Next iovec[1]: base=0000000000000000, len=0 [ 154.721089][ T5984] DEBUG: zerocopy loop: length=65536, iov_iter_count=196608, frag=0 [ 154.726937][ T5984] DEBUG: iov_iter_get_pages2: maxsize=65536, maxpages=17, iter_count=196608, iter_type=1 [ 154.731247][ T5984] DEBUG: __iov_iter_get_pages_alloc: initial maxsize=65536, i->count=196608 [ 154.735573][ T5984] DEBUG: first_iovec_segment returned addr=200000010000, maxsize_after=65536 [ 154.740747][ T5984] DEBUG: want_pages_array returned n=16, addr=200000010000, start=0 [ 154.745921][ T5984] DEBUG: get_user_pages_fast returned res=1 (requested n=16) [ 154.749072][ T5984] DEBUG: final maxsize=4096, advancing iterator [ 154.752894][ T5984] DEBUG: iov_iter_get_pages2: returning result=4096, start=0, iter_count_after=192512 [ 154.757874][ T5984] DEBUG: iov_iter_get_pages2 returned copied=4096, start=0 [ 154.761085][ T5984] DEBUG: iterator state after get_pages2: iov_iter_count=192512 [ 154.765847][ T5984] DEBUG: after processing: length=61440, iov_iter_count=192512, copied=4096 [ 154.769982][ T5984] DEBUG: zerocopy loop: length=61440, iov_iter_count=192512, frag=1 [ 154.774601][ T5984] DEBUG: iov_iter_get_pages2: maxsize=61440, maxpages=16, iter_count=192512, iter_type=1 [ 154.779100][ T5984] DEBUG: __iov_iter_get_pages_alloc: initial maxsize=61440, i->count=192512 [ 154.784704][ T5984] DEBUG: first_iovec_segment returned addr=200000011000, maxsize_after=61440 [ 154.788586][ T5984] DEBUG: want_pages_array returned n=15, addr=200000011000, start=0 [ 154.792550][ T5984] DEBUG: get_user_pages_fast returned res=-14 (requested n=15) [ 154.796096][ T5984] DEBUG: iov_iter_get_pages2: returning result=-14, start=0, iter_count_after=192512 [ 154.800622][ T5984] DEBUG: iov_iter_get_pages2 returned copied=-14, start=0 [ 154.810547][ T5984] DEBUG: iterator state after get_pages2: iov_iter_count=192512 [ 154.814592][ T5984] DEBUG: virtio_transport_fill_skb returned err=-14, skb->len=4096 [ 154.818469][ T5984] DEBUG: virtio_transport_alloc_skb: calling fill_skb with payload_len=65536, zcopy=0 [ 154.826206][ T5984] DEBUG: virtio_transport_fill_skb returned err=0, skb->len=65536 [ 154.830271][ T5984] DEBUG: virtio_transport_alloc_skb: calling fill_skb with payload_len=65536, zcopy=0 [ 154.836353][ T5984] DEBUG: virtio_transport_fill_skb returned err=0, skb->len=65536 [ 154.840147][ T5984] DEBUG: virtio_transport_alloc_skb: calling fill_skb with payload_len=65536, zcopy=0 [ 154.847158][ T5984] DEBUG: virtio_transport_fill_skb returned err=-14, skb->len=65536 [ 154.851056][ T5984] DEBUG: virtio_transport_alloc_skb: calling fill_skb with payload_len=65536, zcopy=1 [ 154.856384][ T5984] DEBUG: zerocopy_fill_skb_from_iter: initial length=65536, iov_iter_count=0, iter_type=1 [ 154.861008][ T5984] DEBUG: IOVEC iterator: nr_segs=16, iov_offset=0 [ 154.865507][ T5984] DEBUG: Current iovec[0]: base=0000000000000000, len=0 [ 154.868989][ T5984] DEBUG: Next iovec[1]: base=0000000000000000, len=0 [ 154.872920][ T5984] DEBUG: zerocopy_fill_skb_from_iter: loop exit - length=65536, iov_iter_count=0 [ 154.877133][ T5984] DEBUG: zerocopy_fill_skb_from_iter: final skb->len=0, skb->data_len=0 [ 154.880950][ T5984] DEBUG: virtio_transport_fill_skb returned err=0, skb->len=0 [ 154.887601][ T5984] ------------[ cut here ]------------ [ 154.890297][ T5984] 'send_pkt()' returns 0, but 65536 expected [ 154.895371][ T5984] WARNING: CPU: 0 PID: 5984 at net/vmw_vsock/virtio_transport_common.c:435 virtio_transport_send_pkt_info+0xd11/0xf00 [ 154.901202][ T5984] Modules linked in: [ 154.904170][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: syz.0.17 Not tainted 6.17.0-rc1-syzkaller-g53e760d89498-dirty #0 PREEMPT(full) [ 154.909503][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.914564][ T5984] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00 [ 154.917811][ T5984] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 0a bf 64 f6 c6 05 ba 87 32 04 01 90 48 c7 c7 80 d8 b8 8c 44 89 f6 4c 89 ea e8 c0 4d 28 f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 e1 be 64 f6 90 0f 0b 90 e9 c5 f7 ff [ 154.926682][ T5984] RSP: 0018:ffffc900029cf530 EFLAGS: 00010246 [ 154.929510][ T5984] RAX: 3eb3238673451c00 RBX: 0000000000010000 RCX: ffff888034db0000 [ 154.933380][ T5984] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 154.936992][ T5984] RBP: ffffffff8f879d50 R08: 0000000000000003 R09: 0000000000000004 [ 154.940708][ T5984] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 154.945100][ T5984] R13: 0000000000010000 R14: 0000000000000000 R15: ffff88804fdd20a4 [ 154.949070][ T5984] FS: 00007f24a46d96c0(0000) GS:ffff88808d211000(0000) knlGS:0000000000000000 [ 154.953268][ T5984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.956258][ T5984] CR2: 000020000003f000 CR3: 0000000048de9000 CR4: 0000000000352ef0 [ 154.959858][ T5984] Call Trace: [ 154.961451][ T5984] [ 154.963109][ T5984] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.965426][ T5984] virtio_transport_seqpacket_enqueue+0x143/0x1c0 [ 154.968589][ T5984] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 154.972085][ T5984] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 154.974884][ T5984] ? do_raw_spin_unlock+0x4d/0x240 [ 154.977445][ T5984] ? remove_wait_queue+0x33/0x120 [ 154.979757][ T5984] vsock_connectible_sendmsg+0xac7/0x1050 [ 154.982600][ T5984] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 154.985618][ T5984] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.988196][ T5984] ? __pfx_woken_wake_function+0x10/0x10 [ 154.990850][ T5984] ? aa_sock_msg_perm+0xf1/0x1d0 [ 154.993153][ T5984] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.995568][ T5984] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 154.998436][ T5984] __sock_sendmsg+0x21c/0x270 [ 155.000705][ T5984] ____sys_sendmsg+0x52d/0x830 [ 155.003362][ T5984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.005829][ T5984] ? import_iovec+0x74/0xa0 [ 155.007878][ T5984] ___sys_sendmsg+0x21f/0x2a0 [ 155.010095][ T5984] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.012546][ T5984] ? __fget_files+0x2a/0x420 [ 155.014585][ T5984] ? __fget_files+0x3a0/0x420 [ 155.016952][ T5984] __sys_sendmmsg+0x227/0x430 [ 155.019189][ T5984] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.021843][ T5984] ? do_futex+0x395/0x420 [ 155.023880][ T5984] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 155.026916][ T5984] ? rcu_is_watching+0x15/0xb0 [ 155.029057][ T5984] __x64_sys_sendmmsg+0xa0/0xc0 [ 155.031292][ T5984] do_syscall_64+0xfa/0x3b0 [ 155.033410][ T5984] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.036316][ T5984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.039555][ T5984] ? clear_bhb_loop+0x60/0xb0 [ 155.041982][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.044539][ T5984] RIP: 0033:0x7f24a378ebe9 [ 155.047099][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.055789][ T5984] RSP: 002b:00007f24a46d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.059456][ T5984] RAX: ffffffffffffffda RBX: 00007f24a39b5fa0 RCX: 00007f24a378ebe9 [ 155.063301][ T5984] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 155.066937][ T5984] RBP: 00007f24a3811e19 R08: 0000000000000000 R09: 0000000000000000 [ 155.070455][ T5984] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 155.074102][ T5984] R13: 00007f24a39b6038 R14: 00007f24a39b5fa0 R15: 00007ffcbd16bc88 [ 155.077834][ T5984] [ 155.079357][ T5984] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.082851][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: syz.0.17 Not tainted 6.17.0-rc1-syzkaller-g53e760d89498-dirty #0 PREEMPT(full) [ 155.088204][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.092943][ T5984] Call Trace: [ 155.094506][ T5984] [ 155.095956][ T5984] dump_stack_lvl+0x99/0x250 [ 155.098231][ T5984] ? __asan_memcpy+0x40/0x70 [ 155.100463][ T5984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.102811][ T5984] ? __pfx__printk+0x10/0x10 [ 155.104905][ T5984] vpanic+0x281/0x750 [ 155.106858][ T5984] ? __pfx__printk+0x10/0x10 [ 155.109000][ T5984] ? __pfx_vpanic+0x10/0x10 [ 155.111102][ T5984] ? is_bpf_text_address+0x292/0x2b0 [ 155.113500][ T5984] panic+0xb9/0xc0 [ 155.115243][ T5984] ? __pfx_panic+0x10/0x10 [ 155.117270][ T5984] __warn+0x31b/0x4b0 [ 155.119079][ T5984] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 155.121962][ T5984] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 155.124727][ T5984] report_bug+0x2be/0x4f0 [ 155.126801][ T5984] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 155.129556][ T5984] ? virtio_transport_send_pkt_info+0xd11/0xf00 [ 155.132341][ T5984] ? virtio_transport_send_pkt_info+0xd13/0xf00 [ 155.135452][ T5984] handle_bug+0x84/0x160 [ 155.137469][ T5984] exc_invalid_op+0x1a/0x50 [ 155.139588][ T5984] asm_exc_invalid_op+0x1a/0x20 [ 155.142252][ T5984] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00 [ 155.145994][ T5984] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 0a bf 64 f6 c6 05 ba 87 32 04 01 90 48 c7 c7 80 d8 b8 8c 44 89 f6 4c 89 ea e8 c0 4d 28 f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 e1 be 64 f6 90 0f 0b 90 e9 c5 f7 ff [ 155.154460][ T5984] RSP: 0018:ffffc900029cf530 EFLAGS: 00010246 [ 155.157191][ T5984] RAX: 3eb3238673451c00 RBX: 0000000000010000 RCX: ffff888034db0000 [ 155.160639][ T5984] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 155.164183][ T5984] RBP: ffffffff8f879d50 R08: 0000000000000003 R09: 0000000000000004 [ 155.167693][ T5984] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 155.171199][ T5984] R13: 0000000000010000 R14: 0000000000000000 R15: ffff88804fdd20a4 [ 155.175072][ T5984] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.178147][ T5984] virtio_transport_seqpacket_enqueue+0x143/0x1c0 [ 155.181066][ T5984] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 155.184106][ T5984] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.186937][ T5984] ? do_raw_spin_unlock+0x4d/0x240 [ 155.189254][ T5984] ? remove_wait_queue+0x33/0x120 [ 155.191507][ T5984] vsock_connectible_sendmsg+0xac7/0x1050 [ 155.194090][ T5984] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 155.196851][ T5984] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.199091][ T5984] ? __pfx_woken_wake_function+0x10/0x10 [ 155.201549][ T5984] ? aa_sock_msg_perm+0xf1/0x1d0 [ 155.203935][ T5984] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.206402][ T5984] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 155.209119][ T5984] __sock_sendmsg+0x21c/0x270 [ 155.211360][ T5984] ____sys_sendmsg+0x52d/0x830 [ 155.213489][ T5984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.215974][ T5984] ? import_iovec+0x74/0xa0 [ 155.218279][ T5984] ___sys_sendmsg+0x21f/0x2a0 [ 155.220749][ T5984] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.223121][ T5984] ? __fget_files+0x2a/0x420 [ 155.225184][ T5984] ? __fget_files+0x3a0/0x420 [ 155.227299][ T5984] __sys_sendmmsg+0x227/0x430 [ 155.229420][ T5984] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.231735][ T5984] ? do_futex+0x395/0x420 [ 155.233763][ T5984] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 155.236654][ T5984] ? rcu_is_watching+0x15/0xb0 [ 155.238782][ T5984] __x64_sys_sendmmsg+0xa0/0xc0 [ 155.241066][ T5984] do_syscall_64+0xfa/0x3b0 [ 155.243121][ T5984] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.245440][ T5984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.248142][ T5984] ? clear_bhb_loop+0x60/0xb0 [ 155.250289][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.253017][ T5984] RIP: 0033:0x7f24a378ebe9 [ 155.255143][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.263978][ T5984] RSP: 002b:00007f24a46d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.267715][ T5984] RAX: ffffffffffffffda RBX: 00007f24a39b5fa0 RCX: 00007f24a378ebe9 [ 155.271200][ T5984] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 155.274657][ T5984] RBP: 00007f24a3811e19 R08: 0000000000000000 R09: 0000000000000000 [ 155.278082][ T5984] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 155.281609][ T5984] R13: 00007f24a39b6038 R14: 00007f24a39b5fa0 R15: 00007ffcbd16bc88 [ 155.285312][ T5984] [ 155.287145][ T5984] Kernel Offset: disabled [ 155.289188][ T5984] Rebooting in 86400 seconds..