Warning: Permanently added '[localhost]:39204' (ED25519) to the list of known hosts. 2025/11/28 11:23:04 parsed 1 programs syzkaller login: [ 51.249489][ T5805] cgroup: Unknown subsys name 'net' [ 51.375631][ T5805] cgroup: Unknown subsys name 'cpuset' [ 51.379763][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.804081][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.911584][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.094425][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.097377][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.140293][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.143316][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.332003][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 55.397367][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.400171][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.402951][ T5827] bridge_slave_0: entered allmulticast mode [ 55.405919][ T5827] bridge_slave_0: entered promiscuous mode [ 55.409756][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.412372][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.414614][ T5827] bridge_slave_1: entered allmulticast mode [ 55.417225][ T5827] bridge_slave_1: entered promiscuous mode [ 55.454406][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.458798][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.494710][ T5827] team0: Port device team_slave_0 added [ 55.505578][ T5827] team0: Port device team_slave_1 added [ 55.552824][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.555957][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.566890][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.574170][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.577221][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.586465][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.645900][ T5827] hsr_slave_0: entered promiscuous mode [ 55.649944][ T5827] hsr_slave_1: entered promiscuous mode [ 55.795213][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.801509][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.807209][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.811465][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.830058][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.832549][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.835254][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.837583][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.874607][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.886073][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.889080][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.897093][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.904476][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.906666][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.913907][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.916354][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.043001][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.065158][ T5827] veth0_vlan: entered promiscuous mode [ 56.071372][ T5827] veth1_vlan: entered promiscuous mode [ 56.087003][ T5827] veth0_macvtap: entered promiscuous mode [ 56.090707][ T5827] veth1_macvtap: entered promiscuous mode [ 56.100448][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.107294][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.114650][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.117942][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.123117][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.130987][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.207002][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.288822][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.327278][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.407216][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.724596][ T5902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.727667][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.730270][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.733846][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.736206][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/11/28 11:23:12 executed programs: 0 [ 58.074185][ T57] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.077798][ T57] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.080847][ T57] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.089855][ T57] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.096063][ T57] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.211470][ T5912] chnl_net:caif_netlink_parms(): no params data found [ 58.273793][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.276359][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.279102][ T5912] bridge_slave_0: entered allmulticast mode [ 58.282345][ T5912] bridge_slave_0: entered promiscuous mode [ 58.285852][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.288474][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.291358][ T5912] bridge_slave_1: entered allmulticast mode [ 58.295116][ T5912] bridge_slave_1: entered promiscuous mode [ 58.322694][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.327824][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.346019][ T5912] team0: Port device team_slave_0 added [ 58.349290][ T5912] team0: Port device team_slave_1 added [ 58.366264][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.368718][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.377804][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.383198][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.386047][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.396437][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.430543][ T5912] hsr_slave_0: entered promiscuous mode [ 58.433500][ T5912] hsr_slave_1: entered promiscuous mode [ 58.435717][ T5912] debugfs: 'hsr0' already exists in 'hsr' [ 58.437785][ T5912] Cannot create hsr debugfs directory [ 59.120570][ T12] bridge_slave_1: left allmulticast mode [ 59.122923][ T12] bridge_slave_1: left promiscuous mode [ 59.125248][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.131235][ T12] bridge_slave_0: left allmulticast mode [ 59.134352][ T12] bridge_slave_0: left promiscuous mode [ 59.136226][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.342427][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.348811][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.353598][ T12] bond0 (unregistering): Released all slaves [ 59.459405][ T12] hsr_slave_0: left promiscuous mode [ 59.462178][ T12] hsr_slave_1: left promiscuous mode [ 59.464210][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.466503][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.469774][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.473112][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.481037][ T12] veth1_macvtap: left promiscuous mode [ 59.485269][ T12] veth0_macvtap: left promiscuous mode [ 59.487407][ T12] veth1_vlan: left promiscuous mode [ 59.489219][ T12] veth0_vlan: left promiscuous mode [ 59.764952][ T12] team0 (unregistering): Port device team_slave_1 removed [ 59.797590][ T12] team0 (unregistering): Port device team_slave_0 removed [ 60.106343][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.112893][ T57] Bluetooth: hci0: command tx timeout [ 60.115668][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.120048][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.135039][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.196156][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.206321][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.211507][ T3063] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.213895][ T3063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.222891][ T3063] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.225278][ T3063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.642347][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.676171][ T5912] veth0_vlan: entered promiscuous mode [ 60.688956][ T5912] veth1_vlan: entered promiscuous mode [ 60.714207][ T5912] veth0_macvtap: entered promiscuous mode [ 60.722153][ T5912] veth1_macvtap: entered promiscuous mode [ 60.737672][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.750084][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.764027][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.778421][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.792997][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.795797][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.897022][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.901034][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.919998][ T3063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.923938][ T3063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.803370][ T5946] ================================================================== [ 61.806707][ T5946] BUG: KASAN: stack-out-of-bounds in iov_iter_revert+0x4d5/0x5f0 [ 61.809927][ T5946] Read of size 8 at addr ffffc90003847b58 by task syz.0.17/5946 [ 61.814002][ T5946] [ 61.815037][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 61.815052][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 61.815060][ T5946] Call Trace: [ 61.815066][ T5946] [ 61.815073][ T5946] dump_stack_lvl+0x189/0x250 [ 61.815094][ T5946] ? iov_iter_revert+0x4d5/0x5f0 [ 61.815110][ T5946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.815126][ T5946] ? __pfx__printk+0x10/0x10 [ 61.815139][ T5946] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 61.815153][ T5946] ? __zerocopy_sg_from_iter+0x83f/0x9a0 [ 61.815170][ T5946] ? __virt_addr_valid+0xdc/0x5c0 [ 61.815186][ T5946] ? __virt_addr_valid+0xdc/0x5c0 [ 61.815202][ T5946] print_report+0xca/0x240 [ 61.815217][ T5946] ? iov_iter_revert+0x4d5/0x5f0 [ 61.815229][ T5946] kasan_report+0x118/0x150 [ 61.815243][ T5946] ? iov_iter_revert+0x4d5/0x5f0 [ 61.815258][ T5946] iov_iter_revert+0x4d5/0x5f0 [ 61.815273][ T5946] skb_zerocopy_iter_stream+0x27d/0x660 [ 61.815292][ T5946] tcp_sendmsg_locked+0x1815/0x5540 [ 61.815321][ T5946] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 61.815334][ T5946] ? __local_bh_enable_ip+0x12d/0x1c0 [ 61.815348][ T5946] ? __local_bh_enable_ip+0x12d/0x1c0 [ 61.815363][ T5946] tcp_sendmsg+0x2f/0x50 [ 61.815377][ T5946] __sock_sendmsg+0x19c/0x270 [ 61.815395][ T5946] ____sys_sendmsg+0x52d/0x830 [ 61.815411][ T5946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.815427][ T5946] ? import_iovec+0x74/0xa0 [ 61.815442][ T5946] ___sys_sendmsg+0x21f/0x2a0 [ 61.815456][ T5946] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.815480][ T5946] ? __might_fault+0xb0/0x130 [ 61.815498][ T5946] __sys_sendmmsg+0x227/0x430 [ 61.815513][ T5946] ? __pfx___sys_sendmmsg+0x10/0x10 [ 61.815529][ T5946] ? __pfx_do_futex+0x10/0x10 [ 61.815550][ T5946] ? __pfx___se_sys_futex+0x10/0x10 [ 61.815569][ T5946] __x64_sys_sendmmsg+0xa0/0xc0 [ 61.815583][ T5946] do_syscall_64+0xfa/0xfa0 [ 61.815598][ T5946] ? lockdep_hardirqs_on+0x9c/0x150 [ 61.815612][ T5946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.815623][ T5946] ? clear_bhb_loop+0x60/0xb0 [ 61.815636][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.815648][ T5946] RIP: 0033:0x7fe7c078f749 [ 61.815660][ T5946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.815670][ T5946] RSP: 002b:00007fe7c1647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 61.815709][ T5946] RAX: ffffffffffffffda RBX: 00007fe7c09e5fa0 RCX: 00007fe7c078f749 [ 61.815719][ T5946] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000003 [ 61.815726][ T5946] RBP: 00007fe7c0813f91 R08: 0000000000000000 R09: 0000000000000000 [ 61.815733][ T5946] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.815741][ T5946] R13: 00007fe7c09e6038 R14: 00007fe7c09e5fa0 R15: 00007ffd19e95ea8 [ 61.815754][ T5946] [ 61.815759][ T5946] [ 61.910518][ T5946] The buggy address belongs to stack of task syz.0.17/5946 [ 61.912824][ T5946] and is located at offset 280 in frame: [ 61.914635][ T5946] ___sys_sendmsg+0x0/0x2a0 [ 61.916058][ T5946] [ 61.916830][ T5946] This frame has 4 objects: [ 61.918267][ T5946] [32, 88) 'msg.i.i' [ 61.918273][ T5946] [128, 256) 'address' [ 61.919569][ T5946] [288, 416) 'iovstack' [ 61.920922][ T5946] [448, 456) 'iov' [ 61.922277][ T5946] [ 61.924250][ T5946] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90003840000 allocated at copy_process+0x54b/0x3c00 [ 61.928329][ T5946] The buggy address belongs to the physical page: [ 61.930373][ T5946] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1135fc [ 61.933166][ T5946] memcg:ffff88810c5ca102 [ 61.934523][ T5946] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 61.936828][ T5946] raw: 017ff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 61.939536][ T5946] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff88810c5ca102 [ 61.942266][ T5946] page dumped because: kasan: bad access detected [ 61.944319][ T5946] page_owner tracks the page as allocated [ 61.946144][ T5946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5869, tgid 5869 (syz-executor), ts 56973482428, free_ts 56803199363 [ 61.952098][ T5946] post_alloc_hook+0x234/0x290 [ 61.953636][ T5946] get_page_from_freelist+0x2365/0x2440 [ 61.955430][ T5946] __alloc_frozen_pages_noprof+0x181/0x370 [ 61.957290][ T5946] alloc_pages_mpol+0x232/0x4a0 [ 61.958867][ T5946] alloc_pages_noprof+0xa9/0x190 [ 61.960450][ T5946] __vmalloc_node_range_noprof+0x96c/0x12d0 [ 61.962333][ T5946] __vmalloc_node_noprof+0xc2/0x110 [ 61.964004][ T5946] dup_task_struct+0x3d4/0x830 [ 61.965500][ T5946] copy_process+0x54b/0x3c00 [ 61.966938][ T5946] kernel_clone+0x21e/0x840 [ 61.968370][ T5946] __x64_sys_clone+0x18b/0x1e0 [ 61.969882][ T5946] do_syscall_64+0xfa/0xfa0 [ 61.971415][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.973435][ T5946] page last free pid 5845 tgid 5845 stack trace: [ 61.975429][ T5946] __free_frozen_pages+0xbc4/0xd30 [ 61.977053][ T5946] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 61.978839][ T5946] __apply_to_page_range+0xb66/0x13d0 [ 61.980527][ T5946] kasan_release_vmalloc+0xa2/0xd0 [ 61.982135][ T5946] purge_vmap_node+0x214/0x8f0 [ 61.983644][ T5946] __purge_vmap_area_lazy+0x7a4/0xb40 [ 61.985396][ T5946] drain_vmap_area_work+0x27/0x40 [ 61.987226][ T5946] process_scheduled_works+0xae1/0x17b0 [ 61.989365][ T5946] worker_thread+0x8a0/0xda0 [ 61.991114][ T5946] kthread+0x711/0x8a0 [ 61.992524][ T5946] ret_from_fork+0x4bc/0x870 [ 61.994045][ T5946] ret_from_fork_asm+0x1a/0x30 [ 61.995654][ T5946] [ 61.996451][ T5946] Memory state around the buggy address: [ 61.998272][ T5946] ffffc90003847a00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 62.001098][ T5946] ffffc90003847a80: 00 00 00 f2 f2 f2 f2 f2 00 00 00 00 00 00 00 00 [ 62.003740][ T5946] >ffffc90003847b00: 00 00 00 00 00 00 00 00 f2 f2 f2 f2 00 00 00 00 [ 62.006317][ T5946] ^ [ 62.008532][ T5946] ffffc90003847b80: 00 00 00 00 00 00 00 00 00 00 00 00 f2 f2 f2 f2 [ 62.011708][ T5946] ffffc90003847c00: 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.014898][ T5946] ================================================================== [ 62.019433][ T5946] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 62.021813][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 62.024735][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 62.027918][ T5946] Call Trace: [ 62.029090][ T5946] [ 62.030267][ T5946] dump_stack_lvl+0x99/0x250 [ 62.031821][ T5946] ? __asan_memcpy+0x40/0x70 [ 62.033343][ T5946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.035063][ T5946] ? __pfx__printk+0x10/0x10 [ 62.036521][ T5946] vpanic+0x237/0x6d0 [ 62.037826][ T5946] ? __pfx_vpanic+0x10/0x10 [ 62.039339][ T5946] ? preempt_schedule+0xae/0xc0 [ 62.040915][ T5946] ? __pfx_preempt_schedule+0x10/0x10 [ 62.042648][ T5946] panic+0xb9/0xc0 [ 62.043961][ T5946] ? __pfx_panic+0x10/0x10 [ 62.045842][ T5946] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 62.047807][ T5946] ? iov_iter_revert+0x4d5/0x5f0 [ 62.049663][ T5946] check_panic_on_warn+0x89/0xb0 [ 62.051708][ T5946] ? iov_iter_revert+0x4d5/0x5f0 [ 62.053664][ T5946] end_report+0x78/0x160 [ 62.055407][ T5946] kasan_report+0x129/0x150 [ 62.057292][ T5946] ? iov_iter_revert+0x4d5/0x5f0 [ 62.059281][ T5946] iov_iter_revert+0x4d5/0x5f0 [ 62.061257][ T5946] skb_zerocopy_iter_stream+0x27d/0x660 [ 62.063489][ T5946] tcp_sendmsg_locked+0x1815/0x5540 [ 62.065622][ T5946] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 62.067868][ T5946] ? __local_bh_enable_ip+0x12d/0x1c0 [ 62.070078][ T5946] ? __local_bh_enable_ip+0x12d/0x1c0 [ 62.072300][ T5946] tcp_sendmsg+0x2f/0x50 [ 62.074079][ T5946] __sock_sendmsg+0x19c/0x270 [ 62.076012][ T5946] ____sys_sendmsg+0x52d/0x830 [ 62.078018][ T5946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.080194][ T5946] ? import_iovec+0x74/0xa0 [ 62.082070][ T5946] ___sys_sendmsg+0x21f/0x2a0 [ 62.083936][ T5946] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.086111][ T5946] ? __might_fault+0xb0/0x130 [ 62.088049][ T5946] __sys_sendmmsg+0x227/0x430 [ 62.089985][ T5946] ? __pfx___sys_sendmmsg+0x10/0x10 [ 62.092077][ T5946] ? __pfx_do_futex+0x10/0x10 [ 62.094014][ T5946] ? __pfx___se_sys_futex+0x10/0x10 [ 62.096092][ T5946] __x64_sys_sendmmsg+0xa0/0xc0 [ 62.098066][ T5946] do_syscall_64+0xfa/0xfa0 [ 62.099949][ T5946] ? lockdep_hardirqs_on+0x9c/0x150 [ 62.102072][ T5946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.104532][ T5946] ? clear_bhb_loop+0x60/0xb0 [ 62.106433][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.108900][ T5946] RIP: 0033:0x7fe7c078f749 [ 62.110749][ T5946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.118279][ T5946] RSP: 002b:00007fe7c1647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 62.121666][ T5946] RAX: ffffffffffffffda RBX: 00007fe7c09e5fa0 RCX: 00007fe7c078f749 [ 62.124829][ T5946] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000003 [ 62.127476][ T5946] RBP: 00007fe7c0813f91 R08: 0000000000000000 R09: 0000000000000000 [ 62.130324][ T5946] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.133344][ T5946] R13: 00007fe7c09e6038 R14: 00007fe7c09e5fa0 R15: 00007ffd19e95ea8 [ 62.136223][ T5946] [ 62.138099][ T5946] Kernel Offset: disabled [ 62.139796][ T5946] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:23:16 Registers: info registers vcpu 0 CPU#0 RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003846dd0 R8 =ffff8881091d8237 R9 =1ffff1102123b046 R10=dffffc0000000000 R11=ffffffff8514faf0 R12=dffffc0000000000 R13=ffffffff997e3922 R14=ffffffff99af6f40 R15=0000000000000000 RIP=ffffffff8514fb6c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe7c16476c0 ffffffff 00c00000 GS =0000 ffff88818eb31000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe7c1626d58 CR3=000000016d96e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c0815050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c081505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c0815057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c081506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c08150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c08151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c09ba4a8 00007fe7c09ba4a0 00007fe7c09ba498 00007fe7c09ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c151d100 00007fe7c09ba460 00007fe7c09ba478 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c09ba4b8 00007fe7c09ba4b0 00007fe7c09ba4a8 00007fe7c09ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 222109a211eb5369 2a823b7ce19c6624 35033b3c59e69b73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e73d95e6edd1740 6ecee2e8421962d8 d783837c45c58d3b fcac451b61ad3dd6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 184d709e09ebd0ab 27a1b798b4bf7572 574ae2029af883d8 9a97566b0ed61f74 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 628b92de7278934d 3fdbd8394405d2f1 c457618773a06fdf 6ceb4b0f61191432 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=a178193f6a532900 RBX=ffffffff81967b47 RCX=a178193f6a532900 RDX=0000000000000001 RSI=ffffffff8d713f90 RDI=ffffffff8bbf08e0 RBP=ffffc90000197f10 RSP=ffffc90000197de0 R8 =ffff88823c632fdb R9 =1ffff110478c65fb R10=dffffc0000000000 R11=ffffed10478c65fc R12=ffffffff8f7d1a70 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102c154000 RIP=ffffffff8b482dd3 RFL=000002c6 [--SZ-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8882a9f31000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe7c1625f98 CR3=0000000109b77000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd19e96230 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c0815050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c081505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c0815057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c081506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c08150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe7c08151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ac ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000ac ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000