program:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611181000000000018000000003a5600000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="070000000c000000083e4c153693c5166f1bf167f0a07ebba702000021dfa08a1aca50daca41d99ef53c6f93cd084a869dc1ebb68018b72a48800212d66f7bc6796d30841444ff79e44a62676fdf946a048ea89d92d2030892e2ac6175720d78fb6746b5bf2baa9871d028572bf0b39331e59365d7879ed4c9aaa575f6789405feb4e2b8fac205e8190acb5066"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
listen(r0, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r3, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xfdef)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x11}}], 0x1, 0x24008094)
[ 68.111111][ T5333] Bluetooth: hci0: command tx timeout
[ 68.175978][ T5354] ------------[ cut here ]------------
[ 68.178512][ T5354] 'send_pkt()' returns 0, but 65536 expected
[ 68.184849][ T5354] WARNING: CPU: 0 PID: 5354 at net/vmw_vsock/virtio_transport_common.c:428 virtio_transport_send_pkt_info+0xd11/0xf00
[ 68.191433][ T5354] Modules linked in:
[ 68.193211][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 68.197605][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.202640][ T5354] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00
[ 68.206470][ T5354] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 0a 2f 64 f6 c6 05 5e 20 32 04 01 90 48 c7 c7 00 da b8 8c 44 89 f6 4c 89 ea e8 e0 bd 27 f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 e1 2e 64 f6 90 0f 0b 90 e9 c5 f7 ff
[ 68.215520][ T5354] RSP: 0018:ffffc9000d4a7530 EFLAGS: 00010246
[ 68.218093][ T5354] RAX: 898ed8c3e6d17500 RBX: 0000000000010000 RCX: 0000000000100000
[ 68.222021][ T5354] RDX: ffffc9000dde2000 RSI: 0000000000008560 RDI: 0000000000008561
[ 68.225614][ T5354] RBP: ffffffff8f87a5d0 R08: ffff88801fc24253 R09: 1ffff11003f8484a
[ 68.229180][ T5354] R10: dffffc0000000000 R11: ffffed1003f8484b R12: dffffc0000000000
[ 68.232630][ T5354] R13: 0000000000010000 R14: 0000000000000000 R15: ffff888052caa724
[ 68.236164][ T5354] FS: 00007efd1d73a6c0(0000) GS:ffff88808d20f000(0000) knlGS:0000000000000000
[ 68.240181][ T5354] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.243000][ T5354] CR2: 000020000003f000 CR3: 000000003f900000 CR4: 0000000000352ef0
[ 68.246311][ T5354] Call Trace:
[ 68.247679][ T5354]
[ 68.248993][ T5354] ? lockdep_hardirqs_on+0x9c/0x150
[ 68.251487][ T5354] virtio_transport_seqpacket_enqueue+0x143/0x1c0
[ 68.254471][ T5354] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10
[ 68.257393][ T5354] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 68.260496][ T5354] ? do_raw_spin_unlock+0x4d/0x240
[ 68.262990][ T5354] ? remove_wait_queue+0x33/0x120
[ 68.265470][ T5354] vsock_connectible_sendmsg+0xac4/0x1050
[ 68.268142][ T5354] ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[ 68.271086][ T5354] ? __pfx_aa_sk_perm+0x10/0x10
[ 68.273680][ T5354] ? __pfx_woken_wake_function+0x10/0x10
[ 68.276406][ T5354] ? aa_sock_msg_perm+0xf1/0x1d0
[ 68.279187][ T5354] ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 68.281631][ T5354] ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[ 68.284157][ T5354] __sock_sendmsg+0x21c/0x270
[ 68.286073][ T5354] ____sys_sendmsg+0x52d/0x830
[ 68.288112][ T5354] ? __pfx_____sys_sendmsg+0x10/0x10
[ 68.290831][ T5354] ? import_iovec+0x74/0xa0
[ 68.292843][ T5354] ___sys_sendmsg+0x21f/0x2a0
[ 68.294866][ T5354] ? __pfx____sys_sendmsg+0x10/0x10
[ 68.297123][ T5354] ? __fget_files+0x2a/0x420
[ 68.299276][ T5354] ? __fget_files+0x3a0/0x420
[ 68.301323][ T5354] __sys_sendmmsg+0x227/0x430
[ 68.303420][ T5354] ? __pfx___sys_sendmmsg+0x10/0x10
[ 68.306079][ T5354] ? rcu_is_watching+0x15/0xb0
[ 68.308551][ T5354] ? rcu_is_watching+0x15/0xb0
[ 68.310759][ T5354] __x64_sys_sendmmsg+0xa0/0xc0
[ 68.312969][ T5354] do_syscall_64+0xfa/0x3b0
[ 68.314942][ T5354] ? lockdep_hardirqs_on+0x9c/0x150
[ 68.317184][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.319918][ T5354] ? clear_bhb_loop+0x60/0xb0
[ 68.321817][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.324199][ T5354] RIP: 0033:0x7efd1c98ebe9
[ 68.326107][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.334227][ T5354] RSP: 002b:00007efd1d73a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 68.337905][ T5354] RAX: ffffffffffffffda RBX: 00007efd1cbb5fa0 RCX: 00007efd1c98ebe9
[ 68.341425][ T5354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006
[ 68.345083][ T5354] RBP: 00007efd1ca11e19 R08: 0000000000000000 R09: 0000000000000000
[ 68.348843][ T5354] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000
[ 68.352349][ T5354] R13: 00007efd1cbb6038 R14: 00007efd1cbb5fa0 R15: 00007ffdb1a975a8
[ 68.355921][ T5354]
[ 68.357399][ T5354] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 68.360744][ T5354] CPU: 0 UID: 0 PID: 5354 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 68.364767][ T5354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 68.369395][ T5354] Call Trace:
[ 68.370842][ T5354]
[ 68.372201][ T5354] dump_stack_lvl+0x99/0x250
[ 68.374300][ T5354] ? __asan_memcpy+0x40/0x70
[ 68.376337][ T5354] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.378620][ T5354] ? __pfx__printk+0x10/0x10
[ 68.380560][ T5354] vpanic+0x281/0x750
[ 68.382325][ T5354] ? __pfx__printk+0x10/0x10
[ 68.384391][ T5354] ? __pfx_vpanic+0x10/0x10
[ 68.386400][ T5354] ? is_bpf_text_address+0x292/0x2b0
[ 68.388612][ T5354] panic+0xb9/0xc0
[ 68.390303][ T5354] ? __pfx_panic+0x10/0x10
[ 68.392333][ T5354] __warn+0x31b/0x4b0
[ 68.394141][ T5354] ? virtio_transport_send_pkt_info+0xd11/0xf00
[ 68.396755][ T5354] ? virtio_transport_send_pkt_info+0xd11/0xf00
[ 68.399367][ T5354] report_bug+0x2be/0x4f0
[ 68.401316][ T5354] ? virtio_transport_send_pkt_info+0xd11/0xf00
[ 68.404168][ T5354] ? virtio_transport_send_pkt_info+0xd11/0xf00
[ 68.406912][ T5354] ? virtio_transport_send_pkt_info+0xd13/0xf00
[ 68.409373][ T5354] handle_bug+0x84/0x160
[ 68.411105][ T5354] exc_invalid_op+0x1a/0x50
[ 68.413046][ T5354] asm_exc_invalid_op+0x1a/0x20
[ 68.415145][ T5354] RIP: 0010:virtio_transport_send_pkt_info+0xd11/0xf00
[ 68.418105][ T5354] Code: 0f 0b 90 bd f2 ff ff ff eb bc e8 0a 2f 64 f6 c6 05 5e 20 32 04 01 90 48 c7 c7 00 da b8 8c 44 89 f6 4c 89 ea e8 e0 bd 27 f6 90 <0f> 0b 90 90 e9 e1 fe ff ff e8 e1 2e 64 f6 90 0f 0b 90 e9 c5 f7 ff
[ 68.427926][ T5354] RSP: 0018:ffffc9000d4a7530 EFLAGS: 00010246
[ 68.431216][ T5354] RAX: 898ed8c3e6d17500 RBX: 0000000000010000 RCX: 0000000000100000
[ 68.435222][ T5354] RDX: ffffc9000dde2000 RSI: 0000000000008560 RDI: 0000000000008561
[ 68.441872][ T5354] RBP: ffffffff8f87a5d0 R08: ffff88801fc24253 R09: 1ffff11003f8484a
[ 68.445158][ T5354] R10: dffffc0000000000 R11: ffffed1003f8484b R12: dffffc0000000000
[ 68.448449][ T5354] R13: 0000000000010000 R14: 0000000000000000 R15: ffff888052caa724
[ 68.451866][ T5354] ? lockdep_hardirqs_on+0x9c/0x150
[ 68.454614][ T5354] virtio_transport_seqpacket_enqueue+0x143/0x1c0
[ 68.457856][ T5354] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10
[ 68.461060][ T5354] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 68.463781][ T5354] ? do_raw_spin_unlock+0x4d/0x240
[ 68.465865][ T5354] ? remove_wait_queue+0x33/0x120
[ 68.468072][ T5354] vsock_connectible_sendmsg+0xac4/0x1050
[ 68.470468][ T5354] ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[ 68.473126][ T5354] ? __pfx_aa_sk_perm+0x10/0x10
[ 68.475195][ T5354] ? __pfx_woken_wake_function+0x10/0x10
[ 68.477525][ T5354] ? aa_sock_msg_perm+0xf1/0x1d0
[ 68.479596][ T5354] ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 68.481884][ T5354] ? __pfx_vsock_connectible_sendmsg+0x10/0x10
[ 68.484652][ T5354] __sock_sendmsg+0x21c/0x270
[ 68.486595][ T5354] ____sys_sendmsg+0x52d/0x830
[ 68.488540][ T5354] ? __pfx_____sys_sendmsg+0x10/0x10
[ 68.490666][ T5354] ? import_iovec+0x74/0xa0
[ 68.492429][ T5354] ___sys_sendmsg+0x21f/0x2a0
[ 68.494253][ T5354] ? __pfx____sys_sendmsg+0x10/0x10
[ 68.496195][ T5354] ? __fget_files+0x2a/0x420
[ 68.497988][ T5354] ? __fget_files+0x3a0/0x420
[ 68.499827][ T5354] __sys_sendmmsg+0x227/0x430
[ 68.501913][ T5354] ? __pfx___sys_sendmmsg+0x10/0x10
[ 68.504473][ T5354] ? rcu_is_watching+0x15/0xb0
[ 68.506908][ T5354] ? rcu_is_watching+0x15/0xb0
[ 68.509199][ T5354] __x64_sys_sendmmsg+0xa0/0xc0
[ 68.511360][ T5354] do_syscall_64+0xfa/0x3b0
[ 68.513335][ T5354] ? lockdep_hardirqs_on+0x9c/0x150
[ 68.515689][ T5354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.518352][ T5354] ? clear_bhb_loop+0x60/0xb0
[ 68.520576][ T5354] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.523171][ T5354] RIP: 0033:0x7efd1c98ebe9
[ 68.525134][ T5354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.533306][ T5354] RSP: 002b:00007efd1d73a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 68.537016][ T5354] RAX: ffffffffffffffda RBX: 00007efd1cbb5fa0 RCX: 00007efd1c98ebe9
[ 68.541443][ T5354] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006
[ 68.545044][ T5354] RBP: 00007efd1ca11e19 R08: 0000000000000000 R09: 0000000000000000
[ 68.548523][ T5354] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000
[ 68.552051][ T5354] R13: 00007efd1cbb6038 R14: 00007efd1cbb5fa0 R15: 00007ffdb1a975a8
[ 68.555370][ T5354]
[ 68.557080][ T5354] Kernel Offset: disabled
[ 68.559036][ T5354] Rebooting in 86400 seconds..