[ 49.494800][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.509445][ T11] device veth1_macvtap left promiscuous mode [ 49.516435][ T11] device veth0_macvtap left promiscuous mode [ 49.523364][ T11] device veth1_vlan left promiscuous mode [ 49.529241][ T11] device veth0_vlan left promiscuous mode [ 49.643854][ T11] team0 (unregistering): Port device team_slave_1 removed [ 49.654761][ T11] team0 (unregistering): Port device team_slave_0 removed [ 49.668297][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.684572][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.727644][ T11] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. [ 65.097787][ T4072] general protection fault, probably for non-canonical address 0xdffffc0000000070: 0000 [#1] PREEMPT SMP KASAN [ 65.109630][ T4072] KASAN: null-ptr-deref in range [0x0000000000000380-0x0000000000000387] [ 65.118039][ T4072] CPU: 1 PID: 4072 Comm: syz-executor200 Not tainted 5.17.0-rc8-syzkaller #0 [ 65.126886][ T4072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.136914][ T4072] RIP: 0010:llc_build_and_send_xid_pkt+0xd3/0x200 [ 65.143331][ T4072] Code: 48 c1 ea 03 80 3c 02 00 0f 85 3a 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 10 48 8d bb 80 03 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0a 01 00 00 48 8b b3 80 03 00 00 48 8d 7d 2e ba [ 65.162919][ T4072] RSP: 0018:ffffc9000422f8a8 EFLAGS: 00010202 [ 65.169091][ T4072] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 65.177067][ T4072] RDX: 0000000000000070 RSI: ffff88801c91a640 RDI: 0000000000000380 [ 65.185012][ T4072] RBP: ffff88801c91a640 R08: ffff88807da7d50c R09: 0000000000000000 [ 65.193152][ T4072] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888010faf000 [ 65.201111][ T4072] R13: ffff88807da7d510 R14: 0000000000000000 R15: ffffc9000422fd70 [ 65.209052][ T4072] FS: 00007fe769a29700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 65.218645][ T4072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.225203][ T4072] CR2: 0000000020010038 CR3: 000000006fd38000 CR4: 00000000003506e0 [ 65.233148][ T4072] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.241191][ T4072] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.249307][ T4072] Call Trace: [ 65.252918][ T4072] [ 65.255824][ T4072] llc_ui_sendmsg+0x947/0xf20 [ 65.260487][ T4072] ? llc_ui_connect+0xb30/0xb30 [ 65.265341][ T4072] ? __copy_msghdr_from_user+0x86/0x3e0 [ 65.270865][ T4072] ? llc_ui_connect+0xb30/0xb30 [ 65.275715][ T4072] sock_sendmsg+0xab/0xe0 [ 65.280029][ T4072] ____sys_sendmsg+0x392/0x7a0 [ 65.284767][ T4072] ? kernel_sendmsg+0x30/0x30 [ 65.289592][ T4072] ? do_recvmmsg+0x550/0x550 [ 65.294306][ T4072] ? __lock_acquire+0x15e4/0x5630 [ 65.299317][ T4072] ___sys_sendmsg+0xd3/0x150 [ 65.303875][ T4072] ? sendmsg_copy_msghdr+0x110/0x110 [ 65.309130][ T4072] ? up_write+0x470/0x470 [ 65.313537][ T4072] ? find_held_lock+0x2d/0x110 [ 65.318273][ T4072] ? __might_fault+0xb3/0x160 [ 65.322944][ T4072] ? lock_downgrade+0x6e0/0x6e0 [ 65.327769][ T4072] __sys_sendmmsg+0x141/0x310 [ 65.332696][ T4072] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 65.337712][ T4072] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.343797][ T4072] ? __context_tracking_exit+0x80/0x90 [ 65.349319][ T4072] ? lock_downgrade+0x6e0/0x6e0 [ 65.354141][ T4072] ? lock_downgrade+0x6e0/0x6e0 [ 65.358961][ T4072] __x64_sys_sendmmsg+0x94/0x100 [ 65.363965][ T4072] ? syscall_enter_from_user_mode+0x21/0x70 [ 65.369836][ T4072] do_syscall_64+0x35/0xb0 [ 65.374234][ T4072] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 65.380102][ T4072] RIP: 0033:0x7fe769a988c9 [ 65.384492][ T4072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 65.404154][ T4072] RSP: 002b:00007fe769a29318 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.412622][ T4072] RAX: ffffffffffffffda RBX: 00007fe769b203f8 RCX: 00007fe769a988c9 [ 65.420758][ T4072] RDX: 03fffffffffffeed RSI: 0000000020001380 RDI: 0000000000000003 [ 65.428701][ T4072] RBP: 00007fe769b203f0 R08: 00007fe769a29700 R09: 0000000000000000 [ 65.436646][ T4072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe769b203fc [ 65.444589][ T4072] R13: 00007ffc8df12e2f R14: 00007fe769a29400 R15: 0000000000022000 [ 65.452535][ T4072] [ 65.455545][ T4072] Modules linked in: [ 65.459894][ T4072] ---[ end trace 0000000000000000 ]--- [ 65.465458][ T4072] RIP: 0010:llc_build_and_send_xid_pkt+0xd3/0x200 [ 65.472035][ T4072] Code: 48 c1 ea 03 80 3c 02 00 0f 85 3a 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 10 48 8d bb 80 03 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0a 01 00 00 48 8b b3 80 03 00 00 48 8d 7d 2e ba [ 65.492709][ T4072] RSP: 0018:ffffc9000422f8a8 EFLAGS: 00010202 [ 65.499016][ T4072] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 65.507203][ T4072] RDX: 0000000000000070 RSI: ffff88801c91a640 RDI: 0000000000000380 [ 65.515355][ T4072] RBP: ffff88801c91a640 R08: ffff88807da7d50c R09: 0000000000000000 [ 65.523528][ T4072] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888010faf000 [ 65.531563][ T4072] R13: ffff88807da7d510 R14: 0000000000000000 R15: ffffc9000422fd70 [ 65.539724][ T4072] FS: 00007fe769a29700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 65.548720][ T4072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.555581][ T4072] CR2: 00007fe769aedae8 CR3: 000000006fd38000 CR4: 00000000003506e0 [ 65.563849][ T4072] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.571998][ T4072] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.580345][ T4072] Kernel panic - not syncing: Fatal exception [ 65.586587][ T4072] Kernel Offset: disabled [ 65.590902][ T4072] Rebooting in 86400 seconds..