Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.987186] cfg80211: Calling CRDA to update world regulatory domain [ 20.147159] cfg80211: Calling CRDA to update world regulatory domain [ 23.307126] cfg80211: Calling CRDA to update world regulatory domain [ 26.467137] cfg80211: Calling CRDA to update world regulatory domain [ 29.627138] cfg80211: Calling CRDA to update world regulatory domain [ 32.587265] IPVS: Creating netns size=2688 id=1 [ 32.591950] IPVS: ftp: loaded support on port[0] = 21 [ 32.787136] cfg80211: Calling CRDA to update world regulatory domain [ 35.947107] cfg80211: Calling CRDA to update world regulatory domain [ 39.107113] cfg80211: Exceeded CRDA call max attempts. Not calling CRDA Warning: Permanently added '10.128.10.9' (ECDSA) to the list of known hosts. 2019/08/14 01:54:24 parsed 1 programs 2019/08/14 01:54:24 executed programs: 0 [ 40.319857] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 40.327169] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 40.334666] IPVS: Creating netns size=2688 id=2 [ 40.337242] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 40.337554] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 40.341016] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready [ 40.342794] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 40.365119] IPVS: ftp: loaded support on port[0] = 21 [ 40.375870] IPVS: Creating netns size=2688 id=3 [ 40.382329] IPVS: ftp: loaded support on port[0] = 21 [ 40.385861] chnl_net:caif_netlink_parms(): no params data found [ 40.395576] device bridge_slave_0 entered promiscuous mode [ 40.404387] device bridge_slave_1 entered promiscuous mode [ 40.412385] IPVS: Creating netns size=2688 id=4 [ 40.417094] IPVS: ftp: loaded support on port[0] = 21 [ 40.422744] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 40.429612] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.441761] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 40.448670] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.460733] IPVS: Creating netns size=2688 id=5 [ 40.465397] IPVS: ftp: loaded support on port[0] = 21 [ 40.474577] chnl_net:caif_netlink_parms(): no params data found [ 40.485842] chnl_net:caif_netlink_parms(): no params data found [ 40.496665] IPVS: Creating netns size=2688 id=6 [ 40.498381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.498445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.502569] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.502605] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.503876] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.518149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.518439] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.546451] IPVS: ftp: loaded support on port[0] = 21 [ 40.551914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.569521] IPVS: Creating netns size=2688 id=7 [ 40.571746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 40.571997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 40.587776] IPVS: ftp: loaded support on port[0] = 21 [ 40.587831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.588053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.588108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.588167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.588205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.588214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.588326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.588368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.588441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.592467] device bridge_slave_0 entered promiscuous mode [ 40.592781] device bridge_slave_1 entered promiscuous mode [ 40.595256] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 40.595949] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.605024] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 40.605148] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.617410] chnl_net:caif_netlink_parms(): no params data found [ 40.626630] device bridge_slave_0 entered promiscuous mode [ 40.626945] device bridge_slave_1 entered promiscuous mode [ 40.629632] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 40.629753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.629895] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 40.629994] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.639290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.639352] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.643598] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.643638] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.644753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.644776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.644788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.644796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.792254] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.799498] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.809857] device bridge_slave_0 entered promiscuous mode [ 40.820377] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.827565] device bridge_slave_1 entered promiscuous mode [ 40.836761] chnl_net:caif_netlink_parms(): no params data found [ 40.843356] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.853364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.863057] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 40.869842] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 40.877538] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 40.884282] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 40.898722] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 40.905601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.914521] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.924608] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 40.935934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 40.943517] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.951165] chnl_net:caif_netlink_parms(): no params data found [ 40.958150] device bridge_slave_0 entered promiscuous mode [ 40.963930] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 40.971449] device bridge_slave_1 entered promiscuous mode [ 40.984569] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 40.993283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.000907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.008436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.014932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.021759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.029208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.035691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.042578] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 41.042631] syz-executor.0: packet size is too short (0 <= 14) [ 41.055384] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.066718] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.075624] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 41.082527] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.090393] device bridge_slave_0 entered promiscuous mode [ 41.097942] device bridge_slave_1 entered promiscuous mode [ 41.104005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.111045] syz-executor.0: packet size is too short (0 <= 14) [ 41.111635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.111961] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.112404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.138712] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.148200] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 41.155527] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.163472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.170677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.181475] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 41.188550] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.196151] syz-executor.0: packet size is too short (0 <= 14) [ 41.204343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.212204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.219889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.226383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.233532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.240906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.247401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.254054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.260899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.267903] syz-executor.0: packet size is too short (0 <= 14) [ 41.268082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.272824] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.272869] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.274028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.274042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.274054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.274062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.319933] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.326390] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.334282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.341371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.349042] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.356969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.364151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.375058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.385018] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.391850] syz-executor.0: packet size is too short (0 <= 14) [ 41.392896] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.394329] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 41.411741] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.422181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.430276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.438395] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.446151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.455781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.468214] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 41.476449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.484413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.490946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.499819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.506938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.514620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.521140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.528150] syz-executor.0: packet size is too short (0 <= 14) [ 41.529328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.530828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.531140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.532030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.532098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.570959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.578619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.585975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.592491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.601069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.608572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.615055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.621844] syz-executor.4: packet size is too short (0 <= 14) [ 41.629367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.629406] syz-executor.5: packet size is too short (0 <= 14) [ 41.642631] syz-executor.3: packet size is too short (0 <= 14) [ 41.651024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 41.658091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.665490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.672008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.679015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.686181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.693478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.700918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.707430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.714059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.721772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 41.731373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.741139] syz-executor.0: packet size is too short (0 <= 14) [ 41.741812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 2019/08/14 01:54:29 executed programs: 71 [ 46.107204] net_ratelimit: 50 callbacks suppressed [ 46.112192] syz-executor.5: packet size is too short (0 <= 14) [ 46.297831] syz-executor.2: packet size is too short (0 <= 14) [ 46.317175] syz-executor.1: packet size is too short (0 <= 14) [ 46.467286] syz-executor.5: packet size is too short (0 <= 14) [ 46.667300] syz-executor.1: packet size is too short (0 <= 14) [ 46.677298] syz-executor.2: packet size is too short (0 <= 14) [ 46.887548] syz-executor.3: packet size is too short (0 <= 14) [ 46.892346] syz-executor.0: packet size is too short (0 <= 14) [ 46.937700] syz-executor.4: packet size is too short (0 <= 14) [ 46.977540] syz-executor.1: packet size is too short (0 <= 14) 2019/08/14 01:54:34 executed programs: 150 [ 51.317304] net_ratelimit: 39 callbacks suppressed [ 51.322298] syz-executor.5: packet size is too short (0 <= 14) [ 51.378264] syz-executor.3: packet size is too short (0 <= 14) [ 51.457337] syz-executor.0: packet size is too short (0 <= 14) [ 51.463447] syz-executor.4: packet size is too short (0 <= 14) [ 51.487177] syz-executor.1: packet size is too short (0 <= 14) [ 52.047227] syz-executor.3: packet size is too short (0 <= 14) [ 52.237339] syz-executor.4: packet size is too short (0 <= 14) [ 52.243417] syz-executor.1: packet size is too short (0 <= 14) [ 52.277258] syz-executor.0: packet size is too short (0 <= 14) [ 52.457238] syz-executor.5: packet size is too short (0 <= 14) 2019/08/14 01:54:39 executed programs: 230 [ 55.617180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.623827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.017084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.057079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.257067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.263851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.497103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.537061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.587378] net_ratelimit: 28 callbacks suppressed [ 56.592451] syz-executor.0: packet size is too short (0 <= 14) [ 56.617076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.657052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.697064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.737074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.748088] syz-executor.1: packet size is too short (0 <= 14) [ 56.827266] syz-executor.4: packet size is too short (0 <= 14) [ 56.837368] syz-executor.2: packet size is too short (0 <= 14) [ 56.917364] syz-executor.0: packet size is too short (0 <= 14) [ 57.227243] syz-executor.4: packet size is too short (0 <= 14) [ 57.233492] syz-executor.2: packet size is too short (0 <= 14) [ 57.307389] syz-executor.0: packet size is too short (0 <= 14) [ 57.527571] syz-executor.1: packet size is too short (0 <= 14) [ 57.557195] syz-executor.3: packet size is too short (0 <= 14) 2019/08/14 01:54:44 executed programs: 308 [ 61.937237] net_ratelimit: 40 callbacks suppressed [ 61.942314] syz-executor.4: packet size is too short (0 <= 14) [ 62.017421] syz-executor.0: packet size is too short (0 <= 14) [ 62.167212] syz-executor.2: packet size is too short (0 <= 14) [ 62.178004] syz-executor.5: packet size is too short (0 <= 14) [ 62.358578] syz-executor.4: packet size is too short (0 <= 14) [ 62.377923] syz-executor.0: packet size is too short (0 <= 14) [ 62.487449] syz-executor.1: packet size is too short (0 <= 14) [ 62.527297] syz-executor.5: packet size is too short (0 <= 14) [ 62.533637] syz-executor.2: packet size is too short (0 <= 14) [ 62.577797] syz-executor.3: packet size is too short (0 <= 14) 2019/08/14 01:54:50 executed programs: 384 [ 67.127205] net_ratelimit: 26 callbacks suppressed [ 67.132199] syz-executor.0: packet size is too short (0 <= 14) [ 67.398825] syz-executor.2: packet size is too short (0 <= 14) [ 67.687211] syz-executor.1: packet size is too short (0 <= 14) [ 67.957370] syz-executor.0: packet size is too short (0 <= 14) [ 68.067376] syz-executor.1: packet size is too short (0 <= 14) [ 68.167908] syz-executor.5: packet size is too short (0 <= 14) [ 68.448342] syz-executor.1: packet size is too short (0 <= 14) [ 68.527225] syz-executor.5: packet size is too short (0 <= 14) [ 68.527278] syz-executor.3: packet size is too short (0 <= 14) [ 68.847250] syz-executor.1: packet size is too short (0 <= 14) 2019/08/14 01:54:55 executed programs: 460 [ 72.417961] net_ratelimit: 20 callbacks suppressed [ 72.423006] syz-executor.2: packet size is too short (0 <= 14) [ 72.437511] syz-executor.5: packet size is too short (0 <= 14) [ 72.577775] syz-executor.4: packet size is too short (0 <= 14) [ 72.647554] syz-executor.1: packet size is too short (0 <= 14) [ 72.667575] BUG: unable to handle kernel NULL pointer dereference at (null) [ 72.675797] IP: [] packet_lookup_frame.isra.50+0x10/0x50 [ 72.682904] PGD b0a01067 PUD b1ae0067 PMD 0 [ 72.687723] Oops: 0000 [#1] [ 72.688595] kobject: 'loop3' (ffff8800bac5b0a0): kobject_uevent_env [ 72.688598] kobject: 'loop3' (ffff8800bac5b0a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 72.706394] PREEMPT SMP [ 72.709567] Modules linked in: [ 72.712850] CPU: 0 PID: 8541 Comm: syz-executor.0 Not tainted 4.1.0 #1 [ 72.719487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.728816] task: ffff8800b0bfaa90 ti: ffff8800af758000 task.ti: ffff8800af758000 [ 72.736541] RIP: 0010:[] [] packet_lookup_frame.isra.50+0x10/0x50 [ 72.746152] RSP: 0018:ffff8800af75bb70 EFLAGS: 00010206 [ 72.751663] RAX: 0000000000000000 RBX: ffff8800af75be28 RCX: 0000000000000000 [ 72.758911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8800b09df000 [ 72.766346] RBP: ffff8800af75bc48 R08: 0000000000000000 R09: 0000000000000001 [ 72.773602] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 72.780846] R13: 0000000000000000 R14: ffff8800b09df000 R15: ffff8800b8ace000 [ 72.788097] FS: 00007f842b733700(0000) GS:ffff88012c000000(0000) knlGS:0000000000000000 [ 72.796372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.802293] CR2: 0000000000000000 CR3: 00000000af700000 CR4: 00000000001407f0 [ 72.809690] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.816932] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.824183] Stack: [ 72.826311] ffffffff82339052 ffff8800af75bc28 ffff8800b0bfb078 0000000081814300 [ 72.834295] 0000000000000000 ffff8800b09df6a0 0000000000000002 ffff8800af75bbc0 [ 72.842388] 000005ee00000000 ffff8800af750000 0000000000000000 ffff8800b09df000 [ 72.850472] Call Trace: [ 72.853033] [] ? packet_sendmsg+0x122/0x11b0 [ 72.859061] [] sock_sendmsg+0x35/0x40 [ 72.864598] [] ___sys_sendmsg+0x110/0x2d0 [ 72.870371] [] ? __lock_acquire+0xc43/0x1c70 [ 72.876399] [] ? might_fault+0x57/0xb0 [ 72.882019] [] __sys_sendmmsg+0x8f/0x1a0 [ 72.887704] [] ? might_fault+0x57/0xb0 [ 72.893214] [] SyS_sendmmsg+0xd/0x20 [ 72.898548] [] system_call_fastpath+0x16/0x7a [ 72.904660] Code: b3 f9 82 be b1 01 00 00 31 c0 48 89 e5 48 c7 c7 de 32 f8 82 e8 c2 5e e3 fe 0f 0b 41 89 d2 44 89 c0 31 d2 41 f7 f2 89 c0 0f af ca <48> 03 0c c6 48 89 c8 8b 97 3c 07 00 00 85 d2 74 05 83 fa 01 75 [ 72.931931] RIP [] packet_lookup_frame.isra.50+0x10/0x50 [ 72.939144] RSP [ 72.942739] CR2: 0000000000000000 [ 72.946413] ---[ end trace ab2c6ee37df673cd ]--- [ 72.951956] Kernel panic - not syncing: Fatal exception [ 72.958575] Kernel Offset: disabled