binder: 29534:29559 ioctl c0306201 20009fd0 returned -14 ------------[ cut here ]------------ syz1: caps=(0x00000800000058c1, 0x0000000000000000) len=14 data_len=0 gso_size=2304 gso_type=7 ip_summed=0 WARNING: CPU: 1 PID: 29568 at net/core/dev.c:2612 skb_warn_bad_offload+0x2c9/0x3d0 net/core/dev.c:2607 Kernel panic - not syncing: panic_on_warn set ... CPU: 1 PID: 29568 Comm: syz-executor1 Not tainted 4.15.0+ #288 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x257 lib/dump_stack.c:53 panic+0x1e4/0x41c kernel/panic.c:183 __warn+0x1dc/0x200 kernel/panic.c:547 report_bug+0x211/0x2d0 lib/bug.c:184 fixup_bug.part.11+0x37/0x80 arch/x86/kernel/traps.c:178 fixup_bug arch/x86/kernel/traps.c:247 [inline] do_error_trap+0x2d7/0x3e0 arch/x86/kernel/traps.c:296 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:315 invalid_op+0x22/0x40 arch/x86/entry/entry_64.S:1097 RIP: 0010:skb_warn_bad_offload+0x2c9/0x3d0 net/core/dev.c:2607 RSP: 0018:ffff8801d8847018 EFLAGS: 00010282 RAX: dffffc0000000008 RBX: ffff8801abdd9440 RCX: ffffffff815a403e RDX: 00000000000050e3 RSI: ffffc900013c8000 RDI: ffff8801d8846d20 RBP: ffff8801d8847070 R08: 1ffff1003b108d80 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8801abdd9440 R14: ffff8801aa59e660 R15: 0000000000000007 __skb_gso_segment+0x612/0x800 net/core/dev.c:2819 skb_gso_segment include/linux/netdevice.h:3993 [inline] validate_xmit_skb+0x4ba/0xb30 net/core/dev.c:3069 validate_xmit_skb_list+0xb7/0x120 net/core/dev.c:3120 sch_direct_xmit+0x3b6/0x6d0 net/sched/sch_generic.c:182 __dev_xmit_skb net/core/dev.c:3212 [inline] __dev_queue_xmit+0x202f/0x2cf0 net/core/dev.c:3479 dev_queue_xmit+0x17/0x20 net/core/dev.c:3544 packet_snd net/packet/af_packet.c:2943 [inline] packet_sendmsg+0x3aed/0x60b0 net/packet/af_packet.c:2968 sock_sendmsg_nosec net/socket.c:638 [inline] sock_sendmsg+0xca/0x110 net/socket.c:648 SYSC_sendto+0x361/0x5c0 net/socket.c:1729 SyS_sendto+0x40/0x50 net/socket.c:1697 entry_SYSCALL_64_fastpath+0x29/0xa0 RIP: 0033:0x453299 RSP: 002b:00007f4cc59d8c58 EFLAGS: 00000212 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000453299 RDX: 0000000000000018 RSI: 00000000207fffe7 RDI: 0000000000000013 RBP: 00000000000005e0 R08: 0000000020e72000 R09: 0000000000000014 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f7da0 R13: 00000000ffffffff R14: 00007f4cc59d96d4 R15: 0000000000000000 Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 86400 seconds..