------------[ cut here ]------------ kernel BUG at net/core/dev.c:3222! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 5950 Comm: syz-executor.4 Not tainted 5.18.0-rc5-syzkaller-00016-g107c948d1d3e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:skb_checksum_help+0x59b/0x5a0 net/core/dev.c:3222 Code: c1 0f 8c 11 fe ff ff 4c 89 e7 e8 30 4c b5 f9 48 ba 00 00 00 00 00 fc ff df e9 fa fd ff ff e8 7c 65 64 f9 0f 0b e8 75 65 64 f9 <0f> 0b 0f 1f 00 41 57 41 56 41 55 41 54 53 49 89 fc 49 bd 00 00 00 RSP: 0018:ffffc900157374e8 EFLAGS: 00010287 RAX: ffffffff8821ad7b RBX: 00000000000000ae RCX: 0000000000040000 RDX: ffffc9000af3a000 RSI: 00000000000025d6 RDI: 00000000000025d7 RBP: 000000000000036e R08: ffffffff8821aab8 R09: fffff52002ae6e8e R10: fffff52002ae6e8e R11: 1ffff92002ae6e8c R12: 000000000000036c R13: 1ffff11003b8a2d6 R14: ffff88801dc51640 R15: 00000000671fe743 FS: 00007f3052b73700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020003000 CR3: 0000000074de4000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: netem_enqueue+0x2407/0x3670 net/sched/sch_netem.c:510 netem_enqueue+0xf7e/0x3670 net/sched/sch_netem.c:483 dev_qdisc_enqueue net/core/dev.c:3727 [inline] __dev_xmit_skb net/core/dev.c:3816 [inline] __dev_queue_xmit+0xd4f/0x3640 net/core/dev.c:4141 packet_snd net/packet/af_packet.c:3063 [inline] packet_sendmsg+0x35ac/0x5010 net/packet/af_packet.c:3094 sock_sendmsg_nosec net/socket.c:705 [inline] sock_sendmsg net/socket.c:725 [inline] __sys_sendto+0x42e/0x5b0 net/socket.c:2040 __do_sys_sendto net/socket.c:2052 [inline] __se_sys_sendto net/socket.c:2048 [inline] __x64_sys_sendto+0xda/0xf0 net/socket.c:2048 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f3051a890e9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3052b73168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f3051b9bf60 RCX: 00007f3051a890e9 RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 RBP: 00007f3051ae308d R08: 0000000000000000 R09: 00000000000002ff R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcfae5244f R14: 00007f3052b73300 R15: 0000000000022000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:skb_checksum_help+0x59b/0x5a0 net/core/dev.c:3222 Code: c1 0f 8c 11 fe ff ff 4c 89 e7 e8 30 4c b5 f9 48 ba 00 00 00 00 00 fc ff df e9 fa fd ff ff e8 7c 65 64 f9 0f 0b e8 75 65 64 f9 <0f> 0b 0f 1f 00 41 57 41 56 41 55 41 54 53 49 89 fc 49 bd 00 00 00 RSP: 0018:ffffc900157374e8 EFLAGS: 00010287 RAX: ffffffff8821ad7b RBX: 00000000000000ae RCX: 0000000000040000 RDX: ffffc9000af3a000 RSI: 00000000000025d6 RDI: 00000000000025d7 RBP: 000000000000036e R08: ffffffff8821aab8 R09: fffff52002ae6e8e R10: fffff52002ae6e8e R11: 1ffff92002ae6e8c R12: 000000000000036c R13: 1ffff11003b8a2d6 R14: ffff88801dc51640 R15: 00000000671fe743 FS: 00007f3052b73700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020003000 CR3: 0000000074de4000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400