skb linear:   00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
skb linear:   00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
------------[ cut here ]------------
syz_tun: caps=(0x00002000000058c1, 0x0000000000000000)
WARNING: CPU: 1 PID: 4618 at net/core/dev.c:3234 skb_warn_bad_offload+0xfc/0x114 net/core/dev.c:3232
Modules linked in:
CPU: 1 PID: 4618 Comm: syz-executor.0 Not tainted 6.2.0-rc3-syzkaller-16387-g9598c377d828 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : skb_warn_bad_offload+0xfc/0x114 net/core/dev.c:3232
lr : skb_warn_bad_offload+0xfc/0x114 net/core/dev.c:3232
sp : ffff800013d73910
x29: ffff800013d73910 x28: ffff0000f01356c0 x27: 0000000000012c3f
x26: 00000000000006c0 x25: ffff0000f0135000 x24: ffff0000f0135000
x23: 0000000000000020 x22: 00002000000058c1 x21: ffff0000ed35c000
x20: ffff0000ed35c000 x19: ffff0000ef48e600 x18: 00000000000000c0
x17: 3020303020303020 x16: ffff80000dd86118 x15: ffff0000f012ce00
x14: 0000000000000000 x13: 00000000ffffffff x12: 0000000000040000
x11: 000000000001b02e x10: ffff800016eb1000 x9 : 65f0502329377400
x8 : 65f0502329377400 x7 : ffff80000c11ee8c x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000201 x0 : 0000000000000036
Call trace:
 skb_warn_bad_offload+0xfc/0x114 net/core/dev.c:3232
 __skb_gso_segment+0x1b8/0x1bc net/core/dev.c:3409
 skb_gso_segment include/linux/netdevice.h:4809 [inline]
 validate_xmit_skb+0x338/0x688 net/core/dev.c:3664
 validate_xmit_skb_list+0x4c/0xb4 net/core/dev.c:3714
 sch_direct_xmit+0x78/0x324 net/sched/sch_generic.c:327
 __dev_xmit_skb+0x50c/0x928 net/core/dev.c:3810
 __dev_queue_xmit+0x414/0xdb8 net/core/dev.c:4215
 dev_queue_xmit+0x24/0x34 include/linux/netdevice.h:3035
 packet_snd+0x764/0xc2c net/packet/af_packet.c:3073
 packet_sendmsg+0x58/0x6c net/packet/af_packet.c:3104
 sock_sendmsg_nosec net/socket.c:714 [inline]
 sock_sendmsg net/socket.c:734 [inline]
 __sys_sendto+0x1e4/0x280 net/socket.c:2117
 __do_sys_sendto net/socket.c:2129 [inline]
 __se_sys_sendto net/socket.c:2125 [inline]
 __arm64_sys_sendto+0x30/0x44 net/socket.c:2125
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
 el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x48/0x104 arch/arm64/kernel/syscall.c:193
 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:584
irq event stamp: 1011
hardirqs last  enabled at (1010): [<ffff8000081c9114>] __up_console_sem+0xb0/0xfc kernel/printk/printk.c:344
hardirqs last disabled at (1011): [<ffff80000c110db0>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (418): [<ffff80000801c864>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (540): [<ffff80000b2d2e88>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---