skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ------------[ cut here ]------------ geneve1: caps=(0x00000106401d5849, 0x0000000000000000) WARNING: CPU: 0 PID: 32009 at net/core/dev.c:3264 skb_warn_bad_offload+0x160/0x194 net/core/dev.c:3262 Modules linked in: CPU: 0 PID: 32009 Comm: syz-executor.1 Not tainted 6.6.0-rc5-syzkaller-g249eb8f39efb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : skb_warn_bad_offload+0x160/0x194 net/core/dev.c:3262 lr : skb_warn_bad_offload+0x160/0x194 net/core/dev.c:3262 sp : ffff80009d0e7390 x29: ffff80009d0e7390 x28: dfff800000000000 x27: ffff000125650000 x26: 0000000000000020 x25: 1fffe0001a1e5128 x24: ffff80008c989780 x23: dfff800000000000 x22: ffff0000d0f288d8 x21: ffff000125650000 x20: ffff000125650000 x19: ffff0001256500f0 x18: ffff80009d0e6820 x17: 0000000000000000 x16: ffff80008a58aa60 x15: 0000000000000001 x14: 1ffff00013a1cd8c x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000040000 x10: 000000000003ffff x9 : 9853802d7bb5d600 x8 : 9853802d7bb5d600 x7 : 000000000010cc18 x6 : 000000000010cb98 x5 : ffff80009d0e6c78 x4 : ffff80008e267ff8 x3 : ffff80008036d6e0 x2 : 0000000000000001 x1 : 0000000000000200 x0 : 0000000000000000 Call trace: skb_warn_bad_offload+0x160/0x194 net/core/dev.c:3262 __skb_gso_segment+0x2f4/0x3cc net/core/gso.c:127 skb_gso_segment include/net/gso.h:83 [inline] validate_xmit_skb+0x3cc/0xe54 net/core/dev.c:3625 __dev_queue_xmit+0x10f8/0x32c0 net/core/dev.c:4332 dev_queue_xmit include/linux/netdevice.h:3082 [inline] packet_xmit+0x6c/0x318 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3087 [inline] packet_sendmsg+0x3784/0x4ca0 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x3bc/0x540 net/socket.c:2194 __do_sys_sendto net/socket.c:2206 [inline] __se_sys_sendto net/socket.c:2202 [inline] __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2202 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:51 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:136 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:155 el0_svc+0x58/0x16c arch/arm64/kernel/entry-common.c:678 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:595 irq event stamp: 625 hardirqs last enabled at (624): [] __up_console_sem kernel/printk/printk.c:347 [inline] hardirqs last enabled at (624): [] __console_unlock kernel/printk/printk.c:2718 [inline] hardirqs last enabled at (624): [] console_unlock+0x17c/0x3d4 kernel/printk/printk.c:3037 hardirqs last disabled at (625): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:436 softirqs last enabled at (246): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (348): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- skb len=64521 headroom=98 headlen=11273 tailroom=0 mac=(98,14) net=(112,44) trans=156 shinfo(txflags=0 nr_frags=3 gso(size=2959 type=133122 segs=22)) csum(0x0 ip_summed=0 complete_sw=0 valid=0 level=0) hash(0x9d554211 sw=1 l4=0) proto=0x6558 pkttype=0 iif=0 dev name=lo feat=0x00000516401d7c69 sk family=17 type=3 proto=0 skb linear: 00000000: 0d 00 c5 2c f7 c2 59 75 e0 10 b0 2f 08 00 eb 2b skb linear: 00000010: 2f f0 da c8 89 7c 6b 11 87 77 fa ff ff ff 30 66 skb linear: 00000020: 10 0c b6 00 c5 47 1d 13 0a 66 32 1a 54 e7 df 30 skb linear: 00000030: 5f 80 a8 81 61 b6 fd 8f 24 28 6a 57 c3 fe ff ff skb linear: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ------------[ cut here ]------------ lo: caps=(0x00000516401d7c69, 0x0000000000000000) WARNING: CPU: 0 PID: 32009 at net/core/dev.c:3264 skb_warn_bad_offload+0x160/0x194 net/core/dev.c:3262 Modules linked in: CPU: 0 PID: 32009 Comm: syz-executor.1 Tainted: G W 6.6.0-rc5-syzkaller-g249eb8f39efb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : skb_warn_bad_offload+0x160/0x194 net/core/dev.c:3262 lr : skb_warn_bad_offload+0x160/0x194 net/core/dev.c:3262 sp : ffff80009d0e6840 x29: ffff80009d0e6840 x28: dfff800000000000 x27: ffff0000d3ba6000 x26: 0000000000000020 x25: 1fffe0001a1e5128 x24: ffff80008c989780 x23: dfff800000000000 x22: ffff0000d0f288d8 x21: ffff0000d3ba6000 x20: ffff0000d3ba6000 x19: ffff0000d3ba60f0 x18: ffff80009d0e60e0 x17: 3020303020303020 x16: ffff80008a63d588 x15: 0000000000000001 x14: 1ffff00013a1cc5c x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000040000 x10: 000000000003ffff x9 : 9853802d7bb5d600 x8 : 9853802d7bb5d600 x7 : ffff800080367d94 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff800082b1fb24 x2 : 0000000000000001 x1 : 0000000000000400 x0 : 0000000000000000 Call trace: skb_warn_bad_offload+0x160/0x194 net/core/dev.c:3262 __skb_gso_segment+0x2f4/0x3cc net/core/gso.c:127 skb_gso_segment include/net/gso.h:83 [inline] validate_xmit_skb+0x3cc/0xe54 net/core/dev.c:3625 validate_xmit_skb_list+0x94/0x130 net/core/dev.c:3675 sch_direct_xmit+0xe8/0x548 net/sched/sch_generic.c:327 qdisc_restart net/sched/sch_generic.c:407 [inline] __qdisc_run+0x8f8/0x2358 net/sched/sch_generic.c:415 __dev_xmit_skb net/core/dev.c:3834 [inline] __dev_queue_xmit+0xc74/0x32c0 net/core/dev.c:4306 dev_queue_xmit include/linux/netdevice.h:3082 [inline] neigh_hh_output include/net/neighbour.h:526 [inline] neigh_output include/net/neighbour.h:540 [inline] ip6_finish_output2+0xd2c/0x1a1c net/ipv6/ip6_output.c:135 __ip6_finish_output net/ipv6/ip6_output.c:196 [inline] ip6_finish_output+0x538/0x93c net/ipv6/ip6_output.c:207 NF_HOOK_COND include/linux/netfilter.h:293 [inline] ip6_output+0x270/0x594 net/ipv6/ip6_output.c:228 dst_output include/net/dst.h:458 [inline] ip6_local_out+0x120/0x160 net/ipv6/output_core.c:155 ip6tunnel_xmit include/net/ip6_tunnel.h:161 [inline] udp_tunnel6_xmit_skb+0x470/0x97c net/ipv6/ip6_udp_tunnel.c:109 geneve6_xmit_skb drivers/net/geneve.c:1071 [inline] geneve_xmit+0x2404/0x3550 drivers/net/geneve.c:1100 __netdev_start_xmit include/linux/netdevice.h:4889 [inline] netdev_start_xmit include/linux/netdevice.h:4903 [inline] xmit_one net/core/dev.c:3544 [inline] dev_hard_start_xmit+0x240/0x8ac net/core/dev.c:3560 __dev_queue_xmit+0x1650/0x32c0 net/core/dev.c:4340 dev_queue_xmit include/linux/netdevice.h:3082 [inline] packet_xmit+0x6c/0x318 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3087 [inline] packet_sendmsg+0x3784/0x4ca0 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x3bc/0x540 net/socket.c:2194 __do_sys_sendto net/socket.c:2206 [inline] __se_sys_sendto net/socket.c:2202 [inline] __arm64_sys_sendto+0xd8/0xf8 net/socket.c:2202 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:51 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:136 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:155 el0_svc+0x58/0x16c arch/arm64/kernel/entry-common.c:678 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:595 irq event stamp: 939 hardirqs last enabled at (938): [] console_emit_next_record kernel/printk/printk.c:2917 [inline] hardirqs last enabled at (938): [] console_flush_all+0x654/0xb78 kernel/printk/printk.c:2966 hardirqs last disabled at (939): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:436 softirqs last enabled at (246): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (348): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]---