------------[ cut here ]------------ skb_assert_len WARNING: CPU: 0 PID: 8549 at include/linux/skbuff.h:2541 skb_assert_len include/linux/skbuff.h:2541 [inline] WARNING: CPU: 0 PID: 8549 at include/linux/skbuff.h:2541 __dev_queue_xmit+0x1dbc/0x37dc net/core/dev.c:4162 Modules linked in: CPU: 0 PID: 8549 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : skb_assert_len include/linux/skbuff.h:2541 [inline] pc : __dev_queue_xmit+0x1dbc/0x37dc net/core/dev.c:4162 lr : skb_assert_len include/linux/skbuff.h:2541 [inline] lr : __dev_queue_xmit+0x1dbc/0x37dc net/core/dev.c:4162 sp : ffff800021e971c0 x29: ffff800021e973e0 x28: ffff800021e97390 x27: dfff800000000000 x26: ffff00012c1b6000 x25: ffff0000c68706b0 x24: dfff800000000000 x23: 0000000000000000 x22: 1fffe00018d0e0ca x21: ffff0000c6870650 x20: ffff0000c6870640 x19: ffff800018986000 x18: 1fffe0003684a5b6 x17: ffff800015d6d000 x16: ffff8000083030dc x15: 0000000000000002 x14: 1ffff00002bae0b0 x13: dfff800000000000 x12: 0000000000000003 x11: 0000000000000001 x10: 0000000000000003 x9 : 7d8b9a2ce0187200 x8 : 7d8b9a2ce0187200 x7 : ffff80000827ece4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000006 x1 : ffff8000124cbac0 x0 : ffff80019e594000 Call trace: skb_assert_len include/linux/skbuff.h:2541 [inline] __dev_queue_xmit+0x1dbc/0x37dc net/core/dev.c:4162 dev_queue_xmit include/linux/netdevice.h:3054 [inline] packet_sendmsg_spkt+0xb74/0xfdc net/packet/af_packet.c:2066 sock_sendmsg_nosec net/socket.c:724 [inline] sock_sendmsg net/socket.c:747 [inline] ____sys_sendmsg+0x568/0x81c net/socket.c:2501 __sys_sendmsg_sock+0x3c/0x54 net/socket.c:2567 io_sendmsg+0x288/0x840 io_uring/net.c:317 io_issue_sqe+0x308/0xa00 io_uring/io_uring.c:1907 io_queue_sqe io_uring/io_uring.c:2079 [inline] io_submit_sqe io_uring/io_uring.c:2340 [inline] io_submit_sqes+0x878/0x19dc io_uring/io_uring.c:2450 __do_sys_io_uring_enter io_uring/io_uring.c:3458 [inline] __se_sys_io_uring_enter io_uring/io_uring.c:3392 [inline] __arm64_sys_io_uring_enter+0x308/0x1130 io_uring/io_uring.c:3392 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193 el0_svc+0x4c/0x15c arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 irq event stamp: 744 hardirqs last enabled at (743): [] raw_spin_rq_unlock_irq kernel/sched/sched.h:1378 [inline] hardirqs last enabled at (743): [] finish_lock_switch+0xbc/0x1e4 kernel/sched/core.c:5065 hardirqs last disabled at (744): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (676): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (674): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- skb len=0 headroom=16 headlen=0 tailroom=304 mac=(16,0) net=(16,-1) trans=-1 shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) csum(0x0 ip_summed=0 complete_sw=0 valid=0 level=0) hash(0x0 sw=0 l4=0) proto=0x0000 pkttype=0 iif=0 dev name=sit0 feat=0x00000006401d7869 sk family=17 type=10 proto=0