------------[ cut here ]------------ WARNING: ./include/linux/skbuff.h:3003 at __netif_receive_skb_core.constprop.0+0x854/0xc40 net/core/dev.c:6158, CPU#1: syz.1.355/5532 Modules linked in: CPU: 1 UID: 0 PID: 5532 Comm: syz.1.355 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: linux,dummy-virt (DT) pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : skb_reset_mac_len include/linux/skbuff.h:3003 [inline] pc : __netif_receive_skb_core.constprop.0+0x854/0xc40 net/core/dev.c:6061 lr : __netif_receive_skb_one_core+0x40/0x8c net/core/dev.c:6262 sp : ffff800082f83bd0 x29: ffff800082f83cb0 x28: ffff800082bd6000 x27: fff000007f8ddb80 x26: ffff800082f83e60 x25: fff000007f8dda00 x24: 0000000000000000 x23: faf0000006be9700 x22: f6f000000b230000 x21: 0000000000000001 x20: ffff800082f83d18 x19: faf0000006be9700 x18: 00000000ffffffff x17: fff07ffffcd20000 x16: ffff800082f80000 x15: ffff800088a8bcea x14: ffff800088a8ba20 x13: ffff800088a8bd28 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 x8 : 00000000800102f4 x7 : dead000000000122 x6 : 000000000000001c x5 : fff000007f8d5b78 x4 : 0000000000000000 x3 : fbf000000afd1100 x2 : f1f00000079fb900 x1 : 000000000000ffff x0 : 000000000000ffff Call trace: __netif_receive_skb_core.constprop.0+0x854/0xc40 net/core/dev.c:6158 (P) __netif_receive_skb_one_core+0x40/0x8c net/core/dev.c:6262 __netif_receive_skb+0x18/0x60 net/core/dev.c:6377 process_backlog+0x8c/0x15c net/core/dev.c:6728 __napi_poll+0x38/0x1a0 net/core/dev.c:7787 napi_poll net/core/dev.c:7850 [inline] net_rx_action+0x324/0x3a0 net/core/dev.c:8007 handle_softirqs+0x100/0x248 kernel/softirq.c:645 __do_softirq+0x14/0x20 kernel/softirq.c:679 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:78 call_on_irq_stack+0x30/0x48 arch/arm64/kernel/entry.S:885 do_softirq_own_stack+0x1c/0x40 arch/arm64/kernel/irq.c:83 do_softirq kernel/softirq.c:546 [inline] do_softirq+0x58/0x78 kernel/softirq.c:533 __local_bh_enable_ip+0x90/0xa0 kernel/softirq.c:473 local_bh_enable include/linux/bottom_half.h:33 [inline] netif_rx net/core/dev.c:5837 [inline] netif_rx+0x6c/0x80 net/core/dev.c:5826 slcan_bump_err drivers/net/can/slcan/slcan-core.c:448 [inline] slcan_bump drivers/net/can/slcan/slcan-core.c:463 [inline] slcan_unesc drivers/net/can/slcan/slcan-core.c:476 [inline] slcan_receive_buf+0x650/0x8a8 drivers/net/can/slcan/slcan-core.c:807 tiocsti drivers/tty/tty_io.c:2263 [inline] tty_ioctl+0x624/0x998 drivers/tty/tty_io.c:2679 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0xa8/0x100 fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x54/0x10c arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:121 do_el0_svc+0x1c/0x34 arch/arm64/kernel/syscall.c:140 el0_svc+0x38/0x1fc arch/arm64/kernel/entry-common.c:758 el0t_64_sync_handler+0xa0/0xe4 arch/arm64/kernel/entry-common.c:777 el0t_64_sync+0x1a4/0x1a8 arch/arm64/kernel/entry.S:590 ---[ end trace 0000000000000000 ]---