skb frag: 00000040: 2a a3 17 77 d4 3a 43 f7 f9 c2 d7 a6 8a 86 01 6a skb frag: 00000050: 68 8d 70 90 72 cf d8 3a a6 6e 1a 97 ee 3e dd 7c skb frag: 00000060: ee 42 f3 fa 6c 38 47 14 9f ae c1 61 dd 1b d3 f7 skb frag: 00000070: 35 95 37 d1 69 63 18 a4 0a 47 9a 80 bb c4 56 46 skb frag: 00000080: 20 40 56 3a a9 44 e4 f7 9b 05 47 6e d9 46 b5 4f skb frag: 00000090: c7 69 73 25 c0 70 56 f3 4d c6 cb 15 49 95 4e 15 skb frag: 000000a0: 29 9e ------------[ cut here ]------------ lo: caps=(0x00000516401d7c69, 0x0000000000000000) WARNING: CPU: 1 PID: 8609 at net/core/dev.c:3293 skb_warn_bad_offload+0x166/0x1a0 net/core/dev.c:3291 Modules linked in: CPU: 1 PID: 8609 Comm: syz.4.1004 Not tainted 6.10.0-rc7-syzkaller-01816-g852e42cc2dd4 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 RIP: 0010:skb_warn_bad_offload+0x166/0x1a0 net/core/dev.c:3291 Code: e8 9f 8a a3 f8 49 8b 04 24 48 8d 88 a0 03 00 00 48 85 c0 48 0f 44 cd 48 c7 c7 00 d5 c5 8c 4c 89 f6 48 89 da e8 db 8a ff f7 90 <0f> 0b 90 90 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 44 89 f9 RSP: 0018:ffffc9000441eda8 EFLAGS: 00010246 RAX: ee737aef38a03600 RBX: ffff8880228600b8 RCX: 0000000000040000 RDX: ffffc900099a1000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: ffffffff8cc5d4c0 R08: ffffffff815857b2 R09: fffffbfff1c39994 R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88802d46e298 R13: dffffc0000000000 R14: ffff888022860130 R15: ffff888022860130 FS: 00007f565d9e26c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020001bc0 CR3: 0000000024a24000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __skb_gso_segment+0x3be/0x4c0 net/core/gso.c:127 skb_gso_segment include/net/gso.h:83 [inline] validate_xmit_skb+0x585/0x1120 net/core/dev.c:3661 __dev_queue_xmit+0x17a4/0x3e90 net/core/dev.c:4415 dev_queue_xmit include/linux/netdevice.h:3105 [inline] neigh_hh_output include/net/neighbour.h:526 [inline] neigh_output include/net/neighbour.h:540 [inline] ip6_finish_output2+0xfc2/0x1680 net/ipv6/ip6_output.c:137 ip6_finish_output+0x41e/0x810 net/ipv6/ip6_output.c:222 ip6_send_skb+0x112/0x230 net/ipv6/ip6_output.c:1958 udp_v6_send_skb+0xbf5/0x1870 net/ipv6/udp.c:1292 udp_v6_push_pending_frames+0x139/0x210 net/ipv6/udp.c:1319 udpv6_sendmsg+0xe79/0x3270 net/ipv6/udp.c:1616 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0xef/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2585 ___sys_sendmsg net/socket.c:2639 [inline] __sys_sendmmsg+0x3b2/0x740 net/socket.c:2725 __do_sys_sendmmsg net/socket.c:2754 [inline] __se_sys_sendmmsg net/socket.c:2751 [inline] __x64_sys_sendmmsg+0xa0/0xb0 net/socket.c:2751 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f565cb75bd9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f565d9e2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 00007f565cd03f60 RCX: 00007f565cb75bd9 RDX: 0000000000000003 RSI: 0000000020002340 RDI: 0000000000000003 RBP: 00007f565cbe4e60 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000020004010 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000004d R14: 00007f565cd03f60 R15: 00007ffc3769f048