skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ------------[ cut here ]------------ erspan0: caps=(0x0000000000006869, 0x0000000000000000) WARNING: CPU: 1 PID: 3138 at net/core/dev.c:3255 skb_warn_bad_offload+0x7c/0xf4 net/core/dev.c:3255 Modules linked in: CPU: 1 PID: 3138 Comm: syz-executor385 Not tainted 6.4.0-syzkaller-04247-g3a8a670eeeaa #0 Hardware name: linux,dummy-virt (DT) pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : skb_warn_bad_offload+0x7c/0xf4 net/core/dev.c:3255 lr : skb_warn_bad_offload+0x7c/0xf4 net/core/dev.c:3255 sp : ffff800082be3980 x29: ffff800082be3980 x28: f4ff0000069fa000 x27: 0000000000000000 x26: faff000004966628 x25: 00000000000000c6 x24: 0000000000000001 x23: 0000000000000000 x22: 0000000000000001 x21: f4ff0000069fa000 x20: f4ff0000069fa000 x19: faff000004966600 x18: 00000000fffffffb x17: 3020303020303020 x16: 3030203030203030 x15: 0000000000000020 x14: ffff80008240b048 x13: 000000000000089d x12: 00000000000002df x11: 307830202c393638 x10: ffff8000824bb048 x9 : 00000000ffffe000 x8 : ffff80008240b048 x7 : ffff8000824bb048 x6 : 0000000000000000 x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : f5ff000003812f40 Call trace: skb_warn_bad_offload+0x7c/0xf4 net/core/dev.c:3255 __skb_gso_segment+0xe4/0x14c net/core/gso.c:127 skb_gso_segment include/net/gso.h:83 [inline] validate_xmit_skb+0x120/0x308 net/core/dev.c:3618 validate_xmit_skb_list+0x44/0x98 net/core/dev.c:3668 sch_direct_xmit+0x1a8/0x1e4 net/sched/sch_generic.c:327 __dev_xmit_skb net/core/dev.c:3764 [inline] __dev_queue_xmit+0x468/0xd40 net/core/dev.c:4169 dev_queue_xmit include/linux/netdevice.h:3088 [inline] packet_xmit+0xd8/0x14c net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3081 [inline] packet_sendmsg+0xeec/0x13d0 net/packet/af_packet.c:3113 sock_sendmsg_nosec net/socket.c:725 [inline] sock_sendmsg+0x54/0x60 net/socket.c:748 __sys_sendto+0x124/0x150 net/socket.c:2134 __do_sys_sendto net/socket.c:2146 [inline] __se_sys_sendto net/socket.c:2142 [inline] __arm64_sys_sendto+0x28/0x38 net/socket.c:2142 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0x44/0xe4 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x38/0xa4 arch/arm64/kernel/syscall.c:191 el0_svc+0x2c/0xb0 arch/arm64/kernel/entry-common.c:647 el0t_64_sync_handler+0xc0/0xc4 arch/arm64/kernel/entry-common.c:665 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:591 ---[ end trace 0000000000000000 ]---