------------[ cut here ]------------ WARNING: CPU: 1 PID: 3035 at net/core/flow_dissector.c:992 __skb_flow_dissect+0x644/0x2708 net/core/flow_dissector.c:987 Modules linked in: CPU: 1 PID: 3035 Comm: syz-executor356 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __skb_flow_dissect+0x644/0x2708 net/core/flow_dissector.c:987 lr : __skb_flow_dissect+0x644/0x2708 net/core/flow_dissector.c:987 sp : ffff80001282b960 x29: ffff80001282ba30 x28: 0000000000000008 x27: 0000000000000000 x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 x23: 0000000000000000 x22: ffff0000c9677800 x21: ffff0000c0c03c00 x20: ffff80000d310640 x19: 0000000000000000 x18: 00000000000000c0 x17: ffff80000dd0b198 x16: ffff80000db49158 x15: ffff0000c3dacf80 x14: 00000000000000b8 x13: 00000000ffffffff x12: 0000000000000000 x11: ff8080000b1eb6f0 x10: 0000000000000000 x9 : ffff80000b1eb6f0 x8 : ffff0000c3dacf80 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001282ba98 x2 : ffff80000d310640 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: __skb_flow_dissect+0x644/0x2708 net/core/flow_dissector.c:987 skb_flow_dissect_flow_keys_basic include/linux/skbuff.h:1497 [inline] skb_get_poff+0x5c/0xb4 net/core/flow_dissector.c:1811 ____bpf_skb_get_pay_offset net/core/filter.c:163 [inline] bpf_skb_get_pay_offset+0x20/0x34 net/core/filter.c:161 0xffff80000f665cf0 bpf_dispatcher_nop_func include/linux/bpf.h:903 [inline] __bpf_prog_run include/linux/filter.h:594 [inline] bpf_prog_run include/linux/filter.h:601 [inline] ppp_send_frame+0xe8/0x7d4 drivers/net/ppp/ppp_generic.c:1763 __ppp_xmit_process+0xa8/0x154 drivers/net/ppp/ppp_generic.c:1646 ppp_xmit_process+0x74/0xec drivers/net/ppp/ppp_generic.c:1667 ppp_write+0x1fc/0x240 drivers/net/ppp/ppp_generic.c:519 do_iter_write+0x1f0/0x560 fs/read_write.c:857 vfs_writev fs/read_write.c:928 [inline] do_pwritev+0x130/0x1e8 fs/read_write.c:1025 __do_sys_pwritev fs/read_write.c:1072 [inline] __se_sys_pwritev fs/read_write.c:1067 [inline] __arm64_sys_pwritev+0x28/0x38 fs/read_write.c:1067 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:581 irq event stamp: 11805 hardirqs last enabled at (11804): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (11804): [] _raw_spin_unlock_irqrestore+0x48/0x8c kernel/locking/spinlock.c:194 hardirqs last disabled at (11805): [] el1_dbg+0x24/0x5c arch/arm64/kernel/entry-common.c:404 softirqs last enabled at (11794): [] ppp_ioctl+0x10d0/0x1130 softirqs last disabled at (11800): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]---