------------[ cut here ]------------ WARNING: CPU: 0 PID: 4850 at net/core/skbuff.c:1216 __sk_skb_reason_drop net/core/skbuff.c:1216 [inline] WARNING: CPU: 0 PID: 4850 at net/core/skbuff.c:1216 sk_skb_reason_drop+0x9c/0x174 net/core/skbuff.c:1241 Modules linked in: CPU: 0 UID: 0 PID: 4850 Comm: syz.1.567 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 Hardware name: linux,dummy-virt (DT) pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __sk_skb_reason_drop net/core/skbuff.c:1216 [inline] pc : sk_skb_reason_drop+0x9c/0x174 net/core/skbuff.c:1241 lr : instrument_atomic_read_write include/linux/instrumented.h:96 [inline] lr : atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:400 [inline] lr : __refcount_sub_and_test include/linux/refcount.h:264 [inline] lr : __refcount_dec_and_test include/linux/refcount.h:307 [inline] lr : refcount_dec_and_test include/linux/refcount.h:325 [inline] lr : skb_unref include/linux/skbuff.h:1233 [inline] lr : __sk_skb_reason_drop net/core/skbuff.c:1213 [inline] lr : sk_skb_reason_drop+0x3c/0x174 net/core/skbuff.c:1241 sp : ffff8000a0e56f30 x29: ffff8000a0e56f30 x28: 0000000000000000 x27: ffff00001869017e x26: ffff00001616e488 x25: ffff00001616e418 x24: 1fffe00002c2dc8f x23: ffff00001616e49c x22: 0000000000000000 x21: ffff8000848a0ab8 x20: 00000000ffffffea x19: ffff00001616e3c0 x18: 000000009be2c94c x17: ffff80008469dfe0 x16: 0000000000000000 x15: 1fffe000029f4514 x14: 1ffff000110e6efc x13: ffff000014fa28c0 x12: ffff600002c2dc94 x11: 1fffe00002c2dc93 x10: ffff600002c2dc93 x9 : dfff800000000000 x8 : ffff00001616e49f x7 : 0000000000000001 x6 : ffff600002c2dc93 x5 : ffff00001616e49c x4 : ffff00001616e49c x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 000000000000ffff Call trace: __sk_skb_reason_drop net/core/skbuff.c:1216 [inline] (P) sk_skb_reason_drop+0x9c/0x174 net/core/skbuff.c:1241 (P) instrument_atomic_read_write include/linux/instrumented.h:96 [inline] (L) atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:400 [inline] (L) __refcount_sub_and_test include/linux/refcount.h:264 [inline] (L) __refcount_dec_and_test include/linux/refcount.h:307 [inline] (L) refcount_dec_and_test include/linux/refcount.h:325 [inline] (L) skb_unref include/linux/skbuff.h:1233 [inline] (L) __sk_skb_reason_drop net/core/skbuff.c:1213 [inline] (L) sk_skb_reason_drop+0x3c/0x174 net/core/skbuff.c:1241 (L) kfree_skb_reason include/linux/skbuff.h:1263 [inline] ip_rcv_finish_core.constprop.0+0xb48/0x1a08 net/ipv4/ip_input.c:424 ip_list_rcv_finish net/ipv4/ip_input.c:610 [inline] ip_sublist_rcv+0x1ec/0x6cc net/ipv4/ip_input.c:636 ip_list_rcv+0x248/0x388 net/ipv4/ip_input.c:670 __netif_receive_skb_list_ptype net/core/dev.c:5715 [inline] __netif_receive_skb_list_core+0x3a8/0x66c net/core/dev.c:5762 __netif_receive_skb_list net/core/dev.c:5814 [inline] netif_receive_skb_list_internal+0x4e8/0xa04 net/core/dev.c:5905 netif_receive_skb_list+0x4c/0x4e4 net/core/dev.c:5957 xdp_recv_frames net/bpf/test_run.c:280 [inline] xdp_test_run_batch.constprop.0+0x1168/0x17e4 net/bpf/test_run.c:361 bpf_test_run_xdp_live+0x26c/0x388 net/bpf/test_run.c:390 bpf_prog_test_run_xdp+0x560/0x1634 net/bpf/test_run.c:1318 bpf_prog_test_run kernel/bpf/syscall.c:4402 [inline] __sys_bpf+0xe6c/0x306c kernel/bpf/syscall.c:5808 __do_sys_bpf kernel/bpf/syscall.c:5897 [inline] __se_sys_bpf kernel/bpf/syscall.c:5895 [inline] __arm64_sys_bpf+0x70/0xa4 kernel/bpf/syscall.c:5895 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x6c/0x258 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0xac/0x230 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x40/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x50/0x180 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x10c/0x138 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600 irq event stamp: 959 hardirqs last enabled at (958): [] __local_bh_enable_ip+0x180/0x4a4 kernel/softirq.c:387 hardirqs last disabled at (959): [] el1_dbg+0x24/0x9c arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (568): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (568): [] bpf_ksym_add+0x260/0x390 kernel/bpf/core.c:665 softirqs last disabled at (620): [] xdp_test_run_batch.constprop.0+0xdc/0x17e4 net/bpf/test_run.c:298 ---[ end trace 0000000000000000 ]---