------------[ cut here ]------------ WARNING: CPU: 1 PID: 5050 at net/ipv6/ip6mr.c:2376 ip6_mr_output+0x6ab/0x6e0 net/ipv6/ip6mr.c:2376 Modules linked in: CPU: 1 UID: 0 PID: 5050 Comm: kworker/1:4 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(undef) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: wg-crypt-wg2 wg_packet_tx_worker RIP: 0010:ip6_mr_output+0x6ab/0x6e0 net/ipv6/ip6mr.c:2376 Code: 48 3b 84 24 a0 00 00 00 75 44 44 89 f8 48 81 c4 a8 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c6 6a 25 fd 90 <0f> 0b 90 e9 73 fa ff ff e8 b8 6a 25 fd 90 0f 0b 90 e9 c8 f9 ff ff RSP: 0018:ffffc9000208bb28 EFLAGS: 00010293 RAX: ffffffff843d1d8a RBX: ffff888160373c00 RCX: ffff888116f61bc0 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffff888116f61bc0 R09: 0000000000000004 R10: 0000000000000003 R11: ffffffff843d16e0 R12: ffff88817c5b3d80 R13: ffff88817c93e000 R14: ffff8881758c4c00 R15: ffff888115645d00 FS: 0000000000000000(0000) GS:ffff8882afe01000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffde0e8cff8 CR3: 0000000005ccc000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ip6tunnel_xmit include/net/ip6_tunnel.h:162 [inline] udp_tunnel6_xmit_skb+0x283/0x3c0 net/ipv6/ip6_udp_tunnel.c:112 send6+0x295/0x3a0 drivers/net/wireguard/socket.c:152 wg_socket_send_skb_to_peer+0x9b/0x100 drivers/net/wireguard/socket.c:178 wg_packet_create_data_done drivers/net/wireguard/send.c:251 [inline] wg_packet_tx_worker+0xf2/0x2f0 drivers/net/wireguard/send.c:276 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0x462/0xa80 kernel/workqueue.c:3321 worker_thread+0x313/0x4c0 kernel/workqueue.c:3402 kthread+0x342/0x3d0 kernel/kthread.c:464 ret_from_fork+0x13c/0x2b0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245