program: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000210)="01", 0x1) read(r1, &(0x7f0000800000)=""/8, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x11, 0x10, r4, 0x1, 0x0, 0x0, @multicast}, 0x14) [ 94.332179][ T5272] Bluetooth: hci0: command tx timeout [ 94.467454][ T5312] ------------[ cut here ]------------ [ 94.469846][ T5312] skb_assert_len [ 94.471755][ T5312] WARNING: ./include/linux/skbuff.h:2753 at __dev_queue_xmit+0x1fb8/0x3820, CPU#0: syz.0.0/5312 [ 94.476645][ T5312] Modules linked in: [ 94.478960][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.483087][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.487506][ T5312] RIP: 0010:__dev_queue_xmit+0x1fbf/0x3820 [ 94.490138][ T5312] Code: 48 c7 44 24 10 00 00 00 00 e9 50 fe ff ff e8 08 97 24 f8 90 0f 0b 90 e9 d6 e1 ff ff 48 8d 3d 18 68 c4 06 48 c7 c6 86 ef 43 8e <67> 48 0f b9 3a 80 3d 4c 70 9e 06 01 0f 85 86 03 00 00 e8 da 96 24 [ 94.498286][ T5312] RSP: 0018:ffffc9000e02f660 EFLAGS: 00010246 [ 94.500985][ T5312] RAX: ffffffff89a25e11 RBX: ffff8880526d85d0 RCX: 0000000000000002 [ 94.504319][ T5312] RDX: ffff888032f08000 RSI: ffffffff8e43ef86 RDI: ffffffff9066e400 [ 94.507590][ T5312] RBP: ffffc9000e02f910 R08: ffff88803c6768a7 R09: 1ffff110078ced14 [ 94.510741][ T5312] R10: dffffc0000000000 R11: ffffed10078ced15 R12: dffffc0000000000 [ 94.514204][ T5312] R13: 1ffff92001c05eec R14: 0000000000000000 R15: ffff8880526d85d0 [ 94.517864][ T5312] FS: 00007f057fdb86c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 [ 94.521828][ T5312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.524699][ T5312] CR2: 0000561935649660 CR3: 0000000043864000 CR4: 0000000000352ef0 [ 94.528209][ T5312] Call Trace: [ 94.529768][ T5312] [ 94.531258][ T5312] ? __alloc_skb+0x4cc/0x7a0 [ 94.533274][ T5312] ? alloc_skb_with_frags+0x6b3/0x760 [ 94.535553][ T5312] ? __lock_acquire+0x683/0x2cf0 [ 94.537634][ T5312] ? skb_set_owner_w+0x263/0x3d0 [ 94.539771][ T5312] ? __pfx___dev_queue_xmit+0x10/0x10 [ 94.542083][ T5312] ? sock_alloc_send_pskb+0x896/0x990 [ 94.544491][ T5312] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 94.546794][ T5312] ? packet_parse_headers+0x4dc/0x7b0 [ 94.549129][ T5312] ? packet_parse_headers+0x57e/0x7b0 [ 94.551418][ T5312] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 94.553832][ T5312] ? __pfx_packet_parse_headers+0x10/0x10 [ 94.556315][ T5312] ? packet_xmit+0x68/0x330 [ 94.558258][ T5312] packet_sendmsg+0x1f38/0x4e80 [ 94.560335][ T5312] ? __pfx_packet_sendmsg+0x10/0x10 [ 94.562570][ T5312] ? aa_sk_perm+0x6d5/0x900 [ 94.564679][ T5312] ? do_set_pmd+0x7b0/0x890 [ 94.566628][ T5312] ? aa_sock_msg_perm+0xf1/0x1b0 [ 94.568874][ T5312] ? __pfx_packet_sendmsg+0x10/0x10 [ 94.571100][ T5312] sock_sendmsg_nosec+0x13a/0x180 [ 94.573318][ T5312] __sys_sendto+0x408/0x5a0 [ 94.575550][ T5312] ? __pfx___sys_sendto+0x10/0x10 [ 94.578227][ T5312] ? rcu_is_watching+0x15/0xb0 [ 94.580453][ T5312] __x64_sys_sendto+0xde/0x100 [ 94.582843][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.585736][ T5312] do_syscall_64+0x174/0x580 [ 94.587616][ T5312] ? trace_irq_disable+0x3b/0x140 [ 94.589679][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 94.591621][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.594347][ T5312] RIP: 0033:0x7f057ef9e0d9 [ 94.596257][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.603684][ T5312] RSP: 002b:00007f057fdb7fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 94.607513][ T5312] RAX: ffffffffffffffda RBX: 00007f057f225fa0 RCX: 00007f057ef9e0d9 [ 94.611151][ T5312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 94.614608][ T5312] RBP: 00007f057f035024 R08: 0000200000000000 R09: 0000000000000014 [ 94.618003][ T5312] R10: 0000000004000010 R11: 0000000000000246 R12: 0000000000000000 [ 94.621440][ T5312] R13: 00007f057f226038 R14: 00007f057f225fa0 R15: 00007ffd63b5be78 [ 94.624992][ T5312] [ 94.626317][ T5312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.629317][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.633123][ T5312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.637416][ T5312] Call Trace: [ 94.638840][ T5312] [ 94.640187][ T5312] vpanic+0x56c/0xa60 [ 94.641940][ T5312] ? __pfx__printk+0x10/0x10 [ 94.643980][ T5312] ? __pfx_vpanic+0x10/0x10 [ 94.645968][ T5312] ? is_bpf_text_address+0x292/0x2b0 [ 94.648278][ T5312] ? is_bpf_text_address+0x26/0x2b0 [ 94.650538][ T5312] panic+0xc5/0xd0 [ 94.652239][ T5312] ? __pfx_panic+0x10/0x10 [ 94.654274][ T5312] __warn+0x315/0x4c0 [ 94.656025][ T5312] ? __dev_queue_xmit+0x1fb8/0x3820 [ 94.658148][ T5312] ? __dev_queue_xmit+0x1fb8/0x3820 [ 94.660164][ T5312] __report_bug+0x276/0x570 [ 94.662001][ T5312] ? packet_sendmsg+0xdef/0x4e80 [ 94.664173][ T5312] ? sock_sendmsg_nosec+0x13a/0x180 [ 94.666477][ T5312] ? __sys_sendto+0x408/0x5a0 [ 94.668520][ T5312] ? __dev_queue_xmit+0x1fb8/0x3820 [ 94.670780][ T5312] ? __pfx___report_bug+0x10/0x10 [ 94.672890][ T5312] report_bug_entry+0x19a/0x290 [ 94.674879][ T5312] ? __dev_queue_xmit+0x1fbf/0x3820 [ 94.677190][ T5312] ? __dev_queue_xmit+0x1fc4/0x3820 [ 94.679435][ T5312] handle_bug+0xce/0x200 [ 94.681153][ T5312] exc_invalid_op+0x1a/0x50 [ 94.683058][ T5312] asm_exc_invalid_op+0x1a/0x20 [ 94.685138][ T5312] RIP: 0010:__dev_queue_xmit+0x1fbf/0x3820 [ 94.687594][ T5312] Code: 48 c7 44 24 10 00 00 00 00 e9 50 fe ff ff e8 08 97 24 f8 90 0f 0b 90 e9 d6 e1 ff ff 48 8d 3d 18 68 c4 06 48 c7 c6 86 ef 43 8e <67> 48 0f b9 3a 80 3d 4c 70 9e 06 01 0f 85 86 03 00 00 e8 da 96 24 [ 94.695682][ T5312] RSP: 0018:ffffc9000e02f660 EFLAGS: 00010246 [ 94.698318][ T5312] RAX: ffffffff89a25e11 RBX: ffff8880526d85d0 RCX: 0000000000000002 [ 94.701751][ T5312] RDX: ffff888032f08000 RSI: ffffffff8e43ef86 RDI: ffffffff9066e400 [ 94.705102][ T5312] RBP: ffffc9000e02f910 R08: ffff88803c6768a7 R09: 1ffff110078ced14 [ 94.708628][ T5312] R10: dffffc0000000000 R11: ffffed10078ced15 R12: dffffc0000000000 [ 94.712071][ T5312] R13: 1ffff92001c05eec R14: 0000000000000000 R15: ffff8880526d85d0 [ 94.715524][ T5312] ? __dev_queue_xmit+0x1e1/0x3820 [ 94.717805][ T5312] ? __alloc_skb+0x4cc/0x7a0 [ 94.719860][ T5312] ? alloc_skb_with_frags+0x6b3/0x760 [ 94.722163][ T5312] ? __lock_acquire+0x683/0x2cf0 [ 94.724331][ T5312] ? skb_set_owner_w+0x263/0x3d0 [ 94.726419][ T5312] ? __pfx___dev_queue_xmit+0x10/0x10 [ 94.728733][ T5312] ? sock_alloc_send_pskb+0x896/0x990 [ 94.730989][ T5312] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 94.733285][ T5312] ? packet_parse_headers+0x4dc/0x7b0 [ 94.735509][ T5312] ? packet_parse_headers+0x57e/0x7b0 [ 94.737711][ T5312] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 94.739923][ T5312] ? __pfx_packet_parse_headers+0x10/0x10 [ 94.742309][ T5312] ? packet_xmit+0x68/0x330 [ 94.744209][ T5312] packet_sendmsg+0x1f38/0x4e80 [ 94.746329][ T5312] ? __pfx_packet_sendmsg+0x10/0x10 [ 94.748527][ T5312] ? aa_sk_perm+0x6d5/0x900 [ 94.750462][ T5312] ? do_set_pmd+0x7b0/0x890 [ 94.752402][ T5312] ? aa_sock_msg_perm+0xf1/0x1b0 [ 94.754471][ T5312] ? __pfx_packet_sendmsg+0x10/0x10 [ 94.756653][ T5312] sock_sendmsg_nosec+0x13a/0x180 [ 94.758718][ T5312] __sys_sendto+0x408/0x5a0 [ 94.760618][ T5312] ? __pfx___sys_sendto+0x10/0x10 [ 94.762691][ T5312] ? rcu_is_watching+0x15/0xb0 [ 94.764657][ T5312] __x64_sys_sendto+0xde/0x100 [ 94.766597][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.768956][ T5312] do_syscall_64+0x174/0x580 [ 94.770499][ T5312] ? trace_irq_disable+0x3b/0x140 [ 94.772186][ T5312] ? clear_bhb_loop+0x70/0xc0 [ 94.773850][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.776056][ T5312] RIP: 0033:0x7f057ef9e0d9 [ 94.778074][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.787124][ T5312] RSP: 002b:00007f057fdb7fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 94.790514][ T5312] RAX: ffffffffffffffda RBX: 00007f057f225fa0 RCX: 00007f057ef9e0d9 [ 94.794082][ T5312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 94.797569][ T5312] RBP: 00007f057f035024 R08: 0000200000000000 R09: 0000000000000014 [ 94.801060][ T5312] R10: 0000000004000010 R11: 0000000000000246 R12: 0000000000000000 [ 94.804515][ T5312] R13: 00007f057f226038 R14: 00007f057f225fa0 R15: 00007ffd63b5be78 [ 94.807895][ T5312] [ 94.809544][ T5312] Kernel Offset: disabled [ 94.811247][ T5312] Rebooting in 86400 seconds..