syzbot has bisected this issue to: commit c31a25e1db486f36a0ffe3c849b0a82cda3db7db Author: David Howells <dhowells@xxxxxxxxxx> Date: Fri Jun 9 10:02:21 2023 +0000 kcm: Send multiple frags in one sendmsg() bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=13050c75280000 start commit: c29e012eae29 selftests: forwarding: Fix layer 2 miss test .. git tree: net-next final oops: https://syzkaller.appspot.com/x/report.txt?x=10850c75280000 console output: https://syzkaller.appspot.com/x/log.txt?x=17050c75280000 kernel config: https://syzkaller.appspot.com/x/.config?x=526f919910d4a671 dashboard link: https://syzkaller.appspot.com/bug?extid=dd1339599f1840e4cc65 syz repro: https://syzkaller.appspot.com/x/repro.syz?x=170f2663280000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=12f1c5e7280000 Reported-by: syzbot+dd1339599f1840e4cc65@xxxxxxxxxxxxxxxxxxxxxxxxx Fixes: c31a25e1db48 ("kcm: Send multiple frags in one sendmsg()") For information about bisection process see: https://goo.gl/tpsmEJ#bisection