skb linear:   000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
skb linear:   000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
skb linear:   000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5818 at net/core/dev.c:3326 skb_checksum_help+0x16c/0x20c net/core/dev.c:3326
offset (1639) >= skb_headlen() (1639)
Modules linked in:
Kernel panic - not syncing: kernel: panic_on_warn set ...
CPU: 1 PID: 5818 Comm: syz.0.11333 Not tainted 6.10.0-syzkaller #0
Hardware name: ARM-Versatile Express
Call trace: 
[<818e5500>] (dump_backtrace) from [<818e55fc>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:00000000 r6:82622804 r5:00000000 r4:81fe5f10
[<818e55e4>] (show_stack) from [<81902d34>] (__dump_stack lib/dump_stack.c:88 [inline])
[<818e55e4>] (show_stack) from [<81902d34>] (dump_stack_lvl+0x54/0x7c lib/dump_stack.c:114)
[<81902ce0>] (dump_stack_lvl) from [<81902d74>] (dump_stack+0x18/0x1c lib/dump_stack.c:123)
 r5:00000000 r4:82861d0c
[<81902d5c>] (dump_stack) from [<818e60a4>] (panic+0x120/0x358 kernel/panic.c:347)
[<818e5f84>] (panic) from [<80241f54>] (check_panic_on_warn kernel/panic.c:240 [inline])
[<818e5f84>] (panic) from [<80241f54>] (print_tainted+0x0/0xa0 kernel/panic.c:235)
 r3:8260c5c4 r2:00000001 r1:81fcf038 r0:81fd66c0
 r7:8140a088
[<80241ee0>] (check_panic_on_warn) from [<80242148>] (__warn+0x7c/0x180 kernel/panic.c:693)
[<802420cc>] (__warn) from [<80242434>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:726)
 r8:00000009 r7:82192730 r6:dfd0d864 r5:8531ec00 r4:00000000
[<80242250>] (warn_slowpath_fmt) from [<8140a088>] (skb_checksum_help+0x16c/0x20c net/core/dev.c:3326)
 r10:0000002f r9:00000000 r8:00000000 r7:00000667 r6:815ad7e8 r5:827ef9c5
 r4:84b51e40
[<81409f1c>] (skb_checksum_help) from [<815ae85c>] (ip_do_fragment+0x410/0x6f0 net/ipv4/ip_output.c:777)
 r7:84970500 r6:815ad7e8 r5:84652700 r4:84b51e40
[<815ae44c>] (ip_do_fragment) from [<815aeb98>] (ip_fragment.constprop.0+0x5c/0x108 net/ipv4/ip_output.c:584)
 r10:0000002f r9:00000000 r8:84b51840 r7:000005dc r6:00000000 r5:84652700
 r4:84b51e40
[<815aeb3c>] (ip_fragment.constprop.0) from [<815aed88>] (ip_finish_output_gso net/ipv4/ip_output.c:286 [inline])
[<815aeb3c>] (ip_fragment.constprop.0) from [<815aed88>] (__ip_finish_output net/ipv4/ip_output.c:308 [inline])
[<815aeb3c>] (ip_fragment.constprop.0) from [<815aed88>] (__ip_finish_output+0x144/0x188 net/ipv4/ip_output.c:295)
 r5:84652700 r4:00000000
[<815aec44>] (__ip_finish_output) from [<815aedf8>] (ip_finish_output+0x2c/0xe4 net/ipv4/ip_output.c:323)
 r9:00000001 r8:84683000 r7:84810800 r6:84652700 r5:84b51cc0 r4:00000000
[<815aedcc>] (ip_finish_output) from [<815aef14>] (NF_HOOK_COND include/linux/netfilter.h:303 [inline])
[<815aedcc>] (ip_finish_output) from [<815aef14>] (ip_output+0x64/0xf8 net/ipv4/ip_output.c:433)
 r7:84810800 r6:00000000 r5:84652700 r4:84b51cc0
[<815aeeb0>] (ip_output) from [<815b01d4>] (dst_output include/net/dst.h:450 [inline])
[<815aeeb0>] (ip_output) from [<815b01d4>] (ip_local_out+0x40/0x44 net/ipv4/ip_output.c:129)
 r8:84652700 r7:00000000 r6:00000000 r5:84652700 r4:84b51cc0
[<815b0194>] (ip_local_out) from [<8161c658>] (iptunnel_xmit+0x140/0x290 net/ipv4/ip_tunnel_core.c:82)
 r7:00000000 r6:84970500 r5:84683000 r4:84b51cc0
[<8161c518>] (iptunnel_xmit) from [<81627058>] (ip_tunnel_xmit+0x5ac/0xb18 net/ipv4/ip_tunnel.c:857)
 r10:00000000 r9:84970500 r8:00000000 r7:00000024 r6:00000024 r5:84683000
 r4:84b51cc0
[<81626aac>] (ip_tunnel_xmit) from [<81637bf8>] (__gre_xmit+0x144/0x238 net/ipv4/ip_gre.c:483)
 r10:00000004 r9:00000000 r8:00000008 r7:84ab0048 r6:84683000 r5:00000000
 r4:84b51cc0
[<81637ab4>] (__gre_xmit) from [<81638330>] (ipgre_xmit+0x13c/0x2dc net/ipv4/ip_gre.c:687)
 r10:00000000 r9:857b3000 r8:00000030 r7:84ab0048 r6:00000018 r5:84683000
 r4:84b51cc0
[<816381f4>] (ipgre_xmit) from [<8140af00>] (__netdev_start_xmit include/linux/netdevice.h:4913 [inline])
[<816381f4>] (ipgre_xmit) from [<8140af00>] (netdev_start_xmit include/linux/netdevice.h:4922 [inline])
[<816381f4>] (ipgre_xmit) from [<8140af00>] (xmit_one net/core/dev.c:3580 [inline])
[<816381f4>] (ipgre_xmit) from [<8140af00>] (dev_hard_start_xmit+0xe4/0x2b4 net/core/dev.c:3596)
 r9:857b3000 r8:00000000 r7:8531ec00 r6:84683000 r5:81c5575c r4:84b51cc0
[<8140ae1c>] (dev_hard_start_xmit) from [<8140b3e8>] (__dev_queue_xmit+0x1d4/0xf0c net/core/dev.c:4423)
 r10:00000000 r9:00000000 r8:dfd0dc08 r7:84683000 r6:857b3000 r5:824b5fcc
 r4:84b51cc0
[<8140b214>] (__dev_queue_xmit) from [<8172a5ec>] (dev_queue_xmit include/linux/netdevice.h:3105 [inline])
[<8140b214>] (__dev_queue_xmit) from [<8172a5ec>] (packet_xmit net/packet/af_packet.c:276 [inline])
[<8140b214>] (__dev_queue_xmit) from [<8172a5ec>] (packet_xmit+0x9c/0x104 net/packet/af_packet.c:273)
 r10:84ab3f00 r9:dfd0df38 r8:84b51cc0 r7:853b5800 r6:853b5800 r5:83302f00
 r4:84b51cc0
[<8172a550>] (packet_xmit) from [<8172f628>] (packet_snd net/packet/af_packet.c:3145 [inline])
[<8172a550>] (packet_xmit) from [<8172f628>] (packet_sendmsg+0xfd8/0x1618 net/packet/af_packet.c:3177)
 r7:853b5800 r6:853b5800 r5:83302f00 r4:0000dd12
[<8172e650>] (packet_sendmsg) from [<813d90c0>] (sock_sendmsg_nosec net/socket.c:730 [inline])
[<8172e650>] (packet_sendmsg) from [<813d90c0>] (__sock_sendmsg+0x44/0x78 net/socket.c:745)
 r10:00000000 r9:dfd0ddd4 r8:dfd0ddd4 r7:00000000 r6:83302f00 r5:dfd0df38
 r4:00000000
[<813d907c>] (__sock_sendmsg) from [<813da030>] (____sys_sendmsg+0x2ac/0x2cc net/socket.c:2597)
 r7:00000000 r6:00000000 r5:83302f00 r4:dfd0df38
[<813d9d84>] (____sys_sendmsg) from [<813dbf9c>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2651)
 r10:dfd0de34 r9:20000280 r8:00000000 r7:00000000 r6:83302f00 r5:dfd0df38
 r4:00000000
[<813dbf00>] (___sys_sendmsg) from [<813dc4b4>] (__sys_sendmsg net/socket.c:2680 [inline])
[<813dbf00>] (___sys_sendmsg) from [<813dc4b4>] (__do_sys_sendmsg net/socket.c:2689 [inline])
[<813dbf00>] (___sys_sendmsg) from [<813dc4b4>] (sys_sendmsg+0x78/0xbc net/socket.c:2687)
 r10:00000128 r9:8531ec00 r8:8020029c r7:00000000 r6:20000280 r5:83302f00
 r4:00000000
[<813dc43c>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67)
Exception stack(0xdfd0dfa8 to 0xdfd0dff0)
dfa0:                   00000000 00000000 00000003 20000280 00000000 00000000
dfc0: 00000000 00000000 002642e0 00000128 7ed0d766 7ed0d767 003d0f00 76b3b0bc
dfe0: 76b3aec8 76b3aeb8 000183ec 001305d0
 r7:00000128 r6:002642e0 r5:00000000 r4:00000000
Rebooting in 86400 seconds..