skb linear:   000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
skb linear:   000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
skb linear:   000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5382 at net/core/dev.c:3324 skb_checksum_help+0x16c/0x20c net/core/dev.c:3324
offset (10633) >= skb_headlen() (10633)
Modules linked in:
Kernel panic - not syncing: kernel: panic_on_warn set ...
CPU: 1 PID: 5382 Comm: syz.0.356 Not tainted 6.10.0-rc6-syzkaller #0
Hardware name: ARM-Versatile Express
Call trace: 
[<818d4f98>] (dump_backtrace) from [<818d5094>] (show_stack+0x18/0x1c arch/arm/kernel/traps.c:257)
 r7:00000000 r6:82622d44 r5:00000000 r4:81fe1524
[<818d507c>] (show_stack) from [<818f26fc>] (__dump_stack lib/dump_stack.c:88 [inline])
[<818d507c>] (show_stack) from [<818f26fc>] (dump_stack_lvl+0x54/0x7c lib/dump_stack.c:114)
[<818f26a8>] (dump_stack_lvl) from [<818f273c>] (dump_stack+0x18/0x1c lib/dump_stack.c:123)
 r5:00000000 r4:8285fd18
[<818f2724>] (dump_stack) from [<818d5b3c>] (panic+0x120/0x358 kernel/panic.c:347)
[<818d5a1c>] (panic) from [<80243dcc>] (check_panic_on_warn kernel/panic.c:240 [inline])
[<818d5a1c>] (panic) from [<80243dcc>] (print_tainted+0x0/0xa0 kernel/panic.c:235)
 r3:8260c5c4 r2:00000001 r1:81fca190 r0:81fd1de8
 r7:81401fdc
[<80243d58>] (check_panic_on_warn) from [<80243fc0>] (__warn+0x7c/0x180 kernel/panic.c:693)
[<80243f44>] (__warn) from [<802442ac>] (warn_slowpath_fmt+0x1e8/0x1f4 kernel/panic.c:726)
 r8:00000009 r7:8218c554 r6:dfcb58bc r5:8340a400 r4:00000000
[<802440c8>] (warn_slowpath_fmt) from [<81401fdc>] (skb_checksum_help+0x16c/0x20c net/core/dev.c:3324)
 r10:0000002f r9:82ea5780 r8:00000000 r7:00002989 r6:8159f400 r5:827ee5ee
 r4:8527f0c0
[<81401e70>] (skb_checksum_help) from [<815a0468>] (ip_do_fragment+0x414/0x6f0 net/ipv4/ip_output.c:777)
 r7:00000000 r6:8159f400 r5:84558000 r4:8527f0c0
[<815a0054>] (ip_do_fragment) from [<815a07a0>] (ip_fragment.constprop.0+0x5c/0x104 net/ipv4/ip_output.c:584)
 r10:0000002f r9:00000000 r8:8527fcc0 r7:000005dc r6:00000000 r5:84558000
 r4:8527f0c0
[<815a0744>] (ip_fragment.constprop.0) from [<815a098c>] (ip_finish_output_gso net/ipv4/ip_output.c:286 [inline])
[<815a0744>] (ip_fragment.constprop.0) from [<815a098c>] (__ip_finish_output net/ipv4/ip_output.c:308 [inline])
[<815a0744>] (ip_fragment.constprop.0) from [<815a098c>] (__ip_finish_output+0x144/0x180 net/ipv4/ip_output.c:295)
 r5:84558000 r4:00000000
[<815a0848>] (__ip_finish_output) from [<815a09f4>] (ip_finish_output+0x2c/0xe0 net/ipv4/ip_output.c:323)
 r9:00000002 r8:846b4000 r7:84ed5000 r6:84558000 r5:8527f900 r4:00000000
[<815a09c8>] (ip_finish_output) from [<815a0b0c>] (NF_HOOK_COND include/linux/netfilter.h:303 [inline])
[<815a09c8>] (ip_finish_output) from [<815a0b0c>] (ip_output+0x64/0xf8 net/ipv4/ip_output.c:433)
 r7:84ed5000 r6:00000000 r5:84558000 r4:8527f900
[<815a0aa8>] (ip_output) from [<815a1dc8>] (dst_output include/net/dst.h:450 [inline])
[<815a0aa8>] (ip_output) from [<815a1dc8>] (ip_local_out+0x40/0x44 net/ipv4/ip_output.c:129)
 r8:84558000 r7:00000000 r6:00000000 r5:84558000 r4:8527f900
[<815a1d88>] (ip_local_out) from [<8160e508>] (iptunnel_xmit+0x140/0x290 net/ipv4/ip_tunnel_core.c:82)
 r7:00000000 r6:82ea5780 r5:846b4000 r4:8527f900
[<8160e3c8>] (iptunnel_xmit) from [<81618f74>] (ip_tunnel_xmit+0x5a8/0xb14 net/ipv4/ip_tunnel.c:857)
 r10:00000000 r9:82ea5780 r8:0000000f r7:00000024 r6:00000024 r5:846b4000
 r4:8527f900
[<816189cc>] (ip_tunnel_xmit) from [<81629958>] (__gre_xmit+0x144/0x238 net/ipv4/ip_gre.c:483)
 r10:00000004 r9:00000000 r8:00000008 r7:85d30048 r6:846b4000 r5:00000000
 r4:8527f900
[<81629814>] (__gre_xmit) from [<8162a088>] (ipgre_xmit+0x13c/0x2d8 net/ipv4/ip_gre.c:687)
 r10:00000000 r9:84c81400 r8:00000030 r7:85d30048 r6:00000018 r5:846b4000
 r4:8527f900
[<81629f4c>] (ipgre_xmit) from [<81402e50>] (__netdev_start_xmit include/linux/netdevice.h:4882 [inline])
[<81629f4c>] (ipgre_xmit) from [<81402e50>] (netdev_start_xmit include/linux/netdevice.h:4896 [inline])
[<81629f4c>] (ipgre_xmit) from [<81402e50>] (xmit_one net/core/dev.c:3578 [inline])
[<81629f4c>] (ipgre_xmit) from [<81402e50>] (dev_hard_start_xmit+0xe4/0x2b4 net/core/dev.c:3594)
 r9:84c81400 r8:00000000 r7:8340a400 r6:846b4000 r5:81c53188 r4:8527f900
[<81402d6c>] (dev_hard_start_xmit) from [<81403338>] (__dev_queue_xmit+0x1d4/0xea0 net/core/dev.c:4393)
 r10:00000000 r9:00000000 r8:dfcb5c60 r7:84c81400 r6:846b4000 r5:824b60cc
 r4:8527f900
[<81403164>] (__dev_queue_xmit) from [<8171b8c4>] (dev_queue_xmit include/linux/netdevice.h:3095 [inline])
[<81403164>] (__dev_queue_xmit) from [<8171b8c4>] (packet_xmit net/packet/af_packet.c:276 [inline])
[<81403164>] (__dev_queue_xmit) from [<8171b8c4>] (packet_xmit+0x9c/0x100 net/packet/af_packet.c:273)
 r10:85d37f00 r9:dfcb5f38 r8:8527f900 r7:84130000 r6:84130000 r5:8335ac80
 r4:8527f900
[<8171b828>] (packet_xmit) from [<8172071c>] (packet_snd net/packet/af_packet.c:3080 [inline])
[<8171b828>] (packet_xmit) from [<8172071c>] (packet_sendmsg+0xf00/0x1510 net/packet/af_packet.c:3112)
 r7:84130000 r6:84130000 r5:8335ac80 r4:0000dd12
[<8171f81c>] (packet_sendmsg) from [<813d1560>] (sock_sendmsg_nosec net/socket.c:730 [inline])
[<8171f81c>] (packet_sendmsg) from [<813d1560>] (__sock_sendmsg+0x44/0x78 net/socket.c:745)
 r10:00000000 r9:dfcb5dd4 r8:dfcb5dd4 r7:00000000 r6:8335ac80 r5:dfcb5f38
 r4:00000000
[<813d151c>] (__sock_sendmsg) from [<813d2474>] (____sys_sendmsg+0x250/0x2cc net/socket.c:2585)
 r7:00000000 r6:00000000 r5:8335ac80 r4:dfcb5f38
[<813d2224>] (____sys_sendmsg) from [<813d4308>] (___sys_sendmsg+0x9c/0xd0 net/socket.c:2639)
 r10:dfcb5e34 r9:20002ac0 r8:00000000 r7:00000000 r6:8335ac80 r5:dfcb5f38
 r4:00000000
[<813d426c>] (___sys_sendmsg) from [<813d4820>] (__sys_sendmsg net/socket.c:2668 [inline])
[<813d426c>] (___sys_sendmsg) from [<813d4820>] (__do_sys_sendmsg net/socket.c:2677 [inline])
[<813d426c>] (___sys_sendmsg) from [<813d4820>] (sys_sendmsg+0x78/0xbc net/socket.c:2675)
 r10:00000128 r9:8340a400 r8:8020029c r7:00000000 r6:20002ac0 r5:8335ac80
 r4:00000000
[<813d47a8>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c arch/arm/mm/proc-v7.S:67)
Exception stack(0xdfcb5fa8 to 0xdfcb5ff0)
5fa0:                   00000000 00000000 00000004 20002ac0 00000000 00000000
5fc0: 00000000 00000000 002542e0 00000128 7eab9776 7eab9777 003d0f00 76b040bc
5fe0: 76b03ec8 76b03eb8 00018374 00130460
 r7:00000128 r6:002542e0 r5:00000000 r4:00000000
Rebooting in 86400 seconds..