skbuff: skb_under_panic: text:ffffffff86255e1f len:48 put:8 head:ffff8880a5402300 data:ffff8880a54022fc tail:0x2c end:0xc0 dev:sit1
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:104!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 7958 Comm: syz-executor133 Not tainted 4.14.304-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
task: ffff888097ffa240 task.stack: ffff8880962a8000
RIP: 0010:skb_panic+0x172/0x174 net/core/skbuff.c:104
RSP: 0018:ffff8880962aee78 EFLAGS: 00010282
RAX: 0000000000000083 RBX: ffff8880ab7c2140 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff878bd020 RDI: ffffed1012c55dc5
RBP: ffffffff8855e7a0 R08: 0000000000000083 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff86255e1f
R13: 0000000000000008 R14: ffff8880b3f0ae40 R15: 00000000000000c0
FS:  00005555570fe300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 0000000094725000 CR4: 00000000003406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 skb_under_panic net/core/skbuff.c:114 [inline]
 skb_push.cold+0x24/0x24 net/core/skbuff.c:1728
 fou_build_udp+0x2f/0x360 net/ipv4/fou.c:960
 gue_build_header+0xd1/0x110 net/ipv4/fou.c:1003
 ip_tunnel_encap include/net/ip_tunnels.h:342 [inline]
 ip_tunnel_xmit+0x50e/0x33e0 net/ipv4/ip_tunnel.c:731
 sit_tunnel_xmit__ net/ipv6/sit.c:1004 [inline]
 sit_tunnel_xmit+0x1ab/0x2130 net/ipv6/sit.c:1017
 __netdev_start_xmit include/linux/netdevice.h:4054 [inline]
 netdev_start_xmit include/linux/netdevice.h:4063 [inline]
 xmit_one net/core/dev.c:3005 [inline]
 dev_hard_start_xmit+0x188/0x890 net/core/dev.c:3021
 __dev_queue_xmit+0x1d7f/0x2480 net/core/dev.c:3521
 neigh_output include/net/neighbour.h:500 [inline]
 ip_finish_output2+0xba6/0x1340 net/ipv4/ip_output.c:237
 ip_finish_output+0x37c/0xc50 net/ipv4/ip_output.c:325
 NF_HOOK_COND include/linux/netfilter.h:239 [inline]
 ip_output+0x1cd/0x510 net/ipv4/ip_output.c:413
 dst_output include/net/dst.h:470 [inline]
 ip_local_out+0x93/0x170 net/ipv4/ip_output.c:125
 ip_send_skb+0x3a/0xc0 net/ipv4/ip_output.c:1431
 udp_send_skb+0x601/0xb70 net/ipv4/udp.c:833
 udp_sendmsg+0x15a1/0x1c80 net/ipv4/udp.c:1057
 udpv6_sendmsg+0x12ea/0x2560 net/ipv6/udp.c:1193
 inet_sendmsg+0x11a/0x4e0 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 ___sys_sendmsg+0x326/0x800 net/socket.c:2062
 __sys_sendmmsg+0x129/0x330 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0x2f/0x50 net/socket.c:2178
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x5e/0xd3
RIP: 0033:0x7fb08bbac149
RSP: 002b:00007ffe6a52b878 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb08bbac149
RDX: 0000000000000001 RSI: 00000000200017c0 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007ffe6a52ba18 R09: 00007ffe6a52ba18
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb08bb6f9d0
R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
Code: 8b 4c 24 10 8b 8b 80 00 00 00 41 56 45 89 e8 4c 89 e2 41 57 48 89 ee 48 c7 c7 80 e0 55 88 ff 74 24 10 ff 74 24 20 e8 63 62 e4 ff <0f> 0b e8 d8 58 36 fa 4c 8b 64 24 18 e8 ce 04 60 fa 48 c7 c1 a0 
RIP: skb_panic+0x172/0x174 net/core/skbuff.c:104 RSP: ffff8880962aee78
---[ end trace 40c377f9003b5d5d ]---