------------[ cut here ]------------
kernel BUG at net/core/dev.c:2865!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 10 Comm: ksoftirqd/0 Tainted: G        W         5.4.233-syzkaller-00007-ge7141bb18b62 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023
RIP: 0010:skb_checksum_help+0x86c/0x880 net/core/dev.c:2865
Code: 03 18 fe e9 b3 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c d0 fc ff ff 48 89 df e8 0e 03 18 fe e9 c3 fc ff ff e8 d4 4a e8 fd <0f> 0b e8 cd 4a e8 fd 0f 0b 66 66 2e 0f 1f 84 00 00 00 00 00 41 57
RSP: 0018:ffff8881f5dd6948 EFLAGS: 00010206
RAX: ffffffff837bd36c RBX: 00000000ffff0040 RCX: ffff8881f5dc0000
RDX: 0000000080000b00 RSI: 0000000000000094 RDI: 00000000ffff0040
RBP: 0000000000000094 R08: ffffffff837bcd67 R09: ffffffff837bf737
R10: ffff8881f5dc0000 R11: 0000000000000002 R12: ffff8881e61a03e0
R13: 0000000000000094 R14: ffff8881e61a0370 R15: 1ffff1103cc3407c
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30421000 CR3: 00000001eddfb000 CR4: 00000000003406b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 skb_csum_hwoffload_help net/core/dev.c:3259 [inline]
 validate_xmit_skb+0x654/0xc50 net/core/dev.c:3302
 __dev_queue_xmit+0xf7d/0x27e0 net/core/dev.c:3782
 neigh_output include/net/neighbour.h:525 [inline]
 ip_finish_output2+0xb92/0xfc0 net/ipv4/ip_output.c:236
 NF_HOOK_COND include/linux/netfilter.h:297 [inline]
 ip_output+0x19b/0x3a0 net/ipv4/ip_output.c:440
 iptunnel_xmit+0x476/0x850 net/ipv4/ip_tunnel_core.c:78
 ip_tunnel_xmit+0x1a4e/0x2320 net/ipv4/ip_tunnel.c:817
 __gre_xmit net/ipv4/ip_gre.c:442 [inline]
 ipgre_xmit+0x7b3/0xac0 net/ipv4/ip_gre.c:634
 __netdev_start_xmit include/linux/netdevice.h:4519 [inline]
 netdev_start_xmit include/linux/netdevice.h:4533 [inline]
 xmit_one net/core/dev.c:3209 [inline]
 dev_hard_start_xmit+0x1b7/0x6b0 net/core/dev.c:3225
 __dev_queue_xmit+0x14da/0x27e0 net/core/dev.c:3790
 neigh_output include/net/neighbour.h:525 [inline]
 ip6_finish_output2+0xf9e/0x18e0 net/ipv6/ip6_output.c:144
 NF_HOOK_COND include/linux/netfilter.h:297 [inline]
 ip6_output+0x1b3/0x430 net/ipv6/ip6_output.c:242
 dst_output include/net/dst.h:444 [inline]
 ip6_local_out+0x1ff/0x490 net/ipv6/output_core.c:161
 ip6tunnel_xmit include/net/ip6_tunnel.h:160 [inline]
 udp_tunnel6_xmit_skb+0x3fb/0x7d0 net/ipv6/ip6_udp_tunnel.c:114
 tipc_udp_xmit+0x659/0x9e0 net/tipc/udp_media.c:210
 tipc_bearer_xmit_skb+0x20f/0x2c0 net/tipc/bearer.c:524
 tipc_disc_timeout+0x6cb/0x880 net/tipc/discover.c:337
 call_timer_fn+0x36/0x390 kernel/time/timer.c:1418
 expire_timers kernel/time/timer.c:1463 [inline]
 __run_timers+0x879/0xbe0 kernel/time/timer.c:1787
 run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1800
 __do_softirq+0x23b/0x6b7 kernel/softirq.c:292
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:603
 smpboot_thread_fn+0x545/0x930 kernel/smpboot.c:165
 kthread+0x2da/0x360 kernel/kthread.c:288
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:354
Modules linked in:
---[ end trace 282ce0129dead8ef ]---
RIP: 0010:skb_checksum_help+0x86c/0x880 net/core/dev.c:2865
Code: 03 18 fe e9 b3 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c d0 fc ff ff 48 89 df e8 0e 03 18 fe e9 c3 fc ff ff e8 d4 4a e8 fd <0f> 0b e8 cd 4a e8 fd 0f 0b 66 66 2e 0f 1f 84 00 00 00 00 00 41 57
RSP: 0018:ffff8881f5dd6948 EFLAGS: 00010206
RAX: ffffffff837bd36c RBX: 00000000ffff0040 RCX: ffff8881f5dc0000
RDX: 0000000080000b00 RSI: 0000000000000094 RDI: 00000000ffff0040
RBP: 0000000000000094 R08: ffffffff837bcd67 R09: ffffffff837bf737
R10: ffff8881f5dc0000 R11: 0000000000000002 R12: ffff8881e61a03e0
R13: 0000000000000094 R14: ffff8881e61a0370 R15: 1ffff1103cc3407c
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30421000 CR3: 00000001eddfb000 CR4: 00000000003406b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400