------------[ cut here ]------------
WARNING: ./include/linux/skbuff.h:2864 at pskb_may_pull_reason include/linux/skbuff.h:2864 [inline], CPU#1: syz.2.446/6786
WARNING: ./include/linux/skbuff.h:2864 at pskb_network_may_pull_reason include/linux/skbuff.h:3265 [inline], CPU#1: syz.2.446/6786
WARNING: ./include/linux/skbuff.h:2864 at pskb_inet_may_pull_reason include/net/ip_tunnels.h:481 [inline], CPU#1: syz.2.446/6786
WARNING: ./include/linux/skbuff.h:2864 at pskb_inet_may_pull include/net/ip_tunnels.h:486 [inline], CPU#1: syz.2.446/6786
WARNING: ./include/linux/skbuff.h:2864 at ip6gre_tunnel_xmit+0x998/0xc18 net/ipv6/ip6_gre.c:885, CPU#1: syz.2.446/6786
Modules linked in:
CPU: 1 UID: 0 PID: 6786 Comm: syz.2.446 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : pskb_may_pull_reason include/linux/skbuff.h:2864 [inline]
pc : pskb_network_may_pull_reason include/linux/skbuff.h:3265 [inline]
pc : pskb_inet_may_pull_reason include/net/ip_tunnels.h:481 [inline]
pc : pskb_inet_may_pull include/net/ip_tunnels.h:486 [inline]
pc : ip6gre_tunnel_xmit+0x998/0xc18 net/ipv6/ip6_gre.c:885
lr : pskb_may_pull_reason include/linux/skbuff.h:2864 [inline]
lr : pskb_network_may_pull_reason include/linux/skbuff.h:3265 [inline]
lr : pskb_inet_may_pull_reason include/net/ip_tunnels.h:481 [inline]
lr : pskb_inet_may_pull include/net/ip_tunnels.h:486 [inline]
lr : ip6gre_tunnel_xmit+0x998/0xc18 net/ipv6/ip6_gre.c:885
sp : ffff800094217120
x29: ffff800094217340 x28: 1fffe0001e305c6a x27: ffff0000f182e350
x26: dfff800000000000 x25: ffff700012842e28 x24: 1fffe0001e305c67
x23: ffff0000f182e358 x22: ffff0000d2fe6a40 x21: 00000000ffffff40
x20: ffff0000d46d6000 x19: ffff0000f182e280 x18: 00000000ffffffff
x17: ffff80008a7c2000 x16: 0000000000000002 x15: ffff800080cee144
x14: ffff800080cefdec x13: 0000000000000000 x12: 0000000000000000
x11: ffff8000942171c0 x10: 0000000000080000 x9 : 000000000000275d
x8 : ffff80009e1ea000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff0000d2fe6b40 x4 : ffff8000928fb050 x3 : ffff8000858ffee4
x2 : 00000000ffffff40 x1 : ffff0000cd400000 x0 : 0000000000000001
Call trace:
 pskb_may_pull_reason include/linux/skbuff.h:2864 [inline] (P)
 pskb_network_may_pull_reason include/linux/skbuff.h:3265 [inline] (P)
 pskb_inet_may_pull_reason include/net/ip_tunnels.h:481 [inline] (P)
 pskb_inet_may_pull include/net/ip_tunnels.h:486 [inline] (P)
 ip6gre_tunnel_xmit+0x998/0xc18 net/ipv6/ip6_gre.c:885 (P)
 __netdev_start_xmit include/linux/netdevice.h:5397 [inline]
 netdev_start_xmit include/linux/netdevice.h:5406 [inline]
 __dev_direct_xmit+0x2f0/0x548 net/core/dev.c:4942
 __xsk_generic_xmit net/xdp/xsk.c:1256 [inline]
 xsk_generic_xmit+0x174c/0x27e0 net/xdp/xsk.c:1312
 xsk_poll+0x2c4/0x5c8 net/xdp/xsk.c:1440
 sock_poll+0x250/0x310 net/socket.c:1489
 vfs_poll include/linux/poll.h:82 [inline]
 do_pollfd fs/select.c:877 [inline]
 do_poll fs/select.c:920 [inline]
 do_sys_poll+0x59c/0xc80 fs/select.c:1015
 __do_sys_ppoll fs/select.c:1112 [inline]
 __se_sys_ppoll fs/select.c:1092 [inline]
 __arm64_sys_ppoll+0x1f0/0x270 fs/select.c:1092
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590
irq event stamp: 1909
hardirqs last  enabled at (1907): [<ffff8000869191a8>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:178 [inline]
hardirqs last  enabled at (1907): [<ffff8000869191a8>] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:198
hardirqs last disabled at (1909): [<ffff8000868f3d60>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445
softirqs last  enabled at (1902): [<ffff800084c0e544>] __alloc_skb+0x1c0/0x610 net/core/skbuff.c:698
softirqs last disabled at (1908): [<ffff800084c7db2c>] netdev_get_tx_queue include/linux/netdevice.h:2719 [inline]
softirqs last disabled at (1908): [<ffff800084c7db2c>] skb_get_tx_queue include/linux/netdevice.h:2725 [inline]
softirqs last disabled at (1908): [<ffff800084c7db2c>] __dev_direct_xmit+0x1a8/0x548 net/core/dev.c:4935
---[ end trace 0000000000000000 ]---