skbuff: skb_under_panic: text:ffff800089a46560 len:-928657708 put:-928657804 head:ffff0000c2784000 data:fffefffff9d2724c tail:0x120 end:0x6c0 dev:team0 ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:212! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 7263 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Workqueue: mld mld_ifc_work pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : skb_panic+0x140/0x144 net/core/skbuff.c:208 lr : skb_panic+0x140/0x144 net/core/skbuff.c:208 sp : ffff80009e3f73f0 x29: ffff80009e3f7400 x28: dfff800000000000 x27: ffff0000f41e7a10 x26: 0000000000000120 x25: fffefffff9d2724c x24: ffff0000c2784000 x23: 00000000c8a5ced4 x22: 00000000000006c0 x21: 00000000c8a5ce74 x20: ffff80008eda7583 x19: ffff800089a46560 x18: 1fffe000337d4a90 x17: 0000000000000000 x16: ffff800082defcc0 x15: 0000000000000001 x14: 1ffff00013c7edf8 x13: 0000000000000000 x12: 0000000000000000 x11: ffff700013c7edf9 x10: 0000000000ff0100 x9 : b5041b1fdf690300 x8 : b5041b1fdf690300 x7 : ffff800080565b88 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807d6f80 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000097 Call trace: skb_panic+0x140/0x144 net/core/skbuff.c:208 (P) skb_under_panic net/core/skbuff.c:222 [inline] skb_push+0xdc/0xf4 net/core/skbuff.c:2602 ipgre_header+0x78/0x2cc net/ipv4/ip_gre.c:895 dev_hard_header include/linux/netdevice.h:3419 [inline] neigh_connected_output+0x214/0x3ec net/core/neighbour.c:1619 neigh_output include/net/neighbour.h:547 [inline] ip6_finish_output2+0x1188/0x1a78 net/ipv6/ip6_output.c:136 __ip6_finish_output net/ipv6/ip6_output.c:-1 [inline] ip6_finish_output+0x418/0x7b4 net/ipv6/ip6_output.c:220 NF_HOOK_COND include/linux/netfilter.h:307 [inline] ip6_output+0x2c8/0x640 net/ipv6/ip6_output.c:247 dst_output include/net/dst.h:464 [inline] NF_HOOK+0x15c/0x430 include/linux/netfilter.h:318 mld_sendpack+0x7fc/0x100c net/ipv6/mcast.c:1855 mld_send_cr net/ipv6/mcast.c:2154 [inline] mld_ifc_work+0x770/0xc38 net/ipv6/mcast.c:2693 process_one_work+0x7e8/0x155c kernel/workqueue.c:3263 process_scheduled_works kernel/workqueue.c:3346 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3427 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 Code: aa1903e6 aa1a03e7 a90023f6 97fc7c77 (d4210000) ---[ end trace 0000000000000000 ]---