Hello:
This patch was applied to netdev/net.git (main) by Jakub Kicinski kuba@kernel.org:
On Fri, 10 Jul 2026 23:07:24 +0000 you wrote:
gtp1u_send_echo_resp() ignores skb_pull_data()'s return value. Its caller gtp1u_udp_encap_recv() only guarantees 16 bytes (udphdr + gtp1_header), but the pull requests 20 (gtp1_header_long + udphdr). For a 16-19 byte echo request the pull fails and returns NULL without advancing skb->data; execution continues, and the following skb_push() plus the IP header pushed by iptunnel_xmit() move skb->data below skb->head, tripping skb_under_panic().
[...]
Here is the summary with links: - [net] gtp: check skb_pull_data() return in gtp1u_send_echo_resp() https://git.kernel.org/netdev/net/c/cd170f051dba
You are awesome, thank you!