syzbot

random: sshd: uninitialized urandom read (32 bytes read)
random: crng init done
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:1208!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 2056 Comm: syz-executor722 Not tainted 4.9.148+ #3
task: ffff8801cfec8000 task.stack: ffff8801d6ed8000
RIP: 0010:[<ffffffff822c4b22>]  [<ffffffff822c4b22>] pskb_expand_head+0x842/0x8b0 net/core/skbuff.c:1208
RSP: 0018:ffff8801d6edf880  EFLAGS: 00010293
RAX: ffff8801cfec8000 RBX: ffff8801d2911640 RCX: 0000000002080020
RDX: 0000000000000000 RSI: ffffffff822c4b22 RDI: ffff8801d291171c
RBP: ffff8801d6edf8f8 R08: 0000000000000018 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000002080020
R13: ffff8801d2911704 R14: 0000000000000000 R15: 00000000000000c0
FS:  00007f8e88ec2700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000300 CR3: 00000001ce888000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 0000000000000000 ffffffff822d7d80 ffff8801cfec88a8 ffff8801cfec8000
 ffffffff82812a9a ffff8801d29116c6 0000000000000000 0000000000000004
 ffff8801d6edf8e0 0000000081207265 ffff8801ced1f680 0000000000000040
Call Trace:
 [<ffffffff822c5bf8>] __pskb_pull_tail+0xc8/0xf50 net/core/skbuff.c:1630
 [<ffffffff8274ff46>] pskb_may_pull include/linux/skbuff.h:1971 [inline]
 [<ffffffff8274ff46>] ip6_datagram_recv_specific_ctl+0x1396/0x1580 net/ipv6/datagram.c:702
 [<ffffffff82751374>] ip6_datagram_recv_ctl+0x34/0x40 net/ipv6/datagram.c:726
 [<ffffffff8270c0ca>] rawv6_recvmsg+0x8da/0xac0 net/ipv6/raw.c:516
 [<ffffffff822a78c0>] sock_common_recvmsg+0x110/0x200 net/core/sock.c:2690
 [<ffffffff822a1918>] sock_recvmsg_nosec net/socket.c:750 [inline]
 [<ffffffff822a1918>] sock_recvmsg net/socket.c:757 [inline]
 [<ffffffff822a1918>] sock_recvmsg+0xc8/0x110 net/socket.c:753
 [<ffffffff822a5240>] SYSC_recvfrom net/socket.c:1735 [inline]
 [<ffffffff822a5240>] SyS_recvfrom+0x1f0/0x350 net/socket.c:1707
 [<ffffffff810056bd>] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285
 [<ffffffff82813393>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: ff 48 8b 7d a0 e8 0f fa 22 ff e9 65 fb ff ff 4c 89 ff e8 02 fa 22 ff e9 25 fe ff ff e8 f8 f9 22 ff e9 95 fc ff ff e8 0e 68 05 ff <0f> 0b 48 8b 7d a0 e8 e3 f9 22 ff e9 09 f9 ff ff 48 8b 7d a0 e8 
RIP  [<ffffffff822c4b22>] pskb_expand_head+0x842/0x8b0 net/core/skbuff.c:1208
 RSP <ffff8801d6edf880>
---[ end trace 027b6d34850535ab ]---