------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:1459! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 7998 Comm: syz-executor691 Not tainted 4.20.0+ #299 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:pskb_expand_head+0xc24/0x10d0 net/core/skbuff.c:1459 Code: 8b 85 20 fe ff ff 48 85 c0 0f 84 44 fe ff ff e8 72 11 67 fb 4d 8d 74 24 ff e9 35 fe ff ff e8 63 11 67 fb 0f 0b e8 5c 11 67 fb <0f> 0b e8 55 11 67 fb 31 f6 31 ff e8 1c 12 67 fb e9 6a fd ff ff 4c RSP: 0018:ffff88809ac1f140 EFLAGS: 00010293 RAX: ffff88808dc64700 RBX: ffff88808fb96e40 RCX: ffffffff861ad06a RDX: 0000000000000000 RSI: ffffffff861adae4 RDI: 0000000000000005 RBP: ffff88809ac1f340 R08: ffff88808dc64700 R09: ffffed1011f72de2 R10: ffffed1011f72de2 R11: ffff88808fb96f17 R12: ffff88808fb96efc R13: 0000000000000002 R14: dffffc0000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880ae600000(0063) knlGS:00000000f7ee3b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 0000000020000300 CR3: 00000000978c5000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __pskb_pull_tail+0x156/0x18a0 net/core/skbuff.c:1896 pskb_may_pull include/linux/skbuff.h:2188 [inline] ip6_datagram_recv_specific_ctl+0x1953/0x1bf0 net/ipv6/datagram.c:707 ip6_datagram_recv_ctl+0x33/0x40 net/ipv6/datagram.c:736 rawv6_recvmsg+0xc4b/0xea0 net/ipv6/raw.c:520 sock_common_recvmsg+0x13a/0x2a0 net/core/sock.c:2970 sock_recvmsg_nosec net/socket.c:794 [inline] sock_recvmsg+0xd0/0x110 net/socket.c:801 ___sys_recvmsg+0x2b6/0x680 net/socket.c:2278 __sys_recvmsg+0x11a/0x280 net/socket.c:2327 __compat_sys_recvmsg net/compat.c:782 [inline] __do_compat_sys_recvmsg net/compat.c:789 [inline] __se_compat_sys_recvmsg net/compat.c:786 [inline] __ia32_compat_sys_recvmsg+0x7a/0xb0 net/compat.c:786 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline] do_fast_syscall_32+0x34d/0xfb2 arch/x86/entry/common.c:397 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7f08849 Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 RSP: 002b:00000000f7ee31fc EFLAGS: 00000246 ORIG_RAX: 0000000000000174 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000140 RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 00000000003d0f00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Modules linked in: ---[ end trace dd5b63f51b615083 ]--- RIP: 0010:pskb_expand_head+0xc24/0x10d0 net/core/skbuff.c:1459 Code: 8b 85 20 fe ff ff 48 85 c0 0f 84 44 fe ff ff e8 72 11 67 fb 4d 8d 74 24 ff e9 35 fe ff ff e8 63 11 67 fb 0f 0b e8 5c 11 67 fb <0f> 0b e8 55 11 67 fb 31 f6 31 ff e8 1c 12 67 fb e9 6a fd ff ff 4c RSP: 0018:ffff88809ac1f140 EFLAGS: 00010293 RAX: ffff88808dc64700 RBX: ffff88808fb96e40 RCX: ffffffff861ad06a RDX: 0000000000000000 RSI: ffffffff861adae4 RDI: 0000000000000005 RBP: ffff88809ac1f340 R08: ffff88808dc64700 R09: ffffed1011f72de2 R10: ffffed1011f72de2 R11: ffff88808fb96f17 R12: ffff88808fb96efc R13: 0000000000000002 R14: dffffc0000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880ae600000(0063) knlGS:00000000f7ee3b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 00000000978c5000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400