------------[ cut here ]------------
kernel BUG at kernel/time/timer.c:958!
invalid opcode: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 6888 Comm: syz-executor6 Not tainted 4.16.0-rc2+ #320
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__mod_timer kernel/time/timer.c:958 [inline]
RIP: 0010:mod_timer+0x7d6/0x13c0 kernel/time/timer.c:1102
RSP: 0018:ffff8801b33cecb0 EFLAGS: 00010212
RAX: 0000000000010000 RBX: ffff8801b08d9350 RCX: ffffffff8160b426
RDX: 000000000000045c RSI: ffffc90004705000 RDI: ffff8801b08d9368
RBP: ffff8801b33cef50 R08: 0000000000000000 R09: 1ffff10036679dc3
R10: ffff8801b33cede0 R11: 0000000000000002 R12: dffffc0000000000
R13: ffff8801b33cef28 R14: 00000000fffc2be1 R15: ffff8801abb14b10
FS:  00007fb7d1b3e700(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020010000 CR3: 00000001aeabf004 CR4: 00000000001606e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 led_tg+0x1db/0x2e0 net/netfilter/xt_LED.c:75
 ip6t_do_table+0xc2a/0x1a30 net/ipv6/netfilter/ip6_tables.c:365
 ip6table_filter_hook+0x65/0x80 net/ipv6/netfilter/ip6table_filter.c:41
 nf_hook_entry_hookfn include/linux/netfilter.h:120 [inline]
 nf_hook_slow+0xba/0x1a0 net/netfilter/core.c:483
 nf_hook include/linux/netfilter.h:243 [inline]
 __ip6_local_out+0x517/0xaa0 net/ipv6/output_core.c:164
 ip6_local_out+0x2d/0x160 net/ipv6/output_core.c:174
 ip6_send_skb+0xa1/0x330 net/ipv6/ip6_output.c:1677
 ip6_push_pending_frames+0xb3/0xe0 net/ipv6/ip6_output.c:1697
 rawv6_push_pending_frames net/ipv6/raw.c:616 [inline]
 rawv6_sendmsg+0x2f96/0x40c0 net/ipv6/raw.c:935
 inet_sendmsg+0x11f/0x5e0 net/ipv4/af_inet.c:764
 sock_sendmsg_nosec net/socket.c:630 [inline]
 sock_sendmsg+0xca/0x110 net/socket.c:640
 ___sys_sendmsg+0x767/0x8b0 net/socket.c:2046
 __sys_sendmsg+0xe5/0x210 net/socket.c:2080
 SYSC_sendmsg net/socket.c:2091 [inline]
 SyS_sendmsg+0x2d/0x50 net/socket.c:2087
 do_syscall_64+0x280/0x940 arch/x86/entry/common.c:287
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x453d69
RSP: 002b:00007fb7d1b3dc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007fb7d1b3e6d4 RCX: 0000000000453d69
RDX: 0000000000000000 RSI: 0000000020009fc8 RDI: 0000000000000014
RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
R13: 00000000000004a6 R14: 00000000006f7030 R15: 0000000000000000
Code: 85 2a 0b 00 00 4d 8b 3c 24 4d 85 ff 75 9f 4c 8b bd 60 fd ff ff e8 bb 57 10 00 65 ff 0d 34 39 a1 7e e9 d9 fc ff ff e8 aa 57 10 00 <0f> 0b e8 a3 57 10 00 e9 14 fb ff ff e8 99 57 10 00 4c 89 bd 70 
RIP: __mod_timer kernel/time/timer.c:958 [inline] RSP: ffff8801b33cecb0
RIP: mod_timer+0x7d6/0x13c0 kernel/time/timer.c:1102 RSP: ffff8801b33cecb0
---[ end trace 980b237848becba0 ]---