kernel BUG at net/core/skbuff.c:104!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 3875 Comm: syz-executor1 Not tainted 4.4.133-g3f51ea2 #49
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801bbd58000 task.stack: ffff8801bbd60000
RIP: 0010:[<ffffffff838947ac>]  [<ffffffff838947ac>] skb_panic+0x166/0x168 net/core/skbuff.c:100
RSP: 0018:ffff8801db207990  EFLAGS: 00010282
RAX: 0000000000000085 RBX: ffff8800b4fa8780 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8125d0d9 RDI: ffff8801bbd588dc
RBP: ffff8801db2079f8 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffff8801baecb300
R13: ffff8801caa42810 R14: 00000000000000c8 R15: 00000000000000c0
FS:  0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:0000000008876900
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000000625208 CR3: 00000001bc6eb000 CR4: 00000000001606f0
Stack:
 ffff8801caa42810 00000000000000c8 00000000000000c0 ffff8801baecb300
 ffffffff844bdba0 ffffffff83ec4520 ffffffff834acdd5 0000000881229512
 ffff8800b4fa8780 ffffffff834acdd5 ffff8801caa42840 0000000000000008
Call Trace:
 <IRQ> 
binder: 19666:19670 transaction failed 29189/-22, size 0-0 line 3019
binder: 19666:19670 ioctl c0306201 200004c0 returned -14
 [<ffffffff838947f4>] skb_over_panic net/core/skbuff.c:109 [inline]
 [<ffffffff838947f4>] skb_put.cold.72+0x23/0x23 net/core/skbuff.c:1362
 [<ffffffff834acdd5>] mld_newpack+0x8b5/0xc80 net/ipv6/mcast.c:1594
 [<ffffffff834ad439>] add_grhead.isra.32+0x299/0x370 net/ipv6/mcast.c:1677
 [<ffffffff834b0a06>] add_grec+0xbc6/0xe00 net/ipv6/mcast.c:1798
 [<ffffffff834b1460>] mld_send_cr net/ipv6/mcast.c:1924 [inline]
 [<ffffffff834b1460>] mld_ifc_timer_expire+0x340/0x740 net/ipv6/mcast.c:2430
 [<ffffffff8129090c>] call_timer_fn+0x18c/0x870 kernel/time/timer.c:1185
 [<ffffffff81291632>] __run_timers kernel/time/timer.c:1261 [inline]
 [<ffffffff81291632>] run_timer_softirq+0x642/0xb90 kernel/time/timer.c:1444
 [<ffffffff838c442c>] __do_softirq+0x22c/0xa1a kernel/softirq.c:273
 [<ffffffff8113f79d>] invoke_softirq kernel/softirq.c:350 [inline]
 [<ffffffff8113f79d>] irq_exit+0x10d/0x140 kernel/softirq.c:391
 [<ffffffff838c3b91>] exiting_irq arch/x86/include/asm/apic.h:653 [inline]
 [<ffffffff838c3b91>] smp_apic_timer_interrupt+0x81/0xa0 arch/x86/kernel/apic/apic.c:926
 [<ffffffff838c2ad0>] apic_timer_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:741
 <EOI> 
 [<ffffffff81c52f5d>] spin_unlock_irqrestore include/linux/spinlock.h:362 [inline]
 [<ffffffff81c52f5d>] avc_reclaim_node security/selinux/avc.c:543 [inline]
 [<ffffffff81c52f5d>] avc_alloc_node+0x28d/0x3d0 security/selinux/avc.c:561
 [<ffffffff81c53ba8>] avc_insert security/selinux/avc.c:672 [inline]
 [<ffffffff81c53ba8>] avc_compute_av+0x178/0x610 security/selinux/avc.c:978
 [<ffffffff81c557b3>] avc_has_perm_noaudit+0x323/0x450 security/selinux/avc.c:1114
 [<ffffffff81c651c6>] cred_has_capability+0x126/0x2a0 security/selinux/hooks.c:1576
 [<ffffffff81c653c5>] selinux_capable+0x25/0x30 security/selinux/hooks.c:2069
 [<ffffffff81c4a328>] security_capable+0x88/0xc0 security/security.c:187
 [<ffffffff81149b44>] ns_capable_common+0xd4/0x150 kernel/capability.c:373
 [<ffffffff81149be2>] ns_capable+0x22/0x30 kernel/capability.c:395
 [<ffffffff8339b36b>] compat_do_arpt_get_ctl+0xfb/0x7e0 net/ipv4/netfilter/arp_tables.c:1594
binder: 19678:19683 transaction failed 29189/-22, size 0-0 line 3019
binder: 19678:19683 ioctl c0306201 200004c0 returned -14
 [<ffffffff830c5d1e>] compat_nf_sockopt net/netfilter/nf_sockopt.c:138 [inline]
 [<ffffffff830c5d1e>] compat_nf_getsockopt+0x8e/0x130 net/netfilter/nf_sockopt.c:162
 [<ffffffff83221cf8>] compat_ip_getsockopt+0x148/0x1c0 net/ipv4/ip_sockglue.c:1564
 [<ffffffff8322e537>] inet_csk_compat_getsockopt+0x97/0x120 net/ipv4/inet_connection_sock.c:901
 [<ffffffff83240f6d>] compat_tcp_getsockopt+0x3d/0x70 net/ipv4/tcp.c:2958
 [<ffffffff82f234c4>] compat_sock_common_getsockopt+0xb4/0x150 net/core/sock.c:2629
 [<ffffffff8300b40e>] C_SYSC_getsockopt net/compat.c:506 [inline]
 [<ffffffff8300b40e>] compat_SyS_getsockopt net/compat.c:489 [inline]
 [<ffffffff8300b40e>] C_SYSC_socketcall net/compat.c:840 [inline]
 [<ffffffff8300b40e>] compat_SyS_socketcall+0x76e/0xb60 net/compat.c:771
 [<ffffffff81006d96>] do_syscall_32_irqs_on arch/x86/entry/common.c:392 [inline]
 [<ffffffff81006d96>] do_fast_syscall_32+0x326/0x8b0 arch/x86/entry/common.c:459
 [<ffffffff838c28aa>] sysenter_flags_fixed+0xd/0x17
Code: 2b 4b c6 fd 4c 8b 4d b8 8b 4b 78 41 54 48 c7 c7 60 40 ec 83 44 8b 45 d4 41 57 48 8b 55 c8 41 56 48 8b 75 c0 41 55 e8 7d 08 b8 fd <0f> 0b e8 7d cb ab fd 4c 8b 65 08 e8 d4 34 c6 fd 48 c7 c1 e0 44 
RIP [  362.341285] binder: 19687:19688 transaction failed 29189/-22, size 0-0 line 3019
binder: 19687:19688 ioctl c0306201 200004c0 returned -14
 [<ffffffff838947ac>] skb_panic+0x166/0x168 net/core/skbuff.c:100
 RSP <ffff8801db207990>
---[ end trace d036dd74adfb7ac2 ]---