skbuff: skb_over_panic: text:ffffffff834acdd5 len:56 put:8 head:ffff8801d4feb400 data:ffff8801d4feb490 tail:0xc8 end:0xc0 dev:ip6tnl0
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:104!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 778 Comm: syz-executor6 Not tainted 4.4.133-g54f36ea #50
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801ce91b000 task.stack: ffff8801b5c98000
RIP: 0010:[<ffffffff838947ac>]  [<ffffffff838947ac>] skb_panic+0x166/0x168 net/core/skbuff.c:100
RSP: 0000:ffff8801db207990  EFLAGS: 00010282
RAX: 0000000000000085 RBX: ffff88009d316140 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8125d0e9 RDI: ffff8801ce91b8dc
RBP: ffff8801db2079f8 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffff8800a1c79100
R13: ffff8801d4feb490 R14: 00000000000000c8 R15: 00000000000000c0
FS:  0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:0000000009374900
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 000000002eb22000 CR3: 00000001b7214000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801d4feb490 00000000000000c8 00000000000000c0 ffff8800a1c79100
 ffffffff844bdba0 ffffffff83ec4520 ffffffff834acdd5 0000000881229522
 ffff88009d316140 ffffffff834acdd5 ffff8801d4feb4c0 0000000000000008
Call Trace:
 <IRQ> 
 [<ffffffff838947f4>] skb_over_panic net/core/skbuff.c:109 [inline]
 [<ffffffff838947f4>] skb_put.cold.72+0x23/0x23 net/core/skbuff.c:1362
 [<ffffffff834acdd5>] mld_newpack+0x8b5/0xc80 net/ipv6/mcast.c:1594
 [<ffffffff834ad439>] add_grhead.isra.32+0x299/0x370 net/ipv6/mcast.c:1677
 [<ffffffff834b0a06>] add_grec+0xbc6/0xe00 net/ipv6/mcast.c:1798
 [<ffffffff834b1460>] mld_send_cr net/ipv6/mcast.c:1924 [inline]
 [<ffffffff834b1460>] mld_ifc_timer_expire+0x340/0x740 net/ipv6/mcast.c:2430
 [<ffffffff8129091c>] call_timer_fn+0x18c/0x870 kernel/time/timer.c:1185
 [<ffffffff81291642>] __run_timers kernel/time/timer.c:1261 [inline]
 [<ffffffff81291642>] run_timer_softirq+0x642/0xb90 kernel/time/timer.c:1444
 [<ffffffff838c442c>] __do_softirq+0x22c/0xa1a kernel/softirq.c:273
 [<ffffffff8113f79d>] invoke_softirq kernel/softirq.c:350 [inline]
 [<ffffffff8113f79d>] irq_exit+0x10d/0x140 kernel/softirq.c:391
 [<ffffffff838c3b91>] exiting_irq arch/x86/include/asm/apic.h:653 [inline]
 [<ffffffff838c3b91>] smp_apic_timer_interrupt+0x81/0xa0 arch/x86/kernel/apic/apic.c:926
 [<ffffffff838c2ad0>] apic_timer_interrupt+0xa0/0xb0 arch/x86/entry/entry_64.S:741
 <EOI> 
Code: 3b 4b c6 fd 4c 8b 4d b8 8b 4b 78 41 54 48 c7 c7 60 40 ec 83 44 8b 45 d4 41 57 48 8b 55 c8 41 56 48 8b 75 c0 41 55 e8 8d 08 b8 fd <0f> 0b e8 8d cb ab fd 4c 8b 65 08 e8 e4 34 c6 fd 48 c7 c1 e0 44 
RIP  [<ffffffff838947ac>] skb_panic+0x166/0x168 net/core/skbuff.c:100
 RSP <ffff8801db207990>
---[ end trace d435aee0a1e3197c ]---