skbuff: skb_over_panic: text:000000007b95b7b5 len:56 put:8 head:00000000e51b4ad8 data:00000000feb8920a tail:0xc8 end:0xc0 dev:ip6tnl0 SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28697 sclass=netlink_route_socket pig=15574 comm=syz-executor.1 ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:105! invalid opcode: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 0 PID: 3 Comm: kworker/0:0 Not tainted 4.9.202+ #0 Workqueue: ipv6_addrconf addrconf_dad_work task: 00000000e2ffc7a9 task.stack: 000000001956773c RIP: 0010:[] [<00000000f96efba8>] skb_panic+0x176/0x178 net/core/skbuff.c:105 RSP: 0018:ffff8801da667718 EFLAGS: 00010282 RAX: 0000000000000085 RBX: ffff8801d08e9640 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8122c837 RDI: ffffed003b4cced5 RBP: ffff8801da667780 R08: 0000000000000085 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff82c75800 R13: ffffffff8272b24e R14: 0000000000000008 R15: ffff8801a5b58000 FS: 0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000001ad63a000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8801d2811210 00000000000000c8 00000000000000c0 ffff8801a5b58000 ffffffff822df5dc ffff8801d2811210 00000000000000c8 00000000000000c0 00000000000000c8 ffff8801d08e9640 0000000000000008 ffffffff8272b24e Call Trace: [<000000004e4c5e7a>] skb_over_panic net/core/skbuff.c:110 [inline] [<000000004e4c5e7a>] skb_put.cold+0x23/0x23 net/core/skbuff.c:1443 [<000000007b95b7b5>] mld_newpack+0x4ce/0x7a0 net/ipv6/mcast.c:1608 [<00000000b0314879>] add_grhead.isra.0+0x29c/0x370 net/ipv6/mcast.c:1691 [<00000000d251fc19>] add_grec+0x6a3/0xf10 net/ipv6/mcast.c:1822 [<000000000db83616>] mld_send_initial_cr.part.0+0xbd/0x150 net/ipv6/mcast.c:2073 [<000000000a508ed4>] mld_send_initial_cr net/ipv6/mcast.c:2091 [inline] [<000000000a508ed4>] ipv6_mc_dad_complete+0x17c/0x1d0 net/ipv6/mcast.c:2085 [<0000000068bb775a>] addrconf_dad_completed+0x401/0x930 net/ipv6/addrconf.c:4025 [<000000003a3709f8>] addrconf_dad_begin net/ipv6/addrconf.c:3822 [inline] [<000000003a3709f8>] addrconf_dad_work+0x840/0xc50 net/ipv6/addrconf.c:3922 [<00000000c25d7317>] process_one_work+0x88b/0x1600 kernel/workqueue.c:2114 [<00000000744fe00e>] worker_thread+0x5df/0x11d0 kernel/workqueue.c:2251 [<00000000bcba7337>] kthread+0x278/0x310 kernel/kthread.c:211 [<00000000c32d94ac>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:375 Code: e0 12 d0 fe 4c 8b 4d b8 8b 4b 78 41 57 45 89 f0 4c 89 ea ff 75 d0 4c 89 e6 48 c7 c7 20 54 c7 82 ff 75 c8 ff 75 c0 e8 fe db c0 fe <0f> 0b e8 02 52 b2 fe 4c 8b 65 08 e8 29 fa cf fe 48 c7 c1 c0 57 RIP [<00000000f96efba8>] skb_panic+0x176/0x178 net/core/skbuff.c:101 RSP ---[ end trace 26e23009bb638282 ]---