skbuff: skb_over_panic: text:ffffffff827235b8 len:56 put:8 head:ffff8801cc238280 data:ffff8801cc238310 tail:0xc8 end:0xc0 dev:ip6tnl0
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:105!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 2086 Comm: syz-executor.1 Not tainted 4.9.141+ #23
task: ffff8801d274df00 task.stack: ffff8801aada8000
RIP: 0010:[<ffffffff827f8512>]  [<ffffffff827f8512>] skb_panic+0x166/0x168 net/core/skbuff.c:105
RSP: 0018:ffff8801db607968  EFLAGS: 00010286
RAX: 0000000000000085 RBX: ffff8801ad4dbb40 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff81226ef2 RDI: ffff8801d274e7ac
RBP: ffff8801db6079d0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffff8801cfefb300
R13: ffff8801cc238310 R14: 00000000000000c8 R15: 00000000000000c0
FS:  0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:00000000093fb900
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f55a6db0 CR3: 00000001ab368000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801cc238310 00000000000000c8 00000000000000c0 ffff8801cfefb300
 ffffffff822c8b4b ffffffff82c6fe40 ffffffff827235b8 00000008db607aa0
 ffff8801ad4dbb40 ffffffff827235b8 0000000000000008 00000000000000c8
Call Trace:
 [<ffffffff827f855a>] skb_over_panic net/core/skbuff.c:110 [inline]
 [<ffffffff827f855a>] skb_put.cold.21+0x23/0x23 net/core/skbuff.c:1439
 [<ffffffff827235b8>] mld_newpack+0x4d8/0x7b0 net/ipv6/mcast.c:1607
 [<ffffffff82723b2c>] add_grhead.isra.14+0x29c/0x370 net/ipv6/mcast.c:1690
 [<ffffffff827242ab>] add_grec+0x6ab/0xf20 net/ipv6/mcast.c:1821
 [<ffffffff82725240>] mld_send_cr net/ipv6/mcast.c:1947 [inline]
 [<ffffffff82725240>] mld_ifc_timer_expire+0x340/0x7b0 net/ipv6/mcast.c:2455
 [<ffffffff81262a43>] call_timer_fn+0x163/0x6e0 kernel/time/timer.c:1319
 [<ffffffff812631f4>] expire_timers+0x234/0x580 kernel/time/timer.c:1359
 [<ffffffff81263748>] __run_timers kernel/time/timer.c:1674 [inline]
 [<ffffffff81263748>] run_timer_softirq+0x208/0x5e0 kernel/time/timer.c:1687
 [<ffffffff8281cb9e>] __do_softirq+0x20e/0x964 kernel/softirq.c:288
 [<ffffffff810efdbc>] invoke_softirq kernel/softirq.c:368 [inline]
 [<ffffffff810efdbc>] irq_exit+0x11c/0x150 kernel/softirq.c:409
 [<ffffffff8281b771>] exiting_irq arch/x86/include/asm/apic.h:669 [inline]
 [<ffffffff8281b771>] smp_apic_timer_interrupt+0x81/0xb0 arch/x86/kernel/apic/apic.c:962
 [<ffffffff8281902d>] apic_timer_interrupt+0x9d/0xb0 arch/x86/entry/entry_64.S:648
 <EOI> [  779.881111]  [<ffffffff82816fbf>] ? arch_local_irq_restore arch/x86/include/asm/paravirt.h:768 [inline]
 <EOI> [  779.881111]  [<ffffffff82816fbf>] ? __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:162 [inline]
 <EOI> [  779.881111]  [<ffffffff82816fbf>] ? _raw_spin_unlock_irqrestore+0x5f/0x70 kernel/locking/spinlock.c:191
 [<ffffffff819eac8c>] spin_unlock_irqrestore include/linux/spinlock.h:362 [inline]
 [<ffffffff819eac8c>] avc_reclaim_node security/selinux/avc.c:541 [inline]
 [<ffffffff819eac8c>] avc_alloc_node+0x31c/0x3c0 security/selinux/avc.c:559
 [<ffffffff819eb36d>] avc_update_node+0x3d/0x910 security/selinux/avc.c:829
 [<ffffffff819ebd5d>] avc_denied+0x11d/0x160 security/selinux/avc.c:990
 [<ffffffff819ed99f>] avc_has_perm_noaudit+0x2cf/0x2f0 security/selinux/avc.c:1118
 [<ffffffff819fab7a>] cred_has_capability+0x13a/0x2e0 security/selinux/hooks.c:1666
 [<ffffffff819fadb6>] selinux_capable+0x36/0x40 security/selinux/hooks.c:2178
 [<ffffffff819e2d78>] security_capable+0x88/0xc0 security/security.c:189
 [<ffffffff810fa7c4>] ns_capable_common+0xd4/0x150 kernel/capability.c:373
 [<ffffffff810fa862>] ns_capable+0x22/0x30 kernel/capability.c:395
 [<ffffffff826100db>] compat_do_ipt_get_ctl+0xfb/0x8e0 net/ipv4/netfilter/ip_tables.c:1666
 [<ffffffff823e2b1e>] compat_nf_sockopt net/netfilter/nf_sockopt.c:138 [inline]
 [<ffffffff823e2b1e>] compat_nf_getsockopt+0x8e/0x130 net/netfilter/nf_sockopt.c:162
 [<ffffffff824bda07>] compat_ip_getsockopt+0x147/0x1c0 net/ipv4/ip_sockglue.c:1589
 [<ffffffff824ca457>] inet_csk_compat_getsockopt+0x97/0x120 net/ipv4/inet_connection_sock.c:904
 [<ffffffff824e016d>] compat_tcp_getsockopt+0x3d/0x70 net/ipv4/tcp.c:3117
 [<ffffffff822a7164>] compat_sock_common_getsockopt+0xb4/0x150 net/core/sock.c:2676
 [<ffffffff8238fd2a>] C_SYSC_getsockopt net/compat.c:520 [inline]
 [<ffffffff8238fd2a>] compat_SyS_getsockopt+0x16a/0x560 net/compat.c:503
 [<ffffffff82390960>] C_SYSC_socketcall net/compat.c:854 [inline]
 [<ffffffff82390960>] compat_SyS_socketcall+0x580/0x680 net/compat.c:785
 [<ffffffff81006311>] do_syscall_32_irqs_on arch/x86/entry/common.c:328 [inline]
 [<ffffffff81006311>] do_fast_syscall_32+0x2f1/0xa10 arch/x86/entry/common.c:390
 [<ffffffff82818de0>] entry_SYSENTER_compat+0x90/0xa2 arch/x86/entry/entry_64_compat.S:137
Code: 55 ab cf fe 4c 8b 4d b8 8b 4b 78 41 54 48 c7 c7 60 fa c6 82 44 8b 45 d4 41 57 48 8b 55 c8 41 56 48 8b 75 c0 41 55 e8 de a9 c0 fe <0f> 0b e8 47 35 b2 fe 4c 8b 65 08 e8 4e 92 cf fe 48 c7 c1 00 fe 
RIP  [<ffffffff827f8512>] skb_panic+0x166/0x168 net/core/skbuff.c:101
 RSP <ffff8801db607968>
---[ end trace ffa28d6b3aeacf7f ]---