skbuff: skb_over_panic: text:00000000bc97b71a len:56 put:8 head:0000000099060e8f data:00000000ab16930c tail:0xc8 end:0xc0 dev:ip6tnl1
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:104!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
Modules linked in:
CPU: 1 PID: 4433 Comm: blkid Not tainted 4.14.155-syzkaller #0
task: 0000000075c15e62 task.stack: 00000000489856a3
RIP: 0010:skb_panic+0x16c/0x16e net/core/skbuff.c:104
RSP: 0000:ffff8881d77079d8 EFLAGS: 00010286
RAX: 0000000000000085 RBX: ffff888193444780 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffffb606a380 RDI: ffffed103aee0f2d
RBP: ffffffffb6289fe0 R08: 0000000000000085 R09: ffffed103aee4ce9
R10: ffffed103aee4ce8 R11: ffff8881d7726747 R12: ffffffffb5985d2e
R13: 0000000000000008 R14: ffff88819be29100 R15: 00000000000000c0
FS:  00007f4e7d95e740(0000) GS:ffff8881d7700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4e7d2cf169 CR3: 000000019a91c003 CR4: 00000000001606a0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Call Trace:
 <IRQ>
 skb_over_panic net/core/skbuff.c:109 [inline]
 skb_put.cold+0x24/0x24 net/core/skbuff.c:1699
 mld_newpack+0x4ce/0x7a0 net/ipv6/mcast.c:1608
 add_grhead.isra.0+0x29c/0x370 net/ipv6/mcast.c:1691
 add_grec+0x6a3/0xf10 net/ipv6/mcast.c:1822
 mld_send_cr net/ipv6/mcast.c:1948 [inline]
 mld_ifc_timer_expire+0x340/0x7e0 net/ipv6/mcast.c:2455
 call_timer_fn+0x15b/0x6a0 kernel/time/timer.c:1279
 expire_timers+0x227/0x4c0 kernel/time/timer.c:1318
 __run_timers kernel/time/timer.c:1636 [inline]
 run_timer_softirq+0x1eb/0x5d0 kernel/time/timer.c:1649
 __do_softirq+0x234/0x9ec kernel/softirq.c:288
 invoke_softirq kernel/softirq.c:368 [inline]
 irq_exit+0x114/0x150 kernel/softirq.c:409
 exiting_irq arch/x86/include/asm/apic.h:648 [inline]
 smp_apic_timer_interrupt+0x1a7/0x650 arch/x86/kernel/apic/apic.c:1102
 apic_timer_interrupt+0x8c/0xa0 arch/x86/entry/entry_64.S:792
 </IRQ>
RIP: 0010:kasan_mem_to_shadow include/linux/kasan.h:29 [inline]
RIP: 0010:memory_is_poisoned_n mm/kasan/generic.c:135 [inline]
RIP: 0010:memory_is_poisoned mm/kasan/generic.c:166 [inline]
RIP: 0010:check_memory_region_inline mm/kasan/generic.c:182 [inline]
RIP: 0010:check_memory_region+0x4d/0x180 mm/kasan/generic.c:191
RSP: 0000:ffff888195bbfaf0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10
RAX: dffffc0000000000 RBX: ffffed103aee44f9 RCX: ffffffffb44529dc
RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881d77227cc
RBP: ffffed103aee44fa R08: 0000000000000000 R09: ffffed103aee44fa
R10: ffffed103aee44f9 R11: ffff8881d77227cf R12: ffff8881a0f10d90
R13: 0000000000000000 R14: ffff8881a0f10dd0 R15: ffff88819312bc80
 atomic_read include/asm-generic/atomic-instrumented.h:21 [inline]
 rcu_dynticks_curr_cpu_in_eqs+0x4c/0xa0 kernel/rcu/tree.c:362
 rcu_is_watching+0xc/0x20 kernel/rcu/tree.c:1130
 rcu_read_unlock include/linux/rcupdate.h:681 [inline]
 __unlock_page_memcg+0x72/0x100 mm/memcontrol.c:1716
 alloc_set_pte+0x42d/0xec0 mm/memory.c:3448
 filemap_map_pages+0x8e4/0xc00 mm/filemap.c:2675
 do_fault_around mm/memory.c:3594 [inline]
 do_read_fault mm/memory.c:3628 [inline]
 do_fault mm/memory.c:3759 [inline]
 handle_pte_fault mm/memory.c:3989 [inline]
 __handle_mm_fault+0x17fc/0x2700 mm/memory.c:4113
 handle_mm_fault+0x2f1/0x6da mm/memory.c:4150
 __do_page_fault+0x477/0xbb0 arch/x86/mm/fault.c:1420
 page_fault+0x42/0x50 arch/x86/entry/entry_64.S:1122
RIP: 0034:0x64
RSP: ac4ac7d0:00007ffeac4ac7c0 EFLAGS: 00000000
Code: 20 ff 4c 8b 4c 24 10 8b 4b 78 41 56 45 89 e8 4c 89 e2 41 57 48 89 ee 48 c7 c7 00 9a 28 b6 ff 74 24 10 ff 74 24 20 e8 e9 a3 ee fe <0f> 0b e8 87 7e fd fe 4c 8b 64 24 18 e8 5d 44 20 ff 48 c7 c1 a0 
RIP: skb_panic+0x16c/0x16e net/core/skbuff.c:104 RSP: ffff8881d77079d8
---[ end trace 1c30a3bfe3e9440b ]---