skbuff: skb_over_panic: text:ffffffff87e44e7f len:40 put:40 head:ffff88808a661000 data:ffff88808a6610b0 tail:0xd8 end:0xc0 dev:ip6gretap0 ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:111! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 19965 Comm: kworker/0:4 Not tainted 5.15.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: ipv6_addrconf addrconf_dad_work RIP: 0010:skb_panic+0x16c/0x16e net/core/skbuff.c:111 Code: f8 4c 8b 4c 24 10 8b 4b 70 41 56 45 89 e8 4c 89 e2 41 57 48 89 ee 48 c7 c7 60 a9 8b 8a ff 74 24 10 ff 74 24 20 e8 81 11 c3 ff <0f> 0b e8 96 37 44 f8 4c 8b 64 24 18 e8 0c a1 8b f8 48 c7 c1 00 b6 RSP: 0018:ffffc90003b1f7d8 EFLAGS: 00010286 RAX: 0000000000000089 RBX: ffff88804e8cba00 RCX: 0000000000000000 RDX: ffff8880870d8000 RSI: ffffffff815dbc98 RDI: fffff52000763eed RBP: ffffffff8a8bb640 R08: 0000000000000089 R09: 0000000000000000 R10: ffffffff815d5a3e R11: 0000000000000000 R12: ffffffff87e44e7f R13: 0000000000000028 R14: ffff88802cc18000 R15: 00000000000000c0 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbe366e0718 CR3: 000000008a65c000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: skb_over_panic net/core/skbuff.c:116 [inline] skb_put.cold+0x24/0x24 net/core/skbuff.c:1979 ip6_mc_hdr.constprop.0+0x11f/0x5c0 net/ipv6/mcast.c:1720 mld_newpack+0x3e5/0x770 net/ipv6/mcast.c:1771 add_grhead+0x265/0x330 net/ipv6/mcast.c:1857 add_grec+0x1053/0x14e0 net/ipv6/mcast.c:1995 mld_send_initial_cr.part.0+0xf6/0x230 net/ipv6/mcast.c:2242 mld_send_initial_cr net/ipv6/mcast.c:1232 [inline] ipv6_mc_dad_complete+0x1d0/0x690 net/ipv6/mcast.c:2253 addrconf_dad_completed+0xa20/0xd60 net/ipv6/addrconf.c:4191 addrconf_dad_begin net/ipv6/addrconf.c:3978 [inline] addrconf_dad_work+0x862/0x1340 net/ipv6/addrconf.c:4080 process_one_work+0x9bf/0x16b0 kernel/workqueue.c:2297 worker_thread+0x658/0x11f0 kernel/workqueue.c:2444 kthread+0x3e5/0x4d0 kernel/kthread.c:319 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Modules linked in: ---[ end trace 9062ea210ab5e5c2 ]--- RIP: 0010:skb_panic+0x16c/0x16e net/core/skbuff.c:111 Code: f8 4c 8b 4c 24 10 8b 4b 70 41 56 45 89 e8 4c 89 e2 41 57 48 89 ee 48 c7 c7 60 a9 8b 8a ff 74 24 10 ff 74 24 20 e8 81 11 c3 ff <0f> 0b e8 96 37 44 f8 4c 8b 64 24 18 e8 0c a1 8b f8 48 c7 c1 00 b6 RSP: 0018:ffffc90003b1f7d8 EFLAGS: 00010286 RAX: 0000000000000089 RBX: ffff88804e8cba00 RCX: 0000000000000000 RDX: ffff8880870d8000 RSI: ffffffff815dbc98 RDI: fffff52000763eed RBP: ffffffff8a8bb640 R08: 0000000000000089 R09: 0000000000000000 R10: ffffffff815d5a3e R11: 0000000000000000 R12: ffffffff87e44e7f R13: 0000000000000028 R14: ffff88802cc18000 R15: 00000000000000c0 FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff393b16028 CR3: 000000008a65c000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400