IPv6: ADDRCONF(NETDEV_CHANGE): sit2: link becomes ready
skbuff: skb_over_panic: text:ffffffff827235b8 len:56 put:8 head:ffff8801d6554780 data:ffff8801d6554810 tail:0xc8 end:0xc0 dev:ip6tnl0
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:105!
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 2094 Comm: syz-executor.1 Not tainted 4.9.141+ #1
task: ffff8801d13b4740 task.stack: ffff8801a9328000
RIP: 0010:[<ffffffff827f8512>]  [<ffffffff827f8512>] skb_panic+0x166/0x168 net/core/skbuff.c:105
RSP: 0018:ffff8801db707968  EFLAGS: 00010286
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pig=7111 comm=syz-executor.5
input: syz1 as /devices/virtual/input/input21
RAX: 0000000000000085 RBX: ffff8801d3268c80 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff81226ef2 RDI: ffff8801d13b4fec
RBP: ffff8801db7079d0 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffff8801d2fce600
R13: ffff8801d6554810 R14: 00000000000000c8 R15: 00000000000000c0
FS:  0000000002176940(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000738008 CR3: 00000001cf298000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
Stack:
 ffff8801d6554810 00000000000000c8 00000000000000c0 ffff8801d2fce600
 ffffffff822c8b4b ffffffff82c6fe40 ffffffff827235b8 00000008db707aa0
 ffff8801d3268c80 ffffffff827235b8 0000000000000008 00000000000000c8
Call Trace:
 [<ffffffff827f855a>] skb_over_panic net/core/skbuff.c:110 [inline]
 [<ffffffff827f855a>] skb_put.cold.21+0x23/0x23 net/core/skbuff.c:1439
 [<ffffffff827235b8>] mld_newpack+0x4d8/0x7b0 net/ipv6/mcast.c:1607
 [<ffffffff82723b2c>] add_grhead.isra.14+0x29c/0x370 net/ipv6/mcast.c:1690
 [<ffffffff827242ab>] add_grec+0x6ab/0xf20 net/ipv6/mcast.c:1821
 [<ffffffff82725240>] mld_send_cr net/ipv6/mcast.c:1947 [inline]
 [<ffffffff82725240>] mld_ifc_timer_expire+0x340/0x7b0 net/ipv6/mcast.c:2455
 [<ffffffff81262a43>] call_timer_fn+0x163/0x6e0 kernel/time/timer.c:1319
 [<ffffffff812631f4>] expire_timers+0x234/0x580 kernel/time/timer.c:1359
 [<ffffffff81263748>] __run_timers kernel/time/timer.c:1674 [inline]
 [<ffffffff81263748>] run_timer_softirq+0x208/0x5e0 kernel/time/timer.c:1687
 [<ffffffff8281cb9e>] __do_softirq+0x20e/0x964 kernel/softirq.c:288
 [<ffffffff810efdbc>] invoke_softirq kernel/softirq.c:368 [inline]
 [<ffffffff810efdbc>] irq_exit+0x11c/0x150 kernel/softirq.c:409
 [<ffffffff8281b771>] exiting_irq arch/x86/include/asm/apic.h:669 [inline]
 [<ffffffff8281b771>] smp_apic_timer_interrupt+0x81/0xb0 arch/x86/kernel/apic/apic.c:962
 [<ffffffff8281902d>] apic_timer_interrupt+0x9d/0xb0 arch/x86/entry/entry_64.S:648
 <EOI> [  175.540502]  [<ffffffff814a0145>] ? is_cow_mapping mm/internal.h:238 [inline]
 <EOI> [  175.540502]  [<ffffffff814a0145>] ? copy_one_pte mm/memory.c:890 [inline]
 <EOI> [  175.540502]  [<ffffffff814a0145>] ? copy_pte_range mm/memory.c:954 [inline]
 <EOI> [  175.540502]  [<ffffffff814a0145>] ? copy_pmd_range mm/memory.c:1004 [inline]
 <EOI> [  175.540502]  [<ffffffff814a0145>] ? copy_pud_range mm/memory.c:1026 [inline]
 <EOI> [  175.540502]  [<ffffffff814a0145>] ? copy_page_range+0xa05/0x17a0 mm/memory.c:1088
 [<ffffffff814a0145>] is_cow_mapping mm/internal.h:238 [inline]
 [<ffffffff814a0145>] copy_one_pte mm/memory.c:890 [inline]
 [<ffffffff814a0145>] copy_pte_range mm/memory.c:954 [inline]
 [<ffffffff814a0145>] copy_pmd_range mm/memory.c:1004 [inline]
 [<ffffffff814a0145>] copy_pud_range mm/memory.c:1026 [inline]
 [<ffffffff814a0145>] copy_page_range+0xa05/0x17a0 mm/memory.c:1088
 [<ffffffff810d7373>] dup_mmap kernel/fork.c:674 [inline]
 [<ffffffff810d7373>] dup_mm kernel/fork.c:1156 [inline]
 [<ffffffff810d7373>] copy_mm kernel/fork.c:1210 [inline]
 [<ffffffff810d7373>] copy_process.part.8+0x44f3/0x6a10 kernel/fork.c:1692
 [<ffffffff810d9d12>] copy_process kernel/fork.c:1505 [inline]
 [<ffffffff810d9d12>] _do_fork+0x1b2/0xd30 kernel/fork.c:1972
 [<ffffffff810da967>] SYSC_clone kernel/fork.c:2084 [inline]
 [<ffffffff810da967>] SyS_clone+0x37/0x50 kernel/fork.c:2078
 [<ffffffff810056ef>] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285
 [<ffffffff82817893>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: 55 ab cf fe 4c 8b 4d b8 8b 4b 78 41 54 48 c7 c7 60 fa c6 82 44 8b 45 d4 41 57 48 8b 55 c8 41 56 48 8b 75 c0 41 55 e8 de a9 c0 fe <0f> 0b e8 47 35 b2 fe 4c 8b 65 08 e8 4e 92 cf fe 48 c7 c1 00 fe 
RIP  [<ffffffff827f8512>] skb_panic+0x166/0x168 net/core/skbuff.c:101
 RSP <ffff8801db707968>
---[ end trace fe31c9994652abad ]---