tc_dump_action: action bad kind
==================================================================
BUG: KASAN: use-after-free in take_option security/selinux/hooks.c:2619 [inline]
BUG: KASAN: use-after-free in selinux_sb_copy_data+0x1cd/0x380 security/selinux/hooks.c:2674
Write of size 10 at addr ffff8801d755c000 by task syz-executor3/13243

CPU: 0 PID: 13243 Comm: syz-executor3 Not tainted 4.9.119-g9dc978d #75
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 ffff8801a39674c8 ffffffff81eb4be9 ffffea00075d5700[  155.745919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8240 sclass=netlink_route_socket pig=13244 comm=syz-executor3
 ffff8801d755c000 0000000000000001 ffff8801d755c000 000000000000000a ffff8801a3967500
 ffffffff81567f89 ffff8801d755c000 000000000000000a 0000000000000001
Call Trace:
 [<ffffffff81eb4be9>] __dump_stack lib/dump_stack.c:15 [inline]
 [<ffffffff81eb4be9>] dump_stack+0xc1/0x128 lib/dump_stack.c:51
 [<ffffffff81567f89>] print_address_description+0x6c/0x234 mm/kasan/report.c:256
 [<ffffffff81568393>] kasan_report_error mm/kasan/report.c:355 [inline]
 [<ffffffff81568393>] kasan_report.cold.6+0x242/0x2fe mm/kasan/report.c:412
 [<ffffffff8153ad7f>] check_memory_region_inline mm/kasan/kasan.c:318 [inline]
 [<ffffffff8153ad7f>] check_memory_region+0x14f/0x1b0 mm/kasan/kasan.c:325
 [<ffffffff8153b3d7>] memcpy+0x37/0x50 mm/kasan/kasan.c:361
 [<ffffffff81d0991d>] take_option security/selinux/hooks.c:2619 [inline]
 [<ffffffff81d0991d>] selinux_sb_copy_data+0x1cd/0x380 security/selinux/hooks.c:2674
 [<ffffffff81ceb48b>] security_sb_copy_data+0x7b/0xb0 security/security.c:283
 [<ffffffff8197bab6>] parse_security_options+0x36/0x90 fs/btrfs/super.c:1493
 [<ffffffff8198cae3>] btrfs_mount+0x2f3/0x2bc0 fs/btrfs/super.c:1572
 [<ffffffff8157e65c>] mount_fs+0x28c/0x370 fs/super.c:1206
 [<ffffffff815dde81>] vfs_kern_mount.part.29+0xd1/0x3d0 fs/namespace.c:991
 [<ffffffff815de1c0>] vfs_kern_mount+0x40/0x60 fs/namespace.c:973
 [<ffffffff8198cbfb>] mount_subvol fs/btrfs/super.c:1395 [inline]
 [<ffffffff8198cbfb>] btrfs_mount+0x40b/0x2bc0 fs/btrfs/super.c:1566
 [<ffffffff8157e65c>] mount_fs+0x28c/0x370 fs/super.c:1206
 [<ffffffff815dde81>] vfs_kern_mount.part.29+0xd1/0x3d0 fs/namespace.c:991
 [<ffffffff815e57a9>] vfs_kern_mount fs/namespace.c:973 [inline]
 [<ffffffff815e57a9>] do_new_mount fs/namespace.c:2513 [inline]
 [<ffffffff815e57a9>] do_mount+0x3c9/0x2740 fs/namespace.c:2835
 [<ffffffff815e84fe>] SYSC_mount fs/namespace.c:3051 [inline]
 [<ffffffff815e84fe>] SyS_mount+0xfe/0x110 fs/namespace.c:3028
 [<ffffffff81006316>] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282
 [<ffffffff839fccd3>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb

The buggy address belongs to the page:
page:ffffea00075d5700 count:0 mapcount:-127 mapping:          (null) index:0xffff8801d755df80
flags: 0x8000000000000000()
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff8801d755bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 ffff8801d755bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
>ffff8801d755c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
                   ^
 ffff8801d755c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff8801d755c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
==================================================================