skbuff: skb_over_panic: text:ffffffff83212713 len:4188 put:4188 head:ffff8800bb1cd900 data:ffff8800bb1cd990 tail:0x10ec end:0xc0 dev:<NULL>
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:104!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 13447 Comm: syz-executor2 Not tainted 4.4.132-g46155cc #40
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8800b5ef1800 task.stack: ffff8801c8f88000
RIP: 0010:[<ffffffff83893a8c>]  [<ffffffff83893a8c>] skb_panic+0x166/0x168 net/core/skbuff.c:100
RSP: 0018:ffff8801c8f8efa8  EFLAGS: 00010286
RAX: 000000000000008b RBX: ffff8801b9b11b40 RCX: ffffc90008d8d000
RDX: 0000000000000000 RSI: ffffffff8125d029 RDI: ffff8800b5ef20dc
RBP: ffff8801c8f8f010 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff83ec3f20
R13: ffff8800bb1cd990 R14: 00000000000010ec R15: 00000000000000c0
FS:  0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f57c7b40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00007f3993771000 CR3: 00000001c6f17000 CR4: 00000000001606f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8800bb1cd990 00000000000010ec 00000000000000c0 ffffffff83ec3f20
 ffffffff8424a138 ffffffff83ec4420 ffffffff83212713 0000105c00000003
 ffff8801b9b11b40 ffffffff83212713 ffff8800bb1cd990 000000000000105c
Call Trace:
 [<ffffffff83893ad4>] skb_over_panic net/core/skbuff.c:109 [inline]
 [<ffffffff83893ad4>] skb_put.cold.72+0x23/0x23 net/core/skbuff.c:1362
 [<ffffffff83212713>] __ip_append_data.isra.44+0x1cf3/0x2920 net/ipv4/ip_output.c:1026
 [<ffffffff83213424>] ip_append_data.part.46+0xe4/0x150 net/ipv4/ip_output.c:1192
 [<ffffffff8321b878>] ip_append_data+0x68/0x80 net/ipv4/ip_output.c:1181
 [<ffffffff832ce410>] udp_sendmsg+0x9a0/0x1bb0 net/ipv4/udp.c:1096
 [<ffffffff832fec93>] inet_sendmsg+0x203/0x4d0 net/ipv4/af_inet.c:755
 [<ffffffff82f1cdac>] sock_sendmsg_nosec net/socket.c:625 [inline]
 [<ffffffff82f1cdac>] sock_sendmsg+0xcc/0x110 net/socket.c:635
 [<ffffffff82f1d1e3>] kernel_sendmsg+0x43/0x50 net/socket.c:643
 [<ffffffff82f24652>] sock_no_sendpage+0x112/0x150 net/core/sock.c:2282
 [<ffffffff832cf9b1>] udp_sendpage+0x391/0x400 net/ipv4/udp.c:1170
 [<ffffffff832ff181>] inet_sendpage+0x221/0x510 net/ipv4/af_inet.c:772
 [<ffffffff82f1b5a3>] kernel_sendpage+0x93/0xf0 net/socket.c:3301
 [<ffffffff82f1b68c>] sock_sendpage+0x8c/0xc0 net/socket.c:780
 [<ffffffff815b47c6>] pipe_to_sendpage+0x266/0x330 fs/splice.c:724
 [<ffffffff815b7234>] splice_from_pipe_feed fs/splice.c:776 [inline]
 [<ffffffff815b7234>] __splice_from_pipe+0x364/0x790 fs/splice.c:901
 [<ffffffff815ba649>] splice_from_pipe+0xf9/0x170 fs/splice.c:936
 [<ffffffff815ba6fc>] generic_splice_sendpage+0x3c/0x50 fs/splice.c:1109
 [<ffffffff815b49b8>] do_splice_from fs/splice.c:1128 [inline]
 [<ffffffff815b49b8>] direct_splice_actor+0x128/0x190 fs/splice.c:1294
 [<ffffffff815b5a67>] splice_direct_to_actor+0x2c7/0x830 fs/splice.c:1247
 [<ffffffff815b6173>] do_splice_direct+0x1a3/0x270 fs/splice.c:1337
 [<ffffffff8151ff14>] do_sendfile+0x4e4/0xb80 fs/read_write.c:1227
 [<ffffffff81522061>] C_SYSC_sendfile fs/read_write.c:1303 [inline]
 [<ffffffff81522061>] compat_SyS_sendfile+0xd1/0x160 fs/read_write.c:1292
 [<ffffffff81006d96>] do_syscall_32_irqs_on arch/x86/entry/common.c:392 [inline]
 [<ffffffff81006d96>] do_fast_syscall_32+0x326/0x8b0 arch/x86/entry/common.c:459
 [<ffffffff838c1b6a>] sysenter_flags_fixed+0xd/0x17
Code: eb 55 c6 fd 4c 8b 4d b8 8b 4b 78 41 54 48 c7 c7 60 3f ec 83 44 8b 45 d4 41 57 48 8b 55 c8 41 56 48 8b 75 c0 41 55 e8 4d 14 b8 fd <0f> 0b e8 4d d7 ab fd 4c 8b 65 08 e8 94 3f c6 fd 48 c7 c1 e0 43 
RIP  [<ffffffff83893a8c>] skb_panic+0x166/0x168 net/core/skbuff.c:100
 RSP <ffff8801c8f8efa8>
---[ end trace 9b8f7f46a4784a45 ]---