skbuff: skb_over_panic: text:ffffffff8561dcae len:232 put:72 head:ffff888093b53c80 data:ffff888093b53c80 tail:0xe8 end:0xc0 dev:<NULL>
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:104!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 7712 Comm: syz-executor.0 Not tainted 4.14.111 #1
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8880a8008380 task.stack: ffff888071cf8000
RIP: 0010:skb_panic+0x17c/0x17e net/core/skbuff.c:104
RSP: 0018:ffff888071cfee18 EFLAGS: 00010282
RAX: 0000000000000086 RBX: ffff8880930b4440 RCX: 0000000000000000
RDX: 0000000000040000 RSI: ffffffff814b2a55 RDI: ffffed100e39fdb9
RBP: ffff888071cfee80 R08: 0000000000000086 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff86ee9ba0
R13: ffffffff8561dcae R14: 0000000000000048 R15: ffffffff86ee93a0
FS:  00007fd85a9c9700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffe8c867ae0 CR3: 000000008bb5f000 CR4: 00000000001406f0
Call Trace:
 skb_over_panic net/core/skbuff.c:109 [inline]
 skb_put.cold+0x23/0x23 net/core/skbuff.c:1699
 dump_esp_combs net/key/af_key.c:2997 [inline]
 pfkey_send_acquire+0x168e/0x2480 net/key/af_key.c:3218
 km_query+0xb8/0x1d0 net/xfrm/xfrm_state.c:1948
 xfrm_state_find+0x190f/0x28a0 net/xfrm/xfrm_state.c:1022
 xfrm_tmpl_resolve_one+0x1b0/0x7f0 net/xfrm/xfrm_policy.c:1394
 xfrm_tmpl_resolve net/xfrm/xfrm_policy.c:1438 [inline]
 xfrm_resolve_and_create_bundle+0x219/0x24b0 net/xfrm/xfrm_policy.c:1832
 xfrm_lookup+0x212/0x1930 net/xfrm/xfrm_policy.c:2164
 xfrm_lookup_route+0x38/0x1c0 net/xfrm/xfrm_policy.c:2284
 ip_route_output_flow+0x90/0xa0 net/ipv4/route.c:2571
 udp_sendmsg+0x14a3/0x1da0 net/ipv4/udp.c:1021
 udpv6_sendmsg+0x1356/0x2650 net/ipv6/udp.c:1193
 inet_sendmsg+0x128/0x500 net/ipv4/af_inet.c:762
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xd0/0x110 net/socket.c:656
 ___sys_sendmsg+0x349/0x850 net/socket.c:2062
 __sys_sendmmsg+0x152/0x3a0 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0x35/0x60 net/socket.c:2178
 do_syscall_64+0x1eb/0x630 arch/x86/entry/common.c:289
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x458c29
RSP: 002b:00007fd85a9c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458c29
RDX: 00000000000005c3 RSI: 0000000020000240 RDI: 0000000000000005
RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd85a9c96d4
R13: 00000000004c5ca5 R14: 00000000004da258 R15: 00000000ffffffff
Code: fc 4c 8b 4d b8 8b 8b 80 00 00 00 41 57 45 89 f0 4c 89 ea ff 75 d0 4c 89 e6 48 c7 c7 e0 93 ee 86 ff 75 c8 ff 75 c0 e8 3e 89 7a fc <0f> 0b e8 04 46 8c fc 4c 8b 6d 08 e8 4b 97 b5 fc 48 c7 c1 60 9b 
RIP: skb_panic+0x17c/0x17e net/core/skbuff.c:104 RSP: ffff888071cfee18
---[ end trace 93af2a993b439941 ]---