binder: 11166:11168 transaction failed 29201/-71, size 0-0 line 2922
binder: undelivered TRANSACTION_ERROR: 29201
binder: undelivered TRANSACTION_ERROR: 29201
skbuff: skb_over_panic: text:ffffffff826f86f6 len:232 put:72 head:ffff8801cfbe4c80 data:ffff8801cfbe4c80 tail:0xe8 end:0xc0 dev:<NULL>
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:104!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 11122 Comm: syz-executor.5 Not tainted 4.4.174+ #4
task: ffff8801c01e17c0 task.stack: ffff8801b9730000
RIP: 0010:[<ffffffff826fb09c>]  [<ffffffff826fb09c>] skb_panic+0x176/0x178 net/core/skbuff.c:104
RSP: 0018:ffff8801b9736dd0  EFLAGS: 00010282
RAX: 0000000000000086 RBX: ffff8801d98bbb40 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff81220458 RDI: ffffed00372e6dac
RBP: ffff8801b9736e38 R08: 0000000000000086 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff82a52b20
R13: ffffffff826f86f6 R14: 0000000000000048 R15: ffffffff82a527c0
FS:  00007f3fa0222700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0e437c8010 CR3: 00000000b3748000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801cfbe4c80 00000000000000e8 00000000000000c0 ffffffff82a527c0
 ffffffff821f7a30 ffff8801cfbe4c80 00000000000000e8 00000000000000c0
 00000000000000e8 ffff8801d98bbb40 0000000000000048 ffffffff826f86f6
Call Trace:
 [<ffffffff826fb0e4>] skb_over_panic net/core/skbuff.c:109 [inline]
 [<ffffffff826fb0e4>] skb_put.cold+0x23/0x23 net/core/skbuff.c:1363
 [<ffffffff826f86f6>] dump_esp_combs net/key/af_key.c:3025 [inline]
 [<ffffffff826f86f6>] pfkey_send_acquire+0x1656/0x23f0 net/key/af_key.c:3248
 [<ffffffff82557c6a>] km_query+0xba/0x1d0 net/xfrm/xfrm_state.c:1756
 [<ffffffff82565c9f>] xfrm_state_find+0x15df/0x24c0 net/xfrm/xfrm_state.c:852
 [<ffffffff8254d467>] xfrm_tmpl_resolve_one+0x1c7/0x790 net/xfrm/xfrm_policy.c:1455
 [<ffffffff8254dc40>] xfrm_tmpl_resolve net/xfrm/xfrm_policy.c:1499 [inline]
 [<ffffffff8254dc40>] xfrm_resolve_and_create_bundle+0x210/0x1df0 net/xfrm/xfrm_policy.c:1847
 [<ffffffff82550ba3>] xfrm_lookup+0x203/0xad0 net/xfrm/xfrm_policy.c:2204
 [<ffffffff82552338>] xfrm_lookup_route+0x38/0x140 net/xfrm/xfrm_policy.c:2326
 [<ffffffff823a5a23>] ip_route_output_flow+0x93/0xa0 net/ipv4/route.c:2437
 [<ffffffff8247fa07>] udp_sendmsg+0x1537/0x1c60 net/ipv4/udp.c:1040
 [<ffffffff826137a2>] udpv6_sendmsg+0x12f2/0x24f0 net/ipv6/udp.c:1173
 [<ffffffff824a8b42>] inet_sendmsg+0x202/0x4d0 net/ipv4/af_inet.c:755
 [<ffffffff821d838e>] sock_sendmsg_nosec net/socket.c:638 [inline]
 [<ffffffff821d838e>] sock_sendmsg+0xbe/0x110 net/socket.c:648
 [<ffffffff821d9e69>] ___sys_sendmsg+0x369/0x890 net/socket.c:1975
 [<ffffffff821dd2e0>] __sys_sendmmsg+0x130/0x2e0 net/socket.c:2060
 [<ffffffff821dd4c5>] SYSC_sendmmsg net/socket.c:2090 [inline]
 [<ffffffff821dd4c5>] SyS_sendmmsg+0x35/0x60 net/socket.c:2085
 [<ffffffff82718ba1>] entry_SYSCALL_64_fastpath+0x1e/0x9a
Code: 2b 9e d8 fe 4c 8b 4d b8 8b 4b 78 41 57 45 89 f0 4c 89 ea ff 75 d0 4c 89 e6 48 c7 c7 00 28 a5 82 ff 75 c8 ff 75 c0 e8 11 4c cb fe <0f> 0b e8 4d e5 c0 fe 4c 8b 6d 08 e8 34 87 d8 fe 48 c7 c1 e0 2a 
RIP  [<ffffffff826fb09c>] skb_panic+0x176/0x178 net/core/skbuff.c:100
 RSP <ffff8801b9736dd0>
---[ end trace e74361c557a3e042 ]---