skbuff: skb_over_panic: text:0000000058cd9188 len:736 put:72 head:000000004dec33fc data:000000004dec33fc tail:0x2e0 end:0x2c0 dev:<NULL>
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:105!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
EXT4-fs (loop0): Unrecognized mount option "" or missing value
EXT4-fs (loop0): failed to parse options in superblock: 
Modules linked in:
CPU: 1 PID: 3534 Comm: syz-executor.3 Not tainted 4.9.194+ #0
task: 0000000094d2c84c task.stack: 0000000007d7b269
RIP: 0010:[<ffffffff8280e1d7>]  [<00000000dcbc59b1>] skb_panic+0x176/0x178 net/core/skbuff.c:105
RSP: 0018:ffff8801d782f420  EFLAGS: 00010286
RAX: 0000000000000088 RBX: ffff8801c627c3c0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8122c907 RDI: ffffed003af05e76
RBP: ffff8801d782f488 R08: 0000000000000088 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff82c769a0
R13: ffffffff8280b7e6 R14: 0000000000000048 R15: ffffffff82c76580
FS:  00007f77836ad700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffe2832afe8 CR3: 00000001c70cf000 CR4: 00000000001606b0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8801ce534000 00000000000002e0 00000000000002c0 ffffffff82c76580
 ffffed0039ca680a ffff8801ce534000 00000000000002e0 00000000000002c0
 00000000000002e0 ffff8801c627c3c0 0000000000000048 ffffffff8280b7e6
Call Trace:
 [<0000000017602a66>] skb_over_panic net/core/skbuff.c:110 [inline]
 [<0000000017602a66>] skb_put.cold+0x23/0x23 net/core/skbuff.c:1443
 [<0000000058cd9188>] dump_esp_combs net/key/af_key.c:3031 [inline]
 [<0000000058cd9188>] pfkey_send_acquire+0x1656/0x23f0 net/key/af_key.c:3254
 [<000000003d5efc04>] km_query+0xba/0x1d0 net/xfrm/xfrm_state.c:1807
 [<00000000b6f06104>] xfrm_state_find+0x18b3/0x2910 net/xfrm/xfrm_state.c:879
 [<000000005bdc9313>] xfrm_tmpl_resolve_one+0x1c7/0x7a0 net/xfrm/xfrm_policy.c:1500
 [<00000000ebcca012>] xfrm_tmpl_resolve net/xfrm/xfrm_policy.c:1544 [inline]
 [<00000000ebcca012>] xfrm_resolve_and_create_bundle+0x210/0x1e80 net/xfrm/xfrm_policy.c:1896
 [<000000005f5d2b5e>] xfrm_lookup+0x200/0xaf0 net/xfrm/xfrm_policy.c:2257
 [<000000008b3338f5>] xfrm_lookup_route+0x38/0x140 net/xfrm/xfrm_policy.c:2382
 [<00000000a13b2bdb>] ip_route_output_flow+0x93/0xa0 net/ipv4/route.c:2485
 [<00000000e2ab06b9>] ip_route_connect include/net/route.h:297 [inline]
 [<00000000e2ab06b9>] __ip4_datagram_connect+0x71f/0x1050 net/ipv4/datagram.c:51
 [<00000000c96b7a92>] __ip6_datagram_connect+0xa60/0xe10 net/ipv6/datagram.c:196
 [<00000000c8924a11>] ip6_datagram_connect+0x30/0x50 net/ipv6/datagram.c:268
 [<000000000feac127>] inet_dgram_connect+0x119/0x1f0 net/ipv4/af_inet.c:545
 [<000000005d63b966>] SYSC_connect net/socket.c:1576 [inline]
 [<000000005d63b966>] SyS_connect+0x1a5/0x2e0 net/socket.c:1557
 [<000000005d7876b0>] do_syscall_64+0x1ad/0x5c0 arch/x86/entry/common.c:288
 [<0000000007f207bd>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
Code: c0 06 cf fe 4c 8b 4d b8 8b 4b 78 41 57 45 89 f0 4c 89 ea ff 75 d0 4c 89 e6 48 c7 c7 c0 65 c7 82 ff 75 c8 ff 75 c0 e8 27 ce bf fe <0f> 0b e8 22 45 b1 fe 4c 8b 65 08 e8 09 ee ce fe 48 c7 c1 60 69 
RIP  [<00000000dcbc59b1>] skb_panic+0x176/0x178 net/core/skbuff.c:101
 RSP <ffff8801d782f420>
---[ end trace 52f1ec031c9e90a2 ]---
EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
 loop1: p1[EZD] p2 p3 < > p4
loop1: p1 size 2047 extends beyond EOD, truncated
loop1: p2 size 1073741824 extends beyond EOD, truncated
loop1: p4 size 3657465856 extends beyond EOD, truncated
EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue