skbuff: skb_over_panic: text:00000000d6ee3f62 len:264 put:72 head:0000000013c787e9 data:0000000013c787e9 tail:0x108 end:0xc0 dev: ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:108! invalid opcode: 0000 [#1] PREEMPT SMP CPU: 1 PID: 9741 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:skb_panic+0xe9/0xeb net/core/skbuff.c:108 Code: b8 45 89 f0 48 c7 c7 90 3f 79 85 48 8b 55 c0 41 57 48 8b 45 c8 8b 4b 70 4c 8b 4d d0 56 4c 89 e6 52 4c 89 ea 50 e8 75 f8 83 fd <0f> 0b e8 ec 7d 91 fd 48 8b 55 08 44 89 f6 4c 89 e7 48 c7 c1 80 ba RSP: 0018:ffffc90002517330 EFLAGS: 00010286 RAX: 0000000000000087 RBX: ffff8880a260ff00 RCX: ffffc90015486000 RDX: 0000000000000000 RSI: ffffffff8136b69d RDI: 0000000000000005 RBP: ffffc90002517398 R08: ffff8880a5e09040 R09: 000088812bf1dd2c R10: 0000ffff85a56118 R11: 0000ffff857d116f R12: ffffffff8517ba90 R13: ffffffff841c769e R14: 0000000000000048 R15: ffffffff85671974 FS: 00007f231e4a2700(0000) GS:ffff88812bf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000001c4e3a8 CR3: 00000000acc1f000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: skb_over_panic net/core/skbuff.c:113 [inline] skb_put.cold+0x1b/0x1b net/core/skbuff.c:1866 skb_put_zero include/linux/skbuff.h:2221 [inline] dump_ah_combs net/key/af_key.c:2955 [inline] pfkey_send_acquire+0x82e/0xea0 net/key/af_key.c:3218 km_query+0x90/0x120 net/xfrm/xfrm_state.c:2164 xfrm_state_find+0x1a24/0x27c0 net/xfrm/xfrm_state.c:1131 xfrm_tmpl_resolve_one net/xfrm/xfrm_policy.c:2391 [inline] xfrm_tmpl_resolve+0x21e/0x890 net/xfrm/xfrm_policy.c:2436 xfrm_resolve_and_create_bundle+0x9d/0x12d0 net/xfrm/xfrm_policy.c:2727 xfrm_lookup_with_ifid+0x1b7/0x1310 net/xfrm/xfrm_policy.c:3050 xfrm_lookup net/xfrm/xfrm_policy.c:3174 [inline] xfrm_lookup_route+0x44/0x100 net/xfrm/xfrm_policy.c:3185 ip6_dst_lookup_flow+0xde/0x120 net/ipv6/ip6_output.c:1159 rawv6_sendmsg+0x82c/0x21e0 net/ipv6/raw.c:928 inet_sendmsg+0x6d/0x90 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0x9f/0xc0 net/socket.c:657 ___sys_sendmsg+0x2b7/0x5d0 net/socket.c:2311 __sys_sendmmsg+0x123/0x350 net/socket.c:2413 __do_sys_sendmmsg net/socket.c:2442 [inline] __se_sys_sendmmsg net/socket.c:2439 [inline] __x64_sys_sendmmsg+0x64/0x80 net/socket.c:2439 do_syscall_64+0xcc/0x370 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x45a639 Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007f231e4a1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a639 RDX: 0400000000000058 RSI: 0000000020007e00 RDI: 0000000000000004 RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f231e4a26d4 R13: 00000000004c83c8 R14: 00000000004de808 R15: 00000000ffffffff Modules linked in: ---[ end trace e3a9483cc40306e5 ]--- RIP: 0010:skb_panic+0xe9/0xeb net/core/skbuff.c:108 Code: b8 45 89 f0 48 c7 c7 90 3f 79 85 48 8b 55 c0 41 57 48 8b 45 c8 8b 4b 70 4c 8b 4d d0 56 4c 89 e6 52 4c 89 ea 50 e8 75 f8 83 fd <0f> 0b e8 ec 7d 91 fd 48 8b 55 08 44 89 f6 4c 89 e7 48 c7 c1 80 ba RSP: 0018:ffffc90002517330 EFLAGS: 00010286 RAX: 0000000000000087 RBX: ffff8880a260ff00 RCX: ffffc90015486000 RDX: 0000000000000000 RSI: ffffffff8136b69d RDI: 0000000000000005 RBP: ffffc90002517398 R08: ffff8880a5e09040 R09: 000088812bf1dd2c R10: 0000ffff85a56118 R11: 0000ffff857d116f R12: ffffffff8517ba90 R13: ffffffff841c769e R14: 0000000000000048 R15: ffffffff85671974 FS: 00007f231e4a2700(0000) GS:ffff88812bf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000625208 CR3: 00000000acc1f000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400