kernel BUG at net/core/skbuff.c:LINE!

kernel BUG at net/core/skbuff.c:LINE!
Status: upstream: reported C repro on 2019/04/27 20:12
Reported-by: syzbot+77d13153b9599a418a9c@syzkaller.appspotmail.com
First crash: 467d, last: 5d23h

similar bugs (8):
Kernel	Title	Repro	Bisected	Count	Last	Reported	Patched	Status
android-44	kernel BUG at net/core/skbuff.c:LINE!	C		79	258d	483d	0/2	public: reported C repro on 2019/04/11 08:44
upstream	kernel BUG at net/core/skbuff.c:LINE! (2)	C		562	922d	1011d	4/17	fixed on 2018/01/29 03:39
android-54	kernel BUG at net/core/skbuff.c:LINE!	C		22	53d	207d	0/1	upstream: reported C repro on 2020/01/12 09:43
android-414	kernel BUG at net/core/skbuff.c:LINE!	C		2743	246d	484d	0/1	public: reported C repro on 2019/04/11 00:00
upstream	kernel BUG at net/core/skbuff.c:LINE! (3)	C	cause	3784	5d23h	917d	0/17	upstream: reported C repro on 2018/02/01 19:21
upstream	kernel BUG at net/core/skbuff.c:LINE!			5	1017d	1088d	3/17	fixed on 2017/10/27 10:10
linux-4.14	kernel BUG at net/core/skbuff.c:LINE!	C		860	6h18m	482d	0/1	upstream: reported C repro on 2019/04/12 15:43
android-49	kernel BUG at net/core/skbuff.c:LINE!	C		391	247d	483d	0/3	public: reported C repro on 2019/04/12 00:00

Sample crash report:

audit: type=1400 audit(1577181912.767:36): avc:  denied  { map } for  pid=7782 comm="syz-executor246" path="/root/syz-executor246020502" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
skbuff: skb_over_panic: text:00000000ac4603da len:194 put:82 head:000000003e5a646d data:000000003e5a646d tail:0xc2 end:0xc0 dev:<NULL>
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:104!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 7782 Comm: syz-executor246 Not tainted 4.19.91-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:skb_panic+0x17c/0x17e net/core/skbuff.c:104
Code: 4c 8b 4d b8 8b 8b 80 00 00 00 41 57 45 89 f0 4c 89 ea ff 75 d0 4c 89 e6 48 c7 c7 40 94 49 88 ff 75 c8 ff 75 c0 e8 3b 9f 9a fb <0f> 0b e8 d0 3a b0 fb 4c 8b 6d 08 e8 87 b8 e7 fb 48 c7 c1 00 9e 49
RSP: 0018:ffff88809262f9f0 EFLAGS: 00010282
RAX: 0000000000000086 RBX: ffff888091976bc0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8155bb16 RDI: ffffed10124c5f30
RBP: ffff88809262fa58 R08: 0000000000000086 R09: ffffed1015d05079
R10: ffffed1015d05078 R11: ffff8880ae8283c7 R12: ffffffff88499e40
R13: ffffffff86c20fa7 R14: 0000000000000052 R15: ffffffff88499400
FS:  0000000001178880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005650a6ceb180 CR3: 00000000942c8000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 skb_over_panic net/core/skbuff.c:109 [inline]
 skb_put.cold+0x23/0x23 net/core/skbuff.c:1702
 skb_put_data include/linux/skbuff.h:2109 [inline]
 sctp_addto_chunk+0xe7/0x2a0 net/sctp/sm_make_chunk.c:1507
 sctp_make_strreset_req+0x392/0x3e0 net/sctp/sm_make_chunk.c:3687
 sctp_send_reset_streams+0x7ed/0xe10 net/sctp/stream.c:424
 sctp_setsockopt_reset_streams net/sctp/socket.c:4094 [inline]
 sctp_setsockopt net/sctp/socket.c:4443 [inline]
 sctp_setsockopt+0x31a3/0x4f70 net/sctp/socket.c:4286
 sock_common_setsockopt+0x94/0xd0 net/core/sock.c:3046
 __sys_setsockopt+0x17a/0x280 net/socket.c:1901
 __do_sys_setsockopt net/socket.c:1912 [inline]
 __se_sys_setsockopt net/socket.c:1909 [inline]
 __x64_sys_setsockopt+0xbe/0x150 net/socket.c:1909
 do_syscall_64+0xfd/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x4402d9
Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fff2926bd38 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402d9
RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
RBP: 00000000006ca018 R08: 00000000000002de R09: 00000000004002c8
R10: 000000002081e000 R11: 0000000000000246 R12: 0000000000401b60
R13: 0000000000401bf0 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
---[ end trace 533e27ff3db68061 ]---
RIP: 0010:skb_panic+0x17c/0x17e net/core/skbuff.c:104
Code: 4c 8b 4d b8 8b 8b 80 00 00 00 41 57 45 89 f0 4c 89 ea ff 75 d0 4c 89 e6 48 c7 c7 40 94 49 88 ff 75 c8 ff 75 c0 e8 3b 9f 9a fb <0f> 0b e8 d0 3a b0 fb 4c 8b 6d 08 e8 87 b8 e7 fb 48 c7 c1 00 9e 49
RSP: 0018:ffff88809262f9f0 EFLAGS: 00010282
RAX: 0000000000000086 RBX: ffff888091976bc0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff8155bb16 RDI: ffffed10124c5f30
RBP: ffff88809262fa58 R08: 0000000000000086 R09: ffffed1015d05079
R10: ffffed1015d05078 R11: ffff8880ae8283c7 R12: ffffffff88499e40
R13: ffffffff86c20fa7 R14: 0000000000000052 R15: ffffffff88499400
FS:  0000000001178880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005650a6ceb180 CR3: 00000000942c8000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400

Crashes (283):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	Maintainers
ci2-linux-4-19	2019/12/24 10:07	linux-4.19.y	672481c2	be5c2c81	.config	log	report	syz	C	davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/01/28 06:33	linux-4.19.y	88d6de67	56cd6c9b	.config	log	report	syz		davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2019/05/03 07:34	linux-4.19.y	a03957ab	1bfa09b9	.config	log	report	syz		davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2019/05/01 01:25	linux-4.19.y	19bb613a	618456b4	.config	log	report	syz		davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2019/04/28 01:52	linux-4.19.y	19bb613a	b617407b	.config	log	report	syz		davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2019/04/27 21:56	linux-4.19.y	19bb613a	b617407b	.config	log	report	syz		davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/08/01 04:51	linux-4.19.y	13af6c74	8df85ed9	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/07/28 16:08	linux-4.19.y	20b3a3df	cb93dc6a	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/07/26 00:17	linux-4.19.y	20b3a3df	1f7cc1ca	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/07/21 02:19	linux-4.19.y	17a87580	d88894e6	.config	log	report			davem@davemloft.net, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, yoshfuji@linux-ipv6.org
ci2-linux-4-19	2020/07/20 08:07	linux-4.19.y	17a87580	9c812472	.config	log	report			davem@davemloft.net, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, yoshfuji@linux-ipv6.org
ci2-linux-4-19	2020/07/19 13:34	linux-4.19.y	17a87580	9c812472	.config	log	report			davem@davemloft.net, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, yoshfuji@linux-ipv6.org
ci2-linux-4-19	2020/07/16 04:49	linux-4.19.y	dce0f886	ada108d0	.config	log	report			davem@davemloft.net, kuznet@ms2.inr.ac.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, yoshfuji@linux-ipv6.org
ci2-linux-4-19	2020/07/01 18:22	linux-4.19.y	399849e4	39acb39d	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/07/01 08:49	linux-4.19.y	a39e7545	c0383ebe	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/07/01 06:39	linux-4.19.y	a39e7545	c0383ebe	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/27 11:39	linux-4.19.y	a39e7545	032b4239	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/26 02:46	linux-4.19.y	a39e7545	aea82c00	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/25 11:06	linux-4.19.y	b3a99fd3	c7b4497a	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/24 14:47	linux-4.19.y	b3a99fd3	41694dbf	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/24 00:09	linux-4.19.y	b3a99fd3	bbad15ae	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/23 08:59	linux-4.19.y	b3a99fd3	1afe1535	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/06/23 02:29	linux-4.19.y	b3a99fd3	1afe1535	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/22 17:33	linux-4.19.y	b3a99fd3	1afe1535	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/22 03:31	linux-4.19.y	3fc89857	eabcced4	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/21 21:56	linux-4.19.y	3fc89857	4f2acff9	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/06/21 00:26	linux-4.19.y	3fc89857	c655ec77	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/18 21:27	linux-4.19.y	3fc89857	3ea11d3f	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/06/18 00:06	linux-4.19.y	3fc89857	d45a4d69	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/17 23:04	linux-4.19.y	3fc89857	b6c46f43	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/16 21:57	linux-4.19.y	3fc89857	4ea9d964	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/16 11:01	linux-4.19.y	3fc89857	4ea9d964	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/16 02:10	linux-4.19.y	3fc89857	baca2611	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/06/12 16:25	linux-4.19.y	3fc89857	3036d6fd	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/06/11 07:19	linux-4.19.y	3fc89857	3ab7a05a	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/05/31 05:54	linux-4.19.y	2d16cf48	6f3e1c7c	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/05/27 11:44	linux-4.19.y	1bab61d3	9072c126	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/05/27 10:02	linux-4.19.y	1bab61d3	9072c126	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/05/21 17:00	linux-4.19.y	1bab61d3	4afdfa20	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/05/21 03:40	linux-4.19.y	1bab61d3	4afdfa20	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/05/18 21:46	linux-4.19.y	258f0cf7	24d91142	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/05/18 01:05	linux-4.19.y	258f0cf7	37bccd4e	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/05/17 10:03	linux-4.19.y	258f0cf7	37bccd4e	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/05/16 20:48	linux-4.19.y	258f0cf7	37bccd4e	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/05/15 13:41	linux-4.19.y	258f0cf7	d7f9fffa	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/05/15 05:49	linux-4.19.y	258f0cf7	2d572622	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/05/14 12:47	linux-4.19.y	258f0cf7	2d572622	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2020/05/14 06:44	linux-4.19.y	258f0cf7	a885920d	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com
ci2-linux-4-19	2020/05/13 19:50	linux-4.19.y	033c4ea4	9a6d42fb	.config	log	report			davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com
ci2-linux-4-19	2019/04/27 19:11	linux-4.19.y	19bb613a	b617407b	.config	log	report			davem@davemloft.net, herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, steffen.klassert@secunet.com