kernel BUG at net/core/skbuff.c:LINE!

kernel BUG at net/core/skbuff.c:LINE!
Status: upstream: reported C repro on 2019/04/12 15:43
Reported-by: syzbot+812d66c9f9b0bbb28d30@syzkaller.appspotmail.com
First crash: 1014d, last: 10d

similar bugs (14):
Kernel	Title	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
android-44	kernel BUG at net/core/skbuff.c:LINE!	C			79	790d	1016d	0/2	public: reported C repro on 2019/04/11 08:44
linux-4.19	kernel BUG at net/core/skbuff.c:LINE!	C		unreliable	491	37d	999d	0/1	upstream: reported C repro on 2019/04/27 20:12
android-54	kernel BUG in pfkey_send_acquire	syz			32	341d	368d	0/1	upstream: reported syz repro on 2021/01/17 15:19
upstream	kernel BUG at net/core/skbuff.c:LINE! (2)	C			562	1454d	1543d	4/22	fixed on 2018/01/29 03:39
android-5-10	kernel BUG in add_grec	C	error		3	1d06h	7d18h	0/1	upstream: reported C repro on 2022/01/13 18:16
android-54	kernel BUG at net/core/skbuff.c:LINE!	C			128	8h55m	740d	0/1	upstream: reported C repro on 2020/01/12 09:43
android-414	kernel BUG at net/core/skbuff.c:LINE!	C			2743	779d	1016d	0/1	public: reported C repro on 2019/04/11 00:00
android-5-10	kernel BUG in cdc_ncm_fill_tx_frame	C	error		40	26d	91d	1/1	fixed on 2021/12/29 12:20
upstream	kernel BUG at net/core/skbuff.c:LINE! (3)	C	done		4399	332d	1449d	21/22	fixed on 2021/03/10 01:48
upstream	kernel BUG at net/core/skbuff.c:LINE!				5	1550d	1620d	3/22	fixed on 2017/10/27 10:10
linux-4.19	kernel BUG in pfkey_send_acquire	C		done	56	339d	368d	1/1	fixed on 2021/03/18 08:30
upstream	kernel BUG in llc_sap_action_send_xid_c	C	error		61	72d	286d	22/22	fixed on 2021/11/10 00:50
upstream	kernel BUG in pskb_expand_head	C	done		39	19h35m	67d	19/22	upstream: reported C repro on 2021/11/15 08:38
android-49	kernel BUG at net/core/skbuff.c:LINE!	C			391	779d	1015d	0/3	public: reported C repro on 2019/04/12 00:00

Sample crash report:

skbuff: skb_over_panic: text:ffffffff85cf6adc len:692 put:3 head:ffff88809875ad80 data:ffff88809875ad8e tail:0x2c2 end:0x2c0 dev:bond0
------------[ cut here ]------------
kernel BUG at net/core/skbuff.c:104!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 7972 Comm: syz-executor626 Not tainted 4.14.232-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88809d6685c0 task.stack: ffff88809eab8000
RIP: 0010:skb_panic+0x172/0x174 net/core/skbuff.c:104
RSP: 0018:ffff88809eabf888 EFLAGS: 00010282
RAX: 0000000000000086 RBX: ffff888099216900 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed1013d57f07
RBP: ffffffff885571e0 R08: 0000000000000086 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff85cf6adc
R13: 0000000000000003 R14: ffff8880ac2b4440 R15: 00000000000002c0
FS:  0000000002025300(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055845ea058f0 CR3: 00000000af111000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 skb_over_panic net/core/skbuff.c:109 [inline]
 skb_put.cold+0x24/0x24 net/core/skbuff.c:1708
 llc_pdu_init_as_xid_cmd include/net/llc_pdu.h:377 [inline]
 llc_sap_action_send_xid_c+0x23c/0x2f0 net/llc/llc_s_ac.c:84
 llc_exec_sap_trans_actions net/llc/llc_sap.c:152 [inline]
 llc_sap_next_state net/llc/llc_sap.c:181 [inline]
 llc_sap_state_process+0x20b/0x490 net/llc/llc_sap.c:208
 llc_ui_sendmsg+0x8e1/0xe80 net/llc/af_llc.c:965
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0x100 net/socket.c:656
 ___sys_sendmsg+0x326/0x800 net/socket.c:2062
 __sys_sendmmsg+0x129/0x330 net/socket.c:2152
 SYSC_sendmmsg net/socket.c:2183 [inline]
 SyS_sendmmsg+0x2f/0x50 net/socket.c:2178
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x43f319
RSP: 002b:00007ffe7b827eb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043f319
RDX: 0000000000000006 RSI: 0000000020005bc0 RDI: 0000000000000003
RBP: 0000000000403300 R08: 0000000000400488 R09: 0000000000400488
R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000403390
R13: 0000000000000000 R14: 00000000004ad018 R15: 0000000000400488
Code: 8b 4c 24 10 8b 8b 80 00 00 00 41 56 45 89 e8 4c 89 e2 41 57 48 89 ee 48 c7 c7 80 6a 55 88 ff 74 24 10 ff 74 24 20 e8 1c 6e e4 ff <0f> 0b e8 e1 56 38 fa 4c 8b 64 24 18 e8 47 e5 61 fa 48 c7 c1 a0 
RIP: skb_panic+0x172/0x174 net/core/skbuff.c:104 RSP: ffff88809eabf888
---[ end trace 50a73ff038f36254 ]---

Fix bisection attempts:
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro
ci2-linux-4-14	2021/11/16 09:11	linux-4.14.y	5f9f3b0057d5	f54a5c09	.config	log	report	syz	C
ci2-linux-4-14	2021/10/17 08:42	linux-4.14.y	f6b016a9d961	f54a5c09	.config	log	report	syz	C
ci2-linux-4-14	2021/09/17 08:08	linux-4.14.y	f96eb53cbd76	f54a5c09	.config	log	report	syz	C
ci2-linux-4-14	2021/08/18 07:47	linux-4.14.y	162b95d01320	f54a5c09	.config	log	report	syz	C
ci2-linux-4-14	2021/07/19 07:09	linux-4.14.y	4e68c9b0763f	f54a5c09	.config	log	report	syz	C
ci2-linux-4-14	2021/06/19 06:45	linux-4.14.y	cfb41ef9deb1	f54a5c09	.config	log	report	syz	C

Crashes (2837):
Manager	Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	VM info	Title
ci2-linux-4-14	2021/05/16 13:54	linux-4.14.y	7d7d1c0ab3eb	f54a5c09	.config	log	report	syz	C		kernel BUG in llc_sap_action_send_xid_c
ci2-linux-4-14	2021/03/29 16:01	linux-4.14.y	670d6552eda8	a8529b82	.config	log	report	syz	C		kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/03/02 16:58	linux-4.14.y	3242aa3a635c	92ead296	.config	log	report	syz	C		kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/01/21 11:00	linux-4.14.y	2762b48e9611	d4f4eca5	.config	log	report	syz	C		kernel BUG in pfkey_send_acquire
ci2-linux-4-14	2021/01/20 08:10	linux-4.14.y	2762b48e9611	63631df1	.config	log	report	syz	C		kernel BUG in pfkey_send_acquire
ci2-linux-4-14	2021/01/17 05:02	linux-4.14.y	f79dc86058bc	65a7a854	.config	log	report	syz	C
ci2-linux-4-14	2020/10/14 10:37	linux-4.14.y	cbfa1702aaf6	fc7735a2	.config	log	report	syz	C
ci2-linux-4-14	2020/10/03 00:40	linux-4.14.y	cbfa1702aaf6	062c9832	.config	log	report	syz	C
ci2-linux-4-14	2020/08/17 11:40	linux-4.14.y	14b58326976d	5ce13532	.config	log	report	syz	C
ci2-linux-4-14	2020/03/19 02:17	linux-4.14.y	12cd844a39ed	2c31c529	.config	log	report	syz	C
ci2-linux-4-14	2019/12/24 12:11	linux-4.14.y	e1f7d50ae3a3	be5c2c81	.config	log	report	syz	C
ci2-linux-4-14	2019/04/20 21:06	linux-4.14.y	68d7a45eec10	b0e8efcb	.config	log	report	syz	C
ci2-linux-4-14	2021/01/27 22:26	linux-4.14.y	2d2791fce891	a57db36f	.config	log	report	syz			kernel BUG in pfkey_send_acquire
ci2-linux-4-14	2021/01/02 14:01	linux-4.14.y	1752938529c6	79264ae3	.config	log	report	syz
ci2-linux-4-14	2020/08/18 04:38	linux-4.14.y	14b58326976d	5ce13532	.config	log	report	syz
ci2-linux-4-14	2021/01/17 14:31	linux-4.14.y	2762b48e9611	813be542	.config	log	report			info	kernel BUG at net/core/skbuff.c:LINE!
ci2-linux-4-14	2022/01/10 17:59	linux-4.14.y	bfdef05c8da4	ddb0ab8c	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2022/01/03 17:44	linux-4.14.y	a6ca7c65b137	4a3f34f2	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/12/20 21:00	linux-4.14.y	9dfbac0e6b86	62bd192b	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/12/15 20:10	linux-4.14.y	9dfbac0e6b86	572bcb40	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/12/14 11:33	linux-4.14.y	9dfbac0e6b86	5d14b1ea	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/12/13 14:20	linux-4.14.y	c01d4d1b885d	0304899b	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/12/13 12:50	linux-4.14.y	c01d4d1b885d	0304899b	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/12/11 02:09	linux-4.14.y	c01d4d1b885d	49ca1f59	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/05/20 05:55	linux-4.14.y	7d7d1c0ab3eb	a343ba6b	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/05/18 08:46	linux-4.14.y	7d7d1c0ab3eb	a343ba6b	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/30 19:25	linux-4.14.y	7d7d1c0ab3eb	77e2b668	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/23 23:14	linux-4.14.y	cf256fbcbe34	17f0b706	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/23 01:19	linux-4.14.y	cf256fbcbe34	590921a5	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/22 23:47	linux-4.14.y	cf256fbcbe34	590921a5	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/22 06:43	linux-4.14.y	cf256fbcbe34	2bc8999a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/21 20:58	linux-4.14.y	cf256fbcbe34	2bc8999a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/20 07:45	linux-4.14.y	cf256fbcbe34	c0ced557	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/19 20:38	linux-4.14.y	cf256fbcbe34	4285c989	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/19 16:20	linux-4.14.y	cf256fbcbe34	50f523d7	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/19 07:56	linux-4.14.y	cf256fbcbe34	50f523d7	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/18 05:21	linux-4.14.y	cf256fbcbe34	7e2b734b	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/18 03:23	linux-4.14.y	cf256fbcbe34	7e2b734b	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/17 01:46	linux-4.14.y	cf256fbcbe34	7e2b734b	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/15 16:40	linux-4.14.y	958e517f4e16	c59079a6	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/14 23:00	linux-4.14.y	958e517f4e16	fcdb12ba	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/14 17:38	linux-4.14.y	958e517f4e16	3134b37f	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/14 11:52	linux-4.14.y	958e517f4e16	3134b37f	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/14 10:08	linux-4.14.y	958e517f4e16	3134b37f	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/13 19:28	linux-4.14.y	958e517f4e16	a184b83e	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/13 16:30	linux-4.14.y	958e517f4e16	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/12 08:35	linux-4.14.y	958e517f4e16	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/10 19:23	linux-4.14.y	958e517f4e16	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/10 13:17	linux-4.14.y	958e517f4e16	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/10 11:09	linux-4.14.y	0cc244011f40	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/10 07:14	linux-4.14.y	0cc244011f40	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/09 18:04	linux-4.14.y	0cc244011f40	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/09 13:52	linux-4.14.y	0cc244011f40	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/07 11:15	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/07 06:44	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/06 16:30	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/06 09:55	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/05 22:42	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/05 20:10	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/05 15:23	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/05 04:30	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/05 03:01	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/04 18:05	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/04/03 12:12	linux-4.14.y	bd634aa64163	6a81331a	.config	log	report			info	kernel BUG in ip6_mc_hdr
ci2-linux-4-14	2021/02/23 11:56	linux-4.14.y	29c52025152b	fcc6d71b	.config	log	report			info	kernel BUG in pfkey_send_acquire
ci2-linux-4-14	2021/01/20 00:20	linux-4.14.y	2762b48e9611	63631df1	.config	log	report			info	kernel BUG in igmpv3_newpack
ci2-linux-4-14	2021/01/17 14:15	linux-4.14.y	2762b48e9611	813be542	.config	log	report			info
ci2-linux-4-14	2019/04/12 14:42	linux-4.14.y	1ec8f1f0bffe	4f421599	.config	log	report