skbuff: skb_over_panic: text:00000000c5187214 len:194 put:82 head:0000000030f40cee data:0000000030f40cee tail:0xc2 end:0xc0 dev: ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:108! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 9398 Comm: syz-executor138 Not tainted 5.5.0-rc2-next-20191220-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:skb_panic+0x176/0x178 net/core/skbuff.c:108 Code: e5 98 fb 4c 8b 4d b8 8b 4b 70 41 57 45 89 f0 4c 89 ea ff 75 d0 4c 89 e6 48 c7 c7 a0 9d d5 88 ff 75 c8 ff 75 c0 e8 02 32 44 fb <0f> 0b e8 97 fa 5a fb 4c 8b 6d 08 e8 1e dc 98 fb 48 c7 c1 40 aa d5 RSP: 0018:ffffc9000628f990 EFLAGS: 00010282 RAX: 0000000000000086 RBX: ffff8880a22af3c0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff815e9f66 RDI: fffff52000c51f24 RBP: ffffc9000628f9f8 R08: 0000000000000086 R09: ffffed1015d26659 R10: ffffed1015d26658 R11: ffff8880ae9332c7 R12: ffffffff88d5aa80 R13: ffffffff873b1477 R14: 0000000000000052 R15: ffffffff88d59d60 FS: 00000000012ac880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000208c0000 CR3: 000000009313d000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: skb_over_panic net/core/skbuff.c:113 [inline] skb_put.cold+0x23/0x23 net/core/skbuff.c:1866 skb_put_data include/linux/skbuff.h:2233 [inline] sctp_addto_chunk+0xe7/0x2a0 net/sctp/sm_make_chunk.c:1494 sctp_make_strreset_req+0x392/0x3e0 net/sctp/sm_make_chunk.c:3672 sctp_send_reset_streams+0x7f9/0xdd0 net/sctp/stream.c:327 sctp_setsockopt_reset_streams net/sctp/socket.c:4223 [inline] sctp_setsockopt net/sctp/socket.c:4817 [inline] sctp_setsockopt+0x252f/0x7350 net/sctp/socket.c:4655 sock_common_setsockopt+0x94/0xd0 net/core/sock.c:3149 __sys_setsockopt+0x261/0x4c0 net/socket.c:2129 __do_sys_setsockopt net/socket.c:2145 [inline] __se_sys_setsockopt net/socket.c:2142 [inline] __x64_sys_setsockopt+0xbe/0x150 net/socket.c:2142 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:294 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4402d9 Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007ffe71eb08d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402d9 RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 RBP: 00000000006ca018 R08: 00000000000002de R09: 00000000004002c8 R10: 000000002081e000 R11: 0000000000000246 R12: 0000000000401b60 R13: 0000000000401bf0 R14: 0000000000000000 R15: 0000000000000000 Modules linked in: ---[ end trace d0c8e4582023cb55 ]--- RIP: 0010:skb_panic+0x176/0x178 net/core/skbuff.c:108 Code: e5 98 fb 4c 8b 4d b8 8b 4b 70 41 57 45 89 f0 4c 89 ea ff 75 d0 4c 89 e6 48 c7 c7 a0 9d d5 88 ff 75 c8 ff 75 c0 e8 02 32 44 fb <0f> 0b e8 97 fa 5a fb 4c 8b 6d 08 e8 1e dc 98 fb 48 c7 c1 40 aa d5 RSP: 0018:ffffc9000628f990 EFLAGS: 00010282 RAX: 0000000000000086 RBX: ffff8880a22af3c0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff815e9f66 RDI: fffff52000c51f24 RBP: ffffc9000628f9f8 R08: 0000000000000086 R09: ffffed1015d26659 R10: ffffed1015d26658 R11: ffff8880ae9332c7 R12: ffffffff88d5aa80 R13: ffffffff873b1477 R14: 0000000000000052 R15: ffffffff88d59d60 FS: 00000000012ac880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 000000009313d000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400