syzbot has bisected this bug to: commit 472c2e07eef045145bc1493cc94a01c87140780a Author: Eric Dumazet <edumazet@xxxxxxxxxx> Date: Fri Mar 22 15:56:39 2019 +0000 tcp: add one skb cache for tx bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=17abf52b200000 start commit: 68cc2999 Merge branch 'devlink-small-spring-cleanup' git tree: net-next final crash: https://syzkaller.appspot.com/x/report.txt?x=146bf52b200000 console output: https://syzkaller.appspot.com/x/log.txt?x=106bf52b200000 kernel config: https://syzkaller.appspot.com/x/.config?x=9ab5bbbbf283c99a dashboard link: https://syzkaller.appspot.com/bug?extid=580be3953ed99133804f syz repro: https://syzkaller.appspot.com/x/repro.syz?x=123a3d3b200000 C reproducer: https://syzkaller.appspot.com/x/repro.c?x=11d34f93200000 Reported-by: syzbot+580be3953ed99133804f@xxxxxxxxxxxxxxxxxxxxxxxxx Fixes: 472c2e07eef0 ("tcp: add one skb cache for tx") For information about bisection process see: https://goo.gl/tpsmEJ#bisection