netlink: 16 bytes leftover after parsing attributes in process `syz-executor1'. skbuff: skb_over_panic: text:ffffffff832140e0 len:4124 put:4124 head:ffff8800a27a4f00 data:ffff8800a27a4f90 tail:0x10ac end:0xc0 dev: ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:104! invalid opcode: 0000 [#1] PREEMPT SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 20085 Comm: syz-executor7 Not tainted 4.4.138-g226f96b #61 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff8801bbedb000 task.stack: ffff8801d0208000 RIP: 0010:[] [] skb_panic+0x166/0x168 net/core/skbuff.c:100 RSP: 0018:ffff8801d020ee18 EFLAGS: 00010282 RAX: 000000000000008b RBX: ffff8801ae711280 RCX: ffffc9000826b000 RDX: 0000000000000000 RSI: ffffffff8125d249 RDI: ffff8801bbedb8dc RBP: ffff8801d020ee80 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff83ec4460 R13: ffff8800a27a4f90 R14: 00000000000010ac R15: 00000000000000c0 FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f5702b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 00000000f578bdb0 CR3: 00000001ba7d8000 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Stack: ffff8800a27a4f90 00000000000010ac 00000000000000c0 ffffffff83ec4460 0000000000000000 ffffffff83ec4960 ffffffff832140e0 0000101c00000001 ffff8801ae711280 ffffffff832140e0 ffff8800a27a4f90 000000000000101c Call Trace: [] skb_over_panic net/core/skbuff.c:109 [inline] [] skb_put.cold.72+0x23/0x23 net/core/skbuff.c:1362 [] __ip_append_data.isra.45+0x1d40/0x2a70 net/ipv4/ip_output.c:1026 [] ip_append_data.part.47+0xe4/0x150 net/ipv4/ip_output.c:1193 [] ip_append_data+0x68/0x80 net/ipv4/ip_output.c:1182 [] udp_sendmsg+0xc5a/0x1c70 net/ipv4/udp.c:1098 [] udpv6_sendmsg+0x12cd/0x24c0 net/ipv6/udp.c:1173 [] inet_sendmsg+0x203/0x4d0 net/ipv4/af_inet.c:755 [] sock_sendmsg_nosec net/socket.c:625 [inline] [] sock_sendmsg+0xcc/0x110 net/socket.c:635 [] kernel_sendmsg+0x43/0x50 net/socket.c:643 [] sock_no_sendpage+0x112/0x150 net/core/sock.c:2282 [] kernel_sendpage+0x93/0xf0 net/socket.c:3301 [] sock_sendpage+0x8c/0xc0 net/socket.c:780 [] pipe_to_sendpage+0x266/0x330 fs/splice.c:724 [] splice_from_pipe_feed fs/splice.c:776 [inline] [] __splice_from_pipe+0x364/0x790 fs/splice.c:901 [] splice_from_pipe+0xf9/0x170 fs/splice.c:936 [] generic_splice_sendpage+0x3c/0x50 fs/splice.c:1109 [] do_splice_from fs/splice.c:1128 [inline] [] direct_splice_actor+0x128/0x190 fs/splice.c:1294 [] splice_direct_to_actor+0x2c7/0x830 fs/splice.c:1247 [] do_splice_direct+0x1a3/0x270 fs/splice.c:1337 [] do_sendfile+0x4e4/0xb80 fs/read_write.c:1227 [] C_SYSC_sendfile fs/read_write.c:1303 [inline] [] compat_SyS_sendfile+0xd1/0x160 fs/read_write.c:1292 [] do_syscall_32_irqs_on arch/x86/entry/common.c:392 [inline] [] do_fast_syscall_32+0x326/0x8b0 arch/x86/entry/common.c:459 [] sysenter_flags_fixed+0xd/0x17 Code: ab 38 c6 fd 4c 8b 4d b8 8b 4b 78 41 54 48 c7 c7 a0 44 ec 83 44 8b 45 d4 41 57 48 8b 55 c8 41 56 48 8b 75 c0 41 55 e8 0d f3 b7 fd <0f> 0b e8 3d b5 ab fd 4c 8b 65 08 e8 54 22 c6 fd 48 c7 c1 20 49 RIP [] skb_panic+0x166/0x168 net/core/skbuff.c:100 RSP ---[ end trace 756794b4c8092a5a ]---