netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'.
netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'.
------------[ cut here ]------------
kernel BUG at net/ipv4/tcp_output.c:2817!
invalid opcode: 0000 [#1] SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 1 PID: 19798 Comm: modprobe Not tainted 4.13.0+ #42
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8801c2370340 task.stack: ffff8801a6508000
RIP: 0010:__tcp_retransmit_skb+0x1d18/0x1fa0 net/ipv4/tcp_output.c:2817
RSP: 0018:ffff8801db3072a8 EFLAGS: 00010206
RAX: ffff8801c2370340 RBX: 0000000000000001 RCX: 00000000b95ca8e3
RDX: 0000000000000100 RSI: ffff8801cf83f580 RDI: ffff8801cf83f5ac
RBP: ffff8801db307468 R08: ffff88021fff905c R09: ffff88021fff9048
R10: 0000000000000000 R11: ffff88021fff905d R12: ffff8801cf83f606
R13: 00000000b95cac73 R14: ffff8801cf83f580 R15: ffff8801c2a303c0
FS:  0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f423d1d8010 CR3: 00000001a7ebf000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 tcp_retransmit_skb+0x2e/0x230 net/ipv4/tcp_output.c:2891
 tcp_retransmit_timer+0xcee/0x2a10 net/ipv4/tcp_timer.c:476
 tcp_write_timer_handler+0x335/0x810 net/ipv4/tcp_timer.c:561
 tcp_write_timer+0x146/0x160 net/ipv4/tcp_timer.c:579
 call_timer_fn+0x246/0x850 kernel/time/timer.c:1281
 expire_timers kernel/time/timer.c:1320 [inline]
 __run_timers+0x7fd/0xb90 kernel/time/timer.c:1620
 run_timer_softirq+0x4c/0xb0 kernel/time/timer.c:1646
 __do_softirq+0x2bb/0xbd0 kernel/softirq.c:284
 invoke_softirq kernel/softirq.c:364 [inline]
 irq_exit+0x1d3/0x210 kernel/softirq.c:405
 exiting_irq arch/x86/include/asm/apic.h:638 [inline]
 smp_apic_timer_interrupt+0x177/0x710 arch/x86/kernel/apic/apic.c:1048
 apic_timer_interrupt+0x9d/0xb0 arch/x86/entry/entry_64.S:770
 </IRQ>
RIP: 0010:arch_local_irq_restore arch/x86/include/asm/paravirt.h:814 [inline]
RIP: 0010:lock_acquire+0x256/0x580 kernel/locking/lockdep.c:4005
RSP: 0018:ffff8801a650f7c8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10
RAX: dffffc0000000000 RBX: ffff8801c2370340 RCX: 0000000000000000
RDX: 1ffffffff0b59435 RSI: ffffffff81acf66b RDI: 0000000000000282
RBP: ffff8801a650f8c0 R08: ffff8801a650f240 R09: ffff8801a650f238
R10: ffff8801a650f1b0 R11: 1ffff1003846e2fb R12: 1ffff10034ca1eff
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
 fs_reclaim_acquire.part.85+0x24/0x30 mm/page_alloc.c:3546
 fs_reclaim_acquire+0x14/0x20 mm/page_alloc.c:3547
 slab_pre_alloc_hook mm/slab.h:417 [inline]
 slab_alloc mm/slab.c:3383 [inline]
 kmem_cache_alloc+0x29/0x760 mm/slab.c:3559
 kmem_cache_zalloc include/linux/slab.h:656 [inline]
 get_empty_filp+0xfb/0x4f0 fs/file_table.c:123
 path_openat+0xed/0x3520 fs/namei.c:3496
 do_filp_open+0x25b/0x3b0 fs/namei.c:3554
 do_sys_open+0x502/0x6d0 fs/open.c:1059
 SYSC_open fs/open.c:1077 [inline]
 SyS_open+0x2d/0x40 fs/open.c:1072
 entry_SYSCALL_64_fastpath+0x1f/0xbe
RIP: 0033:0x7f423cfd11a7
RSP: 002b:00007ffeb9f7f8f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 000055c27409b5c1 RCX: 00007f423cfd11a7
RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f423cfd5282
RBP: 0000000000000082 R08: 00007f423d1dc570 R09: 0000000000000000
R10: ffffffffffffffb0 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000002 R14: 00007f423d1dcbc8 R15: 000000000000000f
Code: ff e8 ad b3 95 fd e9 4b fb ff ff 48 8b bd a0 fe ff ff e8 fc b3 95 fd e9 fc f8 ff ff e8 f2 b3 95 fd e9 53 f6 ff ff e8 b8 b2 61 fd <0f> 0b e8 e1 b3 95 fd e9 9e e5 ff ff 4c 89 e7 e8 74 b3 95 fd e9 
RIP: __tcp_retransmit_skb+0x1d18/0x1fa0 net/ipv4/tcp_output.c:2817 RSP: ffff8801db3072a8
---[ end trace 759cb07f4feb13fa ]---