BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor6/6165
caller is __this_cpu_preempt_check+0x13/0x20 /syzkaller/managers/android-44-kasan-gce/kernel/lib/smp_processor_id.c:62
CPU: 0 PID: 6165 Comm: syz-executor6 Not tainted 4.4.104-ged884eb #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 817c5e0c1bcf29bb ffff8800b80cf5e0 ffffffff81cc9b0f
 0000000000000000 ffffffff839fd4a0 ffff8800b80cf620 ffffffff81d28d18
 ffffffff83cecfa0 1ffff10017019ecb ffff8801d6faafc0 ffff8801d6921680
Call Trace:
 [<ffffffff81cc9b0f>] __dump_stack /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:15 [inline]
 [<ffffffff81cc9b0f>] dump_stack+0x8e/0xcf /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:51
 [<ffffffff81d28d18>] check_preemption_disabled+0x1b8/0x1f0 /syzkaller/managers/android-44-kasan-gce/kernel/lib/smp_processor_id.c:46
 [<ffffffff81d28d83>] __this_cpu_preempt_check+0x13/0x20 /syzkaller/managers/android-44-kasan-gce/kernel/lib/smp_processor_id.c:62
 [<ffffffff830dc870>] tcp_try_coalesce+0x200/0x4b0 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp_input.c:4278
 [<ffffffff830e635e>] tcp_queue_rcv+0xfe/0x720 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp_input.c:4485
 [<ffffffff831005c1>] tcp_send_rcvq+0x391/0x4a0 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp_input.c:4531
 [<ffffffff830d27bc>] tcp_sendmsg+0x1d1c/0x36a0 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp.c:1134
 [<ffffffff8319093c>] inet_sendmsg+0x26c/0x430 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/af_inet.c:755
 [<ffffffff82d946f5>] sock_sendmsg_nosec /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:625 [inline]
 [<ffffffff82d946f5>] sock_sendmsg+0xb5/0xf0 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:635
 [<ffffffff82d95e1d>] ___sys_sendmsg+0x2bd/0x7d0 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:1961
 [<ffffffff82d98105>] __sys_sendmmsg+0xf5/0x260 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:2046
 [<ffffffff82d9827d>] SYSC_sendmmsg /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:2076 [inline]
 [<ffffffff82d9827d>] SyS_sendmmsg+0xd/0x20 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:2071
 [<ffffffff8374b236>] entry_SYSCALL_64_fastpath+0x16/0x76
netlink: 13 bytes leftover after parsing attributes in process `syz-executor4'.
netlink: 13 bytes leftover after parsing attributes in process `syz-executor4'.
BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor1/6479
caller is __this_cpu_preempt_check+0x13/0x20 /syzkaller/managers/android-44-kasan-gce/kernel/lib/smp_processor_id.c:62
CPU: 1 PID: 6479 Comm: syz-executor1 Not tainted 4.4.104-ged884eb #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 8eb62f4eb182c5e3 ffff8800b95b75e0 ffffffff81cc9b0f
 0000000000000001 ffffffff839fd4a0 ffff8800b95b7620 ffffffff81d28d18
 ffffffff83cecfa0 1ffff100172b6ecb ffff8801d6920d80 ffff8801d6921680
Call Trace:
 [<ffffffff81cc9b0f>] __dump_stack /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:15 [inline]
 [<ffffffff81cc9b0f>] dump_stack+0x8e/0xcf /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:51
 [<ffffffff81d28d18>] check_preemption_disabled+0x1b8/0x1f0 /syzkaller/managers/android-44-kasan-gce/kernel/lib/smp_processor_id.c:46
 [<ffffffff81d28d83>] __this_cpu_preempt_check+0x13/0x20 /syzkaller/managers/android-44-kasan-gce/kernel/lib/smp_processor_id.c:62
 [<ffffffff830dc870>] tcp_try_coalesce+0x200/0x4b0 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp_input.c:4278
 [<ffffffff830e635e>] tcp_queue_rcv+0xfe/0x720 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp_input.c:4485
 [<ffffffff831005c1>] tcp_send_rcvq+0x391/0x4a0 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp_input.c:4531
 [<ffffffff830d27bc>] tcp_sendmsg+0x1d1c/0x36a0 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp.c:1134
 [<ffffffff8319093c>] inet_sendmsg+0x26c/0x430 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/af_inet.c:755
 [<ffffffff82d946f5>] sock_sendmsg_nosec /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:625 [inline]
 [<ffffffff82d946f5>] sock_sendmsg+0xb5/0xf0 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:635
 [<ffffffff82d95e1d>] ___sys_sendmsg+0x2bd/0x7d0 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:1961
 [<ffffffff82d98105>] __sys_sendmmsg+0xf5/0x260 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:2046
 [<ffffffff82d9827d>] SYSC_sendmmsg /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:2076 [inline]
 [<ffffffff82d9827d>] SyS_sendmmsg+0xd/0x20 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:2071
 [<ffffffff8374b236>] entry_SYSCALL_64_fastpath+0x16/0x76
BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor5/6501
caller is __this_cpu_preempt_check+0x13/0x20 /syzkaller/managers/android-44-kasan-gce/kernel/lib/smp_processor_id.c:62
CPU: 1 PID: 6501 Comm: syz-executor5 Not tainted 4.4.104-ged884eb #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 79ce825718d0b88a ffff8800b411f5e0 ffffffff81cc9b0f
 0000000000000001 ffffffff839fd4a0 ffff8800b411f620 ffffffff81d28d18
 ffffffff83cecfa0 1ffff10016823ecb ffff8801d6920d80 ffff8801d6920b40
Call Trace:
 [<ffffffff81cc9b0f>] __dump_stack /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:15 [inline]
 [<ffffffff81cc9b0f>] dump_stack+0x8e/0xcf /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:51
 [<ffffffff81d28d18>] check_preemption_disabled+0x1b8/0x1f0 /syzkaller/managers/android-44-kasan-gce/kernel/lib/smp_processor_id.c:46
 [<ffffffff81d28d83>] __this_cpu_preempt_check+0x13/0x20 /syzkaller/managers/android-44-kasan-gce/kernel/lib/smp_processor_id.c:62
 [<ffffffff830dc870>] tcp_try_coalesce+0x200/0x4b0 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp_input.c:4278
 [<ffffffff830e635e>] tcp_queue_rcv+0xfe/0x720 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp_input.c:4485
 [<ffffffff831005c1>] tcp_send_rcvq+0x391/0x4a0 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp_input.c:4531
 [<ffffffff830d27bc>] tcp_sendmsg+0x1d1c/0x36a0 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/tcp.c:1134
 [<ffffffff8319093c>] inet_sendmsg+0x26c/0x430 /syzkaller/managers/android-44-kasan-gce/kernel/net/ipv4/af_inet.c:755
 [<ffffffff82d946f5>] sock_sendmsg_nosec /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:625 [inline]
 [<ffffffff82d946f5>] sock_sendmsg+0xb5/0xf0 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:635
 [<ffffffff82d95e1d>] ___sys_sendmsg+0x2bd/0x7d0 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:1961
 [<ffffffff82d98105>] __sys_sendmmsg+0xf5/0x260 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:2046
 [<ffffffff82d9827d>] SYSC_sendmmsg /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:2076 [inline]
 [<ffffffff82d9827d>] SyS_sendmmsg+0xd/0x20 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:2071
 [<ffffffff8374b236>] entry_SYSCALL_64_fastpath+0x16/0x76
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
device gre0 entered promiscuous mode
audit: type=1400 audit(1512778436.350:20): avc:  denied  { write } for  pid=6552 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1
device gre0 entered promiscuous mode
audit: type=1400 audit(1512778436.400:21): avc:  denied  { ioctl } for  pid=6552 comm="syz-executor5" path="socket:[30853]" dev="sockfs" ino=30853 ioctlcmd=540c scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1
audit: type=1400 audit(1512778436.430:22): avc:  denied  { getopt } for  pid=6552 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1
device gre0 entered promiscuous mode
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 6723 Comm: syz-executor5 Not tainted 4.4.104-ged884eb #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 9d444ab713a77919 ffff8801d6a6f5a0 ffffffff81cc9b0f
 1ffff1003ad4debf 0000000000000030 ffff8801d6a6f740 ffffffff815db6db
 ffff8801d7638660 ffff8801d7638660 ffff8801d7638660 ffff8801d6a6f718
Call Trace:
 [<ffffffff81cc9b0f>] __dump_stack /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:15 [inline]
 [<ffffffff81cc9b0f>] dump_stack+0x8e/0xcf /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:51
 [<ffffffff815db6db>] handle_userfault+0x75b/0x1570 /syzkaller/managers/android-44-kasan-gce/kernel/fs/userfaultfd.c:316
 [<ffffffff81481ec1>] do_anonymous_page /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:2731 [inline]
 [<ffffffff81481ec1>] handle_pte_fault /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:3295 [inline]
 [<ffffffff81481ec1>] __handle_mm_fault /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:3426 [inline]
 [<ffffffff81481ec1>] handle_mm_fault+0x2731/0x39b0 /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:3455
 [<ffffffff810d7b90>] __do_page_fault+0x2d0/0x910 /syzkaller/managers/android-44-kasan-gce/kernel/arch/x86/mm/fault.c:1245
 [<ffffffff810d81f2>] do_page_fault+0x22/0x30 /syzkaller/managers/android-44-kasan-gce/kernel/arch/x86/mm/fault.c:1308
 [<ffffffff8374d318>] page_fault+0x28/0x30 /syzkaller/managers/android-44-kasan-gce/kernel/arch/x86/entry/entry_64.S:985
 [<ffffffff814004d2>] generic_perform_write+0x1e2/0x500 /syzkaller/managers/android-44-kasan-gce/kernel/mm/filemap.c:2540
 [<ffffffff81406480>] __generic_file_write_iter+0x2f0/0x500 /syzkaller/managers/android-44-kasan-gce/kernel/mm/filemap.c:2675
 [<ffffffff81406913>] generic_file_write_iter+0x283/0x720 /syzkaller/managers/android-44-kasan-gce/kernel/mm/filemap.c:2703
 [<ffffffff814f72f1>] new_sync_write /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:478 [inline]
 [<ffffffff814f72f1>] __vfs_write+0x2a1/0x3f0 /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:491
 [<ffffffff814f8d8b>] vfs_write+0x14b/0x520 /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:538
 [<ffffffff814fb513>] SYSC_write /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:585 [inline]
 [<ffffffff814fb513>] SyS_write+0xd3/0x1c0 /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:577
 [<ffffffff8374b236>] entry_SYSCALL_64_fastpath+0x16/0x76
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 6723 Comm: syz-executor5 Not tainted 4.4.104-ged884eb #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 9d444ab713a77919 ffff8801d6a6f5a0 ffffffff81cc9b0f
 1ffff1003ad4debf 0000000000000030 ffff8801d6a6f740 ffffffff815db6db
 ffff8801d7638660 ffff8801d7638660 ffff8801d7638660 ffff8801d6a6f718
Call Trace:
 [<ffffffff81cc9b0f>] __dump_stack /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:15 [inline]
 [<ffffffff81cc9b0f>] dump_stack+0x8e/0xcf /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:51
 [<ffffffff815db6db>] handle_userfault+0x75b/0x1570 /syzkaller/managers/android-44-kasan-gce/kernel/fs/userfaultfd.c:316
 [<ffffffff81481ec1>] do_anonymous_page /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:2731 [inline]
 [<ffffffff81481ec1>] handle_pte_fault /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:3295 [inline]
 [<ffffffff81481ec1>] __handle_mm_fault /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:3426 [inline]
 [<ffffffff81481ec1>] handle_mm_fault+0x2731/0x39b0 /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:3455
 [<ffffffff810d7b90>] __do_page_fault+0x2d0/0x910 /syzkaller/managers/android-44-kasan-gce/kernel/arch/x86/mm/fault.c:1245
 [<ffffffff810d81f2>] do_page_fault+0x22/0x30 /syzkaller/managers/android-44-kasan-gce/kernel/arch/x86/mm/fault.c:1308
 [<ffffffff8374d318>] page_fault+0x28/0x30 /syzkaller/managers/android-44-kasan-gce/kernel/arch/x86/entry/entry_64.S:985
 [<ffffffff814004d2>] generic_perform_write+0x1e2/0x500 /syzkaller/managers/android-44-kasan-gce/kernel/mm/filemap.c:2540
 [<ffffffff81406480>] __generic_file_write_iter+0x2f0/0x500 /syzkaller/managers/android-44-kasan-gce/kernel/mm/filemap.c:2675
 [<ffffffff81406913>] generic_file_write_iter+0x283/0x720 /syzkaller/managers/android-44-kasan-gce/kernel/mm/filemap.c:2703
 [<ffffffff814f72f1>] new_sync_write /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:478 [inline]
 [<ffffffff814f72f1>] __vfs_write+0x2a1/0x3f0 /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:491
 [<ffffffff814f8d8b>] vfs_write+0x14b/0x520 /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:538
 [<ffffffff814fb513>] SYSC_write /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:585 [inline]
 [<ffffffff814fb513>] SyS_write+0xd3/0x1c0 /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:577
 [<ffffffff8374b236>] entry_SYSCALL_64_fastpath+0x16/0x76
audit: type=1400 audit(1512778437.640:23): avc:  denied  { create } for  pid=6902 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
audit: type=1400 audit(1512778437.710:24): avc:  denied  { write } for  pid=6902 comm="syz-executor3" path="socket:[31007]" dev="sockfs" ino=31007 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
FAULT_FLAG_ALLOW_RETRY missing 30
CPU: 0 PID: 6930 Comm: syz-executor1 Not tainted 4.4.104-ged884eb #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
 0000000000000000 e1af4578a932bebf ffff8800b40975a0 ffffffff81cc9b0f
 1ffff10016812ebf 0000000000000030 ffff8800b4097740 ffffffff815db6db
 ffff8801d76380a0[  107.985352] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'.
 ffff8801d76380a0 ffff8801d76380a0 ffff8800b4097718
Call Trace:
 [<ffffffff81cc9b0f>] __dump_stack /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:15 [inline]
 [<ffffffff81cc9b0f>] dump_stack+0x8e/0xcf /syzkaller/managers/android-44-kasan-gce/kernel/lib/dump_stack.c:51
 [<ffffffff815db6db>] handle_userfault+0x75b/0x1570 /syzkaller/managers/android-44-kasan-gce/kernel/fs/userfaultfd.c:316
netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'.
 [<ffffffff81481ec1>] do_anonymous_page /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:2731 [inline]
 [<ffffffff81481ec1>] handle_pte_fault /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:3295 [inline]
 [<ffffffff81481ec1>] __handle_mm_fault /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:3426 [inline]
 [<ffffffff81481ec1>] handle_mm_fault+0x2731/0x39b0 /syzkaller/managers/android-44-kasan-gce/kernel/mm/memory.c:3455
 [<ffffffff810d7b90>] __do_page_fault+0x2d0/0x910 /syzkaller/managers/android-44-kasan-gce/kernel/arch/x86/mm/fault.c:1245
 [<ffffffff810d81f2>] do_page_fault+0x22/0x30 /syzkaller/managers/android-44-kasan-gce/kernel/arch/x86/mm/fault.c:1308
 [<ffffffff8374d318>] page_fault+0x28/0x30 /syzkaller/managers/android-44-kasan-gce/kernel/arch/x86/entry/entry_64.S:985
 [<ffffffff814004d2>] generic_perform_write+0x1e2/0x500 /syzkaller/managers/android-44-kasan-gce/kernel/mm/filemap.c:2540
 [<ffffffff81406480>] __generic_file_write_iter+0x2f0/0x500 /syzkaller/managers/android-44-kasan-gce/kernel/mm/filemap.c:2675
 [<ffffffff81406913>] generic_file_write_iter+0x283/0x720 /syzkaller/managers/android-44-kasan-gce/kernel/mm/filemap.c:2703
 [<ffffffff814f72f1>] new_sync_write /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:478 [inline]
 [<ffffffff814f72f1>] __vfs_write+0x2a1/0x3f0 /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:491
 [<ffffffff814f8d8b>] vfs_write+0x14b/0x520 /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:538
 [<ffffffff814fb513>] SYSC_write /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:585 [inline]
 [<ffffffff814fb513>] SyS_write+0xd3/0x1c0 /syzkaller/managers/android-44-kasan-gce/kernel/fs/read_write.c:577
 [<ffffffff8374b236>] entry_SYSCALL_64_fastpath+0x16/0x76
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
netlink: 13 bytes leftover after parsing attributes in process `syz-executor3'.
netlink: 13 bytes leftover after parsing attributes in process `syz-executor3'.
device gre0 entered promiscuous mode
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
kasan: CONFIG_KASAN_INLINE enabled
kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 7657 Comm: syz-executor1 Not tainted 4.4.104-ged884eb #2
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff8800b41bdf00 task.stack: ffff8801d4bf8000
RIP: 0010:[<ffffffff82f317ef>]  [<ffffffff82f317ef>] netlink_getsockbyportid /syzkaller/managers/android-44-kasan-gce/kernel/net/netlink/af_netlink.c:1058 [inline]
RIP: 0010:[<ffffffff82f317ef>]  [<ffffffff82f317ef>] netlink_unicast+0x18f/0x760 /syzkaller/managers/android-44-kasan-gce/kernel/net/netlink/af_netlink.c:1243
RSP: 0018:ffff8801d4bff788  EFLAGS: 00010286
RAX: dffffc0000000048 RBX: 0000000000000000 RCX: 0000000000000030
RDX: 1ffff100168139cb RSI: 00000000024000c0 RDI: ffff8800b409ce58
RBP: ffff8801d4bff850 R08: 0000000000000003 R09: ffffed00168190d0
R10: ffff8800b40c8687 R11: ffffed00168190d1 R12: dffffc0000000000
R13: ffff8800b409cd80 R14: 0000000000000040 R15: ffff8801d4bff828
FS:  00007f1968c14700(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffdbeff9fd0 CR3: 00000001d6a63000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Stack:
 ffff8800b40c8720 1ffff1003a97fef9 0000000000000240 0000000000000030
 1ffff1003a97fef9 dffffc0000000006 dffffc0000000048 ffff880000000f43
 0000000041b58ab3 ffffffff83ffc7ee ffffffff82f31660 ffffffff814daa66
Call Trace:
 [<ffffffff82f32b83>] netlink_ack+0x203/0x480 /syzkaller/managers/android-44-kasan-gce/kernel/net/netlink/af_netlink.c:2278
 [<ffffffff82f40553>] nfnetlink_rcv_batch /syzkaller/managers/android-44-kasan-gce/kernel/net/netfilter/nfnetlink.c:319 [inline]
 [<ffffffff82f40553>] nfnetlink_rcv+0x953/0xfe0 /syzkaller/managers/android-44-kasan-gce/kernel/net/netfilter/nfnetlink.c:477
 [<ffffffff82f31b25>] netlink_unicast_kernel /syzkaller/managers/android-44-kasan-gce/kernel/net/netlink/af_netlink.c:1223 [inline]
 [<ffffffff82f31b25>] netlink_unicast+0x4c5/0x760 /syzkaller/managers/android-44-kasan-gce/kernel/net/netlink/af_netlink.c:1249
 [<ffffffff82f325f2>] netlink_sendmsg+0x832/0xbc0 /syzkaller/managers/android-44-kasan-gce/kernel/net/netlink/af_netlink.c:1803
 [<ffffffff82d946f5>] sock_sendmsg_nosec /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:625 [inline]
 [<ffffffff82d946f5>] sock_sendmsg+0xb5/0xf0 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:635
 [<ffffffff82d961cd>] ___sys_sendmsg+0x66d/0x7d0 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:1961
 [<ffffffff82d97f53>] __sys_sendmsg+0xc3/0x160 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:1995
 [<ffffffff82d97ffd>] SYSC_sendmsg /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:2006 [inline]
 [<ffffffff82d97ffd>] SyS_sendmsg+0xd/0x20 /syzkaller/managers/android-44-kasan-gce/kernel/net/socket.c:2002
 [<ffffffff8374b236>] entry_SYSCALL_64_fastpath+0x16/0x76
Code: ff 85 c0 0f 85 91 03 00 00 49 8d 57 c0 48 89 d9 4c 89 ee 4c 89 f7 e8 71 f6 ff ff 83 f8 01 0f 85 c4 03 00 00 48 8b 85 68 ff ff ff <0f> b6 00 84 c0 74 08 3c 03 0f 8e 90 05 00 00 48 8b 85 60 ff ff 
RIP  [<ffffffff82f317ef>] netlink_getsockbyportid /syzkaller/managers/android-44-kasan-gce/kernel/net/netlink/af_netlink.c:1058 [inline]
RIP  [<ffffffff82f317ef>] netlink_unicast+0x18f/0x760 /syzkaller/managers/android-44-kasan-gce/kernel/net/netlink/af_netlink.c:1243
 RSP <ffff8801d4bff788>
---[ end trace b66068137acdcb1d ]---