Warning: Permanently added '[localhost]:26591' (ED25519) to the list of known hosts. 2025/07/15 11:57:16 ignoring optional flag "sandboxArg"="0" syzkaller login: [ 92.040148][ T9] cfg80211: failed to load regulatory.db 2025/07/15 11:57:18 parsed 1 programs [ 95.029005][ T5334] cgroup: Unknown subsys name 'net' [ 95.116403][ T5334] cgroup: Unknown subsys name 'cpuset' [ 95.124050][ T5334] cgroup: Unknown subsys name 'rlimit' [ 96.806186][ T5334] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.937979][ T5350] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.983947][ T5382] chnl_net:caif_netlink_parms(): no params data found [ 103.056946][ T5382] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.061157][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.066809][ T5382] bridge_slave_0: entered allmulticast mode [ 103.071295][ T5382] bridge_slave_0: entered promiscuous mode [ 103.081212][ T5382] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.086512][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.089874][ T5382] bridge_slave_1: entered allmulticast mode [ 103.094623][ T5382] bridge_slave_1: entered promiscuous mode [ 103.122130][ T5382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.131566][ T5382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.162105][ T5382] team0: Port device team_slave_0 added [ 103.167989][ T5382] team0: Port device team_slave_1 added [ 103.192028][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.195795][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.207437][ T5382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.216276][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.219436][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.231612][ T5382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.268109][ T5382] hsr_slave_0: entered promiscuous mode [ 103.273820][ T5382] hsr_slave_1: entered promiscuous mode [ 103.439100][ T5382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.450842][ T5382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.460938][ T5382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.468972][ T5382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.505907][ T5382] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.509313][ T5382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.513392][ T5382] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.516621][ T5382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.584602][ T5382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.599955][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.608427][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.620888][ T5382] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.636951][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.641508][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.660112][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.663864][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.857706][ T5382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.909196][ T5382] veth0_vlan: entered promiscuous mode [ 103.919489][ T5382] veth1_vlan: entered promiscuous mode [ 103.952005][ T5382] veth0_macvtap: entered promiscuous mode [ 103.960796][ T5382] veth1_macvtap: entered promiscuous mode [ 103.978794][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.990875][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.000536][ T5382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.005385][ T5382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.009401][ T5382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.015854][ T5382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.195744][ T1152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.255807][ T1152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.313821][ T1152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.374988][ T1152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.988980][ T5413] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.994280][ T5413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.998176][ T5413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.002111][ T5413] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.007216][ T5413] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.041347][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.046033][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.084630][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.088182][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.669650][ T1152] bridge_slave_1: left allmulticast mode [ 106.686232][ T1152] bridge_slave_1: left promiscuous mode [ 106.690599][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state 2025/07/15 11:57:33 executed programs: 0 [ 106.765898][ T1152] bridge_slave_0: left allmulticast mode [ 106.768752][ T1152] bridge_slave_0: left promiscuous mode [ 106.772168][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.800534][ T4690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.805714][ T4690] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.809368][ T4690] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.814368][ T4690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.821310][ T4690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.461216][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.474711][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.485143][ T1152] bond0 (unregistering): Released all slaves [ 107.632180][ T1152] hsr_slave_0: left promiscuous mode [ 107.636145][ T1152] hsr_slave_1: left promiscuous mode [ 107.647626][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.650863][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.664939][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.668251][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.694175][ T1152] veth1_macvtap: left promiscuous mode [ 107.697130][ T1152] veth0_macvtap: left promiscuous mode [ 107.700501][ T1152] veth1_vlan: left promiscuous mode [ 107.723250][ T1152] veth0_vlan: left promiscuous mode [ 108.299587][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 108.323875][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 108.904287][ T4690] Bluetooth: hci0: command tx timeout [ 109.058496][ T5438] chnl_net:caif_netlink_parms(): no params data found [ 109.736882][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.742074][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.751476][ T5438] bridge_slave_0: entered allmulticast mode [ 109.772871][ T5438] bridge_slave_0: entered promiscuous mode [ 109.843908][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.847548][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.850859][ T5438] bridge_slave_1: entered allmulticast mode [ 109.893142][ T5438] bridge_slave_1: entered promiscuous mode [ 110.043497][ T5438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.049946][ T5438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.145863][ T5438] team0: Port device team_slave_0 added [ 110.164787][ T5438] team0: Port device team_slave_1 added [ 110.246314][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.249188][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.264859][ T5438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.314585][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.317677][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.333639][ T5438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.415929][ T5438] hsr_slave_0: entered promiscuous mode [ 110.419468][ T5438] hsr_slave_1: entered promiscuous mode [ 110.983844][ T4690] Bluetooth: hci0: command tx timeout [ 111.020251][ T5438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.035972][ T5438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.051940][ T5438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.075622][ T5438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.236891][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.266609][ T5438] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.288583][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.291811][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.316009][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.319540][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.684814][ T5438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.762106][ T5438] veth0_vlan: entered promiscuous mode [ 111.784677][ T5438] veth1_vlan: entered promiscuous mode [ 111.849888][ T5438] veth0_macvtap: entered promiscuous mode [ 111.865742][ T5438] veth1_macvtap: entered promiscuous mode [ 111.906322][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.918367][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.947820][ T5438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.962908][ T5438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.967243][ T5438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.983040][ T5438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.110249][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.120982][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.184771][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.190419][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/15 11:57:38 executed programs: 2 [ 112.300819][ T5498] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 112.324442][ T5498] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5498, name: syz.0.16 [ 112.328732][ T5498] 3 locks held by syz.0.16/5498: [ 112.331029][ T5498] #0: ffff8880338d9d58 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 112.347259][ T5498] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 112.351887][ T5498] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 112.364364][ T5498] CPU: 0 UID: 0 PID: 5498 Comm: syz.0.16 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 112.364384][ T5498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.364391][ T5498] Call Trace: [ 112.364396][ T5498] [ 112.364402][ T5498] dump_stack_lvl+0x189/0x250 [ 112.364425][ T5498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.364441][ T5498] ? ipt_do_table+0x13dd/0x1640 [ 112.364459][ T5498] ? print_lock_name+0xde/0x100 [ 112.364478][ T5498] __cant_migrate+0x238/0x2e0 [ 112.364489][ T5498] ? __pfx___cant_migrate+0x10/0x10 [ 112.364504][ T5498] nf_hook_run_bpf+0x8f/0x1f0 [ 112.364516][ T5498] ? __pfx_ipt_do_table+0x10/0x10 [ 112.364524][ T5498] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 112.364534][ T5498] ? iptable_mangle_hook+0x189/0x4c0 [ 112.364545][ T5498] ? nf_hook+0x9d/0x380 [ 112.364554][ T5498] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 112.364564][ T5498] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 112.364590][ T5498] nf_hook_slow+0xc2/0x220 [ 112.364608][ T5498] nf_hook+0x217/0x380 [ 112.364627][ T5498] ? nf_hook+0x9d/0x380 [ 112.364642][ T5498] ? __pfx_nf_hook+0x10/0x10 [ 112.364656][ T5498] ? __pfx_ip_finish_output+0x10/0x10 [ 112.364671][ T5498] ip_output+0x16c/0x220 [ 112.364685][ T5498] ? __pfx_ip_finish_output+0x10/0x10 [ 112.364702][ T5498] ? __ip_queue_xmit+0x63/0x1b00 [ 112.364717][ T5498] __ip_queue_xmit+0x1101/0x1b00 [ 112.364734][ T5498] ? __pfx___tcp_select_window+0x10/0x10 [ 112.364752][ T5498] ? __ip_queue_xmit+0x63/0x1b00 [ 112.364770][ T5498] ? __pfx_ip_queue_xmit+0x10/0x10 [ 112.364782][ T5498] __tcp_transmit_skb+0x225c/0x36c0 [ 112.364804][ T5498] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 112.364828][ T5498] ? tcp_small_queue_check+0x1c1/0x3b0 [ 112.364847][ T5498] tcp_write_xmit+0x1862/0x67f0 [ 112.364898][ T5498] __tcp_push_pending_frames+0x97/0x360 [ 112.364912][ T5498] ? tcp_push+0x41d/0x660 [ 112.364924][ T5498] tcp_sendmsg_locked+0x4b52/0x5710 [ 112.364978][ T5498] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 112.364988][ T5498] ? __local_bh_enable_ip+0x12d/0x1c0 [ 112.365005][ T5498] ? __local_bh_enable_ip+0x12d/0x1c0 [ 112.365027][ T5498] tcp_sendmsg+0x2f/0x50 [ 112.365038][ T5498] __sock_sendmsg+0xe5/0x270 [ 112.365055][ T5498] ____sys_sendmsg+0x505/0x830 [ 112.365075][ T5498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.365097][ T5498] ? import_iovec+0x74/0xa0 [ 112.365191][ T5498] ___sys_sendmsg+0x21f/0x2a0 [ 112.365209][ T5498] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.365235][ T5498] ? futex_wake+0x42b/0x500 [ 112.365315][ T5498] __x64_sys_sendmsg+0x19b/0x260 [ 112.365333][ T5498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.365358][ T5498] ? do_syscall_64+0xbe/0x3b0 [ 112.365409][ T5498] do_syscall_64+0xfa/0x3b0 [ 112.365419][ T5498] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.365439][ T5498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.365450][ T5498] ? clear_bhb_loop+0x60/0xb0 [ 112.365465][ T5498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.365477][ T5498] RIP: 0033:0x7f4144d8e929 [ 112.365490][ T5498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.365499][ T5498] RSP: 002b:00007ffce7c7c1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.365511][ T5498] RAX: ffffffffffffffda RBX: 00007f4144fb5fa0 RCX: 00007f4144d8e929 [ 112.365518][ T5498] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 112.365525][ T5498] RBP: 00007f4144e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 112.365531][ T5498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.365538][ T5498] R13: 00007f4144fb5fa0 R14: 00007f4144fb5fa0 R15: 0000000000000003 [ 112.365557][ T5498] [ 113.066562][ T4690] Bluetooth: hci0: command tx timeout [ 113.301362][ T5517] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 113.322458][ T5517] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5517, name: syz.0.29 [ 113.327041][ T5517] 3 locks held by syz.0.29/5517: [ 113.329214][ T5517] #0: ffff88803f0845d8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 113.346274][ T5517] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 113.350734][ T5517] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 113.372915][ T5517] CPU: 0 UID: 0 PID: 5517 Comm: syz.0.29 Tainted: G W 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 113.372937][ T5517] Tainted: [W]=WARN [ 113.372941][ T5517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.372947][ T5517] Call Trace: [ 113.372953][ T5517] [ 113.372959][ T5517] dump_stack_lvl+0x189/0x250 [ 113.372980][ T5517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.372995][ T5517] ? ipt_do_table+0x13dd/0x1640 [ 113.373011][ T5517] ? print_lock_name+0xde/0x100 [ 113.373030][ T5517] __cant_migrate+0x238/0x2e0 [ 113.373046][ T5517] ? __pfx___cant_migrate+0x10/0x10 [ 113.373069][ T5517] nf_hook_run_bpf+0x8f/0x1f0 [ 113.373086][ T5517] ? __pfx_ipt_do_table+0x10/0x10 [ 113.373098][ T5517] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 113.373113][ T5517] ? iptable_mangle_hook+0x189/0x4c0 [ 113.373128][ T5517] ? nf_hook+0x9d/0x380 [ 113.373141][ T5517] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 113.373154][ T5517] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 113.373170][ T5517] nf_hook_slow+0xc2/0x220 [ 113.373186][ T5517] nf_hook+0x217/0x380 [ 113.373203][ T5517] ? nf_hook+0x9d/0x380 [ 113.373217][ T5517] ? __pfx_nf_hook+0x10/0x10 [ 113.373233][ T5517] ? __pfx_ip_finish_output+0x10/0x10 [ 113.373255][ T5517] ip_output+0x16c/0x220 [ 113.373270][ T5517] ? __pfx_ip_finish_output+0x10/0x10 [ 113.373286][ T5517] ? __ip_queue_xmit+0x63/0x1b00 [ 113.373308][ T5517] __ip_queue_xmit+0x1101/0x1b00 [ 113.373329][ T5517] ? __pfx___tcp_select_window+0x10/0x10 [ 113.373345][ T5517] ? __ip_queue_xmit+0x63/0x1b00 [ 113.373362][ T5517] ? __pfx_ip_queue_xmit+0x10/0x10 [ 113.373378][ T5517] __tcp_transmit_skb+0x225c/0x36c0 [ 113.373409][ T5517] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 113.373434][ T5517] ? tcp_small_queue_check+0x1c1/0x3b0 [ 113.373452][ T5517] tcp_write_xmit+0x1862/0x67f0 [ 113.373500][ T5517] __tcp_push_pending_frames+0x97/0x360 [ 113.373515][ T5517] ? tcp_push+0x41d/0x660 [ 113.373526][ T5517] tcp_sendmsg_locked+0x4b52/0x5710 [ 113.373574][ T5517] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 113.373584][ T5517] ? __local_bh_enable_ip+0x12d/0x1c0 [ 113.373602][ T5517] ? __local_bh_enable_ip+0x12d/0x1c0 [ 113.373621][ T5517] tcp_sendmsg+0x2f/0x50 [ 113.373633][ T5517] __sock_sendmsg+0xe5/0x270 [ 113.373646][ T5517] ____sys_sendmsg+0x505/0x830 [ 113.373666][ T5517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.373686][ T5517] ? import_iovec+0x74/0xa0 [ 113.373703][ T5517] ___sys_sendmsg+0x21f/0x2a0 [ 113.373720][ T5517] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.373739][ T5517] ? futex_wake+0x42b/0x500 [ 113.373775][ T5517] __x64_sys_sendmsg+0x19b/0x260 [ 113.373792][ T5517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.373817][ T5517] ? do_syscall_64+0xbe/0x3b0 [ 113.373832][ T5517] do_syscall_64+0xfa/0x3b0 [ 113.373842][ T5517] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.373857][ T5517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.373868][ T5517] ? clear_bhb_loop+0x60/0xb0 [ 113.373883][ T5517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.373893][ T5517] RIP: 0033:0x7f4144d8e929 [ 113.373905][ T5517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.373914][ T5517] RSP: 002b:00007ffce7c7c1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.373928][ T5517] RAX: ffffffffffffffda RBX: 00007f4144fb5fa0 RCX: 00007f4144d8e929 [ 113.373936][ T5517] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 113.373942][ T5517] RBP: 00007f4144e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 113.373948][ T5517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.373955][ T5517] R13: 00007f4144fb5fa0 R14: 00007f4144fb5fa0 R15: 0000000000000003 [ 113.373972][ T5517] [ 114.297557][ T5540] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 114.301351][ T5540] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5540, name: syz.0.42 [ 114.323037][ T5540] 3 locks held by syz.0.42/5540: [ 114.325755][ T5540] #0: ffff888050036e58 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 114.331417][ T5540] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 114.352474][ T5540] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 114.357161][ T5540] CPU: 0 UID: 0 PID: 5540 Comm: syz.0.42 Tainted: G W 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 114.357185][ T5540] Tainted: [W]=WARN [ 114.357189][ T5540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.357198][ T5540] Call Trace: [ 114.357208][ T5540] [ 114.357216][ T5540] dump_stack_lvl+0x189/0x250 [ 114.357240][ T5540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.357258][ T5540] ? ipt_do_table+0x13dd/0x1640 [ 114.357278][ T5540] ? print_lock_name+0xde/0x100 [ 114.357367][ T5540] __cant_migrate+0x238/0x2e0 [ 114.357402][ T5540] ? __pfx___cant_migrate+0x10/0x10 [ 114.357429][ T5540] nf_hook_run_bpf+0x8f/0x1f0 [ 114.357458][ T5540] ? __pfx_ipt_do_table+0x10/0x10 [ 114.357475][ T5540] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 114.357495][ T5540] ? iptable_mangle_hook+0x189/0x4c0 [ 114.357511][ T5540] ? nf_hook+0x9d/0x380 [ 114.357528][ T5540] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 114.357543][ T5540] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 114.357570][ T5540] nf_hook_slow+0xc2/0x220 [ 114.357591][ T5540] nf_hook+0x217/0x380 [ 114.357613][ T5540] ? nf_hook+0x9d/0x380 [ 114.357630][ T5540] ? __pfx_nf_hook+0x10/0x10 [ 114.357650][ T5540] ? __pfx_ip_finish_output+0x10/0x10 [ 114.357678][ T5540] ip_output+0x16c/0x220 [ 114.357696][ T5540] ? __pfx_ip_finish_output+0x10/0x10 [ 114.357718][ T5540] ? __ip_queue_xmit+0x63/0x1b00 [ 114.357735][ T5540] __ip_queue_xmit+0x1101/0x1b00 [ 114.357754][ T5540] ? __pfx___tcp_select_window+0x10/0x10 [ 114.357775][ T5540] ? __ip_queue_xmit+0x63/0x1b00 [ 114.357797][ T5540] ? __pfx_ip_queue_xmit+0x10/0x10 [ 114.357815][ T5540] __tcp_transmit_skb+0x225c/0x36c0 [ 114.357858][ T5540] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 114.357891][ T5540] ? tcp_small_queue_check+0x1c1/0x3b0 [ 114.357914][ T5540] tcp_write_xmit+0x1862/0x67f0 [ 114.357968][ T5540] __tcp_push_pending_frames+0x97/0x360 [ 114.357986][ T5540] ? tcp_push+0x41d/0x660 [ 114.358002][ T5540] tcp_sendmsg_locked+0x4b52/0x5710 [ 114.358062][ T5540] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 114.358076][ T5540] ? __local_bh_enable_ip+0x12d/0x1c0 [ 114.358095][ T5540] ? __local_bh_enable_ip+0x12d/0x1c0 [ 114.358121][ T5540] tcp_sendmsg+0x2f/0x50 [ 114.358137][ T5540] __sock_sendmsg+0xe5/0x270 [ 114.358153][ T5540] ____sys_sendmsg+0x505/0x830 [ 114.358176][ T5540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.358202][ T5540] ? import_iovec+0x74/0xa0 [ 114.358222][ T5540] ___sys_sendmsg+0x21f/0x2a0 [ 114.358242][ T5540] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.358265][ T5540] ? futex_wake+0x42b/0x500 [ 114.358312][ T5540] __x64_sys_sendmsg+0x19b/0x260 [ 114.358332][ T5540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.358359][ T5540] ? do_syscall_64+0xbe/0x3b0 [ 114.358375][ T5540] do_syscall_64+0xfa/0x3b0 [ 114.358386][ T5540] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.358404][ T5540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.358416][ T5540] ? clear_bhb_loop+0x60/0xb0 [ 114.358432][ T5540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.358444][ T5540] RIP: 0033:0x7f4144d8e929 [ 114.358458][ T5540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.358468][ T5540] RSP: 002b:00007ffce7c7c1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.358484][ T5540] RAX: ffffffffffffffda RBX: 00007f4144fb5fa0 RCX: 00007f4144d8e929 [ 114.358492][ T5540] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 114.358498][ T5540] RBP: 00007f4144e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 114.358505][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.358511][ T5540] R13: 00007f4144fb5fa0 R14: 00007f4144fb5fa0 R15: 0000000000000003 [ 114.358532][ T5540] [ 115.144907][ T4690] Bluetooth: hci0: command tx timeout [ 115.313761][ T5566] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 115.318124][ T5566] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5566, name: syz.0.64 [ 115.325318][ T5566] 3 locks held by syz.0.64/5566: [ 115.327629][ T5566] #0: ffff8880327cd358 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 115.332073][ T5566] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 115.337527][ T5566] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 115.341604][ T5566] CPU: 0 UID: 0 PID: 5566 Comm: syz.0.64 Tainted: G W 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 115.341624][ T5566] Tainted: [W]=WARN [ 115.341628][ T5566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.341636][ T5566] Call Trace: [ 115.341644][ T5566] [ 115.341651][ T5566] dump_stack_lvl+0x189/0x250 [ 115.341673][ T5566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.341689][ T5566] ? ipt_do_table+0x13dd/0x1640 [ 115.341707][ T5566] ? print_lock_name+0xde/0x100 [ 115.341729][ T5566] __cant_migrate+0x238/0x2e0 [ 115.341747][ T5566] ? __pfx___cant_migrate+0x10/0x10 [ 115.341772][ T5566] nf_hook_run_bpf+0x8f/0x1f0 [ 115.341791][ T5566] ? __pfx_ipt_do_table+0x10/0x10 [ 115.341805][ T5566] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 115.341821][ T5566] ? iptable_mangle_hook+0x189/0x4c0 [ 115.341837][ T5566] ? nf_hook+0x9d/0x380 [ 115.341852][ T5566] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 115.341867][ T5566] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 115.341886][ T5566] nf_hook_slow+0xc2/0x220 [ 115.341905][ T5566] nf_hook+0x217/0x380 [ 115.341926][ T5566] ? nf_hook+0x9d/0x380 [ 115.341942][ T5566] ? __pfx_nf_hook+0x10/0x10 [ 115.341963][ T5566] ? __pfx_ip_finish_output+0x10/0x10 [ 115.341990][ T5566] ip_output+0x16c/0x220 [ 115.342007][ T5566] ? __pfx_ip_finish_output+0x10/0x10 [ 115.342027][ T5566] ? __ip_queue_xmit+0x63/0x1b00 [ 115.342044][ T5566] __ip_queue_xmit+0x1101/0x1b00 [ 115.342062][ T5566] ? __pfx___tcp_select_window+0x10/0x10 [ 115.342080][ T5566] ? __ip_queue_xmit+0x63/0x1b00 [ 115.342102][ T5566] ? __pfx_ip_queue_xmit+0x10/0x10 [ 115.342120][ T5566] __tcp_transmit_skb+0x225c/0x36c0 [ 115.342160][ T5566] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 115.342195][ T5566] ? tcp_small_queue_check+0x1c1/0x3b0 [ 115.342251][ T5566] tcp_write_xmit+0x1862/0x67f0 [ 115.342320][ T5566] __tcp_push_pending_frames+0x97/0x360 [ 115.342341][ T5566] ? tcp_push+0x41d/0x660 [ 115.342356][ T5566] tcp_sendmsg_locked+0x4b52/0x5710 [ 115.342419][ T5566] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 115.342432][ T5566] ? __local_bh_enable_ip+0x12d/0x1c0 [ 115.342452][ T5566] ? __local_bh_enable_ip+0x12d/0x1c0 [ 115.342479][ T5566] tcp_sendmsg+0x2f/0x50 [ 115.342494][ T5566] __sock_sendmsg+0xe5/0x270 [ 115.342511][ T5566] ____sys_sendmsg+0x505/0x830 [ 115.342534][ T5566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.342560][ T5566] ? import_iovec+0x74/0xa0 [ 115.342602][ T5566] ___sys_sendmsg+0x21f/0x2a0 [ 115.342623][ T5566] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.342647][ T5566] ? futex_wake+0x42b/0x500 [ 115.342694][ T5566] __x64_sys_sendmsg+0x19b/0x260 [ 115.342714][ T5566] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.342740][ T5566] ? rcu_is_watching+0x15/0xb0 [ 115.342760][ T5566] ? do_syscall_64+0xbe/0x3b0 [ 115.342785][ T5566] do_syscall_64+0xfa/0x3b0 [ 115.342797][ T5566] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.342817][ T5566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.342830][ T5566] ? clear_bhb_loop+0x60/0xb0 [ 115.342847][ T5566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.342860][ T5566] RIP: 0033:0x7f4144d8e929 [ 115.342874][ T5566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.342885][ T5566] RSP: 002b:00007ffce7c7c1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.342901][ T5566] RAX: ffffffffffffffda RBX: 00007f4144fb5fa0 RCX: 00007f4144d8e929 [ 115.342910][ T5566] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 115.342918][ T5566] RBP: 00007f4144e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 115.342926][ T5566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.342934][ T5566] R13: 00007f4144fb5fa0 R14: 00007f4144fb5fa0 R15: 0000000000000003 [ 115.342955][ T5566] [ 116.315573][ T5604] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 116.319785][ T5604] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5604, name: syz.0.102 [ 116.324845][ T5604] 3 locks held by syz.0.102/5604: [ 116.327393][ T5604] #0: ffff888050031d58 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 116.333473][ T5604] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 116.337958][ T5604] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 116.342046][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: syz.0.102 Tainted: G W 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 116.342066][ T5604] Tainted: [W]=WARN [ 116.342070][ T5604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.342077][ T5604] Call Trace: [ 116.342087][ T5604] [ 116.342094][ T5604] dump_stack_lvl+0x189/0x250 [ 116.342116][ T5604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.342130][ T5604] ? ipt_do_table+0x13dd/0x1640 [ 116.342147][ T5604] ? print_lock_name+0xde/0x100 [ 116.342166][ T5604] __cant_migrate+0x238/0x2e0 [ 116.342182][ T5604] ? __pfx___cant_migrate+0x10/0x10 [ 116.342204][ T5604] nf_hook_run_bpf+0x8f/0x1f0 [ 116.342244][ T5604] ? __pfx_ipt_do_table+0x10/0x10 [ 116.342256][ T5604] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 116.342270][ T5604] ? iptable_mangle_hook+0x189/0x4c0 [ 116.342285][ T5604] ? nf_hook+0x9d/0x380 [ 116.342306][ T5604] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 116.342318][ T5604] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 116.342334][ T5604] nf_hook_slow+0xc2/0x220 [ 116.342352][ T5604] nf_hook+0x217/0x380 [ 116.342370][ T5604] ? nf_hook+0x9d/0x380 [ 116.342384][ T5604] ? __pfx_nf_hook+0x10/0x10 [ 116.342401][ T5604] ? __pfx_ip_finish_output+0x10/0x10 [ 116.342424][ T5604] ip_output+0x16c/0x220 [ 116.342438][ T5604] ? __pfx_ip_finish_output+0x10/0x10 [ 116.342455][ T5604] ? __ip_queue_xmit+0x63/0x1b00 [ 116.342469][ T5604] __ip_queue_xmit+0x1101/0x1b00 [ 116.342485][ T5604] ? __pfx___tcp_select_window+0x10/0x10 [ 116.342503][ T5604] ? __ip_queue_xmit+0x63/0x1b00 [ 116.342521][ T5604] ? __pfx_ip_queue_xmit+0x10/0x10 [ 116.342536][ T5604] __tcp_transmit_skb+0x225c/0x36c0 [ 116.342569][ T5604] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 116.342595][ T5604] ? tcp_small_queue_check+0x1c1/0x3b0 [ 116.342613][ T5604] tcp_write_xmit+0x1862/0x67f0 [ 116.342657][ T5604] __tcp_push_pending_frames+0x97/0x360 [ 116.342672][ T5604] ? tcp_push+0x41d/0x660 [ 116.342684][ T5604] tcp_sendmsg_locked+0x4b52/0x5710 [ 116.342733][ T5604] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 116.342743][ T5604] ? __local_bh_enable_ip+0x12d/0x1c0 [ 116.342759][ T5604] ? __local_bh_enable_ip+0x12d/0x1c0 [ 116.342779][ T5604] tcp_sendmsg+0x2f/0x50 [ 116.342791][ T5604] __sock_sendmsg+0xe5/0x270 [ 116.342805][ T5604] ____sys_sendmsg+0x505/0x830 [ 116.342822][ T5604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.342841][ T5604] ? import_iovec+0x74/0xa0 [ 116.342856][ T5604] ___sys_sendmsg+0x21f/0x2a0 [ 116.342872][ T5604] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.342890][ T5604] ? futex_wake+0x42b/0x500 [ 116.342925][ T5604] __x64_sys_sendmsg+0x19b/0x260 [ 116.342945][ T5604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.343010][ T5604] ? do_syscall_64+0xbe/0x3b0 [ 116.343028][ T5604] do_syscall_64+0xfa/0x3b0 [ 116.343040][ T5604] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.343059][ T5604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.343071][ T5604] ? clear_bhb_loop+0x60/0xb0 [ 116.343091][ T5604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.343104][ T5604] RIP: 0033:0x7f4144d8e929 [ 116.343118][ T5604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.343127][ T5604] RSP: 002b:00007ffce7c7c1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.343140][ T5604] RAX: ffffffffffffffda RBX: 00007f4144fb5fa0 RCX: 00007f4144d8e929 [ 116.343148][ T5604] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 116.343155][ T5604] RBP: 00007f4144e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 116.343161][ T5604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.343168][ T5604] R13: 00007f4144fb5fa0 R14: 00007f4144fb5fa0 R15: 0000000000000003 [ 116.343184][ T5604] [ 117.327968][ T5638] BUG: assuming non migratable context at ./include/linux/filter.h:703 2025/07/15 11:57:43 executed programs: 121 [ 117.337092][ T5638] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5638, name: syz.0.136 [ 117.341502][ T5638] 3 locks held by syz.0.136/5638: [ 117.344927][ T5638] #0: ffff88803f086e58 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 117.349387][ T5638] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 117.355259][ T5638] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 117.359275][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: syz.0.136 Tainted: G W 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 117.359297][ T5638] Tainted: [W]=WARN [ 117.359301][ T5638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.359309][ T5638] Call Trace: [ 117.359317][ T5638] [ 117.359324][ T5638] dump_stack_lvl+0x189/0x250 [ 117.359345][ T5638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.359358][ T5638] ? ipt_do_table+0x13dd/0x1640 [ 117.359376][ T5638] ? print_lock_name+0xde/0x100 [ 117.359394][ T5638] __cant_migrate+0x238/0x2e0 [ 117.359411][ T5638] ? __pfx___cant_migrate+0x10/0x10 [ 117.359431][ T5638] nf_hook_run_bpf+0x8f/0x1f0 [ 117.359471][ T5638] ? __pfx_ipt_do_table+0x10/0x10 [ 117.359485][ T5638] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 117.359499][ T5638] ? iptable_mangle_hook+0x189/0x4c0 [ 117.359520][ T5638] ? nf_hook+0x9d/0x380 [ 117.359535][ T5638] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 117.359546][ T5638] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 117.359563][ T5638] nf_hook_slow+0xc2/0x220 [ 117.359580][ T5638] nf_hook+0x217/0x380 [ 117.359597][ T5638] ? nf_hook+0x9d/0x380 [ 117.359611][ T5638] ? __pfx_nf_hook+0x10/0x10 [ 117.359628][ T5638] ? __pfx_ip_finish_output+0x10/0x10 [ 117.359650][ T5638] ip_output+0x16c/0x220 [ 117.359665][ T5638] ? __pfx_ip_finish_output+0x10/0x10 [ 117.359682][ T5638] ? __ip_queue_xmit+0x63/0x1b00 [ 117.359697][ T5638] __ip_queue_xmit+0x1101/0x1b00 [ 117.359712][ T5638] ? __pfx___tcp_select_window+0x10/0x10 [ 117.359730][ T5638] ? __ip_queue_xmit+0x63/0x1b00 [ 117.359747][ T5638] ? __pfx_ip_queue_xmit+0x10/0x10 [ 117.359762][ T5638] __tcp_transmit_skb+0x225c/0x36c0 [ 117.359793][ T5638] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 117.359819][ T5638] ? tcp_small_queue_check+0x1c1/0x3b0 [ 117.359836][ T5638] tcp_write_xmit+0x1862/0x67f0 [ 117.359881][ T5638] __tcp_push_pending_frames+0x97/0x360 [ 117.359896][ T5638] ? tcp_push+0x41d/0x660 [ 117.359908][ T5638] tcp_sendmsg_locked+0x4b52/0x5710 [ 117.359955][ T5638] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 117.359965][ T5638] ? __local_bh_enable_ip+0x12d/0x1c0 [ 117.359981][ T5638] ? __local_bh_enable_ip+0x12d/0x1c0 [ 117.360002][ T5638] tcp_sendmsg+0x2f/0x50 [ 117.360014][ T5638] __sock_sendmsg+0xe5/0x270 [ 117.360027][ T5638] ____sys_sendmsg+0x505/0x830 [ 117.360046][ T5638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.360066][ T5638] ? import_iovec+0x74/0xa0 [ 117.360083][ T5638] ___sys_sendmsg+0x21f/0x2a0 [ 117.360099][ T5638] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.360118][ T5638] ? futex_wake+0x42b/0x500 [ 117.360155][ T5638] __x64_sys_sendmsg+0x19b/0x260 [ 117.360171][ T5638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.360199][ T5638] ? do_syscall_64+0xbe/0x3b0 [ 117.360213][ T5638] do_syscall_64+0xfa/0x3b0 [ 117.360222][ T5638] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.360240][ T5638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.360250][ T5638] ? clear_bhb_loop+0x60/0xb0 [ 117.360264][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.360275][ T5638] RIP: 0033:0x7f4144d8e929 [ 117.360288][ T5638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.360297][ T5638] RSP: 002b:00007ffce7c7c1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.360312][ T5638] RAX: ffffffffffffffda RBX: 00007f4144fb5fa0 RCX: 00007f4144d8e929 [ 117.360320][ T5638] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 117.360327][ T5638] RBP: 00007f4144e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 117.360333][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.360339][ T5638] R13: 00007f4144fb5fa0 R14: 00007f4144fb5fa0 R15: 0000000000000003 [ 117.360357][ T5638] [ 118.325652][ T5673] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 118.329445][ T5673] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5673, name: syz.0.170 [ 118.334862][ T5673] 3 locks held by syz.0.170/5673: [ 118.337083][ T5673] #0: ffff888059f445d8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 118.341313][ T5673] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 118.346771][ T5673] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 118.350907][ T5673] CPU: 0 UID: 0 PID: 5673 Comm: syz.0.170 Tainted: G W 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 118.350926][ T5673] Tainted: [W]=WARN [ 118.350930][ T5673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.350937][ T5673] Call Trace: [ 118.350968][ T5673] [ 118.350974][ T5673] dump_stack_lvl+0x189/0x250 [ 118.350995][ T5673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.351010][ T5673] ? ipt_do_table+0x13dd/0x1640 [ 118.351034][ T5673] ? print_lock_name+0xde/0x100 [ 118.351053][ T5673] __cant_migrate+0x238/0x2e0 [ 118.351075][ T5673] ? __pfx___cant_migrate+0x10/0x10 [ 118.351096][ T5673] nf_hook_run_bpf+0x8f/0x1f0 [ 118.351113][ T5673] ? __pfx_ipt_do_table+0x10/0x10 [ 118.351126][ T5673] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 118.351141][ T5673] ? iptable_mangle_hook+0x189/0x4c0 [ 118.351156][ T5673] ? nf_hook+0x9d/0x380 [ 118.351170][ T5673] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 118.351183][ T5673] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 118.351203][ T5673] nf_hook_slow+0xc2/0x220 [ 118.351220][ T5673] nf_hook+0x217/0x380 [ 118.351237][ T5673] ? nf_hook+0x9d/0x380 [ 118.351251][ T5673] ? __pfx_nf_hook+0x10/0x10 [ 118.351267][ T5673] ? __pfx_ip_finish_output+0x10/0x10 [ 118.351305][ T5673] ip_output+0x16c/0x220 [ 118.351320][ T5673] ? __pfx_ip_finish_output+0x10/0x10 [ 118.351337][ T5673] ? __ip_queue_xmit+0x63/0x1b00 [ 118.351381][ T5673] __ip_queue_xmit+0x1101/0x1b00 [ 118.351397][ T5673] ? __pfx___tcp_select_window+0x10/0x10 [ 118.351416][ T5673] ? __ip_queue_xmit+0x63/0x1b00 [ 118.351433][ T5673] ? __pfx_ip_queue_xmit+0x10/0x10 [ 118.351448][ T5673] __tcp_transmit_skb+0x225c/0x36c0 [ 118.351483][ T5673] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 118.351509][ T5673] ? tcp_small_queue_check+0x1c1/0x3b0 [ 118.351529][ T5673] tcp_write_xmit+0x1862/0x67f0 [ 118.351575][ T5673] __tcp_push_pending_frames+0x97/0x360 [ 118.351591][ T5673] ? tcp_push+0x41d/0x660 [ 118.351603][ T5673] tcp_sendmsg_locked+0x4b52/0x5710 [ 118.351650][ T5673] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 118.351660][ T5673] ? __local_bh_enable_ip+0x12d/0x1c0 [ 118.351676][ T5673] ? __local_bh_enable_ip+0x12d/0x1c0 [ 118.351698][ T5673] tcp_sendmsg+0x2f/0x50 [ 118.351710][ T5673] __sock_sendmsg+0xe5/0x270 [ 118.351725][ T5673] ____sys_sendmsg+0x505/0x830 [ 118.351742][ T5673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.351762][ T5673] ? import_iovec+0x74/0xa0 [ 118.351792][ T5673] ___sys_sendmsg+0x21f/0x2a0 [ 118.351808][ T5673] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.351827][ T5673] ? futex_wake+0x42b/0x500 [ 118.351860][ T5673] __x64_sys_sendmsg+0x19b/0x260 [ 118.351877][ T5673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.351903][ T5673] ? do_syscall_64+0xbe/0x3b0 [ 118.351925][ T5673] do_syscall_64+0xfa/0x3b0 [ 118.351935][ T5673] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.351952][ T5673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.351963][ T5673] ? clear_bhb_loop+0x60/0xb0 [ 118.351978][ T5673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.351988][ T5673] RIP: 0033:0x7f4144d8e929 [ 118.352002][ T5673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.352013][ T5673] RSP: 002b:00007ffce7c7c1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.352025][ T5673] RAX: ffffffffffffffda RBX: 00007f4144fb5fa0 RCX: 00007f4144d8e929 [ 118.352033][ T5673] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 118.352040][ T5673] RBP: 00007f4144e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.352046][ T5673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.352053][ T5673] R13: 00007f4144fb5fa0 R14: 00007f4144fb5fa0 R15: 0000000000000003 [ 118.352072][ T5673] [ 119.329646][ T5711] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 119.336052][ T5711] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5711, name: syz.0.208 [ 119.340042][ T5711] 3 locks held by syz.0.208/5711: [ 119.342124][ T5711] #0: ffff88805142c5d8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 119.348760][ T5711] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 119.354201][ T5711] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 119.359999][ T5711] CPU: 0 UID: 0 PID: 5711 Comm: syz.0.208 Tainted: G W 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 119.360021][ T5711] Tainted: [W]=WARN [ 119.360025][ T5711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.360033][ T5711] Call Trace: [ 119.360038][ T5711] [ 119.360043][ T5711] dump_stack_lvl+0x189/0x250 [ 119.360066][ T5711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.360080][ T5711] ? ipt_do_table+0x13dd/0x1640 [ 119.360098][ T5711] ? print_lock_name+0xde/0x100 [ 119.360116][ T5711] __cant_migrate+0x238/0x2e0 [ 119.360132][ T5711] ? __pfx___cant_migrate+0x10/0x10 [ 119.360160][ T5711] nf_hook_run_bpf+0x8f/0x1f0 [ 119.360181][ T5711] ? __pfx_ipt_do_table+0x10/0x10 [ 119.360194][ T5711] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 119.360209][ T5711] ? iptable_mangle_hook+0x189/0x4c0 [ 119.360224][ T5711] ? nf_hook+0x9d/0x380 [ 119.360237][ T5711] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 119.360247][ T5711] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 119.360263][ T5711] nf_hook_slow+0xc2/0x220 [ 119.360279][ T5711] nf_hook+0x217/0x380 [ 119.360297][ T5711] ? nf_hook+0x9d/0x380 [ 119.360315][ T5711] ? __pfx_nf_hook+0x10/0x10 [ 119.360332][ T5711] ? __pfx_ip_finish_output+0x10/0x10 [ 119.360351][ T5711] ip_output+0x16c/0x220 [ 119.360361][ T5711] ? __pfx_ip_finish_output+0x10/0x10 [ 119.360372][ T5711] ? __ip_queue_xmit+0x63/0x1b00 [ 119.360386][ T5711] __ip_queue_xmit+0x1101/0x1b00 [ 119.360401][ T5711] ? __pfx___tcp_select_window+0x10/0x10 [ 119.360424][ T5711] ? __ip_queue_xmit+0x63/0x1b00 [ 119.360446][ T5711] ? __pfx_ip_queue_xmit+0x10/0x10 [ 119.360464][ T5711] __tcp_transmit_skb+0x225c/0x36c0 [ 119.360493][ T5711] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 119.360515][ T5711] ? tcp_small_queue_check+0x1c1/0x3b0 [ 119.360526][ T5711] tcp_write_xmit+0x1862/0x67f0 [ 119.360568][ T5711] __tcp_push_pending_frames+0x97/0x360 [ 119.360587][ T5711] ? tcp_push+0x41d/0x660 [ 119.360599][ T5711] tcp_sendmsg_locked+0x4b52/0x5710 [ 119.360646][ T5711] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 119.360656][ T5711] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.360672][ T5711] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.360693][ T5711] tcp_sendmsg+0x2f/0x50 [ 119.360705][ T5711] __sock_sendmsg+0xe5/0x270 [ 119.360719][ T5711] ____sys_sendmsg+0x505/0x830 [ 119.360740][ T5711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.360761][ T5711] ? import_iovec+0x74/0xa0 [ 119.360844][ T5711] ___sys_sendmsg+0x21f/0x2a0 [ 119.360860][ T5711] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.360878][ T5711] ? futex_wake+0x42b/0x500 [ 119.360914][ T5711] __x64_sys_sendmsg+0x19b/0x260 [ 119.360931][ T5711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.360958][ T5711] ? do_syscall_64+0xbe/0x3b0 [ 119.361004][ T5711] do_syscall_64+0xfa/0x3b0 [ 119.361014][ T5711] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.361031][ T5711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.361042][ T5711] ? clear_bhb_loop+0x60/0xb0 [ 119.361056][ T5711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.361066][ T5711] RIP: 0033:0x7f4144d8e929 [ 119.361078][ T5711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.361088][ T5711] RSP: 002b:00007ffce7c7c1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.361101][ T5711] RAX: ffffffffffffffda RBX: 00007f4144fb5fa0 RCX: 00007f4144d8e929 [ 119.361109][ T5711] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 119.361116][ T5711] RBP: 00007f4144e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 119.361122][ T5711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.361128][ T5711] R13: 00007f4144fb5fa0 R14: 00007f4144fb5fa0 R15: 0000000000000003 [ 119.361147][ T5711] [ 120.328411][ T5749] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 120.334621][ T5749] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5749, name: syz.0.246 [ 120.339010][ T5749] 3 locks held by syz.0.246/5749: [ 120.341209][ T5749] #0: ffff8880327c8258 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 120.347834][ T5749] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 120.351925][ T5749] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 120.356199][ T5749] CPU: 0 UID: 0 PID: 5749 Comm: syz.0.246 Tainted: G W 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 120.356218][ T5749] Tainted: [W]=WARN [ 120.356222][ T5749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.356229][ T5749] Call Trace: [ 120.356234][ T5749] [ 120.356239][ T5749] dump_stack_lvl+0x189/0x250 [ 120.356260][ T5749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.356274][ T5749] ? ipt_do_table+0x13dd/0x1640 [ 120.356292][ T5749] ? print_lock_name+0xde/0x100 [ 120.356319][ T5749] __cant_migrate+0x238/0x2e0 [ 120.356336][ T5749] ? __pfx___cant_migrate+0x10/0x10 [ 120.356359][ T5749] nf_hook_run_bpf+0x8f/0x1f0 [ 120.356376][ T5749] ? __pfx_ipt_do_table+0x10/0x10 [ 120.356389][ T5749] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 120.356405][ T5749] ? iptable_mangle_hook+0x189/0x4c0 [ 120.356420][ T5749] ? nf_hook+0x9d/0x380 [ 120.356434][ T5749] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 120.356446][ T5749] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 120.356464][ T5749] nf_hook_slow+0xc2/0x220 [ 120.356480][ T5749] nf_hook+0x217/0x380 [ 120.356499][ T5749] ? nf_hook+0x9d/0x380 [ 120.356512][ T5749] ? __pfx_nf_hook+0x10/0x10 [ 120.356527][ T5749] ? __pfx_ip_finish_output+0x10/0x10 [ 120.356550][ T5749] ip_output+0x16c/0x220 [ 120.356564][ T5749] ? __pfx_ip_finish_output+0x10/0x10 [ 120.356581][ T5749] ? __ip_queue_xmit+0x63/0x1b00 [ 120.356594][ T5749] __ip_queue_xmit+0x1101/0x1b00 [ 120.356606][ T5749] ? __pfx___tcp_select_window+0x10/0x10 [ 120.356621][ T5749] ? __ip_queue_xmit+0x63/0x1b00 [ 120.356637][ T5749] ? __pfx_ip_queue_xmit+0x10/0x10 [ 120.356656][ T5749] __tcp_transmit_skb+0x225c/0x36c0 [ 120.356688][ T5749] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 120.356714][ T5749] ? tcp_small_queue_check+0x1c1/0x3b0 [ 120.356732][ T5749] tcp_write_xmit+0x1862/0x67f0 [ 120.356780][ T5749] __tcp_push_pending_frames+0x97/0x360 [ 120.356800][ T5749] ? tcp_push+0x41d/0x660 [ 120.356814][ T5749] tcp_sendmsg_locked+0x4b52/0x5710 [ 120.356865][ T5749] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 120.356875][ T5749] ? __local_bh_enable_ip+0x12d/0x1c0 [ 120.356892][ T5749] ? __local_bh_enable_ip+0x12d/0x1c0 [ 120.356915][ T5749] tcp_sendmsg+0x2f/0x50 [ 120.356927][ T5749] __sock_sendmsg+0xe5/0x270 [ 120.356943][ T5749] ____sys_sendmsg+0x505/0x830 [ 120.356961][ T5749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.356983][ T5749] ? import_iovec+0x74/0xa0 [ 120.357013][ T5749] ___sys_sendmsg+0x21f/0x2a0 [ 120.357034][ T5749] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.357054][ T5749] ? futex_wake+0x42b/0x500 [ 120.357096][ T5749] __x64_sys_sendmsg+0x19b/0x260 [ 120.357113][ T5749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.357143][ T5749] ? do_syscall_64+0xbe/0x3b0 [ 120.357165][ T5749] do_syscall_64+0xfa/0x3b0 [ 120.357176][ T5749] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.357192][ T5749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.357204][ T5749] ? clear_bhb_loop+0x60/0xb0 [ 120.357219][ T5749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.357230][ T5749] RIP: 0033:0x7f4144d8e929 [ 120.357243][ T5749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.357252][ T5749] RSP: 002b:00007ffce7c7c1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.357265][ T5749] RAX: ffffffffffffffda RBX: 00007f4144fb5fa0 RCX: 00007f4144d8e929 [ 120.357270][ T5749] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 120.357275][ T5749] RBP: 00007f4144e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.357280][ T5749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.357284][ T5749] R13: 00007f4144fb5fa0 R14: 00007f4144fb5fa0 R15: 0000000000000003 [ 120.357301][ T5749] [ 121.331482][ T5782] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 121.337141][ T5782] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5782, name: syz.0.279 [ 121.341366][ T5782] 3 locks held by syz.0.279/5782: [ 121.346175][ T5782] #0: ffff888057b460d8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 121.350513][ T5782] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 121.355660][ T5782] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 121.359515][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: syz.0.279 Tainted: G W 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 121.359532][ T5782] Tainted: [W]=WARN [ 121.359536][ T5782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.359542][ T5782] Call Trace: [ 121.359549][ T5782] [ 121.359556][ T5782] dump_stack_lvl+0x189/0x250 [ 121.359575][ T5782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.359590][ T5782] ? ipt_do_table+0x13dd/0x1640 [ 121.359605][ T5782] ? print_lock_name+0xde/0x100 [ 121.359624][ T5782] __cant_migrate+0x238/0x2e0 [ 121.359640][ T5782] ? __pfx___cant_migrate+0x10/0x10 [ 121.359660][ T5782] nf_hook_run_bpf+0x8f/0x1f0 [ 121.359678][ T5782] ? __pfx_ipt_do_table+0x10/0x10 [ 121.359690][ T5782] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 121.359705][ T5782] ? iptable_mangle_hook+0x189/0x4c0 [ 121.359719][ T5782] ? nf_hook+0x9d/0x380 [ 121.359732][ T5782] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 121.359743][ T5782] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 121.359760][ T5782] nf_hook_slow+0xc2/0x220 [ 121.359776][ T5782] nf_hook+0x217/0x380 [ 121.359792][ T5782] ? nf_hook+0x9d/0x380 [ 121.359807][ T5782] ? __pfx_nf_hook+0x10/0x10 [ 121.359823][ T5782] ? __pfx_ip_finish_output+0x10/0x10 [ 121.359844][ T5782] ip_output+0x16c/0x220 [ 121.359858][ T5782] ? __pfx_ip_finish_output+0x10/0x10 [ 121.359874][ T5782] ? __ip_queue_xmit+0x63/0x1b00 [ 121.359889][ T5782] __ip_queue_xmit+0x1101/0x1b00 [ 121.359905][ T5782] ? __pfx___tcp_select_window+0x10/0x10 [ 121.359921][ T5782] ? __ip_queue_xmit+0x63/0x1b00 [ 121.359939][ T5782] ? __pfx_ip_queue_xmit+0x10/0x10 [ 121.359953][ T5782] __tcp_transmit_skb+0x225c/0x36c0 [ 121.359985][ T5782] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 121.360009][ T5782] ? tcp_small_queue_check+0x1c1/0x3b0 [ 121.360027][ T5782] tcp_write_xmit+0x1862/0x67f0 [ 121.360079][ T5782] __tcp_push_pending_frames+0x97/0x360 [ 121.360095][ T5782] ? tcp_push+0x41d/0x660 [ 121.360110][ T5782] tcp_sendmsg_locked+0x4b52/0x5710 [ 121.360161][ T5782] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 121.360171][ T5782] ? __local_bh_enable_ip+0x12d/0x1c0 [ 121.360191][ T5782] ? __local_bh_enable_ip+0x12d/0x1c0 [ 121.360216][ T5782] tcp_sendmsg+0x2f/0x50 [ 121.360228][ T5782] __sock_sendmsg+0xe5/0x270 [ 121.360241][ T5782] ____sys_sendmsg+0x505/0x830 [ 121.360258][ T5782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.360276][ T5782] ? import_iovec+0x74/0xa0 [ 121.360311][ T5782] ___sys_sendmsg+0x21f/0x2a0 [ 121.360328][ T5782] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.360348][ T5782] ? futex_wake+0x42b/0x500 [ 121.360387][ T5782] __x64_sys_sendmsg+0x19b/0x260 [ 121.360404][ T5782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.360432][ T5782] ? do_syscall_64+0xbe/0x3b0 [ 121.360456][ T5782] do_syscall_64+0xfa/0x3b0 [ 121.360466][ T5782] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.360484][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.360495][ T5782] ? clear_bhb_loop+0x60/0xb0 [ 121.360509][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.360521][ T5782] RIP: 0033:0x7f4144d8e929 [ 121.360631][ T5782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.360648][ T5782] RSP: 002b:00007ffce7c7c1b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.360662][ T5782] RAX: ffffffffffffffda RBX: 00007f4144fb5fa0 RCX: 00007f4144d8e929 [ 121.360670][ T5782] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004 [ 121.360676][ T5782] RBP: 00007f4144e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.360682][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.360688][ T5782] R13: 00007f4144fb5fa0 R14: 00007f4144fb5fa0 R15: 0000000000000003 [ 121.360709][ T5782] VM DIAGNOSIS: 11:57:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffc900000079e0 RCX=a9863a2af517fb00 RDX=dffffc0000000000 RSI=ffffffff81a8c318 RDI=ffffc90000007928 RBP=ffffc900000079b0 RSP=ffffc90000007920 R8 =ffffc900000079f0 R9 =0000000000000001 R10=ffffc90000007978 R11=ffffffff81ad00a0 R12=ffff88801af3c880 R13=dffffc0000000000 R14=ffffffff81ad00a0 R15=ffffc90000007928 RIP=ffffffff8172aa40 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d21b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000002380 CR3=00000000570b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4144e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4144e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4144e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4144e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4144e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4144e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f68000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 0000000000000001 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000