BTRFS info (device loop0): using free space tree
validate_nla: 3 callbacks suppressed
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
BTRFS info (device loop0): has skinny extents
======================================================
WARNING: possible circular locking dependency detected
4.19.211-syzkaller #0 Not tainted
------------------------------------------------------
syz-executor.0/14553 is trying to acquire lock:
0000000030cfa9b6 (&fs_info->qgroup_ioctl_lock){+.+.}, at: btrfs_qgroup_inherit+0xde/0x1c60 fs/btrfs/qgroup.c:2284

but task is already holding lock:
0000000080f4e396 (sb_internal#3){.+.+}, at: sb_start_intwrite include/linux/fs.h:1626 [inline]
0000000080f4e396 (sb_internal#3){.+.+}, at: start_transaction+0xa37/0xf90 fs/btrfs/transaction.c:528

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #1 (sb_internal#3){.+.+}:
       sb_start_intwrite include/linux/fs.h:1626 [inline]
       start_transaction+0xa37/0xf90 fs/btrfs/transaction.c:528
       btrfs_quota_enable+0x169/0x10b0 fs/btrfs/qgroup.c:905
       btrfs_ioctl_quota_ctl fs/btrfs/ioctl.c:5233 [inline]
       btrfs_ioctl+0x622c/0x76d0 fs/btrfs/ioctl.c:6021
       vfs_ioctl fs/ioctl.c:46 [inline]
       file_ioctl fs/ioctl.c:501 [inline]
       do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
       ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
       __do_sys_ioctl fs/ioctl.c:712 [inline]
       __se_sys_ioctl fs/ioctl.c:710 [inline]
       __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
       do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
       entry_SYSCALL_64_after_hwframe+0x49/0xbe

-> #0 (&fs_info->qgroup_ioctl_lock){+.+.}:
       __mutex_lock_common kernel/locking/mutex.c:937 [inline]
       __mutex_lock+0xd7/0x1190 kernel/locking/mutex.c:1078
       btrfs_qgroup_inherit+0xde/0x1c60 fs/btrfs/qgroup.c:2284
       create_subvol+0x3aa/0x1850 fs/btrfs/ioctl.c:617
       btrfs_mksubvol+0xe1d/0x1160 fs/btrfs/ioctl.c:1007
       btrfs_ioctl_snap_create_transid+0x2a7/0x430 fs/btrfs/ioctl.c:1771
       btrfs_ioctl_snap_create+0x114/0x170 fs/btrfs/ioctl.c:1819
       btrfs_ioctl+0x274b/0x76d0 fs/btrfs/ioctl.c:5932
       vfs_ioctl fs/ioctl.c:46 [inline]
       file_ioctl fs/ioctl.c:501 [inline]
       do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
       ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
       __do_sys_ioctl fs/ioctl.c:712 [inline]
       __se_sys_ioctl fs/ioctl.c:710 [inline]
       __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
       do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
       entry_SYSCALL_64_after_hwframe+0x49/0xbe

other info that might help us debug this:

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(sb_internal#3);
                               lock(&fs_info->qgroup_ioctl_lock);
                               lock(sb_internal#3);
  lock(&fs_info->qgroup_ioctl_lock);

 *** DEADLOCK ***

4 locks held by syz-executor.0/14553:
 #0: 000000006b227b96 (sb_writers#28){.+.+}, at: sb_start_write include/linux/fs.h:1579 [inline]
 #0: 000000006b227b96 (sb_writers#28){.+.+}, at: mnt_want_write_file+0x63/0x1d0 fs/namespace.c:418
 #1: 00000000b914a791 (&type->i_mutex_dir_key#11/1){+.+.}, at: btrfs_mksubvol+0x156/0x1160 fs/btrfs/ioctl.c:975
 #2: 0000000043980152 (&fs_info->subvol_sem){++++}, at: btrfs_mksubvol+0x35b/0x1160 fs/btrfs/ioctl.c:998
 #3: 0000000080f4e396 (sb_internal#3){.+.+}, at: sb_start_intwrite include/linux/fs.h:1626 [inline]
 #3: 0000000080f4e396 (sb_internal#3){.+.+}, at: start_transaction+0xa37/0xf90 fs/btrfs/transaction.c:528

stack backtrace:
CPU: 0 PID: 14553 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 print_circular_bug.constprop.0.cold+0x2d7/0x41e kernel/locking/lockdep.c:1222
 check_prev_add kernel/locking/lockdep.c:1866 [inline]
 check_prevs_add kernel/locking/lockdep.c:1979 [inline]
 validate_chain kernel/locking/lockdep.c:2420 [inline]
 __lock_acquire+0x30c9/0x3ff0 kernel/locking/lockdep.c:3416
 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908
 __mutex_lock_common kernel/locking/mutex.c:937 [inline]
 __mutex_lock+0xd7/0x1190 kernel/locking/mutex.c:1078
 btrfs_qgroup_inherit+0xde/0x1c60 fs/btrfs/qgroup.c:2284
 create_subvol+0x3aa/0x1850 fs/btrfs/ioctl.c:617
 btrfs_mksubvol+0xe1d/0x1160 fs/btrfs/ioctl.c:1007
 btrfs_ioctl_snap_create_transid+0x2a7/0x430 fs/btrfs/ioctl.c:1771
 btrfs_ioctl_snap_create+0x114/0x170 fs/btrfs/ioctl.c:1819
 btrfs_ioctl+0x274b/0x76d0 fs/btrfs/ioctl.c:5932
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f6c37a440c9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f6c35fb6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f6c37b63f80 RCX: 00007f6c37a440c9
RDX: 00000000200000c0 RSI: 000000005000940e RDI: 0000000000000005
RBP: 00007f6c37a9fae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffdfe32034f R14: 00007f6c35fb6300 R15: 0000000000022000
nla_parse: 16 callbacks suppressed
netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'.
audit: type=1800 audit(1673868252.130:1290): pid=14698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14535 res=0
IPVS: ftp: loaded support on port[0] = 21
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'.
IPVS: ftp: loaded support on port[0] = 21
audit: type=1800 audit(1673868252.160:1291): pid=14698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14535 res=0
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
IPVS: ftp: loaded support on port[0] = 21
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'.
audit: type=1800 audit(1673868252.830:1292): pid=14810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14660 res=0
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
audit: type=1800 audit(1673868252.900:1293): pid=14829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14753 res=0
audit: type=1800 audit(1673868252.900:1294): pid=14829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14753 res=0
netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'.
BTRFS info (device loop0): enabling inode map caching
BTRFS warning (device loop0): excessive commit interval 622039222
BTRFS info (device loop0): force zlib compression, level 3
BTRFS info (device loop0): using free space tree
BTRFS info (device loop0): has skinny extents
F2FS-fs (loop5): Found nat_bits in checkpoint
F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'.
attempt to access beyond end of device
loop5: rw=2049, want=45104, limit=40427
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'.
wlan1: Trigger new scan to find an IBSS to join
F2FS-fs (loop0): Found nat_bits in checkpoint
F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
attempt to access beyond end of device
loop0: rw=2049, want=45104, limit=40427
F2FS-fs (loop5): Found nat_bits in checkpoint
F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
attempt to access beyond end of device
loop5: rw=2049, want=45104, limit=40427
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
F2FS-fs (loop0): Found nat_bits in checkpoint
F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
F2FS-fs (loop5): Found nat_bits in checkpoint
attempt to access beyond end of device
loop0: rw=2049, want=45104, limit=40427
F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
netlink: 'syz-executor.4': attribute type 5 has an invalid length.
attempt to access beyond end of device
loop5: rw=2049, want=45104, limit=40427
ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
netlink: 'syz-executor.4': attribute type 5 has an invalid length.
sch_tbf: burst 1024 is lower than device syz_tun mtu (1514) !
netlink: 'syz-executor.4': attribute type 5 has an invalid length.
sch_tbf: burst 1024 is lower than device syz_tun mtu (1514) !
sch_tbf: burst 1024 is lower than device syz_tun mtu (1514) !
sch_tbf: burst 1024 is lower than device syz_tun mtu (1514) !
netlink: 'syz-executor.5': attribute type 4 has an invalid length.
netlink: 'syz-executor.1': attribute type 1 has an invalid length.
nla_parse: 5 callbacks suppressed
netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
attempt to access beyond end of device
loop0: rw=2049, want=45104, limit=40427
wlan1: Trigger new scan to find an IBSS to join
netlink: 'syz-executor.5': attribute type 4 has an invalid length.
netlink: 'syz-executor.5': attribute type 4 has an invalid length.
netlink: 'syz-executor.5': attribute type 4 has an invalid length.
netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
attempt to access beyond end of device
loop0: rw=2049, want=45104, limit=40427
netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
netlink: 528 bytes leftover after parsing attributes in process `syz-executor.2'.
sysfs: cannot create duplicate filename '/class/ieee80211/©,í…×;qO!'
CPU: 0 PID: 15354 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30
 sysfs_do_create_link_sd+0x116/0x130 fs/sysfs/symlink.c:50
 sysfs_do_create_link fs/sysfs/symlink.c:79 [inline]
 sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:91
 device_add_class_symlinks drivers/base/core.c:1934 [inline]
 device_add+0x7d1/0x16d0 drivers/base/core.c:2136
 wiphy_register+0x1664/0x2130 net/wireless/core.c:832
 ieee80211_register_hw+0x13be/0x3550 net/mac80211/main.c:1106
 mac80211_hwsim_new_radio+0x1d3f/0x3c60 drivers/net/wireless/mac80211_hwsim.c:2896
 hwsim_new_radio_nl+0x5c3/0x850 drivers/net/wireless/mac80211_hwsim.c:3374
 genl_family_rcv_msg+0x642/0xc40 net/netlink/genetlink.c:602
 genl_rcv_msg+0xbf/0x160 net/netlink/genetlink.c:627
 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:638
 netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
 netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
 netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:661
 ___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2227
 __sys_sendmsg net/socket.c:2265 [inline]
 __do_sys_sendmsg net/socket.c:2274 [inline]
 __se_sys_sendmsg net/socket.c:2272 [inline]
 __x64_sys_sendmsg+0x132/0x220 net/socket.c:2272
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f273c0340c9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f273a564168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f273c154120 RCX: 00007f273c0340c9
RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000008
RBP: 00007f273c08fae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffed54504af R14: 00007f273a564300 R15: 0000000000022000
audit: type=1804 audit(1673868259.230:1295): pid=15367 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4278072329/syzkaller.3elTzt/1224/file0/bus" dev="loop5" ino=18 res=1
netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'.
netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
audit: type=1804 audit(1673868259.450:1296): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4278072329/syzkaller.3elTzt/1225/bus" dev="sda1" ino=14897 res=1
EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
f2fs_msg: 4 callbacks suppressed
F2FS-fs (loop0): Found nat_bits in checkpoint
F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
attempt to access beyond end of device
loop0: rw=2049, want=45104, limit=40427
EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue
audit: type=1804 audit(1673868260.010:1297): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4278072329/syzkaller.3elTzt/1226/file0/bus" dev="loop5" ino=18 res=1
sysfs: cannot create duplicate filename '/class/ieee80211/©,í…×;qO!'
CPU: 0 PID: 15456 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30
 sysfs_do_create_link_sd+0x116/0x130 fs/sysfs/symlink.c:50
 sysfs_do_create_link fs/sysfs/symlink.c:79 [inline]
 sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:91
 device_add_class_symlinks drivers/base/core.c:1934 [inline]
 device_add+0x7d1/0x16d0 drivers/base/core.c:2136
 wiphy_register+0x1664/0x2130 net/wireless/core.c:832
 ieee80211_register_hw+0x13be/0x3550 net/mac80211/main.c:1106
 mac80211_hwsim_new_radio+0x1d3f/0x3c60 drivers/net/wireless/mac80211_hwsim.c:2896
 hwsim_new_radio_nl+0x5c3/0x850 drivers/net/wireless/mac80211_hwsim.c:3374
 genl_family_rcv_msg+0x642/0xc40 net/netlink/genetlink.c:602
 genl_rcv_msg+0xbf/0x160 net/netlink/genetlink.c:627
 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:638
 netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
 netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
 netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:661
 ___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2227
 __sys_sendmsg net/socket.c:2265 [inline]
 __do_sys_sendmsg net/socket.c:2274 [inline]
 __se_sys_sendmsg net/socket.c:2272 [inline]
 __x64_sys_sendmsg+0x132/0x220 net/socket.c:2272
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f273c0340c9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f273a585168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 00007f273c154050 RCX: 00007f273c0340c9
RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000068
RBP: 00007f273c08fae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffed54504af R14: 00007f273a585300 R15: 0000000000022000
wlan1: Trigger new scan to find an IBSS to join
sysfs: cannot create duplicate filename '/class/ieee80211/©,í…×;qO!'
CPU: 0 PID: 15470 Comm: syz-executor.5 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 sysfs_warn_dup.cold+0x1c/0x29 fs/sysfs/dir.c:30
 sysfs_do_create_link_sd+0x116/0x130 fs/sysfs/symlink.c:50
 sysfs_do_create_link fs/sysfs/symlink.c:79 [inline]
 sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:91
 device_add_class_symlinks drivers/base/core.c:1934 [inline]
 device_add+0x7d1/0x16d0 drivers/base/core.c:2136
 wiphy_register+0x1664/0x2130 net/wireless/core.c:832
 ieee80211_register_hw+0x13be/0x3550 net/mac80211/main.c:1106
 mac80211_hwsim_new_radio+0x1d3f/0x3c60 drivers/net/wireless/mac80211_hwsim.c:2896
 hwsim_new_radio_nl+0x5c3/0x850 drivers/net/wireless/mac80211_hwsim.c:3374
 genl_family_rcv_msg+0x642/0xc40 net/netlink/genetlink.c:602
 genl_rcv_msg+0xbf/0x160 net/netlink/genetlink.c:627
 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:638
 netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline]
 netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351
 netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xc3/0x120 net/socket.c:661