netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. ip_tables: iptables: counters copy to user failed while replacing table ============================= WARNING: suspicious RCU usage 4.14.281-syzkaller #0 Not tainted ----------------------------- net/netfilter/nf_queue.c:244 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 2 locks held by ksoftirqd/0/7: #0: (rcu_callback){....}, at: [] __rcu_reclaim kernel/rcu/rcu.h:185 [inline] #0: (rcu_callback){....}, at: [] rcu_do_batch kernel/rcu/tree.c:2699 [inline] #0: (rcu_callback){....}, at: [] invoke_rcu_callbacks kernel/rcu/tree.c:2962 [inline] #0: (rcu_callback){....}, at: [] __rcu_process_callbacks kernel/rcu/tree.c:2929 [inline] #0: (rcu_callback){....}, at: [] rcu_process_callbacks+0x84e/0x1180 kernel/rcu/tree.c:2946 #1: (&(&inst->lock)->rlock){+.-.}, at: [] spin_lock_bh include/linux/spinlock.h:322 [inline] #1: (&(&inst->lock)->rlock){+.-.}, at: [] nfqnl_flush+0x2f/0x2a0 net/netfilter/nfnetlink_queue.c:232 stack backtrace: CPU: 0 PID: 7 Comm: ksoftirqd/0 Not tainted 4.14.281-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 nf_reinject+0x56e/0x700 net/netfilter/nf_queue.c:244 nfqnl_flush+0x1ab/0x2a0 net/netfilter/nfnetlink_queue.c:237 instance_destroy_rcu+0x19/0x30 net/netfilter/nfnetlink_queue.c:171 __rcu_reclaim kernel/rcu/rcu.h:195 [inline] rcu_do_batch kernel/rcu/tree.c:2699 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2962 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2929 [inline] rcu_process_callbacks+0x780/0x1180 kernel/rcu/tree.c:2946 __do_softirq+0x24d/0x9ff kernel/softirq.c:288 run_ksoftirqd+0x50/0x1a0 kernel/softirq.c:670 smpboot_thread_fn+0x5c1/0x920 kernel/smpboot.c:164 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. ip_tables: iptables: counters copy to user failed while replacing table ip_tables: iptables: counters copy to user failed while replacing table netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.3'. ip_tables: iptables: counters copy to user failed while replacing table ip_tables: iptables: counters copy to user failed while replacing table ldm_validate_privheads(): Disk read failed. loop0: p2 < > p4 loop0: partition table partially beyond EOD, truncated loop0: p2 size 2 extends beyond EOD, truncated loop0: p4 size 2097152 extends beyond EOD, truncated ip_tables: iptables: counters copy to user failed while replacing table ip_tables: iptables: counters copy to user failed while replacing table ldm_validate_privheads(): Disk read failed. loop0: p2 < > p4 loop0: partition table partially beyond EOD, truncated loop0: p2 size 2 extends beyond EOD, truncated loop0: p4 size 2097152 extends beyond EOD, truncated 8021q: adding VLAN 0 to HW filter on device team0 bond0: Enslaving team0 as an active interface with an up link ldm_validate_privheads(): Disk read failed. loop0: p2 < > p4 bond0: Releasing backup interface team0 bridge0: port 3(team0) entered blocking state loop0: partition table partially beyond EOD, truncated bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode loop0: p2 size 2 extends beyond EOD, truncated device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode device batadv0 entered promiscuous mode lo: Cannot use loopback or non-ethernet device as HSR slave. syz-executor.5 (10063) used greatest stack depth: 24144 bytes left device batadv0 left promiscuous mode loop0: p4 size 2097152 extends beyond EOD, truncated device batadv0 entered promiscuous mode lo: Cannot use loopback or non-ethernet device as HSR slave. device batadv0 left promiscuous mode device team0 left promiscuous mode device team_slave_0 left promiscuous mode device team_slave_1 left promiscuous mode bridge0: port 3(team0) entered disabled state usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 8021q: adding VLAN 0 to HW filter on device team0 ldm_validate_privheads(): Disk read failed. bond0: Enslaving team0 as an active interface with an up link bond0: Releasing backup interface team0 bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode device batadv0 entered promiscuous mode lo: Cannot use loopback or non-ethernet device as HSR slave. device batadv0 left promiscuous mode usb usb9: usbfs: interface 0 claimed by usbfs while 'syz-executor.1' sets config #1 loop0: p2 < > p4 loop0: partition table partially beyond EOD, truncated device team0 left promiscuous mode device team_slave_0 left promiscuous mode device team_slave_1 left promiscuous mode bridge0: port 3(team0) entered disabled state loop0: p2 size 2 extends beyond EOD, truncated loop0: p4 size 2097152 extends beyond EOD, truncated hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected 8021q: adding VLAN 0 to HW filter on device team0 bond0: Enslaving team0 as an active interface with an up link device batadv0 entered promiscuous mode lo: Cannot use loopback or non-ethernet device as HSR slave. device batadv0 left promiscuous mode bond0: Releasing backup interface team0 bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode device team0 left promiscuous mode audit: type=1800 audit(1654218255.295:2): pid=10208 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=14066 res=0 device team_slave_0 left promiscuous mode usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.1' sets config #0 device team_slave_1 left promiscuous mode bridge0: port 3(team0) entered disabled state audit: type=1804 audit(1654218255.295:3): pid=10208 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir2921817859/syzkaller.Dml4CG/29/file0" dev="sda1" ino=14066 res=1 8021q: adding VLAN 0 to HW filter on device team0 bond0: Enslaving team0 as an active interface with an up link bond0: Releasing backup interface team0 bridge0: port 3(team0) entered blocking state bridge0: port 3(team0) entered disabled state device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode syz-executor.3 (10205): drop_caches: 2 syz-executor.5 (10199) used greatest stack depth: 23816 bytes left hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected audit: type=1800 audit(1654218256.205:4): pid=10241 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=13899 res=0 audit: type=1804 audit(1654218256.215:5): pid=10241 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir2921817859/syzkaller.Dml4CG/30/file0" dev="sda1" ino=13899 res=1 NILFS (nullb0): couldn't find nilfs on the device audit: type=1800 audit(1654218257.105:6): pid=10283 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=14050 res=0 audit: type=1804 audit(1654218257.125:7): pid=10283 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir2921817859/syzkaller.Dml4CG/31/file0" dev="sda1" ino=14050 res=1 syz-executor.2 (10267): drop_caches: 2 syz-executor.2 (10297): drop_caches: 2 syz-executor.3 (10270): drop_caches: 2 NILFS (nullb0): couldn't find nilfs on the device NILFS (nullb0): couldn't find nilfs on the device audit: type=1800 audit(1654218258.225:8): pid=10332 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=14089 res=0 syz-executor.2 (10331): drop_caches: 2 NILFS (nullb0): couldn't find nilfs on the device audit: type=1804 audit(1654218258.245:9): pid=10332 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir2921817859/syzkaller.Dml4CG/32/file0" dev="sda1" ino=14089 res=1 syz-executor.3 (10330): drop_caches: 2 vivid-004: ================= START STATUS ================= vivid-004: Radio HW Seek Mode: Bounded syz-executor.3 (10405): drop_caches: 2 vivid-004: Radio Programmable HW Seek: false vivid-004: RDS Rx I/O Mode: Block I/O vivid-004: Generate RBDS Instead of RDS: false vivid-004: RDS Reception: true vivid-004: RDS Program Type: 0 inactive vivid-004: RDS PS Name: inactive vivid-004: RDS Radio Text: inactive vivid-004: RDS Traffic Announcement: false inactive vivid-004: RDS Traffic Program: false inactive vivid-004: RDS Music: false inactive vivid-004: ================== END STATUS ================== audit: type=1800 audit(1654218260.805:10): pid=10461 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=14060 res=0 vivid-004: ================= START STATUS ================= nla_parse: 5 callbacks suppressed netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'.