kernel msg: ebtables bug: please report to author: Wrong len argument kernel msg: ebtables bug: please report to author: Wrong len argument INFO: task syz-executor1:16111 blocked for more than 120 seconds. Not tainted 4.16.0-rc5+ #358 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor1 D21712 16111 4276 0x00000004 Call Trace: context_switch kernel/sched/core.c:2862 [inline] __schedule+0x8fb/0x1ec0 kernel/sched/core.c:3440 schedule+0xf5/0x430 kernel/sched/core.c:3499 schedule_timeout+0x1a3/0x230 kernel/time/timer.c:1777 do_wait_for_common kernel/sched/completion.c:86 [inline] __wait_for_common kernel/sched/completion.c:107 [inline] wait_for_common kernel/sched/completion.c:118 [inline] wait_for_completion+0x415/0x770 kernel/sched/completion.c:139 ucma_destroy_id+0x2c1/0x4c0 drivers/infiniband/core/ucma.c:605 ucma_write+0x2d6/0x3d0 drivers/infiniband/core/ucma.c:1633 __vfs_write+0xef/0x970 fs/read_write.c:480 vfs_write+0x189/0x510 fs/read_write.c:544 SYSC_write fs/read_write.c:589 [inline] SyS_write+0xef/0x220 fs/read_write.c:581 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x453e69 RSP: 002b:00007f1977e67c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f1977e686d4 RCX: 0000000000453e69 RDX: 0000000000000314 RSI: 00000000200003c0 RDI: 0000000000000015 RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000672 R14: 00000000006f9b50 R15: 0000000000000000 Showing all locks held in the system: 2 locks held by khungtaskd/800: #0: (rcu_read_lock){....}, at: [<0000000042d485df>] check_hung_uninterruptible_tasks kernel/hung_task.c:175 [inline] #0: (rcu_read_lock){....}, at: [<0000000042d485df>] watchdog+0x1c5/0xd60 kernel/hung_task.c:249 #1: (tasklist_lock){.+.+}, at: [<00000000d2916b22>] debug_show_all_locks+0xd3/0x3d0 kernel/locking/lockdep.c:4470 2 locks held by getty/4201: #0: (&tty->ldisc_sem){++++}, at: [<00000000555c6f85>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000f3351713>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131 2 locks held by getty/4202: #0: (&tty->ldisc_sem){++++}, at: [<00000000555c6f85>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000f3351713>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131 2 locks held by getty/4203: #0: (&tty->ldisc_sem){++++}, at: [<00000000555c6f85>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000f3351713>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131 2 locks held by getty/4204: #0: (&tty->ldisc_sem){++++}, at: [<00000000555c6f85>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000f3351713>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131 2 locks held by getty/4205: #0: (&tty->ldisc_sem){++++}, at: [<00000000555c6f85>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000f3351713>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131 2 locks held by getty/4206: #0: (&tty->ldisc_sem){++++}, at: [<00000000555c6f85>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000f3351713>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131 2 locks held by getty/4207: #0: (&tty->ldisc_sem){++++}, at: [<00000000555c6f85>] ldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365 #1: (&ldata->atomic_read_lock){+.+.}, at: [<00000000f3351713>] n_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 800 Comm: khungtaskd Not tainted 4.16.0-rc5+ #358 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x194/0x24d lib/dump_stack.c:53 nmi_cpu_backtrace+0x1d2/0x210 lib/nmi_backtrace.c:103 nmi_trigger_cpumask_backtrace+0x123/0x180 lib/nmi_backtrace.c:62 arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38 trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline] check_hung_task kernel/hung_task.c:132 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:190 [inline] watchdog+0x90c/0xd60 kernel/hung_task.c:249 kthread+0x33c/0x400 kernel/kthread.c:238 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:406 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 4080 Comm: rsyslogd Not tainted 4.16.0-rc5+ #358 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__lock_acquire+0x10/0x3e00 kernel/locking/lockdep.c:3290 RSP: 0018:ffff8801b66af738 EFLAGS: 00000082 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff86f42ec0 RBP: ffff8801b66af868 R08: 0000000000000000 R09: 0000000000000001 R10: ffff8801b66af750 R11: ffffffff86f42ec0 R12: 1ffff10036cd5ef4 R13: 0000000000000000 R14: 0000000000000002 R15: 0000000000000000 FS: 00007f73b6f53700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffff600400 CR3: 00000001b64b8005 CR4: 00000000001606f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: rcu_lock_acquire include/linux/rcupdate.h:244 [inline] rcu_read_lock include/linux/rcupdate.h:630 [inline] avc_reclaim_node security/selinux/avc.c:527 [inline] avc_alloc_node+0x25f/0x4d0 security/selinux/avc.c:557 avc_insert security/selinux/avc.c:668 [inline] avc_compute_av+0x22a/0x710 security/selinux/avc.c:974 avc_has_perm_noaudit security/selinux/avc.c:1110 [inline] avc_has_perm+0x4be/0x680 security/selinux/avc.c:1144 inode_has_perm security/selinux/hooks.c:1771 [inline] file_has_perm+0x3f5/0x5d0 security/selinux/hooks.c:1861 selinux_revalidate_file_permission security/selinux/hooks.c:3428 [inline] selinux_file_permission+0x31c/0x460 security/selinux/hooks.c:3449 security_file_permission+0x7d/0x1e0 security/security.c:864 rw_verify_area+0xde/0x2b0 fs/read_write.c:386 vfs_read+0xf2/0x350 fs/read_write.c:443 SYSC_read fs/read_write.c:573 [inline] SyS_read+0xef/0x220 fs/read_write.c:566 do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x7f73b99b31fd RSP: 002b:00007f73b6f52e30 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 RAX: ffffffffffffffda RBX: 00000000011ba4b0 RCX: 00007f73b99b31fd RDX: 0000000000000fff RSI: 00007f73b87875a0 RDI: 0000000000000004 RBP: 0000000000000000 R08: 00000000011a5260 R09: 0000000004000001 R10: 0000000000000001 R11: 0000000000000293 R12: 000000000065e420 R13: 00007f73b6f539c0 R14: 00007f73b9ff8040 R15: 0000000000000003 Code: d0 e9 a3 fc ff ff e8 50 87 52 00 e9 36 fe ff ff e8 46 87 52 00 e9 84 fe ff ff 90 4c 8d 54 24 08 48 83 e4 f0 49 89 fb 41 ff 72 f8 <55> 48 89 e5 41 57 41 56 41 55 41 54 41 52 53 44 89 c3 65 4c 8b