netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. BUG: MAX_LOCKDEP_CHAINS too low! turning off the locking correctness validator. CPU: 1 PID: 18422 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller-00436-g173ea743bf7a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106 add_chain_cache kernel/locking/lockdep.c:3708 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:3789 [inline] validate_chain kernel/locking/lockdep.c:3810 [inline] __lock_acquire+0x4322/0x5df0 kernel/locking/lockdep.c:5074 lock_acquire kernel/locking/lockdep.c:5691 [inline] lock_acquire+0x1b1/0x520 kernel/locking/lockdep.c:5656 __raw_spin_lock include/linux/spinlock_api_smp.h:133 [inline] _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:154 mm_cid_put kernel/sched/sched.h:3270 [inline] mm_cid_put kernel/sched/sched.h:3265 [inline] switch_mm_cid kernel/sched/sched.h:3298 [inline] prepare_task_switch kernel/sched/core.c:5117 [inline] context_switch kernel/sched/core.c:5258 [inline] __schedule+0x26a3/0x5770 kernel/sched/core.c:6625 preempt_schedule_irq+0x52/0x90 kernel/sched/core.c:6937 irqentry_exit+0x35/0x80 kernel/entry/common.c:433 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:645 RIP: 0010:lock_acquire+0x1f5/0x520 kernel/locking/lockdep.c:5659 Code: b7 9d 7e 83 f8 01 0f 85 b9 02 00 00 9c 58 f6 c4 02 0f 85 a4 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 RSP: 0018:ffffc900269b6e60 EFLAGS: 00000206 RAX: dffffc0000000000 RBX: 1ffff92004d36dce RCX: 0000000000000001 RDX: 1ffff1102ddda4ee RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000001 R08: 0000000000000001 R09: ffffffff9166084f R10: fffffbfff22cc109 R11: 1ffffffff21ac39f R12: 0000000000000000 R13: 0000000000000000 R14: ffff88816f3dd938 R15: 0000000000000000 __flush_workqueue+0x118/0x13a0 kernel/workqueue.c:2910 drain_workqueue+0x1c1/0x3e0 kernel/workqueue.c:3075 destroy_workqueue+0xc8/0x8e0 kernel/workqueue.c:4538 alloc_workqueue+0xe08/0x1110 kernel/workqueue.c:4494 bond_init+0x1b4/0xa00 drivers/net/bonding/bond_main.c:6282 register_netdevice+0x573/0x1640 net/core/dev.c:9977 bond_newlink drivers/net/bonding/bond_netlink.c:560 [inline] bond_newlink+0x4b/0xa0 drivers/net/bonding/bond_netlink.c:550 rtnl_newlink_create net/core/rtnetlink.c:3440 [inline] __rtnl_newlink+0x10c2/0x1840 net/core/rtnetlink.c:3657 rtnl_newlink+0x68/0xa0 net/core/rtnetlink.c:3670 rtnetlink_rcv_msg+0x43d/0xd50 net/core/rtnetlink.c:6181 netlink_rcv_skb+0x165/0x440 net/netlink/af_netlink.c:2577 netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline] netlink_unicast+0x547/0x7f0 net/netlink/af_netlink.c:1365 netlink_sendmsg+0x925/0xe30 net/netlink/af_netlink.c:1942 sock_sendmsg_nosec net/socket.c:724 [inline] sock_sendmsg+0xde/0x190 net/socket.c:747 ____sys_sendmsg+0x71c/0x900 net/socket.c:2501 ___sys_sendmsg+0x110/0x1b0 net/socket.c:2555 __sys_sendmsg+0xf7/0x1c0 net/socket.c:2584 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline] __do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178 do_fast_syscall_32+0x33/0x70 arch/x86/entry/common.c:203 entry_SYSENTER_compat_after_hwframe+0x70/0x82 RIP: 0023:0xf7f60579 Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 RSP: 002b:00000000f7f5b5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 ---------------- Code disassembly (best guess): 0: b7 9d mov $0x9d,%bh 2: 7e 83 jle 0xffffff87 4: f8 clc 5: 01 0f add %ecx,(%rdi) 7: 85 b9 02 00 00 9c test %edi,-0x63fffffe(%rcx) d: 58 pop %rax e: f6 c4 02 test $0x2,%ah 11: 0f 85 a4 02 00 00 jne 0x2bb 17: 48 83 7c 24 08 00 cmpq $0x0,0x8(%rsp) 1d: 74 01 je 0x20 1f: fb sti 20: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 27: fc ff df * 2a: 48 01 c3 add %rax,%rbx <-- trapping instruction 2d: 48 c7 03 00 00 00 00 movq $0x0,(%rbx) 34: 48 c7 43 08 00 00 00 movq $0x0,0x8(%rbx) 3b: 00 3c: 48 rex.W 3d: 8b .byte 0x8b 3e: 84 .byte 0x84 3f: 24 .byte 0x24