ebtables: ebtables: counters copy to user failed while replacing table BUG: MAX_LOCKDEP_CHAINS too low! turning off the locking correctness validator. CPU: 1 PID: 15976 Comm: syz-executor.3 Not tainted 4.19.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2fe lib/dump_stack.c:118 add_chain_cache kernel/locking/lockdep.c:2258 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:2370 [inline] validate_chain kernel/locking/lockdep.c:2390 [inline] __lock_acquire.cold+0x420/0x57e kernel/locking/lockdep.c:3415 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3907 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x8c/0xc0 kernel/locking/spinlock.c:152 __debug_check_no_obj_freed lib/debugobjects.c:776 [inline] debug_check_no_obj_freed+0xb5/0x482 lib/debugobjects.c:817 free_pages_prepare mm/page_alloc.c:1056 [inline] __free_pages_ok+0x22d/0xd30 mm/page_alloc.c:1279 slab_destroy mm/slab.c:1713 [inline] slabs_destroy+0x90/0xd0 mm/slab.c:1729 cache_flusharray mm/slab.c:3490 [inline] ___cache_free+0x295/0x3a0 mm/slab.c:3532 qlink_free mm/kasan/quarantine.c:147 [inline] qlist_free_all+0x79/0x140 mm/kasan/quarantine.c:166 quarantine_reduce+0x1a9/0x230 mm/kasan/quarantine.c:259 kasan_kmalloc+0xa2/0x160 mm/kasan/kasan.c:538 slab_post_alloc_hook mm/slab.h:445 [inline] slab_alloc mm/slab.c:3397 [inline] kmem_cache_alloc_trace+0x11a/0x380 mm/slab.c:3623 kmalloc include/linux/slab.h:515 [inline] kzalloc include/linux/slab.h:709 [inline] igmpv3_add_delrec net/ipv4/igmp.c:1177 [inline] igmp_group_dropped+0x4b4/0xb50 net/ipv4/igmp.c:1310 ip_mc_dec_group+0x41e/0x4f0 net/ipv4/igmp.c:1689 ip_mc_drop_socket+0x14b/0x260 net/ipv4/igmp.c:2702 inet_release+0x49/0x1e0 net/ipv4/af_inet.c:414 __sock_release+0xcd/0x2a0 net/socket.c:579 sock_close+0x15/0x20 net/socket.c:1140 __fput+0x2ce/0x890 fs/file_table.c:278 task_work_run+0x148/0x1c0 kernel/task_work.c:113 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x417b71 Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 RSP: 002b:00007ffec8ee7890 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000417b71 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000004 RBP: 0000000000000001 R08: 0000000000001e95 R09: 0000000062ecbe99 R10: 00007ffec8ee7970 R11: 0000000000000293 R12: 000000000119ca00 R13: 000000000119ca00 R14: 00000000000003e8 R15: 000000000119bf8c ebtables: ebtables: counters copy to user failed while replacing table ebtables: ebtables: counters copy to user failed while replacing table ebtables: ebtables: counters copy to user failed while replacing table ebtables: ebtables: counters copy to user failed while replacing table ebtables: ebtables: counters copy to user failed while replacing table ebtables: ebtables: counters copy to user failed while replacing table caif:caif_disconnect_client(): nothing to disconnect caif:caif_disconnect_client(): nothing to disconnect caif:caif_disconnect_client(): nothing to disconnect IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 3, id = 0 caif:caif_disconnect_client(): nothing to disconnect IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 3, id = 0 IPVS: Error connecting to the multicast addr caif:caif_disconnect_client(): nothing to disconnect IPVS: Error connecting to the multicast addr IPVS: Error connecting to the multicast addr kauditd_printk_skb: 14 callbacks suppressed audit: type=1804 audit(1610884591.739:21821): pid=16272 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir477612427/syzkaller.SbOUaM/300/file0" dev="sda1" ino=17109 res=1 Process accounting resumed Process accounting resumed audit: type=1804 audit(1610884592.969:21822): pid=16325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir477612427/syzkaller.SbOUaM/301/file0" dev="sda1" ino=17116 res=1 audit: type=1804 audit(1610884593.179:21823): pid=16332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="file0" dev="sda1" ino=17123 res=1 Process accounting resumed Process accounting resumed audit: type=1804 audit(1610884594.010:21824): pid=16354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="file0" dev="sda1" ino=17116 res=1 audit: type=1804 audit(1610884594.100:21825): pid=16359 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir477612427/syzkaller.SbOUaM/302/file0" dev="sda1" ino=17126 res=1 audit: type=1804 audit(1610884595.020:21826): pid=16380 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir477612427/syzkaller.SbOUaM/303/file0" dev="sda1" ino=16570 res=1 audit: type=1804 audit(1610884595.440:21827): pid=16387 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="file0" dev="sda1" ino=17112 res=1 block nbd3: Attempted send on invalid socket print_req_error: I/O error, dev nbd3, sector 0 (syz-executor.3,16610,0):ocfs2_get_sector:1833 ERROR: status = -5 (syz-executor.3,16610,0):ocfs2_sb_probe:782 ERROR: status = -5 (syz-executor.3,16610,0):ocfs2_fill_super:1023 ERROR: superblock probe failed! (syz-executor.3,16610,0):ocfs2_fill_super:1225 ERROR: status = -5 block nbd3: Attempted send on invalid socket print_req_error: I/O error, dev nbd3, sector 0 (syz-executor.3,16612,1):ocfs2_get_sector:1833 ERROR: status = -5 (syz-executor.3,16612,1):ocfs2_sb_probe:782 ERROR: status = -5 (syz-executor.3,16612,0):ocfs2_fill_super:1023 ERROR: superblock probe failed! (syz-executor.3,16612,0):ocfs2_fill_super:1225 ERROR: status = -5 ISO 9660 Extensions: Microsoft Joliet Level 3 sd 0:0:1:0: [sg0] tag#8017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#8017 CDB: Regenerate(16) sd 0:0:1:0: [sg0] tag#8017 CDB[00]: 82 e3 52 25 62 bb 15 9f 23 a2 97 b6 7d 31 2d fa sd 0:0:1:0: [sg0] tag#8017 CDB[10]: 2d 19 f9 64 0e e2 96 0c 8c 13 6d 1a 52 69 97 0d sd 0:0:1:0: [sg0] tag#8017 CDB[20]: aa ca a4 a8 e1 2b 4c 62 ca 55 30 47 6a 8b 49 92 sd 0:0:1:0: [sg0] tag#8017 CDB[30]: da 3e 87 db cc ed 00 dd d5 63 7a 46 22 4b 52 62 sd 0:0:1:0: [sg0] tag#8017 CDB[40]: 8f 82 b9 f2 ab e5 ee 3c 3b 19 14 74 ba 77 ef 9a sd 0:0:1:0: [sg0] tag#8017 CDB[50]: 83 d7 91 93 a2 4a 04 2f 84 09 52 e2 df f7 c5 1d sd 0:0:1:0: [sg0] tag#8017 CDB[60]: 69 fe 6e c0 ab f3 6d 6e c6 9a 98 b9 5f 34 2d 43 sd 0:0:1:0: [sg0] tag#8017 CDB[70]: 60 75 a4 dd f8 c3 bf ca 1f 8d 32 04 5c de ce 59 sd 0:0:1:0: [sg0] tag#8017 CDB[80]: 1a 00 64 59 d2 42 e6 95 ef d6 ff 2b 32 c1 66 e9 sd 0:0:1:0: [sg0] tag#8017 CDB[90]: 8d 3c 84 program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 sd 0:0:1:0: [sg0] tag#8017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#8017 CDB: Regenerate(16) sd 0:0:1:0: [sg0] tag#8017 CDB[00]: 82 e3 52 25 62 bb 15 9f 23 a2 97 b6 7d 31 2d fa sd 0:0:1:0: [sg0] tag#8017 CDB[10]: 2d 19 f9 64 0e e2 96 0c 8c 13 6d 1a 52 69 97 0d sd 0:0:1:0: [sg0] tag#8017 CDB[20]: aa ca a4 a8 e1 2b 4c 62 ca 55 30 47 6a 8b 49 92 sd 0:0:1:0: [sg0] tag#8017 CDB[30]: da 3e 87 db cc ed 00 dd d5 63 7a 46 22 4b 52 62 sd 0:0:1:0: [sg0] tag#8017 CDB[40]: 8f 82 b9 f2 ab e5 ee 3c 3b 19 14 74 ba 77 ef 9a sd 0:0:1:0: [sg0] tag#8017 CDB[50]: 83 d7 91 93 a2 4a 04 2f 84 09 52 e2 df f7 c5 1d sd 0:0:1:0: [sg0] tag#8017 CDB[60]: 69 fe 6e c0 ab f3 6d 6e c6 9a 98 b9 5f 34 2d 43 ISO 9660 Extensions: Microsoft Joliet Level 3 sd 0:0:1:0: [sg0] tag#8017 CDB[70]: 60 75 a4 dd f8 c3 bf ca 1f 8d 32 04 5c de ce 59 sd 0:0:1:0: [sg0] tag#8017 CDB[80]: 1a 00 64 59 d2 42 e6 95 ef d6 ff 2b 32 c1 66 e9 sd 0:0:1:0: [sg0] tag#8017 CDB[90]: 8d 3c 84 sd 0:0:1:0: [sg0] tag#8019 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#8019 CDB: Regenerate(16) sd 0:0:1:0: [sg0] tag#8019 CDB[00]: 82 e3 52 25 62 bb 15 9f 23 a2 97 b6 7d 31 2d fa sd 0:0:1:0: [sg0] tag#8019 CDB[10]: 2d 19 f9 64 0e e2 96 0c 8c 13 6d 1a 52 69 97 0d sd 0:0:1:0: [sg0] tag#8019 CDB[20]: aa ca a4 a8 e1 2b 4c 62 ca 55 30 47 6a 8b 49 92 sd 0:0:1:0: [sg0] tag#8019 CDB[30]: da 3e 87 db cc ed 00 dd d5 63 7a 46 22 4b 52 62 sd 0:0:1:0: [sg0] tag#8019 CDB[40]: 8f 82 b9 f2 ab e5 ee 3c 3b 19 14 74 ba 77 ef 9a sd 0:0:1:0: [sg0] tag#8019 CDB[50]: 83 d7 91 93 a2 4a 04 2f 84 09 52 e2 df f7 c5 1d sd 0:0:1:0: [sg0] tag#8019 CDB[60]: 69 fe 6e c0 ab f3 6d 6e c6 9a 98 b9 5f 34 2d 43 block nbd3: Attempted send on invalid socket sd 0:0:1:0: [sg0] tag#8019 CDB[70]: 60 75 a4 dd f8 c3 bf ca 1f 8d 32 04 5c de ce 59 print_req_error: I/O error, dev nbd3, sector 0 sd 0:0:1:0: [sg0] tag#8019 CDB[80]: 1a 00 64 59 d2 42 e6 95 ef d6 ff 2b 32 c1 66 e9 (syz-executor.3,16649,1):ocfs2_get_sector:1833 ERROR: status = -5 sd 0:0:1:0: [sg0] tag#8019 CDB[90]: 8d 3c 84 (syz-executor.3,16649,1):ocfs2_sb_probe:782 ERROR: status = -5 program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 (syz-executor.3,16649,0):ocfs2_fill_super:1023 ERROR: superblock probe failed! ISO 9660 Extensions: Microsoft Joliet Level 3 (syz-executor.3,16649,0):ocfs2_fill_super:1225 ERROR: status = -5 netlink: 'syz-executor.2': attribute type 1 has an invalid length. sd 0:0:1:0: [sg0] tag#8017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#8017 CDB: Regenerate(16) sd 0:0:1:0: [sg0] tag#8017 CDB[00]: 82 e3 52 25 62 bb 15 9f 23 a2 97 b6 7d 31 2d fa sd 0:0:1:0: [sg0] tag#8017 CDB[10]: 2d 19 f9 64 0e e2 96 0c 8c 13 6d 1a 52 69 97 0d sd 0:0:1:0: [sg0] tag#8017 CDB[20]: aa ca a4 a8 e1 2b 4c 62 ca 55 30 47 6a 8b 49 92 sd 0:0:1:0: [sg0] tag#8017 CDB[30]: da 3e 87 db cc ed 00 dd d5 63 7a 46 22 4b 52 62 sd 0:0:1:0: [sg0] tag#8017 CDB[40]: 8f 82 b9 f2 ab e5 ee 3c 3b 19 14 74 ba 77 ef 9a sd 0:0:1:0: [sg0] tag#8017 CDB[50]: 83 d7 91 93 a2 4a 04 2f 84 09 52 e2 df f7 c5 1d sd 0:0:1:0: [sg0] tag#8017 CDB[60]: 69 fe 6e c0 ab f3 6d 6e c6 9a 98 b9 5f 34 2d 43 sd 0:0:1:0: [sg0] tag#8017 CDB[70]: 60 75 a4 dd f8 c3 bf ca 1f 8d 32 04 5c de ce 59 sd 0:0:1:0: [sg0] tag#8017 CDB[80]: 1a 00 64 59 d2 42 e6 95 ef d6 ff 2b 32 c1 66 e9 sd 0:0:1:0: [sg0] tag#8017 CDB[90]: 8d 3c 84 program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 ISO 9660 Extensions: Microsoft Joliet Level 3 sd 0:0:1:0: [sg0] tag#8019 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK block nbd3: Attempted send on invalid socket sd 0:0:1:0: [sg0] tag#8019 CDB: Regenerate(16) sd 0:0:1:0: [sg0] tag#8019 CDB[00]: 82 e3 52 25 62 bb 15 9f 23 a2 97 b6 7d 31 2d fa sd 0:0:1:0: [sg0] tag#8019 CDB[10]: 2d 19 f9 64 0e e2 96 0c 8c 13 6d 1a 52 69 97 0d print_req_error: I/O error, dev nbd3, sector 0 sd 0:0:1:0: [sg0] tag#8019 CDB[20]: aa ca a4 a8 e1 2b 4c 62 ca 55 30 47 6a 8b 49 92 (syz-executor.3,16703,1):ocfs2_get_sector:1833 ERROR: status = -5 sd 0:0:1:0: [sg0] tag#8019 CDB[30]: da 3e 87 db cc ed 00 dd d5 63 7a 46 22 4b 52 62 (syz-executor.3,16703,1):ocfs2_sb_probe:782 ERROR: status = -5 sd 0:0:1:0: [sg0] tag#8019 CDB[40]: 8f 82 b9 f2 ab e5 ee 3c 3b 19 14 74 ba 77 ef 9a (syz-executor.3,16703,1):ocfs2_fill_super:1023 ERROR: superblock probe failed! sd 0:0:1:0: [sg0] tag#8019 CDB[50]: 83 d7 91 93 a2 4a 04 2f 84 09 52 e2 df f7 c5 1d (syz-executor.3,16703,1):ocfs2_fill_super:1225 ERROR: status = -5 sd 0:0:1:0: [sg0] tag#8019 CDB[60]: 69 fe 6e c0 ab f3 6d 6e c6 9a 98 b9 5f 34 2d 43 sd 0:0:1:0: [sg0] tag#8019 CDB[70]: 60 75 a4 dd f8 c3 bf ca 1f 8d 32 04 5c de ce 59 sd 0:0:1:0: [sg0] tag#8019 CDB[80]: 1a 00 64 59 d2 42 e6 95 ef d6 ff 2b 32 c1 66 e9 sd 0:0:1:0: [sg0] tag#8019 CDB[90]: 8d 3c 84 program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected IPv6: sit1: Disabled Multicast RS IPv6: sit1: Disabled Multicast RS hub 9-0:1.0: USB hub found block nbd3: Attempted send on invalid socket hub 9-0:1.0: 8 ports detected print_req_error: I/O error, dev nbd3, sector 0 (syz-executor.3,16755,0):ocfs2_get_sector:1833 ERROR: status = -5 (syz-executor.3,16755,1):ocfs2_sb_probe:782 ERROR: status = -5 (syz-executor.3,16755,1):ocfs2_fill_super:1023 ERROR: superblock probe failed! (syz-executor.3,16755,0):ocfs2_fill_super:1225 ERROR: status = -5 IPv6: sit1: Disabled Multicast RS hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected IPv6: sit1: Disabled Multicast RS IPv6: sit1: Disabled Multicast RS IPv6: sit9: Disabled Multicast RS hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected IPv6: sit1: Disabled Multicast RS IPv6: sit9: Disabled Multicast RS IPv6: sit1: Disabled Multicast RS IPv6: sit1: Disabled Multicast RS hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected rdma_op 000000008243083d conn xmit_rdma (null) rdma_op 00000000800a5566 conn xmit_rdma (null) IPv6: sit9: Disabled Multicast RS rdma_op 00000000f31770dc conn xmit_rdma (null) rdma_op 00000000d745112b conn xmit_rdma (null) rdma_op 00000000419db97b conn xmit_rdma (null) rdma_op 00000000004a3a7c conn xmit_rdma (null) rdma_op 00000000eea5bf55 conn xmit_rdma (null) rdma_op 00000000f497e0bd conn xmit_rdma (null) rdma_op 00000000647db2fe conn xmit_rdma (null) rdma_op 000000007f5bdaa5 conn xmit_rdma (null) netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.