netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. ============================= WARNING: suspicious RCU usage 4.14.307-syzkaller #0 Not tainted ----------------------------- net/sched/act_sample.c:95 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor.5/11032: #0: (rtnl_mutex){+.+.}, at: [] rtnl_lock net/core/rtnetlink.c:72 [inline] #0: (rtnl_mutex){+.+.}, at: [] rtnetlink_rcv_msg+0x31d/0xb10 net/core/rtnetlink.c:4317 stack backtrace: CPU: 1 PID: 11032 Comm: syz-executor.5 Not tainted 4.14.307-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 tcf_sample_init+0x71c/0x8c0 net/sched/act_sample.c:95 tcf_action_init_1+0x51a/0x9e0 net/sched/act_api.c:691 tcf_action_init+0x26d/0x400 net/sched/act_api.c:760 tcf_action_add net/sched/act_api.c:1088 [inline] tc_ctl_action+0x2e3/0x510 net/sched/act_api.c:1140 rtnetlink_rcv_msg+0x3be/0xb10 net/core/rtnetlink.c:4322 netlink_rcv_skb+0x125/0x390 net/netlink/af_netlink.c:2461 netlink_unicast_kernel net/netlink/af_netlink.c:1302 [inline] netlink_unicast+0x437/0x610 net/netlink/af_netlink.c:1328 netlink_sendmsg+0x651/0xbc0 net/netlink/af_netlink.c:1900 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0x100 net/socket.c:656 ___sys_sendmsg+0x6c8/0x800 net/socket.c:2062 __sys_sendmsg+0xa3/0x120 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0x27/0x40 net/socket.c:2103 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f7bf247d0f9 RSP: 002b:00007f7bf09ef168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f7bf259cf80 RCX: 00007f7bf247d0f9 RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 RBP: 00007f7bf24d8ae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd70b0935f R14: 00007f7bf09ef300 R15: 0000000000022000 netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 ====================================================== WARNING: the mand mount option is being deprecated and will be removed in v5.15! ====================================================== device lo entered promiscuous mode device tunl0 entered promiscuous mode device gre0 entered promiscuous mode device gretap0 entered promiscuous mode device erspan0 entered promiscuous mode device ip_vti0 entered promiscuous mode device ip6_vti0 entered promiscuous mode device sit0 entered promiscuous mode device ip6tnl0 entered promiscuous mode device ip6gre0 entered promiscuous mode device syz_tun entered promiscuous mode device ip6gretap0 entered promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge0: port 1(bridge_slave_0) entered disabled state device bridge0 entered promiscuous mode device vcan0 entered promiscuous mode device bond0 entered promiscuous mode device bond_slave_0 entered promiscuous mode device bond_slave_1 entered promiscuous mode device team0 entered promiscuous mode device team_slave_0 entered promiscuous mode device team_slave_1 entered promiscuous mode device dummy0 entered promiscuous mode device nlmon0 entered promiscuous mode device caif0 entered promiscuous mode device batadv0 entered promiscuous mode device vxcan0 entered promiscuous mode device vxcan1 entered promiscuous mode device veth0 entered promiscuous mode device veth1 entered promiscuous mode device veth0_to_bridge entered promiscuous mode device veth1_to_bridge entered promiscuous mode device veth0_to_bond entered promiscuous mode device veth1_to_bond entered promiscuous mode device veth0_to_team entered promiscuous mode device veth1_to_team entered promiscuous mode device veth0_to_batadv entered promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 device batadv_slave_0 entered promiscuous mode device veth1_to_batadv entered promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_1 device batadv_slave_1 entered promiscuous mode device veth0_to_hsr entered promiscuous mode device veth1_to_hsr entered promiscuous mode device hsr0 entered promiscuous mode device veth1_virt_wifi entered promiscuous mode device veth0_virt_wifi entered promiscuous mode device vlan0 entered promiscuous mode device vlan1 entered promiscuous mode device macvlan0 entered promiscuous mode device macvlan1 entered promiscuous mode device ipvlan0 entered promiscuous mode device ipvlan1 entered promiscuous mode device macvtap0 entered promiscuous mode device macsec0 entered promiscuous mode device geneve0 entered promiscuous mode device geneve1 entered promiscuous mode device syztnl1 entered promiscuous mode netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. device lo left promiscuous mode device tunl0 left promiscuous mode device gre0 left promiscuous mode device gretap0 left promiscuous mode device erspan0 left promiscuous mode device ip_vti0 left promiscuous mode device ip6_vti0 left promiscuous mode device sit0 left promiscuous mode device ip6tnl0 left promiscuous mode device ip6gre0 left promiscuous mode device syz_tun left promiscuous mode device ip6gretap0 left promiscuous mode device bridge0 left promiscuous mode IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready device vcan0 left promiscuous mode IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready device bond0 left promiscuous mode 8021q: adding VLAN 0 to HW filter on device bond0 device team0 left promiscuous mode IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready 8021q: adding VLAN 0 to HW filter on device team0 device dummy0 left promiscuous mode device nlmon0 left promiscuous mode device caif0 left promiscuous mode A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.