netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. ip_tables: iptables: counters copy to user failed while replacing table ============================= WARNING: suspicious RCU usage 4.14.278-syzkaller #0 Not tainted ----------------------------- net/netfilter/nf_queue.c:244 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 2 locks held by ksoftirqd/0/7: #0: (rcu_callback){....}, at: [] __rcu_reclaim kernel/rcu/rcu.h:185 [inline] #0: (rcu_callback){....}, at: [] rcu_do_batch kernel/rcu/tree.c:2699 [inline] #0: (rcu_callback){....}, at: [] invoke_rcu_callbacks kernel/rcu/tree.c:2962 [inline] #0: (rcu_callback){....}, at: [] __rcu_process_callbacks kernel/rcu/tree.c:2929 [inline] #0: (rcu_callback){....}, at: [] rcu_process_callbacks+0x84e/0x1180 kernel/rcu/tree.c:2946 #1: (&(&inst->lock)->rlock){+.-.}, at: [] spin_lock_bh include/linux/spinlock.h:322 [inline] #1: (&(&inst->lock)->rlock){+.-.}, at: [] nfqnl_flush+0x2f/0x2a0 net/netfilter/nfnetlink_queue.c:232 stack backtrace: CPU: 0 PID: 7 Comm: ksoftirqd/0 Not tainted 4.14.278-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 nf_reinject+0x56e/0x700 net/netfilter/nf_queue.c:244 nfqnl_flush+0x1ab/0x2a0 net/netfilter/nfnetlink_queue.c:237 instance_destroy_rcu+0x19/0x30 net/netfilter/nfnetlink_queue.c:171 __rcu_reclaim kernel/rcu/rcu.h:195 [inline] rcu_do_batch kernel/rcu/tree.c:2699 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2962 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2929 [inline] rcu_process_callbacks+0x780/0x1180 kernel/rcu/tree.c:2946 __do_softirq+0x24d/0x9ff kernel/softirq.c:288 run_ksoftirqd+0x50/0x1a0 kernel/softirq.c:670 smpboot_thread_fn+0x5c1/0x920 kernel/smpboot.c:164 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. ip_tables: iptables: counters copy to user failed while replacing table audit: type=1804 audit(1652369318.920:2): pid=11220 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir3304501378/syzkaller.9pXdy0/43/bus" dev="sda1" ino=14121 res=1 ip_tables: iptables: counters copy to user failed while replacing table audit: type=1804 audit(1652369318.970:3): pid=11220 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir3304501378/syzkaller.9pXdy0/43/bus" dev="sda1" ino=14121 res=1 netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. ip_tables: iptables: counters copy to user failed while replacing table netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. ip_tables: iptables: counters copy to user failed while replacing table unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. ip_tables: iptables: counters copy to user failed while replacing table ip_tables: iptables: counters copy to user failed while replacing table audit: type=1804 audit(1652369319.560:4): pid=11263 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir3304501378/syzkaller.9pXdy0/44/bus" dev="sda1" ino=14100 res=1 audit: type=1804 audit(1652369319.600:5): pid=11263 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir3304501378/syzkaller.9pXdy0/44/bus" dev="sda1" ino=14100 res=1 IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 3, id = 0 audit: type=1804 audit(1652369320.311:6): pid=11299 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir3304501378/syzkaller.9pXdy0/45/bus" dev="sda1" ino=14141 res=1 audit: type=1804 audit(1652369320.351:7): pid=11299 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir3304501378/syzkaller.9pXdy0/45/bus" dev="sda1" ino=14141 res=1 audit: type=1804 audit(1652369321.201:8): pid=11312 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir3813727676/syzkaller.9UoH6I/63/file0" dev="sda1" ino=14143 res=1 audit: type=1804 audit(1652369321.221:9): pid=11322 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir2886801731/syzkaller.j4j2Qy/54/file0" dev="sda1" ino=14058 res=1 audit: type=1804 audit(1652369321.331:10): pid=11380 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir3304501378/syzkaller.9pXdy0/46/bus" dev="sda1" ino=14149 res=1 IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 3, id = 0 audit: type=1804 audit(1652369321.331:11): pid=11380 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir3304501378/syzkaller.9pXdy0/46/bus" dev="sda1" ino=14149 res=1 IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 3, id = 0 bridge0: port 2(bridge_slave_1) entered disabled state bridge0: port 1(bridge_slave_0) entered disabled state EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. kauditd_printk_skb: 3 callbacks suppressed audit: type=1800 audit(1652369324.191:15): pid=11646 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=14166 res=0 EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue audit: type=1804 audit(1652369324.281:16): pid=11639 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir3813727676/syzkaller.9UoH6I/69/file0" dev="sda1" ino=14166 res=1 audit: type=1804 audit(1652369324.811:17): pid=11615 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir3480750587/syzkaller.c9hazU/83/file0" dev="sda1" ino=14132 res=1 netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. audit: type=1800 audit(1652369325.841:18): pid=11718 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=14122 res=0 audit: type=1804 audit(1652369325.871:19): pid=11718 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir3813727676/syzkaller.9UoH6I/71/file0" dev="sda1" ino=14122 res=1 audit: type=1804 audit(1652369325.981:20): pid=11687 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir2886801731/syzkaller.j4j2Qy/65/file0" dev="sda1" ino=14137 res=1 netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'.