netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. ip_tables: iptables: counters copy to user failed while replacing table ============================= WARNING: suspicious RCU usage 4.14.281-syzkaller #0 Not tainted ----------------------------- net/netfilter/nf_queue.c:244 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 2 locks held by ksoftirqd/0/7: #0: (rcu_callback){....}, at: [] __rcu_reclaim kernel/rcu/rcu.h:185 [inline] #0: (rcu_callback){....}, at: [] rcu_do_batch kernel/rcu/tree.c:2699 [inline] #0: (rcu_callback){....}, at: [] invoke_rcu_callbacks kernel/rcu/tree.c:2962 [inline] #0: (rcu_callback){....}, at: [] __rcu_process_callbacks kernel/rcu/tree.c:2929 [inline] #0: (rcu_callback){....}, at: [] rcu_process_callbacks+0x84e/0x1180 kernel/rcu/tree.c:2946 #1: (&(&inst->lock)->rlock){+.-.}, at: [] spin_lock_bh include/linux/spinlock.h:322 [inline] #1: (&(&inst->lock)->rlock){+.-.}, at: [] nfqnl_flush+0x2f/0x2a0 net/netfilter/nfnetlink_queue.c:232 stack backtrace: CPU: 0 PID: 7 Comm: ksoftirqd/0 Not tainted 4.14.281-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 nf_reinject+0x56e/0x700 net/netfilter/nf_queue.c:244 nfqnl_flush+0x1ab/0x2a0 net/netfilter/nfnetlink_queue.c:237 instance_destroy_rcu+0x19/0x30 net/netfilter/nfnetlink_queue.c:171 __rcu_reclaim kernel/rcu/rcu.h:195 [inline] rcu_do_batch kernel/rcu/tree.c:2699 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2962 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2929 [inline] rcu_process_callbacks+0x780/0x1180 kernel/rcu/tree.c:2946 __do_softirq+0x24d/0x9ff kernel/softirq.c:288 run_ksoftirqd+0x50/0x1a0 kernel/softirq.c:670 smpboot_thread_fn+0x5c1/0x920 kernel/smpboot.c:164 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. net_ratelimit: 2 callbacks suppressed ip_tables: iptables: counters copy to user failed while replacing table netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. ip_tables: iptables: counters copy to user failed while replacing table netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. ip_tables: iptables: counters copy to user failed while replacing table bridge0: port 2(bridge_slave_1) entered disabled state device bridge_slave_1 left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state hsr_slave_0: hsr_addr_subst_dest: Unknown node hsr_slave_1: hsr_addr_subst_dest: Unknown node hsr_slave_0: hsr_addr_subst_dest: Unknown node hsr_slave_1: hsr_addr_subst_dest: Unknown node hsr_slave_0: hsr_addr_subst_dest: Unknown node hsr_slave_1: hsr_addr_subst_dest: Unknown node hsr_slave_0: hsr_addr_subst_dest: Unknown node netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. audit: type=1800 audit(1653468288.836:27): pid=13274 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=14436 res=0 device hsr0 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. audit: type=1800 audit(1653468289.546:28): pid=13297 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=14431 res=0 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. audit: type=1800 audit(1653468289.786:29): pid=13315 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=13887 res=0 device hsr0 left promiscuous mode device hsr0 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready FAT-fs (loop5): bogus number of reserved sectors IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready FAT-fs (loop5): Can't find a valid FAT filesystem netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. audit: type=1800 audit(1653468290.126:30): pid=13326 uid=0 auid=4294967295 ses=4294967295 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=14097 res=0 device hsr0 entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready device hsr0 left promiscuous mode device hsr0 entered promiscuous mode