netlink: 276 bytes leftover after parsing attributes in process `syz-executor.2'. ============================= WARNING: suspicious RCU usage 5.10.123 #1 Not tainted ----------------------------- net/xfrm/xfrm_user.c:1110 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by syz-executor.2/31350: #0: ffff88800d86c510 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{3:3}, at: xfrm_netlink_rcv+0x5c/0x90 net/xfrm/xfrm_user.c:2878 stack backtrace: CPU: 0 PID: 31350 Comm: syz-executor.2 Not tainted 5.10.123 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x163 lib/dump_stack.c:118 xfrm_nlmsg_multicast net/xfrm/xfrm_user.c:1110 [inline] xfrm_notify_userpolicy net/xfrm/xfrm_user.c:1941 [inline] xfrm_set_default+0x642/0x740 net/xfrm/xfrm_user.c:1967 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 xfrm_user_rcv_msg+0x412/0x830 net/xfrm/xfrm_user.c:2857 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2515 xfrm_netlink_rcv+0x6b/0x90 net/xfrm/xfrm_user.c:2879 netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] netlink_unicast+0x53a/0x7e0 net/netlink/af_netlink.c:1339 netlink_sendmsg+0x901/0xdf0 net/netlink/af_netlink.c:1934 sock_sendmsg_nosec net/socket.c:651 [inline] sock_sendmsg+0x150/0x190 net/socket.c:671 ____sys_sendmsg+0x709/0x870 net/socket.c:2342 ___sys_sendmsg+0xf3/0x170 net/socket.c:2396 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2429 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f55587a4b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5555d1a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f55588b7f60 RCX: 00007f55587a4b19 RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 RBP: 00007f55587fef6d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff2e52aacf R14: 00007f5555d1a300 R15: 0000000000022000 CPU: 1 PID: 31351 Comm: syz-executor.5 Not tainted 5.10.123 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x107/0x163 lib/dump_stack.c:118 fail_dump lib/fault-inject.c:52 [inline] should_fail.cold+0x5/0xa lib/fault-inject.c:146 should_failslab+0x5/0x10 mm/slab_common.c:1193 slab_pre_alloc_hook mm/slab.h:515 [inline] slab_alloc_node mm/slub.c:2821 [inline] slab_alloc mm/slub.c:2904 [inline] kmem_cache_alloc+0x5b/0x350 mm/slub.c:2909 mem_pool_alloc mm/kmemleak.c:423 [inline] create_object.isra.0+0x3a/0xa20 mm/kmemleak.c:578 kmemleak_alloc_recursive include/linux/kmemleak.h:43 [inline] slab_post_alloc_hook mm/slab.h:534 [inline] slab_alloc_node mm/slub.c:2896 [inline] slab_alloc mm/slub.c:2904 [inline] kmem_cache_alloc_trace+0x151/0x360 mm/slub.c:2921 kmalloc include/linux/slab.h:552 [inline] __memcg_init_list_lru_node+0x7f/0x1e0 mm/list_lru.c:339 memcg_init_list_lru_node mm/list_lru.c:362 [inline] memcg_init_list_lru mm/list_lru.c:448 [inline] __list_lru_init+0x403/0x7e0 mm/list_lru.c:615 alloc_super+0x7f4/0x990 fs/super.c:272 sget+0x10b/0x500 fs/super.c:613 mount_nodev+0x2e/0x120 fs/super.c:1460 legacy_get_tree+0x105/0x220 fs/fs_context.c:592 vfs_get_tree+0x8e/0x2f0 fs/super.c:1549 do_new_mount fs/namespace.c:2899 [inline] path_mount+0x13ba/0x20a0 fs/namespace.c:3229 do_mount fs/namespace.c:3242 [inline] __do_sys_mount fs/namespace.c:3450 [inline] __se_sys_mount fs/namespace.c:3427 [inline] __x64_sys_mount+0x27e/0x300 fs/namespace.c:3427 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f9c93414b19 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9c9098a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f9c93527f60 RCX: 00007f9c93414b19 RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000000 RBP: 00007f9c9098a1d0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 00007ffca5e2140f R14: 00007f9c9098a300 R15: 0000000000022000