============================= WARNING: suspicious RCU usage 4.15.0-rc6-next-20180102+ #86 Not tainted ----------------------------- net/netfilter/ipset/ip_set_core.c:2057 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u4:0/5: #0: ((wq_completion)"%s""netns"){+.+.}, at: [<0000000069d818c7>] process_one_work+0x71f/0x14a0 kernel/workqueue.c:2083 #1: (net_cleanup_work){+.+.}, at: [<00000000a273a654>] process_one_work+0x757/0x14a0 kernel/workqueue.c:2087 #2: (net_mutex){+.+.}, at: [<00000000fe75910b>] cleanup_net+0x139/0x8b0 net/core/net_namespace.c:450 stack backtrace: CPU: 1 PID: 5 Comm: kworker/u4:0 Not tainted 4.15.0-rc6-next-20180102+ #86 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x137/0x198 lib/dump_stack.c:53 lockdep_rcu_suspicious+0x123/0x170 kernel/locking/lockdep.c:4585 ip_set_net_exit+0x2c6/0x480 net/netfilter/ipset/ip_set_core.c:2057 ops_exit_list.isra.6+0xae/0x150 net/core/net_namespace.c:142 cleanup_net+0x3f3/0x8b0 net/core/net_namespace.c:484 process_one_work+0x801/0x14a0 kernel/workqueue.c:2112 worker_thread+0xe0/0x1010 kernel/workqueue.c:2246 kthread+0x33c/0x400 kernel/kthread.c:238 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:524 binder_alloc: 13812: binder_alloc_buf failed to map page at 20000000 in userspace binder: 13812:13816 transaction failed 29201/-12, size 0-0 line 2960 binder: 13812:13816 ioctl 540f 20f89000 returned -22 binder: BINDER_SET_CONTEXT_MGR already set binder: 13812:13822 ioctl 40046207 0 returned -16 binder_alloc: 13812: binder_alloc_buf, no vma binder: 13812:13822 transaction failed 29189/-3, size 0-0 line 2960 binder: 13812:13816 ioctl 540f 20f89000 returned -22 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 13824:13837 ioctl c018620b 20008000 returned -14 binder: 13824:13837 ERROR: BC_REGISTER_LOOPER called without request binder: 13837 RLIMIT_NICE not set binder: 13837 RLIMIT_NICE not set binder: 13837 RLIMIT_NICE not set binder: 13824:13837 got transaction with invalid offset (0, min 0 max 9) or object. binder: 13824:13837 transaction failed 29201/-22, size 9-8 line 3023 binder: send failed reply for transaction 68 to 13824:13849 binder: 13824:13849 DecRefs 0 refcount change on invalid ref 1 ret -22 binder: 13824:13849 BC_INCREFS_DONE node 67 has no pending increfs request binder: BINDER_SET_CONTEXT_MGR already set binder: 13824:13849 ioctl 40046207 0 returned -16 binder: 13824:13849 ERROR: BC_REGISTER_LOOPER called without request binder: 13849 RLIMIT_NICE not set binder_alloc: 13824: binder_alloc_buf, no vma binder: 13824:13863 transaction failed 29189/-3, size 0-0 line 2960 binder: 13824:13863 got reply transaction with no transaction stack binder: 13824:13863 transaction failed 29201/-71, size 9-8 line 2760 binder: undelivered TRANSACTION_ERROR: 29190 binder: undelivered TRANSACTION_ERROR: 29201 kauditd_printk_skb: 187 callbacks suppressed audit: type=1400 audit(1514913407.109:6600): avc: denied { dac_override } for pid=13878 comm="syz-executor5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 QAT: Invalid ioctl QAT: Invalid ioctl audit: type=1400 audit(1514913407.126:6601): avc: denied { net_admin } for pid=13893 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1514913407.174:6602): avc: denied { sys_admin } for pid=13905 comm="syz-executor2" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1514913407.623:6603): avc: denied { net_raw } for pid=13931 comm="syz-executor7" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 nla_parse: 2 callbacks suppressed netlink: 11 bytes leftover after parsing attributes in process `syz-executor2'. audit: type=1400 audit(1514913407.778:6604): avc: denied { dac_read_search } for pid=13962 comm="syz-executor2" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 netlink: 11 bytes leftover after parsing attributes in process `syz-executor2'. binder_alloc: 13983: binder_alloc_buf size 7308332182914596872 failed, no address space binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) binder: 13983:13992 transaction failed 29201/-28, size 7-7308332182914596864 line 2960 binder: undelivered TRANSACTION_ERROR: 29201 binder_alloc: 13983: binder_alloc_buf, no vma binder: 13983:13992 transaction failed 29189/-3, size 7-7308332182914596864 line 2960 binder: undelivered TRANSACTION_ERROR: 29189 audit: type=1400 audit(1514913407.937:6605): avc: denied { write } for pid=14024 comm="syz-executor3" path="socket:[40245]" dev="sockfs" ino=40245 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 audit: type=1326 audit(1514913408.068:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=14057 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 netlink: 17 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 17 bytes leftover after parsing attributes in process `syz-executor5'. audit: type=1326 audit(1514913408.096:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=14057 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x452ac9 code=0x7ffc0000 audit: type=1326 audit(1514913408.097:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=14057 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 audit: type=1326 audit(1514913408.099:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=14057 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=166 compat=0 ip=0x452ac9 code=0x7ffc0000 device gre0 left promiscuous mode device syz7 entered promiscuous mode encrypted_key: insufficient parameters specified kvm [14404]: vcpu0, guest rIP: 0xfff0 ignored wrmsr: 0x11e data 0x0 encrypted_key: insufficient parameters specified kvm [14404]: vcpu0, guest rIP: 0xfff0 ignored wrmsr: 0x11e data 0x0 device eql entered promiscuous mode netlink: 'syz-executor7': attribute type 1 has an invalid length. netlink: 'syz-executor7': attribute type 1 has an invalid length. device gre0 entered promiscuous mode device syz5 entered promiscuous mode dccp_invalid_packet: P.Data Offset(4) too small dccp_invalid_packet: P.Data Offset(4) too small device gre0 entered promiscuous mode device lo entered promiscuous mode device syz4 entered promiscuous mode kauditd_printk_skb: 74 callbacks suppressed audit: type=1326 audit(1514913412.907:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15309 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 audit: type=1326 audit(1514913412.908:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15309 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 audit: type=1326 audit(1514913412.908:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15309 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=82 compat=0 ip=0x452ac9 code=0x7ffc0000 audit: type=1326 audit(1514913412.908:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15309 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 audit: type=1326 audit(1514913412.908:6688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15309 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 audit: type=1326 audit(1514913412.909:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15309 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x452ac9 code=0x7ffc0000 audit: type=1326 audit(1514913412.909:6690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15309 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 audit: type=1326 audit(1514913412.909:6691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15309 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 audit: type=1326 audit(1514913412.910:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15309 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=9 compat=0 ip=0x452ac9 code=0x7ffc0000 audit: type=1326 audit(1514913412.921:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=15309 comm="syz-executor6" exe="/root/syz-executor6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452ac9 code=0x7ffc0000 netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. RDS: rds_bind could not find a transport for 172.20.4.187, load rds_tcp or rds_rdma? RDS: rds_bind could not find a transport for 172.20.4.187, load rds_tcp or rds_rdma?