=============================== [ INFO: suspicious RCU usage. ] 4.9.60-gdfe0a9b #81 Not tainted ------------------------------- net/ipv6/ip6_fib.c:1471 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 0 6 locks held by kworker/u4:2/45: #0: ("%s""netns"){.+.+.+}, at: [] __write_once_size include/linux/compiler.h:272 [inline] #0: ("%s""netns"){.+.+.+}, at: [] atomic64_set arch/x86/include/asm/atomic64_64.h:33 [inline] #0: ("%s""netns"){.+.+.+}, at: [] atomic_long_set include/asm-generic/atomic-long.h:56 [inline] #0: ("%s""netns"){.+.+.+}, at: [] set_work_data kernel/workqueue.c:616 [inline] #0: ("%s""netns"){.+.+.+}, at: [] set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline] #0: ("%s""netns"){.+.+.+}, at: [] process_one_work+0x6a9/0x15f0 kernel/workqueue.c:2083 #1: (net_cleanup_work){+.+.+.}, at: [] process_one_work+0x6db/0x15f0 kernel/workqueue.c:2087 #2: (net_mutex){+.+.+.}, at: [] cleanup_net+0x13f/0x610 net/core/net_namespace.c:420 #3: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70 #4: (rcu_read_lock){......}, at: [] __fib6_clean_all+0x0/0x230 net/ipv6/ip6_fib.c:740 #5: (&tb->tb6_lock){++--..}, at: [] __fib6_clean_all+0xe0/0x230 net/ipv6/ip6_fib.c:1717 stack backtrace: CPU: 1 PID: 45 Comm: kworker/u4:2 Not tainted 4.9.60-gdfe0a9b #81 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net ffff8801d99370c8 ffffffff81d91389 ffff8801d9928000 0000000000000000 0000000000000002 ffffffff83f48cc0 ffffed003b326e69 ffff8801d99370f8 ffffffff81237ff9 ffff8801a2f6e8c0 ffff8801a2f6e8c0 dffffc0000000000 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] lockdep_rcu_suspicious+0x139/0x180 kernel/locking/lockdep.c:4455 [] fib6_del+0x6ab/0xa30 net/ipv6/ip6_fib.c:1470 [] fib6_clean_node+0x336/0x4a0 net/ipv6/ip6_fib.c:1657 [] fib6_walk_continue+0x39b/0x620 net/ipv6/ip6_fib.c:1583 [] fib6_walk+0xd9/0x150 net/ipv6/ip6_fib.c:1628 [] fib6_clean_tree+0xe5/0x130 net/ipv6/ip6_fib.c:1702 [] __fib6_clean_all+0xf9/0x230 net/ipv6/ip6_fib.c:1718 [] fib6_clean_all+0x27/0x30 net/ipv6/ip6_fib.c:1729 [] rt6_ifdown+0xa1/0x7f0 net/ipv6/route.c:2715 [] addrconf_ifdown+0xd0/0x10f0 net/ipv6/addrconf.c:3565 [] addrconf_notify+0x948/0x2180 net/ipv6/addrconf.c:3489 [] notifier_call_chain+0x90/0x1a0 kernel/notifier.c:93 [] __raw_notifier_call_chain kernel/notifier.c:394 [inline] [] raw_notifier_call_chain+0x2d/0x40 kernel/notifier.c:401 [] call_netdevice_notifiers_info+0x51/0x90 net/core/dev.c:1646 [] call_netdevice_notifiers net/core/dev.c:1662 [inline] [] dev_close_many+0x254/0x370 net/core/dev.c:1455 [] rollback_registered_many+0x27a/0x960 net/core/dev.c:6783 [] unregister_netdevice_many.part.102+0x1b/0x110 net/core/dev.c:7852 [] unregister_netdevice_many+0x39/0x50 net/core/dev.c:7851 [] sit_exit_net+0x3fe/0x600 net/ipv6/sit.c:1853 [] ops_exit_list.isra.4+0xae/0x150 net/core/net_namespace.c:136 [] cleanup_net+0x31d/0x610 net/core/net_namespace.c:454 [] process_one_work+0x78f/0x15f0 kernel/workqueue.c:2090 [] worker_thread+0xe0/0x10d0 kernel/workqueue.c:2224 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x2a/0x40 arch/x86/entry/entry_64.S:433 device lo left promiscuous mode device lo entered promiscuous mode qtaguid: iface_stat: create(lo): no inet dev qtaguid: iface_stat: create6(lo): no inet dev IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready qtaguid: iface_stat: create6(lo): no inet dev device lo left promiscuous mode IPVS: Creating netns size=2536 id=157 binder: 14756:14757 ioctl 89a0 20001ff0 returned -22 binder: 14756:14757 ioctl 8955 20002fbc returned -22 binder: 14756:14757 ioctl 5424 20003ffc returned -22 binder: 14756:14757 ioctl 5417 20005ffc returned -22 binder: 14756:14763 ioctl 89a0 20001ff0 returned -22 binder: 14756:14757 ioctl 8955 20002fbc returned -22 binder: 14756:14763 ioctl 5424 20003ffc returned -22 binder: 14756:14763 ioctl 5417 20005ffc returned -22 binder: 14806:14807 ioctl 89a0 20001ff0 returned -22 binder: 14806:14807 ioctl 8955 20002fbc returned -22 binder: 14806:14807 ioctl 5424 20003ffc returned -22 binder: 14806:14836 ioctl 5417 20005ffc returned -22 binder: 14806:14859 ioctl 89a0 20001ff0 returned -22 binder: 14806:14836 ioctl 8955 20002fbc returned -22 binder: 14806:14859 ioctl 5424 20003ffc returned -22 binder: 14806:14859 ioctl 5417 20005ffc returned -22 binder: 14891:14893 ioctl 89a0 20001ff0 returned -22 binder: 14891:14893 ioctl 8955 20002fbc returned -22 binder: 14891:14893 ioctl 5424 20003ffc returned -22 binder: 14891:14920 ioctl 5417 20005ffc returned -22 binder: 14891:14956 ioctl 89a0 20001ff0 returned -22 binder: 14891:14920 ioctl 8955 20002fbc returned -22 binder: 14891:14960 ioctl 5424 20003ffc returned -22 binder: 14891:14920 ioctl 5417 20005ffc returned -22 netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. netlink: 41 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 41 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 41 bytes leftover after parsing attributes in process `syz-executor5'. netlink: 41 bytes leftover after parsing attributes in process `syz-executor5'. binder: 17836:17845 ioctl 5457 20881000 returned -22