============================= WARNING: suspicious RCU usage 4.14.278-syzkaller #0 Not tainted ----------------------------- net/netfilter/nf_queue.c:244 suspicious rcu_dereference_check() usage! hub 9-0:1.0: 8 ports detected other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 2 locks held by ksoftirqd/0/7: #0: (rcu_callback){....}, at: [] __rcu_reclaim kernel/rcu/rcu.h:185 [inline] #0: (rcu_callback){....}, at: [] rcu_do_batch kernel/rcu/tree.c:2699 [inline] #0: (rcu_callback){....}, at: [] invoke_rcu_callbacks kernel/rcu/tree.c:2962 [inline] #0: (rcu_callback){....}, at: [] __rcu_process_callbacks kernel/rcu/tree.c:2929 [inline] #0: (rcu_callback){....}, at: [] rcu_process_callbacks+0x84e/0x1180 kernel/rcu/tree.c:2946 #1: (&(&inst->lock)->rlock){+.-.}, at: [] spin_lock_bh include/linux/spinlock.h:322 [inline] #1: (&(&inst->lock)->rlock){+.-.}, at: [] nfqnl_flush+0x2f/0x2a0 net/netfilter/nfnetlink_queue.c:232 stack backtrace: CPU: 0 PID: 7 Comm: ksoftirqd/0 Not tainted 4.14.278-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 nf_reinject+0x56e/0x700 net/netfilter/nf_queue.c:244 nfqnl_flush+0x1ab/0x2a0 net/netfilter/nfnetlink_queue.c:237 instance_destroy_rcu+0x19/0x30 net/netfilter/nfnetlink_queue.c:171 __rcu_reclaim kernel/rcu/rcu.h:195 [inline] rcu_do_batch kernel/rcu/tree.c:2699 [inline] invoke_rcu_callbacks kernel/rcu/tree.c:2962 [inline] __rcu_process_callbacks kernel/rcu/tree.c:2929 [inline] rcu_process_callbacks+0x780/0x1180 kernel/rcu/tree.c:2946 __do_softirq+0x24d/0x9ff kernel/softirq.c:288 run_ksoftirqd+0x50/0x1a0 kernel/softirq.c:670 smpboot_thread_fn+0x5c1/0x920 kernel/smpboot.c:164 kthread+0x30d/0x420 kernel/kthread.c:232 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:404 ip_tables: iptables: counters copy to user failed while replacing table netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 9pnet: Insufficient options for proto=fd ip_tables: iptables: counters copy to user failed while replacing table 9pnet: Insufficient options for proto=fd netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. ip_tables: iptables: counters copy to user failed while replacing table ip_tables: iptables: counters copy to user failed while replacing table netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. ip_tables: iptables: counters copy to user failed while replacing table hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected 8021q: adding VLAN 0 to HW filter on device team0 bond0: Enslaving team0 as an active interface with an up link syz-executor.4 (9649) used greatest stack depth: 24144 bytes left hub 9-0:1.0: USB hub found hub 9-0:1.0: 8 ports detected usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #0 usb usb9: usbfs: interface 0 claimed by usbfs while 'syz-executor.0' sets config #1 xt_l2tp: wrong L2TP version: 0 xt_l2tp: wrong L2TP version: 0 xt_l2tp: wrong L2TP version: 0 xt_l2tp: wrong L2TP version: 0 device lo entered promiscuous mode Dev loop0: unable to read RDB block 1 loop0: AHDI p1 loop0: partition table partially beyond EOD, truncated 8!}Y4`: renamed from lo syz-executor.5: sending ioctl c018937b to a partition! Dev loop0: unable to read RDB block 1 loop0: AHDI p1 syz-executor.5: sending ioctl c018937b to a partition! loop0: partition table partially beyond EOD, truncated device lo entered promiscuous mode device lo entered promiscuous mode syz-executor.5: sending ioctl c018937b to a partition! device lo entered promiscuous mode 8!}Y4`: renamed from lo 8!}Y4`: renamed from lo 8!}Y4`: renamed from lo Dev loop0: unable to read RDB block 1 loop0: AHDI p1 loop0: partition table partially beyond EOD, truncated syz-executor.5: sending ioctl c018937b to a partition! device lo entered promiscuous mode Dev loop0: unable to read RDB block 1 loop0: AHDI p1 loop0: partition table partially beyond EOD, truncated 8!}Y4`: renamed from lo ntfs: (device loop1): parse_options(): Unrecognized mount option uid<00000000000. ntfs: (device loop1): parse_options(): Unrecognized mount option uid<00000000000. EXT4-fs (sda1): re-mounted. Opts: