IPVS: Creating netns size=2536 id=59 =============================== [ INFO: suspicious RCU usage. ] 4.9.62-gf09daf1 #91 Not tainted ------------------------------- net/ipv6/ip6_fib.c:1471 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 0 6 locks held by kworker/u4:2/178: #0: ("%s""netns"){.+.+.+}, at: [] __write_once_size include/linux/compiler.h:272 [inline] #0: ("%s""netns"){.+.+.+}, at: [] atomic64_set arch/x86/include/asm/atomic64_64.h:33 [inline] #0: ("%s""netns"){.+.+.+}, at: [] atomic_long_set include/asm-generic/atomic-long.h:56 [inline] #0: ("%s""netns"){.+.+.+}, at: [] set_work_data kernel/workqueue.c:616 [inline] #0: ("%s""netns"){.+.+.+}, at: [] set_work_pool_and_clear_pending kernel/workqueue.c:643 [inline] #0: ("%s""netns"){.+.+.+}, at: [] process_one_work+0x6a9/0x15f0 kernel/workqueue.c:2083 #1: (net_cleanup_work){+.+.+.}, at: [] process_one_work+0x6db/0x15f0 kernel/workqueue.c:2087 #2: (net_mutex){+.+.+.}, at: [] cleanup_net+0x13f/0x610 net/core/net_namespace.c:420 #3: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70 #4: (rcu_read_lock){......}, at: [] __fib6_clean_all+0x0/0x230 net/ipv6/ip6_fib.c:740 #5: (&tb->tb6_lock){++--..}, at: [] __fib6_clean_all+0xe0/0x230 net/ipv6/ip6_fib.c:1717 stack backtrace: CPU: 0 PID: 178 Comm: kworker/u4:2 Not tainted 4.9.62-gf09daf1 #91 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net ffff8801d9617148 ffffffff81d94429 ffff8801d9608000 0000000000000000 0000000000000002 ffffffff83f49540 ffffed003b2c2e79 ffff8801d9617178 ffffffff81239aa9 ffff8801d94b0000 ffff8801d94b0000 dffffc0000000000 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] lockdep_rcu_suspicious+0x139/0x180 kernel/locking/lockdep.c:4455 [] fib6_del+0x6ab/0xa30 net/ipv6/ip6_fib.c:1470 [] fib6_clean_node+0x336/0x4a0 net/ipv6/ip6_fib.c:1657 [] fib6_walk_continue+0x39b/0x620 net/ipv6/ip6_fib.c:1583 [] fib6_walk+0xd9/0x150 net/ipv6/ip6_fib.c:1628 [] fib6_clean_tree+0xe5/0x130 net/ipv6/ip6_fib.c:1702 [] __fib6_clean_all+0xf9/0x230 net/ipv6/ip6_fib.c:1718 [] fib6_clean_all+0x27/0x30 net/ipv6/ip6_fib.c:1729 [] rt6_ifdown+0xa1/0x7f0 net/ipv6/route.c:2715 [] addrconf_ifdown+0xd0/0x10f0 net/ipv6/addrconf.c:3565 [] addrconf_notify+0x948/0x2180 net/ipv6/addrconf.c:3489 [] notifier_call_chain+0x90/0x1a0 kernel/notifier.c:93 [] __raw_notifier_call_chain kernel/notifier.c:394 [inline] [] raw_notifier_call_chain+0x2d/0x40 kernel/notifier.c:401 [] call_netdevice_notifiers_info+0x51/0x90 net/core/dev.c:1646 [] call_netdevice_notifiers net/core/dev.c:1662 [inline] [] rollback_registered_many+0x5b6/0x960 net/core/dev.c:6805 [] unregister_netdevice_many.part.102+0x1b/0x110 net/core/dev.c:7852 [] unregister_netdevice_many net/core/dev.c:7851 [inline] [] default_device_exit_batch+0x34e/0x410 net/core/dev.c:8310 [] ops_exit_list.isra.4+0x100/0x150 net/core/net_namespace.c:139 [] cleanup_net+0x31d/0x610 net/core/net_namespace.c:454 [] process_one_work+0x78f/0x15f0 kernel/workqueue.c:2090 [] worker_thread+0xe0/0x10d0 kernel/workqueue.c:2224 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x2a/0x40 arch/x86/entry/entry_64.S:433 device gre0 entered promiscuous mode Option ' ћ"†u<<Ќ`ФНЮЂб/P}Ј$q_Ґй2Rўм’Ѓ_ЫR!Ч]¬њЎ' to dns_resolver key: bad/missing value device gre0 entered promiscuous mode Option ' ћ"†u<<Ќ`ФНЮЂб/P}Ј$q_Ґй2Rўм’Ѓ_ЫR!Ч]¬њЎ' to dns_resolver key: bad/missing value binder: 1433:1438 ioctl 8927 204dcfd8 returned -22 binder: 1433:1438 ioctl 8927 204dcfd8 returned -22 nla_parse: 19 callbacks suppressed netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 13 bytes leftover after parsing attributes in process `syz-executor2'. IPVS: Creating netns size=2536 id=60 netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 13 bytes leftover after parsing attributes in process `syz-executor2'. selinux_nlmsg_perm: 394 callbacks suppressed SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=2566 comm=syz-executor3 netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. binder: 3122:3130 ioctl 80084504 20008ff1 returned -22 binder: 3122:3149 ioctl 80084504 20008ff1 returned -22 IPVS: Creating netns size=2536 id=61 binder: 3689:3690 ioctl c0a85322 203a0f50 returned -22 binder: 3689:3699 ioctl c0a85322 203a0f50 returned -22 binder: 4256:4258 ioctl c0a85322 2034d000 returned -22 binder: 4256:4258 ioctl c008640a 209abff8 returned -22 binder: 4256:4269 ioctl c0a85322 2034d000 returned -22 binder: 4737:4739 ioctl 80605414 20fecf6c returned -22 binder: 4737:4739 ioctl 894b 20d1f000 returned -22 binder: 4737:4739 ioctl 80605414 20fecf6c returned -22 binder: 4737:4753 ioctl 894b 20d1f000 returned -22 nla_parse: 141 callbacks suppressed netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. IPVS: Creating netns size=2536 id=62