=============================== [ INFO: suspicious RCU usage. ] 4.4.172+ #13 Not tainted ------------------------------- net/ipv6/ip6_fib.c:1465 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 1, debug_locks = 0 6 locks held by udevd/31231: #0: (&sig->cred_guard_mutex){+.+.+.}, at: [] prepare_bprm_creds+0x55/0x120 fs/exec.c:1225 #1: (&anon_vma->rwsem){++++..}, at: [] lock_anon_vma_root mm/rmap.c:234 [inline] #1: (&anon_vma->rwsem){++++..}, at: [] unlink_anon_vmas+0x212/0x840 mm/rmap.c:384 #2: (((&net->ipv6.ip6_fib_timer))){+.-...}, at: [] lockdep_copy_map include/linux/lockdep.h:165 [inline] #2: (((&net->ipv6.ip6_fib_timer))){+.-...}, at: [] call_timer_fn+0xde/0x850 kernel/time/timer.c:1175 #3: (fib6_gc_lock){+.-...}, at: [] spin_lock_bh include/linux/spinlock.h:307 [inline] #3: (fib6_gc_lock){+.-...}, at: [] fib6_run_gc+0x3a/0x230 net/ipv6/ip6_fib.c:1811 #4: (rcu_read_lock){......}, at: [] __fib6_clean_all+0x0/0x240 net/ipv6/ip6_fib.c:1698 #5: (&tb->tb6_lock){++--..}, at: [] __fib6_clean_all+0xe8/0x240 net/ipv6/ip6_fib.c:1712 stack backtrace: CPU: 0 PID: 31231 Comm: udevd Not tainted 4.4.172+ #13 0000000000000000 a83689e164c5a012 ffff8801db607940 ffffffff81aacde1 ffff8800ba7b56c0 0000000000000000 0000000000000001 00000000000005b9 ffff8800a6cd2f80 ffff8801db607970 ffffffff813ab5d0 ffff8801db607b90 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [] lockdep_rcu_suspicious.cold+0x10a/0x149 kernel/locking/lockdep.c:4305 [] fib6_del+0x7ea/0xae0 net/ipv6/ip6_fib.c:1465 [] fib6_clean_node+0x29c/0x500 net/ipv6/ip6_fib.c:1652 [] fib6_walk_continue+0x3e0/0x630 net/ipv6/ip6_fib.c:1578 [] fib6_walk+0x91/0xe0 net/ipv6/ip6_fib.c:1623 [] fib6_clean_tree+0xe8/0x120 net/ipv6/ip6_fib.c:1697 [] __fib6_clean_all+0x100/0x240 net/ipv6/ip6_fib.c:1713 [] fib6_clean_all net/ipv6/ip6_fib.c:1724 [inline] [] fib6_run_gc+0xaf/0x230 net/ipv6/ip6_fib.c:1821 [] fib6_gc_timer_cb+0x1d/0x30 net/ipv6/ip6_fib.c:1836 [] call_timer_fn+0x18d/0x850 kernel/time/timer.c:1185 [] __run_timers kernel/time/timer.c:1261 [inline] [] run_timer_softirq+0x51f/0xb70 kernel/time/timer.c:1444 [] __do_softirq+0x226/0xa3f kernel/softirq.c:273 audit: type=1400 audit(1549086242.348:1064): avc: denied { create } for pid=31242 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1549086242.348:1065): avc: denied { write } for pid=31242 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [] invoke_softirq kernel/softirq.c:350 [inline] [] irq_exit+0x10a/0x150 kernel/softirq.c:391 [] exiting_irq arch/x86/include/asm/apic.h:652 [inline] [] smp_apic_timer_interrupt+0x7e/0xb0 arch/x86/kernel/apic/apic.c:926 audit: type=1400 audit(1549086242.348:1066): avc: denied { read } for pid=31242 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [] apic_timer_interrupt+0x9d/0xb0 arch/x86/entry/entry_64.S:768 hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz1 [] ? free_pgtables+0xb0/0x1c0 mm/memory.c:545 hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 hid-generic 0000:0000:0000.0018: hidraw1: HID v0.00 Device [syz1] on syz1 [] dump_trace+0x179/0x390 arch/x86/kernel/dumpstack_64.c:243 [] save_stack_trace+0x26/0x50 arch/x86/kernel/stacktrace.c:63 [] save_stack mm/kasan/kasan.c:512 [inline] [] set_track mm/kasan/kasan.c:524 [inline] [] kasan_slab_free+0xb0/0x190 mm/kasan/kasan.c:589 [] slab_free_hook mm/slub.c:1383 [inline] [] slab_free_freelist_hook mm/slub.c:1405 [inline] [] slab_free mm/slub.c:2859 [inline] [] kmem_cache_free+0xbe/0x350 mm/slub.c:2881 [] anon_vma_chain_free mm/rmap.c:129 [inline] [] unlink_anon_vmas+0x179/0x840 mm/rmap.c:397 [] free_pgtables+0xb0/0x1c0 mm/memory.c:545 [] exit_mmap+0x1e4/0x3a0 mm/mmap.c:2963 [] __mmput kernel/fork.c:717 [inline] [] mmput kernel/fork.c:737 [inline] [] mmput+0xde/0x360 kernel/fork.c:732 [] exec_mmap fs/exec.c:907 [inline] [] flush_old_exec+0x804/0x19e0 fs/exec.c:1131 [] load_elf_binary+0x876/0x4b80 fs/binfmt_elf.c:843 [] search_binary_handler fs/exec.c:1475 [inline] [] search_binary_handler+0x14f/0x700 fs/exec.c:1453 [] exec_binprm fs/exec.c:1517 [inline] [] do_execveat_common.isra.0+0x1007/0x1e90 fs/exec.c:1639 [] do_execve fs/exec.c:1683 [inline] [] SYSC_execve fs/exec.c:1764 [inline] [] SyS_execve+0x42/0x50 fs/exec.c:1759 [] stub_execve+0x5/0x5 arch/x86/entry/entry_64.S:440 audit: type=1400 audit(1549086243.138:1067): avc: denied { create } for pid=31242 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1549086244.558:1068): avc: denied { create } for pid=31268 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 audit: type=1400 audit(1549086244.578:1069): avc: denied { create } for pid=31267 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1549086244.578:1070): avc: denied { write } for pid=31267 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1549086244.698:1071): avc: denied { write } for pid=31268 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz1 hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz1 audit_printk_skb: 39 callbacks suppressed audit: type=1400 audit(1549086247.148:1085): avc: denied { create } for pid=31347 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1549086247.318:1086): avc: denied { create } for pid=31353 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 audit: type=1400 audit(1549086247.488:1087): avc: denied { write } for pid=31347 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 audit: type=1400 audit(1549086247.568:1088): avc: denied { write } for pid=31353 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 audit: type=1400 audit(1549086247.948:1089): avc: denied { read } for pid=31353 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 audit: type=1400 audit(1549086247.948:1090): avc: denied { read } for pid=31347 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz1 audit: type=1400 audit(1549086248.468:1091): avc: denied { create } for pid=31396 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 audit: type=1400 audit(1549086248.648:1092): avc: denied { write } for pid=31396 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 audit: type=1400 audit(1549086248.778:1093): avc: denied { create } for pid=31411 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 audit: type=1400 audit(1549086248.938:1094): avc: denied { write } for pid=31411 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz1 hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz1 hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz1 hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz1