=============================== [ INFO: suspicious RCU usage. ] 4.9.80-g550c01d #29 Not tainted ------------------------------- net/ipv6/ip6_fib.c:1471 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 0 3 locks held by syz-executor2/21273: #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70 #1: (rcu_read_lock){......}, at: [] __fib6_clean_all+0x0/0x230 net/ipv6/ip6_fib.c:740 #2: (&tb->tb6_lock){++--..}, at: [] __fib6_clean_all+0xe0/0x230 net/ipv6/ip6_fib.c:1717 stack backtrace: CPU: 1 PID: 21273 Comm: syz-executor2 Not tainted 4.9.80-g550c01d #29 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff8801d3557338 ffffffff81d94b69 ffff8801a6c7b000 0000000000000000 0000000000000002 ffffffff83f4be40 ffffed003a6aaeb7 ffff8801d3557368 ffffffff81238389 ffff8801d30f3a40 ffff8801d30f3a40 dffffc0000000000 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] lockdep_rcu_suspicious+0x139/0x180 kernel/locking/lockdep.c:4455 [] fib6_del+0x6ab/0xa30 net/ipv6/ip6_fib.c:1470 [] fib6_clean_node+0x336/0x4a0 net/ipv6/ip6_fib.c:1657 [] fib6_walk_continue+0x39b/0x620 net/ipv6/ip6_fib.c:1583 [] fib6_walk+0xd9/0x150 net/ipv6/ip6_fib.c:1628 [] fib6_clean_tree+0xe5/0x130 net/ipv6/ip6_fib.c:1702 [] __fib6_clean_all+0xf9/0x230 net/ipv6/ip6_fib.c:1718 [] fib6_clean_all+0x27/0x30 net/ipv6/ip6_fib.c:1729 [] rt6_ifdown+0xa1/0x7f0 net/ipv6/route.c:2715 [] addrconf_ifdown+0xd0/0x10f0 net/ipv6/addrconf.c:3566 [] addrconf_notify+0x948/0x2230 net/ipv6/addrconf.c:3490 [] notifier_call_chain+0x90/0x1a0 kernel/notifier.c:93 [] __raw_notifier_call_chain kernel/notifier.c:394 [inline] [] raw_notifier_call_chain+0x2d/0x40 kernel/notifier.c:401 [] call_netdevice_notifiers_info+0x51/0x90 net/core/dev.c:1647 [] call_netdevice_notifiers net/core/dev.c:1663 [inline] [] __dev_notify_flags+0x197/0x270 net/core/dev.c:6500 [] dev_change_flags+0xf5/0x140 net/core/dev.c:6531 [] devinet_ioctl+0xe35/0x14b0 net/ipv4/devinet.c:1052 [] inet_ioctl+0x117/0x1c0 net/ipv4/af_inet.c:908 [] packet_ioctl+0x15b/0x250 net/packet/af_packet.c:4077 [] sock_do_ioctl+0x65/0xb0 net/socket.c:892 [] sock_ioctl+0x2e0/0x3d0 net/socket.c:978 [] vfs_ioctl fs/ioctl.c:43 [inline] [] do_vfs_ioctl+0x1aa/0x1140 fs/ioctl.c:679 [] SYSC_ioctl fs/ioctl.c:694 [inline] [] SyS_ioctl+0x8f/0xc0 fs/ioctl.c:685 [] entry_SYSCALL_64_fastpath+0x29/0xe8 binder: 21299:21303 BC_CLEAR_DEATH_NOTIFICATION death notification not active binder: 21299:21303 ioctl c020aa04 20017ff0 returned -22 binder: 21299:21303 BC_DEAD_BINDER_DONE 0000000000000003 not found audit_printk_skb: 2490 callbacks suppressed audit: type=1400 audit(1517924558.635:39290): avc: denied { net_admin } for pid=3873 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924558.635:39291): avc: denied { dac_override } for pid=21453 comm="syz-executor5" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924558.635:39292): avc: denied { net_admin } for pid=21439 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 device gre0 entered promiscuous mode audit: type=1400 audit(1517924558.635:39293): avc: denied { net_raw } for pid=21439 comm="syz-executor0" capability=13 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924558.635:39294): avc: denied { net_admin } for pid=21439 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924558.665:39295): avc: denied { net_admin } for pid=3884 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924558.665:39296): avc: denied { net_admin } for pid=3884 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924558.665:39297): avc: denied { net_admin } for pid=3884 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924558.695:39298): avc: denied { net_admin } for pid=3882 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924558.705:39299): avc: denied { net_admin } for pid=3883 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode SELinux: policydb version -890667282 does not match my version range 15-30 SELinux: policydb version -890667282 does not match my version range 15-30 SELinux: policydb version -890667282 does not match my version range 15-30 SELinux: policydb version -890667282 does not match my version range 15-30 SELinux: policydb version -890667282 does not match my version range 15-30 SELinux: policydb version -890667282 does not match my version range 15-30 SELinux: policydb version -890667282 does not match my version range 15-30 SELinux: policydb version -890667282 does not match my version range 15-30 SELinux: policydb version -890667282 does not match my version range 15-30 device gre0 entered promiscuous mode device gre0 entered promiscuous mode audit_printk_skb: 2622 callbacks suppressed audit: type=1400 audit(1517924563.635:40174): avc: denied { net_admin } for pid=22606 comm="syz-executor7" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924563.645:40175): avc: denied { dac_override } for pid=22627 comm="syz-executor4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 SELinux: policydb version -890667282 does not match my version range 15-30 audit: type=1400 audit(1517924563.645:40176): avc: denied { net_admin } for pid=3887 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924563.645:40177): avc: denied { dac_override } for pid=22634 comm="syz-executor4" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924563.645:40178): avc: denied { net_admin } for pid=3872 comm="syz-executor0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924563.685:40179): avc: denied { net_admin } for pid=3873 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924563.685:40180): avc: denied { net_admin } for pid=3873 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924563.685:40181): avc: denied { net_admin } for pid=3873 comm="syz-executor2" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924563.685:40182): avc: denied { net_admin } for pid=3882 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1517924563.685:40183): avc: denied { net_admin } for pid=3882 comm="syz-executor5" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode device gre0 entered promiscuous mode