===============================
[ INFO: suspicious RCU usage. ]
4.9.154+ #22 Not tainted
-------------------------------
net/ipv6/ip6_fib.c:1470 suspicious rcu_dereference_protected() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 0
6 locks held by syz-executor1/17744:
 #0:  (tasklist_lock){.+.?..}, at: [<ffffffff810eb651>] do_wait+0x371/0x930 kernel/exit.c:1558
 #1:  (rcu_read_lock){......}, at: [<ffffffff819f0cec>] INIT_LIST_HEAD include/linux/list.h:28 [inline]
 #1:  (rcu_read_lock){......}, at: [<ffffffff819f0cec>] avc_compute_av+0xac/0x610 security/selinux/avc.c:973
 #2:  (((&net->ipv6.ip6_fib_timer))){+.-...}, at: [<ffffffff812622ee>] lockdep_copy_map include/linux/lockdep.h:165 [inline]
 #2:  (((&net->ipv6.ip6_fib_timer))){+.-...}, at: [<ffffffff812622ee>] call_timer_fn+0xde/0x6d0 kernel/time/timer.c:1309
 #3:  (&(&net->ipv6.fib6_gc_lock)->rlock){+.-...}, at: [<ffffffff826eebf2>] spin_lock_bh include/linux/spinlock.h:307 [inline]
 #3:  (&(&net->ipv6.fib6_gc_lock)->rlock){+.-...}, at: [<ffffffff826eebf2>] fib6_run_gc+0xa2/0x2e0 net/ipv6/ip6_fib.c:1816
 #4:  (rcu_read_lock){......}, at: [<ffffffff826e6400>] __fib6_clean_all+0x0/0x230 net/ipv6/ip6_fib.c:1703
 #5:  (&tb->tb6_lock){++--..}, at: [<ffffffff826e64e3>] __fib6_clean_all+0xe3/0x230 net/ipv6/ip6_fib.c:1717

stack backtrace:
CPU: 1 PID: 17744 Comm: syz-executor1 Not tainted 4.9.154+ #22
 ffff8801db707890 ffffffff81b47411 ffff8801cab81dc0 0000000000000000
 0000000000000002 00000000000005be ffff8801cd05af80 ffff8801db7078c0
 ffffffff813feb85 ffff8801db707ae0 dffffc0000000000 00000000ffffffff
Call Trace:
 <IRQ> [ 3127.898638]  [<ffffffff81b47411>] __dump_stack lib/dump_stack.c:15 [inline]
 <IRQ> [ 3127.898638]  [<ffffffff81b47411>] dump_stack+0xc1/0x120 lib/dump_stack.c:51
 [<ffffffff813feb85>] lockdep_rcu_suspicious.cold+0x10a/0x149 kernel/locking/lockdep.c:4455
 [<ffffffff826ee34f>] fib6_del+0x81f/0xb20 net/ipv6/ip6_fib.c:1470
 [<ffffffff826ee8ec>] fib6_clean_node+0x29c/0x4d0 net/ipv6/ip6_fib.c:1657
 [<ffffffff826e5cd0>] fib6_walk_continue+0x3e0/0x630 net/ipv6/ip6_fib.c:1583
 [<ffffffff826e628d>] fib6_walk+0x9d/0xf0 net/ipv6/ip6_fib.c:1628
 [<ffffffff826e63c7>] fib6_clean_tree+0xe7/0x120 net/ipv6/ip6_fib.c:1702
 [<ffffffff826e64fb>] __fib6_clean_all+0xfb/0x230 net/ipv6/ip6_fib.c:1718
 [<ffffffff826eec74>] fib6_clean_all net/ipv6/ip6_fib.c:1729 [inline]
 [<ffffffff826eec74>] fib6_run_gc+0x124/0x2e0 net/ipv6/ip6_fib.c:1826
 [<ffffffff826eee4d>] fib6_gc_timer_cb+0x1d/0x30 net/ipv6/ip6_fib.c:1841
 [<ffffffff81262377>] call_timer_fn+0x167/0x6d0 kernel/time/timer.c:1319
 [<ffffffff81262b3b>] expire_timers+0x25b/0x5c0 kernel/time/timer.c:1359
 [<ffffffff8126309f>] __run_timers kernel/time/timer.c:1674 [inline]
 [<ffffffff8126309f>] run_timer_softirq+0x1ff/0x620 kernel/time/timer.c:1687
 [<ffffffff8281b87d>] __do_softirq+0x22d/0x964 kernel/softirq.c:288
 [<ffffffff810eeac9>] invoke_softirq kernel/softirq.c:368 [inline]
 [<ffffffff810eeac9>] irq_exit+0x119/0x160 kernel/softirq.c:409
 [<ffffffff8281a3be>] exiting_irq arch/x86/include/asm/apic.h:669 [inline]
 [<ffffffff8281a3be>] smp_apic_timer_interrupt+0x7e/0xb0 arch/x86/kernel/apic/apic.c:962
 [<ffffffff82817c2d>] apic_timer_interrupt+0x9d/0xb0 arch/x86/entry/entry_64.S:648
 <EOI> [ 3128.164458]  [<ffffffff82815bcf>] ? arch_local_irq_restore arch/x86/include/asm/paravirt.h:768 [inline]
 <EOI> [ 3128.164458]  [<ffffffff82815bcf>] ? __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:162 [inline]
 <EOI> [ 3128.164458]  [<ffffffff82815bcf>] ? _raw_spin_unlock_irqrestore+0x5f/0x70 kernel/locking/spinlock.c:191
 [<ffffffff819efa0a>] spin_unlock_irqrestore include/linux/spinlock.h:362 [inline]
 [<ffffffff819efa0a>] avc_reclaim_node security/selinux/avc.c:541 [inline]
 [<ffffffff819efa0a>] avc_alloc_node security/selinux/avc.c:559 [inline]
 [<ffffffff819efa0a>] avc_alloc_node+0x29a/0x3c0 security/selinux/avc.c:547
 [<ffffffff819f0dc2>] avc_insert security/selinux/avc.c:670 [inline]
 [<ffffffff819f0dc2>] avc_compute_av+0x182/0x610 security/selinux/avc.c:976
 [<ffffffff819f2b05>] avc_has_perm_noaudit security/selinux/avc.c:1112 [inline]
 [<ffffffff819f2b05>] avc_has_perm+0x355/0x3a0 security/selinux/avc.c:1146
 [<ffffffff819fcda0>] task_has_perm+0x200/0x330 security/selinux/hooks.c:1615
 [<ffffffff819fcef4>] selinux_task_wait+0x24/0x30 security/selinux/hooks.c:3954
 [<ffffffff819ebc63>] security_task_wait+0x73/0xb0 security/security.c:1039
 [<ffffffff810e7f94>] wait_consider_task+0x294/0x35e0 kernel/exit.c:1377
 [<ffffffff810eb6dc>] do_wait_thread kernel/exit.c:1490 [inline]
 [<ffffffff810eb6dc>] do_wait+0x3fc/0x930 kernel/exit.c:1561
 [<ffffffff810ec734>] SYSC_wait4 kernel/exit.c:1693 [inline]
 [<ffffffff810ec734>] SyS_wait4+0x144/0x210 kernel/exit.c:1658
 [<ffffffff810056bd>] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285
 [<ffffffff82816493>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
audit_printk_skb: 3 callbacks suppressed
audit: type=1400 audit(2000000011.141:7348): avc:  denied  { create } for  pid=30153 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
audit: type=1400 audit(2000000011.170:7349): avc:  denied  { write } for  pid=30153 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
audit: type=1400 audit(2000000011.339:7350): avc:  denied  { read } for  pid=30153 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
audit: type=1400 audit(2000000011.379:7351): avc:  denied  { create } for  pid=30153 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1