last executing test programs: 992.525645ms ago: executing program 3: userfaultfd(0x0) 944.408134ms ago: executing program 3: sched_getaffinity(0x0, 0x0, &(0x7f0000000000)) 870.067744ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ptrace', 0x2, 0x0) 802.886136ms ago: executing program 3: io_cancel(0x0, &(0x7f0000000000), &(0x7f0000000000)) 746.97535ms ago: executing program 3: socket$inet(0x2, 0x1, 0x0) 666.994015ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1', 0x800, 0x0) 532.617439ms ago: executing program 1: cachestat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0) 491.391768ms ago: executing program 0: get_robust_list(0x0, &(0x7f0000000000), &(0x7f0000000000)) 454.52281ms ago: executing program 4: pwritev2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 440.749224ms ago: executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) 433.55473ms ago: executing program 1: socket$hf(0x13, 0x2, 0x0) 423.184825ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio', 0x800, 0x0) 387.962984ms ago: executing program 4: ioperm(0x0, 0x0, 0x0) 367.947134ms ago: executing program 2: timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0) 350.403948ms ago: executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) 331.456302ms ago: executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid', 0x800, 0x0) 298.984139ms ago: executing program 4: uselib(&(0x7f0000000000)) 294.388885ms ago: executing program 2: mlockall(0x0) 286.161893ms ago: executing program 5: msync(0x0, 0x0, 0x0) 277.551095ms ago: executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) 248.48521ms ago: executing program 4: socket$isdn_base(0x22, 0x3, 0x0) 225.2087ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/msm', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/msm', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/msm', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/msm', 0x800, 0x0) 200.594547ms ago: executing program 5: rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x0) 187.601405ms ago: executing program 1: rename(&(0x7f0000000000), &(0x7f0000000000)) 168.931029ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0', 0x2, 0x0) 167.969371ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load', 0x2, 0x0) 167.835851ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey', 0x800, 0x0) 138.228689ms ago: executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso', 0x2, 0x0) 119.4986ms ago: executing program 1: lremovexattr(&(0x7f0000000000), &(0x7f0000000000)) 104.872582ms ago: executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) 93.075051ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio', 0x800, 0x0) 82.240346ms ago: executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) 62.25242ms ago: executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 46.18199ms ago: executing program 5: llistxattr(&(0x7f0000000000), &(0x7f0000000000), 0x0) 17.623338ms ago: executing program 5: socket$bt_rfcomm(0x1f, 0x1, 0x3) 0s ago: executing program 1: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 102.217363][ T1157] cfg80211: failed to load regulatory.db 2024/06/18 02:58:05 fuzzer started 2024/06/18 02:58:05 dialing manager at 10.128.0.169:30005 [ 103.776562][ T5096] cgroup: Unknown subsys name 'net' [ 104.151733][ T5096] cgroup: Unknown subsys name 'rlimit' [ 106.024575][ T5115] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/06/18 02:58:08 starting 6 executor processes [ 109.709456][ T5327] mmap: syz-executor.0 (5327) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.162027][ T5567] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.056972][ T5594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.070445][ T5594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.089928][ T5594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.137089][ T5594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.148417][ T5594] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 114.166775][ T5594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.801588][ T2439] [ 114.804258][ T2439] ============================= [ 114.809225][ T2439] WARNING: suspicious RCU usage [ 114.814204][ T2439] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted [ 114.821891][ T2439] ----------------------------- [ 114.826890][ T2439] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 114.836620][ T2439] [ 114.836620][ T2439] other info that might help us debug this: [ 114.836620][ T2439] [ 114.847152][ T2439] 2024/06/18 02:58:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 114.847152][ T2439] rcu_scheduler_active = 2, debug_locks = 1 [ 114.855690][ T2439] 3 locks held by kworker/u8:9/2439: [ 114.861853][ T2439] #0: ffff8880162d5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 114.872463][ T2439] #1: ffffc90009327d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 114.882643][ T2439] #2: ffffffff8f741dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 114.892189][ T2439] [ 114.892189][ T2439] stack backtrace: [ 114.899786][ T2439] CPU: 0 PID: 2439 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 [ 114.910113][ T2439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 114.920227][ T2439] Workqueue: netns cleanup_net [ 114.925059][ T2439] Call Trace: [ 114.928376][ T2439] [ 114.931342][ T2439] dump_stack_lvl+0x16c/0x1f0 [ 114.936125][ T2439] lockdep_rcu_suspicious+0x20b/0x3b0 [ 114.941589][ T2439] _destroy_all_sets+0x261/0x6d0 [ 114.946616][ T2439] ? __pfx_ip_set_net_exit+0x10/0x10 [ 114.952005][ T2439] ip_set_net_exit+0x26/0x60 [ 114.956710][ T2439] ops_exit_list+0xb3/0x180 [ 114.961315][ T2439] cleanup_net+0x5b7/0xbf0 [ 114.965796][ T2439] ? __pfx_cleanup_net+0x10/0x10 [ 114.970825][ T2439] process_one_work+0x9fe/0x1b60 [ 114.975867][ T2439] ? __pfx_lock_acquire+0x10/0x10 [ 114.980968][ T2439] ? __pfx_process_one_work+0x10/0x10 [ 114.986434][ T2439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.992133][ T2439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.997820][ T2439] ? assign_work+0x1a0/0x250 [ 115.002456][ T2439] worker_thread+0x6c8/0xf70 [ 115.007114][ T2439] ? __pfx_worker_thread+0x10/0x10 [ 115.012271][ T2439] kthread+0x2c4/0x3a0 [ 115.016477][ T2439] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.021727][ T2439] ? __pfx_kthread+0x10/0x10 [ 115.026371][ T2439] ret_from_fork+0x48/0x80 [ 115.030838][ T2439] ? __pfx_kthread+0x10/0x10 [ 115.035486][ T2439] ret_from_fork_asm+0x1a/0x30 [ 115.040326][ T2439] [ 115.162337][ T2439] [ 115.164763][ T2439] ============================= [ 115.169756][ T2439] WARNING: suspicious RCU usage [ 115.174635][ T2439] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted [ 115.181837][ T2439] ----------------------------- [ 115.186849][ T2439] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 115.196592][ T2439] [ 115.196592][ T2439] other info that might help us debug this: [ 115.196592][ T2439] [ 115.207601][ T2439] [ 115.207601][ T2439] rcu_scheduler_active = 2, debug_locks = 1 [ 115.215725][ T2439] 3 locks held by kworker/u8:9/2439: [ 115.221121][ T2439] #0: ffff8880162d5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 115.231695][ T2439] #1: ffffc90009327d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 115.241805][ T2439] #2: ffffffff8f741dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 115.251318][ T2439] [ 115.251318][ T2439] stack backtrace: [ 115.257270][ T2439] CPU: 1 PID: 2439 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 [ 115.267569][ T2439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 115.277702][ T2439] Workqueue: netns cleanup_net [ 115.282520][ T2439] Call Trace: [ 115.285827][ T2439] [ 115.288786][ T2439] dump_stack_lvl+0x16c/0x1f0 [ 115.293547][ T2439] lockdep_rcu_suspicious+0x20b/0x3b0 [ 115.298979][ T2439] _destroy_all_sets+0x4e6/0x6d0 [ 115.303978][ T2439] ? __pfx_ip_set_net_exit+0x10/0x10 [ 115.309331][ T2439] ip_set_net_exit+0x26/0x60 [ 115.314008][ T2439] ops_exit_list+0xb3/0x180 [ 115.318605][ T2439] cleanup_net+0x5b7/0xbf0 [ 115.323090][ T2439] ? __pfx_cleanup_net+0x10/0x10 [ 115.328117][ T2439] process_one_work+0x9fe/0x1b60 [ 115.333150][ T2439] ? __pfx_lock_acquire+0x10/0x10 [ 115.338241][ T2439] ? __pfx_process_one_work+0x10/0x10 [ 115.343689][ T2439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.349425][ T2439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.355148][ T2439] ? assign_work+0x1a0/0x250 [ 115.359819][ T2439] worker_thread+0x6c8/0xf70 [ 115.364509][ T2439] ? __pfx_worker_thread+0x10/0x10 [ 115.369696][ T2439] kthread+0x2c4/0x3a0 [ 115.373840][ T2439] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.379115][ T2439] ? __pfx_kthread+0x10/0x10 [ 115.383796][ T2439] ret_from_fork+0x48/0x80 [ 115.388298][ T2439] ? __pfx_kthread+0x10/0x10 [ 115.392975][ T2439] ret_from_fork_asm+0x1a/0x30 [ 115.397900][ T2439]