last executing test programs: 308.086522ms ago: executing program 2: fchmodat(0xffffffffffffffff, &(0x7f0000000000), 0x0) 273.110278ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm', 0x800, 0x0) 257.95837ms ago: executing program 4: msync(0x0, 0x0, 0x0) 239.231163ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nmem0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nmem0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nmem0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nmem0', 0x800, 0x0) 217.503157ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 216.972556ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp', 0x800, 0x0) 202.091718ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1', 0x2, 0x0) 199.677359ms ago: executing program 2: pwritev(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 183.478191ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwbinder', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwbinder', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwbinder', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwbinder', 0x800, 0x0) 169.384404ms ago: executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), 0x0) 168.901674ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso', 0x2, 0x0) 156.507756ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self', 0x800, 0x0) 154.167206ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/uverbs0', 0x2, 0x0) 146.008197ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36', 0x2, 0x0) 142.666128ms ago: executing program 3: pselect6(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) 131.08608ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1', 0x800, 0x0) 122.112381ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binder', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binder', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binder', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binder', 0x800, 0x0) 119.970571ms ago: executing program 4: creat(&(0x7f0000000000), 0x0) 110.266553ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access', 0x2, 0x0) 107.725273ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control', 0x800, 0x0) 89.556106ms ago: executing program 3: pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 82.711637ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord', 0x800, 0x0) 73.602969ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context', 0x2, 0x0) 64.85366ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bifrost', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bifrost', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bifrost', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bifrost', 0x800, 0x0) 55.224722ms ago: executing program 3: pivot_root(&(0x7f0000000000), &(0x7f0000000000)) 53.661932ms ago: executing program 1: fstatfs(0xffffffffffffffff, &(0x7f0000000000)) 43.802783ms ago: executing program 0: preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 7.909139ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control', 0x1, 0x0) 5.90593ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio', 0x800, 0x0) 0s ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/logging', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.218' (ED25519) to the list of known hosts. 2024/06/18 00:53:40 fuzzer started 2024/06/18 00:53:41 dialing manager at 10.128.0.163:30033 [ 57.574518][ T5077] cgroup: Unknown subsys name 'net' [ 57.842140][ T5077] cgroup: Unknown subsys name 'rlimit' [ 58.919726][ T5080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/06/18 00:53:48 starting 5 executor processes [ 66.322905][ T5301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.334852][ T5301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.348304][ T5301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.361039][ T5301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.374091][ T5301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.381685][ T5301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.700814][ T2474] [ 66.703303][ T2474] ============================= [ 66.708546][ T2474] WARNING: suspicious RCU usage [ 66.713430][ T2474] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted [ 66.720678][ T2474] ----------------------------- [ 66.725557][ T2474] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 66.735293][ T2474] [ 66.735293][ T2474] other info that might help us debug this: [ 66.735293][ T2474] [ 66.745949][ T2474] 2024/06/18 00:53:50 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 66.745949][ T2474] rcu_scheduler_active = 2, debug_locks = 1 [ 66.754184][ T2474] 3 locks held by kworker/u8:7/2474: [ 66.759760][ T2474] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 66.770827][ T2474] #1: ffffc90009137d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 66.781505][ T2474] #2: ffffffff8f5c9290 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 66.791043][ T2474] [ 66.791043][ T2474] stack backtrace: [ 66.796978][ T2474] CPU: 1 PID: 2474 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 [ 66.807372][ T2474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 66.817454][ T2474] Workqueue: netns cleanup_net [ 66.822299][ T2474] Call Trace: [ 66.825617][ T2474] [ 66.828583][ T2474] dump_stack_lvl+0x241/0x360 [ 66.833295][ T2474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.838529][ T2474] ? __pfx__printk+0x10/0x10 [ 66.843164][ T2474] lockdep_rcu_suspicious+0x221/0x340 [ 66.848577][ T2474] _destroy_all_sets+0x232/0x5f0 [ 66.853549][ T2474] ip_set_net_exit+0x20/0x50 [ 66.858165][ T2474] cleanup_net+0x802/0xcc0 [ 66.862680][ T2474] ? __pfx_cleanup_net+0x10/0x10 [ 66.867628][ T2474] ? process_scheduled_works+0x945/0x1830 [ 66.873361][ T2474] process_scheduled_works+0xa2c/0x1830 [ 66.878923][ T2474] ? __pfx_process_scheduled_works+0x10/0x10 [ 66.884933][ T2474] ? assign_work+0x364/0x3d0 [ 66.889529][ T2474] worker_thread+0x86d/0xd70 [ 66.894122][ T2474] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 66.900125][ T2474] ? __kthread_parkme+0x169/0x1d0 [ 66.905172][ T2474] ? __pfx_worker_thread+0x10/0x10 [ 66.910277][ T2474] kthread+0x2f0/0x390 [ 66.914340][ T2474] ? __pfx_worker_thread+0x10/0x10 [ 66.919442][ T2474] ? __pfx_kthread+0x10/0x10 [ 66.924035][ T2474] ret_from_fork+0x4b/0x80 [ 66.928447][ T2474] ? __pfx_kthread+0x10/0x10 [ 66.933071][ T2474] ret_from_fork_asm+0x1a/0x30 [ 66.937844][ T2474] [ 67.056918][ T2474] [ 67.059399][ T2474] ============================= [ 67.064452][ T2474] WARNING: suspicious RCU usage [ 67.069476][ T2474] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted [ 67.076706][ T2474] ----------------------------- [ 67.081850][ T2474] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 67.091850][ T2474] [ 67.091850][ T2474] other info that might help us debug this: [ 67.091850][ T2474] [ 67.102253][ T2474] [ 67.102253][ T2474] rcu_scheduler_active = 2, debug_locks = 1 [ 67.110420][ T2474] 3 locks held by kworker/u8:7/2474: [ 67.115816][ T2474] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 67.126807][ T2474] #1: ffffc90009137d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 67.137444][ T2474] #2: ffffffff8f5c9290 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 67.146983][ T2474] [ 67.146983][ T2474] stack backtrace: [ 67.153191][ T2474] CPU: 0 PID: 2474 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 [ 67.163452][ T2474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 67.173521][ T2474] Workqueue: netns cleanup_net [ 67.178404][ T2474] Call Trace: [ 67.181675][ T2474] [ 67.184597][ T2474] dump_stack_lvl+0x241/0x360 [ 67.189280][ T2474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.194560][ T2474] ? __pfx__printk+0x10/0x10 [ 67.199150][ T2474] lockdep_rcu_suspicious+0x221/0x340 [ 67.204515][ T2474] _destroy_all_sets+0x53f/0x5f0 [ 67.209448][ T2474] ip_set_net_exit+0x20/0x50 [ 67.214040][ T2474] cleanup_net+0x802/0xcc0 [ 67.218460][ T2474] ? __pfx_cleanup_net+0x10/0x10 [ 67.223397][ T2474] ? process_scheduled_works+0x945/0x1830 [ 67.229191][ T2474] process_scheduled_works+0xa2c/0x1830 [ 67.234771][ T2474] ? __pfx_process_scheduled_works+0x10/0x10 [ 67.240781][ T2474] ? assign_work+0x364/0x3d0 [ 67.245384][ T2474] worker_thread+0x86d/0xd70 [ 67.250069][ T2474] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 67.256096][ T2474] ? __kthread_parkme+0x169/0x1d0 [ 67.261135][ T2474] ? __pfx_worker_thread+0x10/0x10 [ 67.266243][ T2474] kthread+0x2f0/0x390 [ 67.270309][ T2474] ? __pfx_worker_thread+0x10/0x10 [ 67.275417][ T2474] ? __pfx_kthread+0x10/0x10 [ 67.280021][ T2474] ret_from_fork+0x4b/0x80 [ 67.284436][ T2474] ? __pfx_kthread+0x10/0x10 [ 67.289045][ T2474] ret_from_fork_asm+0x1a/0x30 [ 67.293814][ T2474]