last executing test programs: 902.789878ms ago: executing program 4: kexec_load(0x0, 0x0, &(0x7f0000000000), 0x0) 864.635601ms ago: executing program 4: epoll_wait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 835.110729ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans', 0x1, 0x0) 829.731807ms ago: executing program 4: socket$xdp(0x2c, 0x3, 0x0) 819.592762ms ago: executing program 1: setresgid(0x0, 0x0, 0x0) 804.064599ms ago: executing program 4: fchown(0xffffffffffffffff, 0x0, 0x0) 799.672145ms ago: executing program 2: symlink(&(0x7f0000000000), &(0x7f0000000000)) 785.38152ms ago: executing program 1: ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0) 783.818316ms ago: executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 775.482214ms ago: executing program 2: socket$alg(0x26, 0x5, 0x0) 773.447657ms ago: executing program 4: socket$nl_sock_diag(0x10, 0x3, 0x4) 762.495556ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse', 0x2, 0x0) 760.489431ms ago: executing program 1: uselib(&(0x7f0000000000)) 745.306271ms ago: executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$audion(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$audion(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$audion(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$audion(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$audion(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$audion(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$audion(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$audion(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$audion(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$audion(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$audion(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$audion(&(0x7f0000000500), 0x4, 0x800) 743.465174ms ago: executing program 2: getpgid(0x0) 738.201241ms ago: executing program 3: geteuid() 730.906025ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty', 0x800, 0x0) 711.826567ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pmem0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pmem0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pmem0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pmem0', 0x800, 0x0) 711.175335ms ago: executing program 2: migrate_pages(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)) 710.668407ms ago: executing program 3: socket$l2tp(0x2, 0x2, 0x73) 691.870105ms ago: executing program 0: set_thread_area(&(0x7f0000000000)) 677.46189ms ago: executing program 0: syz_open_dev$dmmidi(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$dmmidi(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$dmmidi(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$dmmidi(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$dmmidi(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$dmmidi(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$dmmidi(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$dmmidi(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$dmmidi(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$dmmidi(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$dmmidi(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$dmmidi(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$dmmidi(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$dmmidi(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$dmmidi(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$dmmidi(&(0x7f0000000500), 0x4, 0x800) 676.879383ms ago: executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0) 671.033567ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pktcdvd/control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control', 0x800, 0x0) 669.449604ms ago: executing program 2: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$loop(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$loop(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$loop(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$loop(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$loop(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x800) 658.672361ms ago: executing program 0: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 647.90855ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self', 0x800, 0x0) 626.502125ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/btf/vmlinux', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/btf/vmlinux', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/btf/vmlinux', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/btf/vmlinux', 0x800, 0x0) 623.841353ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput', 0x800, 0x0) 0s ago: executing program 2: mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. 2024/06/18 23:29:16 fuzzer started 2024/06/18 23:29:17 dialing manager at 10.128.0.169:30009 [ 60.042290][ T5081] cgroup: Unknown subsys name 'net' [ 60.325807][ T5081] cgroup: Unknown subsys name 'rlimit' [ 61.517432][ T5104] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/06/18 23:29:18 starting 5 executor processes [ 63.353179][ T5298] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.265972][ T5396] mmap: syz-executor.1 (5396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.340930][ T5636] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.152933][ T63] [ 68.155482][ T63] ============================= [ 68.160714][ T63] WARNING: suspicious RCU usage [ 68.165625][ T63] 6.10.0-rc4-syzkaller-00039-g46d1907d1caa #0 Not tainted [ 68.172887][ T63] ----------------------------- [ 68.178024][ T63] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 68.188081][ T63] [ 68.188081][ T63] other info that might help us debug this: [ 68.188081][ T63] [ 68.198424][ T63] 2024/06/18 23:29:25 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 68.198424][ T63] rcu_scheduler_active = 2, debug_locks = 1 [ 68.206706][ T63] 3 locks held by kworker/u8:4/63: [ 68.211941][ T63] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 68.223002][ T63] #1: ffffc900015e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 68.233772][ T63] #2: ffffffff8f5c9290 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 68.243624][ T63] [ 68.243624][ T63] stack backtrace: [ 68.249832][ T63] CPU: 1 PID: 63 Comm: kworker/u8:4 Not tainted 6.10.0-rc4-syzkaller-00039-g46d1907d1caa #0 [ 68.259936][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 68.270101][ T63] Workqueue: netns cleanup_net [ 68.274922][ T63] Call Trace: [ 68.278226][ T63] [ 68.281186][ T63] dump_stack_lvl+0x241/0x360 [ 68.285924][ T63] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.291151][ T63] ? __pfx__printk+0x10/0x10 [ 68.295769][ T63] lockdep_rcu_suspicious+0x221/0x340 [ 68.301182][ T63] _destroy_all_sets+0x232/0x5f0 [ 68.306283][ T63] ip_set_net_exit+0x20/0x50 [ 68.310996][ T63] cleanup_net+0x802/0xcc0 [ 68.315569][ T63] ? __pfx_cleanup_net+0x10/0x10 [ 68.321160][ T63] ? process_scheduled_works+0x945/0x1830 [ 68.327086][ T63] process_scheduled_works+0xa2c/0x1830 [ 68.332664][ T63] ? __pfx_process_scheduled_works+0x10/0x10 [ 68.338676][ T63] ? assign_work+0x364/0x3d0 [ 68.343605][ T63] worker_thread+0x86d/0xd70 [ 68.348472][ T63] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 68.354570][ T63] ? __kthread_parkme+0x169/0x1d0 [ 68.359616][ T63] ? __pfx_worker_thread+0x10/0x10 [ 68.364747][ T63] kthread+0x2f0/0x390 [ 68.368930][ T63] ? __pfx_worker_thread+0x10/0x10 [ 68.374300][ T63] ? __pfx_kthread+0x10/0x10 [ 68.378895][ T63] ret_from_fork+0x4b/0x80 [ 68.383307][ T63] ? __pfx_kthread+0x10/0x10 [ 68.387977][ T63] ret_from_fork_asm+0x1a/0x30 [ 68.392837][ T63] [ 68.433104][ T63] [ 68.435525][ T63] ============================= [ 68.440775][ T63] WARNING: suspicious RCU usage [ 68.445729][ T63] 6.10.0-rc4-syzkaller-00039-g46d1907d1caa #0 Not tainted [ 68.453115][ T63] ----------------------------- [ 68.458030][ T63] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 68.467915][ T63] [ 68.467915][ T63] other info that might help us debug this: [ 68.467915][ T63] [ 68.478246][ T63] [ 68.478246][ T63] rcu_scheduler_active = 2, debug_locks = 1 [ 68.486435][ T63] 3 locks held by kworker/u8:4/63: [ 68.491670][ T63] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 68.502903][ T63] #1: ffffc900015e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 68.513688][ T63] #2: ffffffff8f5c9290 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 68.523587][ T63] [ 68.523587][ T63] stack backtrace: [ 68.529576][ T63] CPU: 1 PID: 63 Comm: kworker/u8:4 Not tainted 6.10.0-rc4-syzkaller-00039-g46d1907d1caa #0 [ 68.539733][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 68.549966][ T63] Workqueue: netns cleanup_net [ 68.554775][ T63] Call Trace: [ 68.558150][ T63] [ 68.561095][ T63] dump_stack_lvl+0x241/0x360 [ 68.565779][ T63] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.571174][ T63] ? __pfx__printk+0x10/0x10 [ 68.575773][ T63] lockdep_rcu_suspicious+0x221/0x340 [ 68.581229][ T63] _destroy_all_sets+0x53f/0x5f0 [ 68.586162][ T63] ip_set_net_exit+0x20/0x50 [ 68.590743][ T63] cleanup_net+0x802/0xcc0 [ 68.595732][ T63] ? __pfx_cleanup_net+0x10/0x10 [ 68.600832][ T63] ? process_scheduled_works+0x945/0x1830 [ 68.606654][ T63] process_scheduled_works+0xa2c/0x1830 [ 68.612252][ T63] ? __pfx_process_scheduled_works+0x10/0x10 [ 68.618420][ T63] ? assign_work+0x364/0x3d0 [ 68.623039][ T63] worker_thread+0x86d/0xd70 [ 68.627643][ T63] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 68.633756][ T63] ? __kthread_parkme+0x169/0x1d0 [ 68.638810][ T63] ? __pfx_worker_thread+0x10/0x10 [ 68.644003][ T63] kthread+0x2f0/0x390 [ 68.648075][ T63] ? __pfx_worker_thread+0x10/0x10 [ 68.653280][ T63] ? __pfx_kthread+0x10/0x10 [ 68.657957][ T63] ret_from_fork+0x4b/0x80 [ 68.662369][ T63] ? __pfx_kthread+0x10/0x10 [ 68.667130][ T63] ret_from_fork_asm+0x1a/0x30 [ 68.671986][ T63]