last executing test programs: 771.503889ms ago: executing program 2: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x0) 729.232478ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs', 0x800, 0x0) 700.702149ms ago: executing program 2: read(0xffffffffffffffff, &(0x7f0000000000), 0x0) 675.378894ms ago: executing program 2: getgid() 639.93349ms ago: executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) 583.870461ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse', 0x800, 0x0) 534.898618ms ago: executing program 4: uname(&(0x7f0000000000)) 492.380324ms ago: executing program 4: modify_ldt$read(0x0, &(0x7f0000000000), 0x0) 466.34306ms ago: executing program 4: sched_getaffinity(0x0, 0x0, &(0x7f0000000000)) 435.474417ms ago: executing program 4: setregid(0x0, 0x0) 393.329654ms ago: executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$audion(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$audion(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$audion(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$audion(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$audion(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$audion(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$audion(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$audion(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$audion(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$audion(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$audion(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$audion(&(0x7f0000000500), 0x4, 0x800) 248.999546ms ago: executing program 0: unshare(0x0) 221.722621ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cdrom1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cdrom1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cdrom1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cdrom1', 0x800, 0x0) 215.809741ms ago: executing program 1: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 193.497182ms ago: executing program 3: sched_setattr(0x0, &(0x7f0000000000), 0x0) 181.287637ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq', 0x800, 0x0) 163.068714ms ago: executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0) 160.482991ms ago: executing program 0: mq_unlink(&(0x7f0000000000)) 142.468323ms ago: executing program 0: syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vivid(&(0x7f0000000100), 0x0, 0x800) 141.146808ms ago: executing program 1: fsetxattr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0) 138.131965ms ago: executing program 3: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$dri(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$dri(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$dri(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$dri(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$dri(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$dri(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$dri(&(0x7f0000000500), 0x4, 0x800) 111.292736ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20', 0x800, 0x0) 94.385609ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord', 0x800, 0x0) 92.725192ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull', 0x800, 0x0) 80.138975ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/raw-gadget', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw-gadget', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/raw-gadget', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/raw-gadget', 0x800, 0x0) 57.965619ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/socket/zygote', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/socket/zygote', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/socket/zygote', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/socket/zygote', 0x800, 0x0) 50.139158ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg', 0x800, 0x0) 44.643334ms ago: executing program 3: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19.595165ms ago: executing program 0: setpriority(0x0, 0x0, 0x0) 0s ago: executing program 3: io_submit(0x0, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. 2024/06/18 16:30:18 fuzzer started 2024/06/18 16:30:19 dialing manager at 10.128.0.169:30001 [ 53.329266][ T5091] cgroup: Unknown subsys name 'net' [ 53.582737][ T5091] cgroup: Unknown subsys name 'rlimit' 2024/06/18 16:30:20 starting 5 executor processes [ 54.740185][ T5102] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.753326][ T5102] syz-executor (5102) used greatest stack depth: 18832 bytes left [ 56.104616][ T11] [ 56.107137][ T11] ============================= [ 56.112371][ T11] WARNING: suspicious RCU usage [ 56.117662][ T11] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted [ 56.125187][ T11] ----------------------------- [ 56.130063][ T11] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 56.139800][ T11] [ 56.139800][ T11] other info that might help us debug this: [ 56.139800][ T11] [ 56.150381][ T11] 2024/06/18 16:30:22 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 56.150381][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 56.159128][ T11] 3 locks held by kworker/u8:0/11: [ 56.164344][ T11] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 56.175480][ T11] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 56.186147][ T11] #2: ffffffff8f5db750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 56.195693][ T11] [ 56.195693][ T11] stack backtrace: [ 56.202300][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 [ 56.212739][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 56.222822][ T11] Workqueue: netns cleanup_net [ 56.227718][ T11] Call Trace: [ 56.231003][ T11] [ 56.233937][ T11] dump_stack_lvl+0x241/0x360 [ 56.238704][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 56.243911][ T11] ? __pfx__printk+0x10/0x10 [ 56.248678][ T11] lockdep_rcu_suspicious+0x221/0x340 [ 56.254139][ T11] _destroy_all_sets+0x232/0x5f0 [ 56.259072][ T11] ip_set_net_exit+0x20/0x50 [ 56.263832][ T11] cleanup_net+0x802/0xcc0 [ 56.268558][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 56.273525][ T11] ? process_scheduled_works+0x945/0x1830 [ 56.279268][ T11] process_scheduled_works+0xa2c/0x1830 [ 56.284891][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 56.290870][ T11] ? assign_work+0x364/0x3d0 [ 56.295457][ T11] worker_thread+0x86d/0xd70 [ 56.300051][ T11] ? __kthread_parkme+0x169/0x1d0 [ 56.305084][ T11] ? __pfx_worker_thread+0x10/0x10 [ 56.310186][ T11] kthread+0x2f0/0x390 [ 56.314335][ T11] ? __pfx_worker_thread+0x10/0x10 [ 56.319534][ T11] ? __pfx_kthread+0x10/0x10 [ 56.324117][ T11] ret_from_fork+0x4b/0x80 [ 56.328615][ T11] ? __pfx_kthread+0x10/0x10 [ 56.333198][ T11] ret_from_fork_asm+0x1a/0x30 [ 56.338082][ T11] [ 56.487132][ T11] [ 56.489511][ T11] ============================= [ 56.494632][ T11] WARNING: suspicious RCU usage [ 56.499586][ T11] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted [ 56.506902][ T11] ----------------------------- [ 56.511806][ T11] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 56.521624][ T11] [ 56.521624][ T11] other info that might help us debug this: [ 56.521624][ T11] [ 56.531928][ T11] [ 56.531928][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 56.540016][ T11] 3 locks held by kworker/u8:0/11: [ 56.545315][ T11] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 56.556505][ T11] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 56.567184][ T11] #2: ffffffff8f5db750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 56.576762][ T11] [ 56.576762][ T11] stack backtrace: [ 56.582909][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 [ 56.593228][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 56.603304][ T11] Workqueue: netns cleanup_net [ 56.608104][ T11] Call Trace: [ 56.611400][ T11] [ 56.614366][ T11] dump_stack_lvl+0x241/0x360 [ 56.619089][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 56.624324][ T11] ? __pfx__printk+0x10/0x10 [ 56.629042][ T11] lockdep_rcu_suspicious+0x221/0x340 [ 56.634451][ T11] _destroy_all_sets+0x53f/0x5f0 [ 56.639422][ T11] ip_set_net_exit+0x20/0x50 [ 56.644052][ T11] cleanup_net+0x802/0xcc0 [ 56.648532][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 56.653513][ T11] ? process_scheduled_works+0x945/0x1830 [ 56.659352][ T11] process_scheduled_works+0xa2c/0x1830 [ 56.664977][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 56.671022][ T11] ? assign_work+0x364/0x3d0 [ 56.675644][ T11] worker_thread+0x86d/0xd70 [ 56.680370][ T11] ? __kthread_parkme+0x169/0x1d0 [ 56.685421][ T11] ? __pfx