last executing test programs: 438.435332ms ago: executing program 4: getcwd(&(0x7f0000000000), 0x0) 423.629954ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats', 0x0, 0x0) 376.355682ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl', 0x800, 0x0) 351.363216ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot', 0x800, 0x0) 295.802624ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pktcdvd/control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control', 0x800, 0x0) 265.748378ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ipv6host', 0x2, 0x0) 264.725959ms ago: executing program 4: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 247.257832ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1', 0x800, 0x0) 237.277523ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control', 0x1, 0x0) 224.081975ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso', 0x2, 0x0) 218.067196ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/acpi_thermal_rel', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/acpi_thermal_rel', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/acpi_thermal_rel', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/acpi_thermal_rel', 0x800, 0x0) 199.485929ms ago: executing program 1: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), 0x0) 198.46644ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dma_heap/system', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dma_heap/system', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dma_heap/system', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dma_heap/system', 0x800, 0x0) 197.90317ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce', 0x800, 0x0) 181.954402ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bifrost', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bifrost', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bifrost', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bifrost', 0x800, 0x0) 155.341216ms ago: executing program 2: fdatasync(0xffffffffffffffff) 154.861646ms ago: executing program 0: chroot(&(0x7f0000000000)) 153.016596ms ago: executing program 1: newfstatat(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000000), 0x0) 142.342248ms ago: executing program 3: pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 123.524981ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/logging', 0x2, 0x0) 119.803381ms ago: executing program 2: lstat(&(0x7f0000000000), &(0x7f0000000000)) 118.089512ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/syslog', 0x2, 0x0) 113.374062ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max', 0x2, 0x0) 96.907845ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0', 0x800, 0x0) 93.294246ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs', 0x800, 0x0) 87.063926ms ago: executing program 0: utimensat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0) 80.243967ms ago: executing program 2: unlink(&(0x7f0000000000)) 50.023782ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs', 0x800, 0x0) 47.964203ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys', 0x0, 0x0) 0s ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ptrace', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. 2024/06/17 13:38:56 fuzzer started 2024/06/17 13:38:57 dialing manager at 10.128.0.163:30033 [ 58.487883][ T5075] cgroup: Unknown subsys name 'net' [ 58.787354][ T5075] cgroup: Unknown subsys name 'rlimit' [ 59.925879][ T5093] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/06/17 13:39:03 starting 5 executor processes [ 67.795698][ T5369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.804308][ T5369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.817393][ T5369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.827681][ T5369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.862531][ T11] [ 67.865018][ T11] ============================= [ 67.869991][ T11] WARNING: suspicious RCU usage [ 67.875203][ T11] 6.10.0-rc4-syzkaller #0 Not tainted [ 67.881702][ T11] ----------------------------- [ 67.886573][ T11] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 67.896355][ T11] [ 67.896355][ T11] other info that might help us debug this: [ 67.896355][ T11] [ 67.906687][ T11] 2024/06/17 13:39:06 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 67.906687][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 67.908237][ T5369] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.915435][ T11] 3 locks held by kworker/u8:0/11: [ 67.915467][ T11] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 67.938861][ T11] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 67.949571][ T11] #2: ffffffff8f5c95d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 67.959136][ T11] [ 67.959136][ T11] stack backtrace: [ 67.965308][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc4-syzkaller #0 [ 67.973742][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 67.984002][ T11] Workqueue: netns cleanup_net [ 67.988932][ T11] Call Trace: [ 67.992317][ T11] [ 67.995267][ T11] dump_stack_lvl+0x241/0x360 [ 68.000069][ T11] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.005402][ T11] ? __pfx__printk+0x10/0x10 [ 68.010033][ T11] lockdep_rcu_suspicious+0x221/0x340 [ 68.015432][ T11] _destroy_all_sets+0x232/0x5f0 [ 68.020415][ T11] ip_set_net_exit+0x20/0x50 [ 68.025054][ T11] cleanup_net+0x802/0xcc0 [ 68.029516][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 68.032293][ T5369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.034563][ T11] ? process_scheduled_works+0x945/0x1830 [ 68.047393][ T11] process_scheduled_works+0xa2c/0x1830 [ 68.053102][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 68.059333][ T11] ? assign_work+0x364/0x3d0 [ 68.063955][ T11] worker_thread+0x86d/0xd70 [ 68.068596][ T11] ? __kthread_parkme+0x169/0x1d0 [ 68.073646][ T11] ? __pfx_worker_thread+0x10/0x10 [ 68.078772][ T11] kthread+0x2f0/0x390 [ 68.082865][ T11] ? __pfx_worker_thread+0x10/0x10 [ 68.088041][ T11] ? __pfx_kthread+0x10/0x10 [ 68.092834][ T11] ret_from_fork+0x4b/0x80 [ 68.097278][ T11] ? __pfx_kthread+0x10/0x10 [ 68.101894][ T11] ret_from_fork_asm+0x1a/0x30 [ 68.106703][ T11] [ 68.291813][ T11] [ 68.294199][ T11] ============================= [ 68.299126][ T11] WARNING: suspicious RCU usage [ 68.304087][ T11] 6.10.0-rc4-syzkaller #0 Not tainted [ 68.309626][ T11] ----------------------------- [ 68.314670][ T11] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 68.324476][ T11] [ 68.324476][ T11] other info that might help us debug this: [ 68.324476][ T11] [ 68.334777][ T11] [ 68.334777][ T11] rcu_scheduler_active = 2, debug