last executing test programs: 845.169815ms ago: executing program 3: exit_group(0x0) 798.167633ms ago: executing program 3: add_key(&(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x0) 758.094008ms ago: executing program 3: setgid(0x0) 717.639418ms ago: executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) 681.687283ms ago: executing program 3: ioprio_set$pid(0x0, 0x0, 0x0) 341.562582ms ago: executing program 1: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000), 0x0) 299.420158ms ago: executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 276.216934ms ago: executing program 1: syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$rtc(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$rtc(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$rtc(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$rtc(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$rtc(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$rtc(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$rtc(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$rtc(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$rtc(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$rtc(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$rtc(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$rtc(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$rtc(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$rtc(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$rtc(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$rtc(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$rtc(&(0x7f0000000500), 0x4, 0x800) 255.068551ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/trusty-ipc-dev0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/trusty-ipc-dev0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/trusty-ipc-dev0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/trusty-ipc-dev0', 0x800, 0x0) 239.917728ms ago: executing program 1: socket$isdn(0x22, 0x3, 0x0) 232.632779ms ago: executing program 4: syz_open_dev$ircomm(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$ircomm(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$ircomm(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$ircomm(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$ircomm(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$ircomm(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$ircomm(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$ircomm(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$ircomm(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$ircomm(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$ircomm(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$ircomm(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$ircomm(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$ircomm(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$ircomm(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$ircomm(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$ircomm(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$ircomm(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$ircomm(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$ircomm(&(0x7f0000000500), 0x4, 0x800) 215.732097ms ago: executing program 0: getcwd(&(0x7f0000000000), 0x0) 206.666904ms ago: executing program 4: futimesat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000)) 194.193219ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse', 0x2, 0x0) 192.080052ms ago: executing program 1: timer_create(0x0, &(0x7f0000000000), &(0x7f0000000000)) 178.374296ms ago: executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) 176.053201ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer', 0x800, 0x0) 167.054664ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/direct', 0x2, 0x0) 153.464023ms ago: executing program 2: execveat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0) 116.659703ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create', 0x2, 0x0) 114.291608ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ipv6host', 0x2, 0x0) 101.22791ms ago: executing program 0: syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$sndmidi(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$sndmidi(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$sndmidi(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$sndmidi(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$sndmidi(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$sndmidi(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$sndmidi(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$sndmidi(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$sndmidi(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$sndmidi(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$sndmidi(&(0x7f0000000500), 0x28, 0x800) 94.51352ms ago: executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 77.103839ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load', 0x2, 0x0) 64.265425ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load', 0x2, 0x0) 49.510048ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/raw-gadget', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/raw-gadget', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/raw-gadget', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/raw-gadget', 0x800, 0x0) 47.97381ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current', 0x2, 0x0) 40.440283ms ago: executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) 633.539µs ago: executing program 2: getpgrp(0x0) 0s ago: executing program 0: mprotect(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. 2024/06/19 00:55:55 fuzzer started 2024/06/19 00:55:55 dialing manager at 10.128.0.169:30021 [ 57.552077][ T5094] cgroup: Unknown subsys name 'net' [ 57.769907][ T5094] cgroup: Unknown subsys name 'rlimit' 2024/06/19 00:55:57 starting 5 executor processes [ 58.962738][ T5096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.456213][ T951] [ 60.458849][ T951] ============================= [ 60.463789][ T951] WARNING: suspicious RCU usage [ 60.468686][ T951] 6.10.0-rc4-syzkaller-00039-g46d1907d1caa #0 Not tainted [ 60.476004][ T951] ----------------------------- [ 60.480944][ T951] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 60.490880][ T951] [ 60.490880][ T951] other info that might help us debug this: [ 60.490880][ T951] [ 60.501469][ T951] 2024/06/19 00:55:58 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 60.501469][ T951] rcu_scheduler_active = 2, debug_locks = 1 [ 60.509592][ T951] 3 locks held by kworker/u8:5/951: [ 60.515000][ T951] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 60.526045][ T951] #1: ffffc90003c27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 60.536706][ T951] #2: ffffffff8f5db750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 60.546333][ T951] [ 60.546333][ T951] stack backtrace: [ 60.552327][ T951] CPU: 0 PID: 951 Comm: kworker/u8:5 Not tainted 6.10.0-rc4-syzkaller-00039-g46d1907d1caa #0 [ 60.562502][ T951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 60.572557][ T951] Workqueue: netns cleanup_net [ 60.577337][ T951] Call Trace: [ 60.580615][ T951] [ 60.583541][ T951] dump_stack_lvl+0x241/0x360 [ 60.588310][ T951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.593678][ T951] ? __pfx__printk+0x10/0x10 [ 60.598442][ T951] lockdep_rcu_suspicious+0x221/0x340 [ 60.603813][ T951] _destroy_all_sets+0x232/0x5f0 [ 60.608750][ T951] ip_set_net_exit+0x20/0x50 [ 60.613340][ T951] cleanup_net+0x802/0xcc0 [ 60.617760][ T951] ? __pfx_cleanup_net+0x10/0x10 [ 60.622704][ T951] ? process_scheduled_works+0x945/0x1830 [ 60.628589][ T951] process_scheduled_works+0xa2c/0x1830 [ 60.634147][ T951] ? __pfx_process_scheduled_works+0x10/0x10 [ 60.640124][ T951] ? assign_work+0x364/0x3d0 [ 60.644709][ T951] worker_thread+0x86d/0xd70 [ 60.649298][ T951] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 60.655195][ T951] ? __kthread_parkme+0x169/0x1d0 [ 60.660216][ T951] ? __pfx_worker_thread+0x10/0x10 [ 60.665326][ T951] kthread+0x2f0/0x390 [ 60.669393][ T951] ? __pfx_worker_thread+0x10/0x10 [ 60.674495][ T951] ? __pfx_kthread+0x10/0x10 [ 60.679078][ T951] ret_from_fork+0x4b/0x80 [ 60.683490][ T951] ? __pfx_kthread+0x10/0x10 [ 60.688075][ T951] ret_from_fork_asm+0x1a/0x30 [ 60.692847][ T951] [ 60.695874][ C0] vkms_vblank_simulate: vblank timer overrun [ 60.704946][ T951] [ 60.707349][ T951] ============================= [ 60.712301][ T951] WARNING: suspicious RCU usage [ 60.717165][ T951] 6.10.0-rc4-syzkaller-00039-g46d1907d1caa #0 Not tainted [ 60.724387][ T951] ----------------------------- [ 60.729258][ T951] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 60.739007][ T951] [ 60.739007][ T951] other info that might help us debug this: [ 60.739007][ T951] [ 60.749365][ T951] [ 60.749365][ T951] rcu_scheduler_active = 2, debug_locks = 1 [ 60.757610][ T951] 3 locks held by kworker/u8:5/951: [ 60.762919][ T951] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 60.773992][ T951] #1: ffffc90003c27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 60.784648][ T951] #2: ffffffff8f5db750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 60.794259][ T951] [ 60.794259][ T951] stack backtrace: [ 60.800199][ T951] CPU: 0 PID: 951 Comm: kworker/u8:5 Not tainted 6.10.0-rc4-syzkaller-00039-g46d1907d1caa #0 [ 60.810383][ T951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 60.820470][ T951] Workqueue: netns cleanup_net [ 60.825272][ T951] Call Trace: [ 60.828587][ T951] [ 60.831551][ T951] dump_stack_lvl+0x241/0x360 [ 60.836273][ T951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.841609][ T951] ? __pfx__printk+0x10/0x10 [ 60.846255][ T951] lockdep_rcu_suspicious+0x221/0x340 [ 60.851674][ T951] _destroy_all_sets+0x53f/0x5f0 [ 60.856671][ T951] ip_set_net_exit+0x20/0x50 [ 60.861295][ T951] cleanup_net+0x802/0xcc0 [ 60.865767][ T951] ? __pfx_cleanup_net+0x10/0x10 [ 60.870761][ T951] ? process_scheduled_works+0x945/0x1830 [ 60.876516][ T951] process_scheduled_works+0xa2c/0x1830 [ 60.882216][ T951] ? __pfx_process_scheduled_works+0x10/0x10 [ 60.888228][ T951] ? assign_work+0x364/0x3d0 [ 60.892849][ T951] worker_thread+0x86d/0xd70 [ 60.897480][ T951] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 60.903421][ T951] ? __kthread_parkme+0x169/0x1d0 [ 60.908504][ T951] ? __pfx_worker_thread+0x10/0x10 [ 60.913661][ T951] kthread+0x2f0/0x390 [ 60.917763][ T951] ? __pfx_worker_thread+0x10/0x10 [ 60.922992][ T951] ? __pfx_kthread+0x10/0x10 [ 60.927629][ T951] ret_from_fork+0x4b/0x80 [ 60.932257][ T951] ? __pfx_kthread+0x10/0x10 [ 60.937591][ T951] ret_from_fork_asm+0x1a/0x30 [ 60.942683][ T951] [ 60.945827][ C0] vkms_vblank_simulate: vblank timer overrun