last executing test programs: 957.630973ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor', 0x800, 0x0) 917.65766ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer', 0x800, 0x0) 880.306145ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun', 0x800, 0x0) 843.546261ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse', 0x2, 0x0) 808.321706ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3', 0x800, 0x0) 760.861663ms ago: executing program 1: sync() 396.342319ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot', 0x800, 0x0) 378.311852ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/init_regions', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/init_regions', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/init_regions', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/init_regions', 0x800, 0x0) 327.51644ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pmem0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pmem0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pmem0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pmem0', 0x800, 0x0) 319.784571ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock', 0x800, 0x0) 313.492152ms ago: executing program 3: link(&(0x7f0000000000), &(0x7f0000000000)) 280.697377ms ago: executing program 0: mount_setattr(0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0) 274.852618ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio', 0x800, 0x0) 272.472009ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock', 0x800, 0x0) 257.158001ms ago: executing program 3: fdatasync(0xffffffffffffffff) 240.827444ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/schemes', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/schemes', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/schemes', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/schemes', 0x800, 0x0) 237.645414ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy', 0x0, 0x0) 219.930017ms ago: executing program 2: fstat(0xffffffffffffffff, &(0x7f0000000000)) 209.736738ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer', 0x800, 0x0) 209.201978ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs', 0x1, 0x0) 203.073309ms ago: executing program 3: chroot(&(0x7f0000000000)) 180.939213ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user', 0x2, 0x0) 171.921604ms ago: executing program 4: preadv2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 162.054755ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/target_ids', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/target_ids', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/target_ids', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/target_ids', 0x800, 0x0) 161.360145ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/mk_contexts', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/mk_contexts', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/mk_contexts', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/mk_contexts', 0x800, 0x0) 138.254269ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/sync/info', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/sync/info', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/sync/info', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/sync/info', 0x800, 0x0) 123.413761ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/logging', 0x2, 0x0) 102.497385ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vtpmx', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vtpmx', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vtpmx', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vtpmx', 0x800, 0x0) 39.963314ms ago: executing program 2: readlinkat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0) 0s ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nmem0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nmem0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nmem0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nmem0', 0x800, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. 2024/06/20 11:27:29 fuzzer started 2024/06/20 11:27:29 dialing manager at 10.128.0.163:30033 [ 58.157400][ T5076] cgroup: Unknown subsys name 'net' [ 58.423626][ T5076] cgroup: Unknown subsys name 'rlimit' [ 59.556258][ T5092] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/06/20 11:27:36 starting 5 executor processes [ 67.535004][ T1276] [ 67.537538][ T1276] ============================= [ 67.537557][ T1276] WARNING: suspicious RCU usage [ 67.537566][ T1276] 6.10.0-rc4-syzkaller-00052-ge5b3efbe1ab1 #0 Not tainted [ 67.554781][ T1276] ----------------------------- [ 67.559713][ T1276] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 67.569590][ T1276] [ 67.569590][ T1276] other info that might help us debug this: [ 67.569590][ T1276] [ 67.579885][ T1276] [ 67.579885][ T1276] rcu_scheduler_active = 2, debug_locks = 1 [ 67.587978][ T1276] 3 locks held by kworker/u8:7/1276: [ 67.593381][ T1276] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 67.604597][ T1276] #1: ffffc90004be7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 67.616425][ T1276] #2: ffffffff8f5c7c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 67.626156][ T1276] [ 67.626156][ T1276] stack backtrace: 2024/06/20 11:27:39 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 67.632154][ T1276] CPU: 1 PID: 1276 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00052-ge5b3efbe1ab1 #0 [ 67.642610][ T1276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 67.652691][ T1276] Workqueue: netns cleanup_net [ 67.657599][ T1276] Call Trace: [ 67.660889][ T1276] [ 67.663817][ T1276] dump_stack_lvl+0x241/0x360 [ 67.668530][ T1276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.673737][ T1276] ? __pfx__printk+0x10/0x10 [ 67.678431][ T1276] lockdep_rcu_suspicious+0x221/0x340 [ 67.683997][ T1276] _destroy_all_sets+0x232/0x5f0 [ 67.688949][ T1276] ip_set_net_exit+0x20/0x50 [ 67.693637][ T1276] cleanup_net+0x802/0xcc0 [ 67.698059][ T1276] ? __pfx_cleanup_net+0x10/0x10 [ 67.703025][ T1276] ? process_scheduled_works+0x945/0x1830 [ 67.708781][ T1276] process_scheduled_works+0xa2c/0x1830 [ 67.714536][ T1276] ? __pfx_process_scheduled_works+0x10/0x10 [ 67.720732][ T1276] ? assign_work+0x364/0x3d0 [ 67.725361][ T1276] worker_thread+0x86d/0xd70 [ 67.730365][ T1276] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 67.736295][ T1276] ? __kthread_parkme+0x169/0x1d0 [ 67.741436][ T1276] ? __pfx_worker_thread+0x10/0x10 [ 67.746551][ T1276] kthread+0x2f0/0x390 [ 67.750793][ T1276] ? __pfx_worker_thread+0x10/0x10 [ 67.755899][ T1276] ? __pfx_kthread+0x10/0x10 [ 67.760508][ T1276] ret_from_fork+0x4b/0x80 [ 67.764989][ T1276] ? __pfx_kthread+0x10/0x10 [ 67.769678][ T1276] ret_from_fork_asm+0x1a/0x30 [ 67.774456][ T1276] [ 67.926611][ T1276] [ 67.928993][ T1276] ============================= [ 67.934226][ T1276] WARNING: suspicious RCU usage [ 67.939191][ T1276] 6.10.0-rc4-syzkaller-00052-ge5b3efbe1ab1 #0 Not tainted [ 67.946813][ T1276] ----------------------------- [ 67.951961][ T1276] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 67.961936][ T1276] [ 67.961936][ T1276] other info that might help us debug this: [ 67.961936][ T1276] [ 67.972691][ T1276] [ 67.972691][ T1276] rcu_scheduler_active = 2, debug_locks = 1 [ 67.981330][ T1276] 3 locks held by kworker/u8:7/1276: [ 67.986646][ T1276] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 67.997704][ T1276] #1: ffffc90004be7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 68.008652][ T1276] #2: ffffffff8f5c7c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 68.018377][ T1276] [ 68.018377][ T1276] stack backtrace: [ 68.024778][ T1276] CPU: 0 PID: 1276 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00052-ge5b3efbe1ab1 #0 [ 68.035115][ T1276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 68.045227][ T1276] Workqueue: netns cleanup_net [ 68.050237][ T1276] Call Trace: [ 68.053545][ T1276] [ 68.056499][ T1276] dump_stack_lvl+0x241/0x360 [ 68.061225][ T1276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.066466][ T1276] ? __pfx__printk+0x10/0x10 [ 68.071113][ T1276] lockdep_rcu_suspicious+0x221/0x340 [ 68.076629][ T1276] _destroy_all_sets+0x53f/0x5f0 [ 68.081615][ T1276] ip_set_net_exit+0x20/0x50 [ 68.086239][ T1276] cleanup_net+0x802/0xcc0 [ 68.090786][ T1276] ? __pfx_cleanup_net+0x10/0x10 [ 68.095775][ T1276] ? process_scheduled_works+0x945/0x1830 [ 68.101524][ T1276] process_scheduled_works+0xa2c/0x1830 [ 68.107322][ T1276] ? __pfx_process_scheduled_works+0x10/0x10 [ 68.113349][ T1276] ? assign_work+0x364/0x3d0 [ 68.117982][ T1276] worker_thread+0x86d/0xd70 [ 68.122642][ T1276] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 68.128580][ T1276] ? __kthread_parkme+0x169/0x1d0 [ 68.134069][ T1276] ? __pfx_worker_thread+0x10/0x10 [ 68.139210][ T1276] kthread+0x2f0/0x390 [ 68.143289][ T1276] ? __pfx_worker_thread+0x10/0x10 [ 68.148403][ T1276] ? __pfx_kthread+0x10/0x10 [ 68.153006][ T1276] ret_from_fork+0x4b/0x80 [ 68.157505][ T1276] ? __pfx_kthread+0x10/0x10 [ 68.162217][ T1276] ret_from_fork_asm+0x1a/0x30 [ 68.166989][ T1276]