last executing test programs: 2.327485531s ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce', 0x800, 0x0) 2.289160717s ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci', 0x800, 0x0) 2.241545053s ago: executing program 1: mknod(&(0x7f0000000000), 0x0, 0x0) 2.199473019s ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer', 0x800, 0x0) 2.156182185s ago: executing program 1: sync() 1.84443031s ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/msm', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/msm', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/msm', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/msm', 0x800, 0x0) 1.820966112s ago: executing program 2: newfstatat(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000000), 0x0) 1.794882046s ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci', 0x2, 0x0) 1.782439588s ago: executing program 2: pread64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 1.762984641s ago: executing program 3: truncate(&(0x7f0000000000), 0x0) 1.747134303s ago: executing program 2: preadv2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 1.728772136s ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1', 0x800, 0x0) 1.726932436s ago: executing program 2: utime(&(0x7f0000000000), &(0x7f0000000000)) 1.69904574s ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1', 0x800, 0x0) 1.678296913s ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1', 0x800, 0x0) 1.538079873s ago: executing program 0: writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) 1.495062869s ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles', 0x800, 0x0) 1.486429s ago: executing program 4: renameat2(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0) 1.472591482s ago: executing program 0: lseek(0xffffffffffffffff, 0x0, 0x0) 1.448052585s ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control', 0x800, 0x0) 1.421606339s ago: executing program 0: symlinkat(&(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000)) 1.41493007s ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/mk_contexts', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/mk_contexts', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/mk_contexts', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/mk_contexts', 0x800, 0x0) 1.396442193s ago: executing program 0: fsopen(&(0x7f0000000000), 0x0) 1.389566444s ago: executing program 4: readlinkat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0) 1.350597529s ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty', 0x800, 0x0) 1.308873905s ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cdrom', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cdrom', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cdrom', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cdrom', 0x800, 0x0) 1.301689906s ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu', 0x800, 0x0) 1.283474359s ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio', 0x800, 0x0) 82.816268ms ago: executing program 1: mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 3: mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. 2024/06/16 22:18:32 fuzzer started 2024/06/16 22:18:32 dialing manager at 10.128.0.163:30033 [ 60.908862][ T5077] cgroup: Unknown subsys name 'net' [ 61.264089][ T5077] cgroup: Unknown subsys name 'rlimit' [ 62.301638][ T5080] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.314824][ T5080] syz-executor (5080) used greatest stack depth: 18832 bytes left 2024/06/16 22:18:39 starting 5 executor processes [ 71.605810][ T2787] [ 71.608731][ T2787] ============================= [ 71.613702][ T2787] WARNING: suspicious RCU usage [ 71.618625][ T2787] 6.10.0-rc4-syzkaller #0 Not tainted [ 71.624031][ T2787] ----------------------------- [ 71.629150][ T2787] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 71.638965][ T2787] [ 71.638965][ T2787] other info that might help us debug this: [ 71.638965][ T2787] [ 71.649605][ T2787] [ 71.649605][ T2787] rcu_scheduler_active = 2, debug_locks = 1 [ 71.658110][ T2787] 3 locks held by kworker/u8:6/2787: [ 71.663426][ T2787] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 71.674798][ T2787] #1: ffffc90009787d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 71.685522][ T2787] #2: ffffffff8f5c95d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 71.695447][ T2787] [ 71.695447][ T2787] stack backtrace: [ 71.701550][ T2787] CPU: 0 PID: 2787 Comm: kworker/u8:6 Not tainted 6.10.0-rc4-syzkaller #0 [ 71.710092][ T2787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 71.720356][ T2787] Workqueue: netns cleanup_net [ 71.725358][ T2787] Call Trace: [ 71.729026][ T2787] [ 71.732150][ T2787] dump_stack_lvl+0x241/0x360 [ 71.736889][ T2787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.742133][ T2787] ? __pfx__printk+0x10/0x10 [ 71.746957][ T2787] lockdep_rcu_suspicious+0x221/0x340 2024/06/16 22:18:43 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 71.752832][ T2787] _destroy_all_sets+0x232/0x5f0 [ 71.757909][ T2787] ip_set_net_exit+0x20/0x50 [ 71.762539][ T2787] cleanup_net+0x802/0xcc0 [ 71.767281][ T2787] ? __pfx_cleanup_net+0x10/0x10 [ 71.772322][ T2787] ? process_scheduled_works+0x945/0x1830 [ 71.778094][ T2787] process_scheduled_works+0xa2c/0x1830 [ 71.783733][ T2787] ? __pfx_process_scheduled_works+0x10/0x10 [ 71.789765][ T2787] ? assign_work+0x364/0x3d0 [ 71.794408][ T2787] worker_thread+0x86d/0xd70 [ 71.799077][ T2787] ? __kthread_parkme+0x169/0x1d0 [ 71.804155][ T2787] ? __pfx_worker_thread+0x10/0x10 [ 71.809299][ T2787] kthread+0x2f0/0x390 [ 71.813415][ T2787] ? __pfx_worker_thread+0x10/0x10 [ 71.818566][ T2787] ? __pfx_kthread+0x10/0x10 [ 71.823197][ T2787] ret_from_fork+0x4b/0x80 [ 71.828181][ T2787] ? __pfx_kthread+0x10/0x10 [ 71.832906][ T2787] ret_from_fork_asm+0x1a/0x30 [ 71.837818][ T2787] [ 71.880032][ T2787] [ 71.882432][ T2787] ============================= [ 71.887558][ T2787] WARNING: suspicious RCU usage [ 71.892514][ T2787] 6.10.0-rc4-syzkaller #0 Not tainted [ 71.898158][ T2787] ----------------------------- [ 71.903027][ T2787] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 71.912852][ T2787] [ 71.912852][ T2787] other info that might help us debug this: [ 71.912852][ T2787] [ 71.923232][ T2787] [ 71.923232][ T2787] rcu_scheduler_active = 2, debug_locks = 1 [ 71.931640][ T2787] 3 locks held by kworker/u8:6/2787: [ 71.937089][ T2787] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 71.948195][ T2787] #1: ffffc90009787d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 71.959038][ T2787] #2: ffffffff8f5c95d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 71.968991][ T2787] [ 71.968991][ T2787] stack backtrace: [ 71.974982][ T2787] CPU: 0 PID: 2787 Comm: kworker/u8:6 Not tainted 6.10.0-rc4-syzkaller #0 [ 71.983505][ T2787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 71.993734][ T2787] Workqueue: netns cleanup_net [ 71.998687][ T2787] Call Trace: [ 72.001969][ T2787] [ 72.005005][ T2787] dump_stack_lvl+0x241/0x360 [ 72.009713][ T2787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.014919][ T2787] ? __pfx__printk+0x10/0x10 [ 72.019617][ T2787] lockdep_rcu_suspicious+0x221/0x340 [ 72.025127][ T2787] _destroy_all_sets+0x53f/0x5f0 [ 72.030103][ T2787] ip_set_net_exit+0x20/0x50 [ 72.034725][ T2787] cleanup_net+0x802/0xcc0 [ 72.039180][ T2787] ? __pfx_cleanup_net+0x10/0x10 [ 72.044297][ T2787] ? process_scheduled_works+0x945/0x1830 [ 72.050113][ T2787] process_scheduled_works+0xa2c/0x1830 [ 72.055691][ T2787] ? __pfx_process_scheduled_works+0x10/0x10 [ 72.061677][ T2787] ? assign_work+0x364/0x3d0 [ 72.066286][ T2787] worker_thread+0x86d/0xd70 [ 72.070883][ T2787] ? __kthread_parkme+0x169/0x1d0 [ 72.075908][ T2787] ? __pfx_worker_thread+0x10/0x10 [ 72.081008][ T2787] kthread+0x2f0/0x390 [ 72.085072][ T2787] ? __pfx_worker_thread+0x10/0x10 [ 72.090260][ T2787] ? __pfx_kthread+0x10/0x10 [ 72.094936][ T2787] ret_from_fork+0x4b/0x80 [ 72.099434][ T2787] ? __pfx_kthread+0x10/0x10 [ 72.104029][ T2787] ret_from_fork_asm+0x1a/0x30 [ 72.108835][ T2787] [ 72.141692][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.148617][ T1247] ieee802154 phy1 wpan1: encryption failed: -22