last executing test programs: 2.719533267s ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa', 0x800, 0x0) 2.659362154s ago: executing program 4: sched_yield() 2.621339277s ago: executing program 4: open_tree(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.555355805s ago: executing program 4: syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$audion(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$audion(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$audion(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$audion(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$audion(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$audion(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$audion(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$audion(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$audion(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$audion(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$audion(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$audion(&(0x7f0000000500), 0x4, 0x800) 1.844174011s ago: executing program 2: socket(0x1e, 0x2, 0x0) 1.819723986s ago: executing program 3: process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0, 0x0) 1.777763388s ago: executing program 0: pread64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 1.775403452s ago: executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso', 0x2, 0x0) 1.741510388s ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context', 0x2, 0x0) 1.730888053s ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) 1.70654319s ago: executing program 5: setuid(0x0) 1.695716465s ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci', 0x800, 0x0) 1.690745066s ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock', 0x800, 0x0) 1.670023636s ago: executing program 2: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 1.640804563s ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun', 0x800, 0x0) 1.639775566s ago: executing program 5: mq_open(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000)) 1.615475049s ago: executing program 1: mq_unlink(&(0x7f0000000000)) 1.612087676s ago: executing program 0: shmat(0x0, 0x0, 0x0) 1.585516529s ago: executing program 5: mremap(0x0, 0x0, 0x0, 0x0, 0x0) 1.580768292s ago: executing program 2: capset(&(0x7f0000000000), &(0x7f0000000000)) 1.562267s ago: executing program 1: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000), 0x0) 1.540926118s ago: executing program 0: socket$rxrpc(0x21, 0x2, 0x0) 1.524999885s ago: executing program 3: pwritev2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 1.514186953s ago: executing program 2: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1.487086386s ago: executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) 1.477276375s ago: executing program 0: syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$vim2m(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$vim2m(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$vim2m(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$vim2m(&(0x7f0000000500), 0x4, 0x800) 1.474735356s ago: executing program 5: truncate(&(0x7f0000000000), 0x0) 1.44387607s ago: executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) 1.441366713s ago: executing program 3: exit_group(0x0) 1.420313568s ago: executing program 2: pivot_root(&(0x7f0000000000), &(0x7f0000000000)) 1.404208563s ago: executing program 1: getpgid(0x0) 1.39602735s ago: executing program 4: socket$qrtr(0x2a, 0x2, 0x0) 1.390265113s ago: executing program 5: move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0) 1.271869867s ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0', 0x800, 0x0) 1.266683999s ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full', 0x800, 0x0) 0s ago: executing program 3: mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. 2024/06/18 10:00:34 fuzzer started 2024/06/18 10:00:35 dialing manager at 10.128.0.169:30005 [ 101.825002][ T45] cfg80211: failed to load regulatory.db [ 102.572045][ T5100] cgroup: Unknown subsys name 'net' [ 102.846043][ T5100] cgroup: Unknown subsys name 'rlimit' 2024/06/18 10:00:37 starting 6 executor processes [ 104.656879][ T5113] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.765867][ T5218] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.460300][ T5275] mmap: syz-executor.0 (5275) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.251929][ T5460] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.709956][ T4355] [ 115.712631][ T4355] ============================= [ 115.717521][ T4355] WARNING: suspicious RCU usage [ 115.724255][ T4355] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted [ 115.731396][ T4355] ----------------------------- [ 115.736363][ T4355] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 115.746100][ T4355] [ 115.746100][ T4355] other info that might help us debug this: [ 115.746100][ T4355] [ 115.756450][ T4355] [ 115.756450][ T4355] rcu_scheduler_active = 2, debug_locks = 1 [ 115.764637][ T4355] 3 locks held by kworker/u8:9/4355: [ 115.771740][ T4355] #0: ffff8880162d5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 115.783165][ T4355] #1: ffffc9000c087d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 115.793390][ T4355] #2: ffffffff8f741dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 115.802895][ T4355] [ 115.802895][ T4355] stack backtrace: [ 115.808807][ T4355] CPU: 1 PID: 4355 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 [ 115.819084][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 115.829168][ T4355] Workqueue: netns cleanup_net [ 115.833981][ T4355] Call Trace: [ 115.837284][ T4355] [ 115.840239][ T4355] dump_stack_lvl+0x16c/0x1f0 [ 115.844992][ T4355] lockdep_rcu_suspicious+0x20b/0x3b0 [ 115.850418][ T4355] _destroy_all_sets+0x261/0x6d0 [ 115.855517][ T4355] ? __pfx_ip_set_net_exit+0x10/0x10 2024/06/18 10:00:49 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 115.860865][ T4355] ip_set_net_exit+0x26/0x60 [ 115.865517][ T4355] ops_exit_list+0xb3/0x180 [ 115.870097][ T4355] cleanup_net+0x5b7/0xbf0 [ 115.874560][ T4355] ? __pfx_cleanup_net+0x10/0x10 [ 115.879561][ T4355] process_one_work+0x9fe/0x1b60 [ 115.884570][ T4355] ? __pfx_lock_acquire+0x10/0x10 [ 115.889642][ T4355] ? __pfx_process_one_work+0x10/0x10 [ 115.895066][ T4355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.900774][ T4355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.906469][ T4355] ? assign_work+0x1a0/0x250 [ 115.911118][ T4355] worker_thread+0x6c8/0xf70 [ 115.915777][ T4355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.921472][ T4355] ? __kthread_parkme+0x148/0x220 [ 115.926569][ T4355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.932266][ T4355] ? __pfx_worker_thread+0x10/0x10 [ 115.937429][ T4355] kthread+0x2c4/0x3a0 [ 115.941560][ T4355] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.946814][ T4355] ? __pfx_kthread+0x10/0x10 [ 115.951457][ T4355] ret_from_fork+0x48/0x80 [ 115.955923][ T4355] ? __pfx_kthread+0x10/0x10 [ 115.960561][ T4355] ret_from_fork_asm+0x1a/0x30 [ 115.965394][ T4355] [ 115.970673][ T4355] [ 115.973090][ T4355] ============================= [ 115.977952][ T4355] WARNING: suspicious RCU usage [ 115.982846][ T4355] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted [ 115.989975][ T4355] ----------------------------- [ 115.994909][ T4355] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 116.004601][ T4355] [ 116.004601][ T4355] other info that might help us debug this: [ 116.004601][ T4355] [ 116.014877][ T4355] [ 116.014877][ T4355] rcu_scheduler_active = 2, debug_locks = 1 [ 116.023030][ T4355] 3 locks held by kworker/u8:9/4355: [ 116.028343][ T4355] #0: ffff8880162d5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 116.038853][ T4355] #1: ffffc9000c087d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 116.048943][ T4355] #2: ffffffff8f741dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 116.058407][ T4355] [ 116.058407][ T4355] stack backtrace: [ 116.064425][ T4355] CPU: 0 PID: 4355 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 [ 116.074708][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 116.084790][ T4355] Workqueue: netns cleanup_net [ 116.089583][ T4355] Call Trace: [ 116.092875][ T4355] [ 116.095816][ T4355] dump_stack_lvl+0x16c/0x1f0 [ 116.100546][ T4355] lockdep_rcu_suspicious+0x20b/0x3b0 [ 116.105962][ T4355] _destroy_all_sets+0x4e6/0x6d0 [ 116.110943][ T4355] ? __pfx_ip_set_net_exit+0x10/0x10 [ 116.116270][ T4355] ip_set_net_exit+0x26/0x60 [ 116.120898][ T4355] ops_exit_list+0xb3/0x180 [ 116.125459][ T4355] cleanup_net+0x5b7/0xbf0 [ 116.129905][ T4355] ? __pfx_cleanup_net+0x10/0x10 [ 116.134896][ T4355] process_one_work+0x9fe/0x1b60 [ 116.139889][ T4355] ? __pfx_lock_acquire+0x10/0x10 [ 116.144952][ T4355] ? __pfx_process_one_work+0x10/0x10 [ 116.150387][ T4355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.156076][ T4355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.161758][ T4355] ? assign_work+0x1a0/0x250 [ 116.166387][ T4355] worker_thread+0x6c8/0xf70 [ 116.171031][ T4355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.176707][ T4355] ? __kthread_parkme+0x148/0x220 [ 116.181782][ T4355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.187463][ T4355] ? __pfx_worker_thread+0x10/0x10 [ 116.192614][ T4355] kthread+0x2c4/0x3a0 [ 116.196736][ T4355] ? _raw_spin_unlock_irq+0x23/0x50 [ 116.201978][ T4355] ? __pfx_kthread+0x10/0x10 [ 116.206622][ T4355] ret_from_fork+0x48/0x80 [ 116.211105][ T4355] ? __pfx_kthread+0x10/0x10 [ 116.215751][ T4355] ret_from_fork_asm+0x1a/0x30 [ 116.220584][ T4355]