last executing test programs: 1.352388916s ago: executing program 0: finit_module(0xffffffffffffffff, &(0x7f0000000000), 0x0) 1.254985733s ago: executing program 0: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.177286092s ago: executing program 0: pipe(&(0x7f0000000000)) 1.101285791s ago: executing program 0: syz_open_dev$midi(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$midi(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$midi(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$midi(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$midi(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$midi(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$midi(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$midi(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$midi(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$midi(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$midi(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$midi(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$midi(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$midi(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$midi(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$midi(&(0x7f0000000500), 0x4, 0x800) 1.010534792s ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1', 0x800, 0x0) 729.588922ms ago: executing program 4: shmat(0x0, 0x0, 0x0) 654.727272ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3', 0x800, 0x0) 566.600748ms ago: executing program 4: sched_getscheduler(0x0) 510.490066ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m', 0x2, 0x0) 462.417789ms ago: executing program 3: mknod(&(0x7f0000000000), 0x0, 0x0) 440.398966ms ago: executing program 5: newfstatat(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000000), 0x0) 432.46216ms ago: executing program 4: setfsgid(0x0) 422.979811ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load', 0x2, 0x0) 373.091897ms ago: executing program 4: sync() 371.819593ms ago: executing program 3: socket$rxrpc(0x21, 0x2, 0x0) 371.321827ms ago: executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self', 0x800, 0x0) 360.771061ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci', 0x2, 0x0) 359.961017ms ago: executing program 1: statx(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000)) 301.012552ms ago: executing program 2: socket$caif_seqpacket(0x25, 0x5, 0x0) 297.762104ms ago: executing program 3: flistxattr(0xffffffffffffffff, &(0x7f0000000000), 0x0) 272.261763ms ago: executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128', 0x800, 0x0) 270.258883ms ago: executing program 1: socket$l2tp6(0xa, 0x2, 0x73) 250.161408ms ago: executing program 3: timerfd_create(0x0, 0x0) 230.867639ms ago: executing program 2: msgrcv(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) 204.46511ms ago: executing program 1: socket$can_raw(0x1d, 0x3, 0x1) 182.449377ms ago: executing program 3: remap_file_pages(0x0, 0x0, 0x0, 0x0, 0x0) 180.323377ms ago: executing program 1: socket$phonet(0x23, 0x2, 0x1) 162.466423ms ago: executing program 5: restart_syscall() 148.019974ms ago: executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) 101.339254ms ago: executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 96.902448ms ago: executing program 2: setns(0xffffffffffffffff, 0x0) 88.291131ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access', 0x2, 0x0) 40.859793ms ago: executing program 3: readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.394967ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/xen/evtchn', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/xen/evtchn', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/xen/evtchn', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/xen/evtchn', 0x800, 0x0) 1.474146ms ago: executing program 0: link(&(0x7f0000000000), &(0x7f0000000000)) 0s ago: executing program 5: socket$inet6_mptcp(0xa, 0x1, 0x106) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 101.886363][ T25] cfg80211: failed to load regulatory.db 2024/06/18 19:03:13 fuzzer started 2024/06/18 19:03:13 dialing manager at 10.128.0.169:30005 [ 103.031392][ T5088] cgroup: Unknown subsys name 'net' [ 103.381631][ T5088] cgroup: Unknown subsys name 'rlimit' [ 105.246494][ T5110] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.263877][ T5110] syz-executor (5110) used greatest stack depth: 21200 bytes left 2024/06/18 19:03:16 starting 6 executor processes [ 110.271616][ T5433] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.855620][ T5607] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.558002][ T5730] mmap: syz-executor.3 (5730) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.331798][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.344354][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.352381][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.373978][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.382452][ T5749] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.392538][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.808207][ T35] [ 115.810775][ T35] ============================= [ 115.816414][ T35] WARNING: suspicious RCU usage [ 115.821294][ T35] 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 Not tainted [ 115.828592][ T35] ----------------------------- [ 115.833468][ T35] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 115.843195][ T35] [ 115.843195][ T35] other info that might help us debug this: [ 115.843195][ T35] [ 115.853536][ T35] [ 115.853536][ T35] rcu_scheduler_active = 2, debug_locks = 1 [ 115.861855][ T35] 3 locks held by kworker/u8:2/35: [ 115.867098][ T35] #0: ffff8880162d5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 115.878312][ T35] #1: ffffc90000ab7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 115.888689][ T35] #2: ffffffff8f741f90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 115.899089][ T35] [ 115.899089][ T35] stack backtrace: [ 115.905129][ T35] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 [ 115.915238][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 115.925426][ T35] Workqueue: netns cleanup_net [ 115.930242][ T35] Call Trace: [ 115.933545][ T35] [ 115.936501][ T35] dump_stack_lvl+0x16c/0x1f0 [ 115.941271][ T35] lockdep_rcu_suspicious+0x20b/0x3b0 [ 115.946714][ T35] _destroy_all_sets+0x261/0x6d0 [ 115.951724][ T35] ? __pfx_ip_set_net_exit+0x10/0x10 [ 115.957076][ T35] ip_set_net_exit+0x26/0x60 [ 115.961726][ T35] ops_exit_list+0xb3/0x180 [ 115.966302][ T35] cleanup_net+0x5b7/0xbf0 [ 115.970761][ T35] ? __pfx_cleanup_net+0x10/0x10 [ 115.975763][ T35] process_one_work+0x9fe/0x1b60 [ 115.980776][ T35] ? __pfx_lock_acquire+0x10/0x10 [ 115.985853][ T35] ? __pfx_process_one_work+0x10/0x10 [ 115.991277][ T35] ? srso_alias_return_thunk+0x5/0xfbef5 [ 115.996993][ T35] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.002693][ T35] ? assign_work+0x1a0/0x250 [ 116.007339][ T35] worker_thread+0x6c8/0xf70 [ 116.012000][ T35] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.017693][ T35] ? __kthread_parkme+0x148/0x220 [ 116.022822][ T35] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.028520][ T35] ? __pfx_worker_thread+0x10/0x10 [ 116.033689][ T35] kthread+0x2c4/0x3a0 [ 116.037822][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 116.043087][ T35] ? __pfx_kthread+0x10/0x10 [ 116.047782][ T35] ret_from_fork+0x48/0x80 [ 116.052259][ T35] ? __pfx_kthread+0x10/0x10 2024/06/18 19:03:27 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 116.056918][ T35] ret_from_fork_asm+0x1a/0x30 [ 116.061772][ T35] [ 116.213812][ T35] [ 116.216202][ T35] ============================= [ 116.221073][ T35] WARNING: suspicious RCU usage [ 116.226060][ T35] 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 Not tainted [ 116.233205][ T35] ----------------------------- [ 116.238226][ T35] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 116.247955][ T35] [ 116.247955][ T35] other info that might help us debug this: [ 116.247955][ T35] [ 116.258447][ T35] [ 116.258447][ T35] rcu_scheduler_active = 2, debug_locks = 1 [ 116.266584][ T35] 3 locks held by kworker/u8:2/35: [ 116.271726][ T35] #0: ffff8880162d5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 116.282274][ T35] #1: ffffc90000ab7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 116.292670][ T35] #2: ffffffff8f741f90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 116.302320][ T35] [ 116.302320][ T35] stack backtrace: [ 116.308431][ T35] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 [ 116.318536][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 116.328709][ T35] Workqueue: netns cleanup_net [ 116.333517][ T35] Call Trace: [ 116.336819][ T35] [ 116.339775][ T35] dump_stack_lvl+0x16c/0x1f0 [ 116.344528][ T35] lockdep_rcu_suspicious+0x20b/0x3b0 [ 116.349961][ T35] _destroy_all_sets+0x4e6/0x6d0 [ 116.355056][ T35] ? __pfx_ip_set_net_exit+0x10/0x10 [ 116.360414][ T35] ip_set_net_exit+0x26/0x60 [ 116.365081][ T35] ops_exit_list+0xb3/0x180 [ 116.369671][ T35] cleanup_net+0x5b7/0xbf0 [ 116.374129][ T35] ? __pfx_cleanup_net+0x10/0x10 [ 116.379118][ T35] process_one_work+0x9fe/0x1b60 [ 116.384119][ T35] ? __pfx_lock_acquire+0x10/0x10 [ 116.389184][ T35] ? __pfx_process_one_work+0x10/0x10 [ 116.394632][ T35] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.400324][ T35] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.406011][ T35] ? assign_work+0x1a0/0x250 [ 116.410689][ T35] worker_thread+0x6c8/0xf70 [ 116.415379][ T35] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.421064][ T35] ? __kthread_parkme+0x148/0x220 [ 116.426149][ T35] ? srso_alias_return_thunk+0x5/0xfbef5 [ 116.431925][ T35] ? __pfx_worker_thread+0x10/0x10 [ 116.437084][ T35] kthread+0x2c4/0x3a0 [ 116.441232][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 116.446489][ T35] ? __pfx_kthread+0x10/0x10 [ 116.451151][ T35] ret_from_fork+0x48/0x80 [ 116.455640][ T35] ? __pfx_kthread+0x10/0x10 [ 116.460280][ T35] ret_from_fork_asm+0x1a/0x30 [ 116.465114][ T35]