last executing test programs: 2.654811403s ago: executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) 2.61408823s ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1', 0x800, 0x0) 2.245219494s ago: executing program 1: setfsuid(0x0) 2.220919145s ago: executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$loop(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$loop(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$loop(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$loop(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$loop(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x800) 2.156923926s ago: executing program 1: signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 2.128743261s ago: executing program 1: pause() 412.877756ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cdrom1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cdrom1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cdrom1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cdrom1', 0x800, 0x0) 382.518019ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptp0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptp0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptp0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptp0', 0x800, 0x0) 343.05041ms ago: executing program 4: getpriority(0x0, 0x0) 310.532223ms ago: executing program 4: socket$can_bcm(0x1d, 0x2, 0x2) 267.087586ms ago: executing program 4: set_thread_area(&(0x7f0000000000)) 227.722784ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/oss_mixer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer', 0x800, 0x0) 185.559174ms ago: executing program 3: shmat(0x0, 0x0, 0x0) 143.834033ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/i915', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/i915', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/i915', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/i915', 0x800, 0x0) 136.367142ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control', 0x800, 0x0) 135.873137ms ago: executing program 0: mlock2(0x0, 0x0, 0x0) 118.838639ms ago: executing program 0: socket$rds(0x15, 0x5, 0x0) 114.814812ms ago: executing program 2: chroot(&(0x7f0000000000)) 109.757133ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0', 0x2, 0x0) 91.854986ms ago: executing program 2: lookup_dcookie(0x0, &(0x7f0000000000), 0x0) 91.438867ms ago: executing program 0: fanotify_init(0x0, 0x0) 73.183754ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk', 0x800, 0x0) 72.706229ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/reclaim', 0x1, 0x0) 63.410787ms ago: executing program 0: epoll_create(0x0) 45.218976ms ago: executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) 40.547243ms ago: executing program 0: landlock_create_ruleset(&(0x7f0000000000), 0x0, 0x0) 29.87319ms ago: executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) 14.198349ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl', 0x800, 0x0) 9.83005ms ago: executing program 2: sched_yield() 0s ago: executing program 3: getitimer(0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. 2024/06/17 03:50:28 fuzzer started 2024/06/17 03:50:28 dialing manager at 10.128.0.169:30009 [ 54.547920][ T5080] cgroup: Unknown subsys name 'net' [ 54.767912][ T5080] cgroup: Unknown subsys name 'rlimit' 2024/06/17 03:50:30 starting 5 executor processes [ 55.895868][ T5083] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.941488][ T5309] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.513619][ T5607] mmap: syz-executor.2 (5607) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.833702][ T5647] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.865716][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.875533][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.883621][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.898846][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.906638][ T5746] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.914782][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.962902][ T51] [ 61.965574][ T51] ============================= [ 61.970438][ T51] WARNING: suspicious RCU usage [ 61.975454][ T51] 6.10.0-rc4-syzkaller #0 Not tainted [ 61.980986][ T51] ----------------------------- [ 61.985925][ T51] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 61.995621][ T51] [ 61.995621][ T51] other info that might help us debug this: [ 61.995621][ T51] [ 62.005946][ T51] [ 62.005946][ T51] rcu_scheduler_active = 2, debug_locks = 1 [ 62.014032][ T51] 3 locks held by kworker/u8:3/51: [ 62.019291][ T51] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 62.030505][ T51] #1: ffffc90000bb7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 62.041167][ T51] #2: ffffffff8f5c95d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 62.050734][ T51] [ 62.050734][ T51] stack backtrace: [ 62.056698][ T51] CPU: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-syzkaller #0 [ 62.065045][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 62.075387][ T51] Workqueue: netns cleanup_net [ 62.080220][ T51] Call Trace: [ 62.083524][ T51] [ 62.086482][ T51] dump_stack_lvl+0x241/0x360 [ 62.091190][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.096417][ T51] ? __pfx__printk+0x10/0x10 [ 62.101047][ T51] lockdep_rcu_suspicious+0x221/0x340 [ 62.106467][ T51] _destroy_all_sets+0x232/0x5f0 [ 62.111441][ T51] ip_set_net_exit+0x20/0x50 [ 62.116058][ T51] cleanup_net+0x802/0xcc0 [ 62.120512][ T51] ? __pfx_cleanup_net+0x10/0x10 [ 62.125589][ T51] ? process_scheduled_works+0x945/0x1830 [ 62.131350][ T51] process_scheduled_works+0xa2c/0x1830 [ 62.136958][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 62.142988][ T51] ? assign_work+0x364/0x3d0 [ 62.147700][ T51] worker_thread+0x86d/0xd70 [ 62.152516][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 62.158444][ T51] ? __kthread_parkme+0x169/0x1d0 2024/06/17 03:50:36 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 62.163474][ T51] ? __pfx_worker_thread+0x10/0x10 [ 62.168589][ T51] kthread+0x2f0/0x390 [ 62.172657][ T51] ? __pfx_worker_thread+0x10/0x10 [ 62.177767][ T51] ? __pfx_kthread+0x10/0x10 [ 62.182437][ T51] ret_from_fork+0x4b/0x80 [ 62.187810][ T51] ? __pfx_kthread+0x10/0x10 [ 62.192392][ T51] ret_from_fork_asm+0x1a/0x30 [ 62.197163][ T51] [ 62.244812][ T51] [ 62.247192][ T51] ============================= [ 62.252140][ T51] WARNING: suspicious RCU usage [ 62.257143][ T51] 6.10.0-rc4-syzkaller #0 Not tainted [ 62.262576][ T51] ----------------------------- [ 62.267659][ T51] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 62.277891][ T51] [ 62.277891][ T51] other info that might help us debug this: [ 62.277891][ T51] [ 62.288214][ T51] [ 62.288214][ T51] rcu_scheduler_active = 2, debug_locks = 1 [ 62.296379][ T51] 3 locks held by kworker/u8:3/51: [ 62.301555][ T51] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 62.312713][ T51] #1: ffffc90000bb7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 62.323549][ T51] #2: ffffffff8f5c95d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 62.333117][ T51] [ 62.333117][ T51] stack backtrace: [ 62.339156][ T51] CPU: 1 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-syzkaller #0 [ 62.347509][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 62.358288][ T51] Workqueue: netns cleanup_net [ 62.363063][ T51] Call Trace: [ 62.366332][ T51] [ 62.369252][ T51] dump_stack_lvl+0x241/0x360 [ 62.373926][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.379116][ T51] ? __pfx__printk+0x10/0x10 [ 62.383705][ T51] lockdep_rcu_suspicious+0x221/0x340 [ 62.389071][ T51] _destroy_all_sets+0x53f/0x5f0 [ 62.394021][ T51] ip_set_net_exit+0x20/0x50 [ 62.398606][ T51] cleanup_net+0x802/0xcc0 [ 62.403117][ T51] ? __pfx_cleanup_net+0x10/0x10 [ 62.408148][ T51] ? process_scheduled_works+0x945/0x1830 [ 62.413861][ T51] process_scheduled_works+0xa2c/0x1830 [ 62.419422][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 62.425403][ T51] ? assign_work+0x364/0x3d0 [ 62.430100][ T51] worker_thread+0x86d/0xd70 [ 62.434701][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 62.440600][ T51] ? __kthread_parkme+0x169/0x1d0 [ 62.445647][ T51] ? __pfx_worker_thread+0x10/0x10 [ 62.450755][ T51] kthread+0x2f0/0x390 [ 62.455162][ T51] ? __pfx_worker_thread+0x10/0x10 [ 62.460457][ T51] ? __pfx_kthread+0x10/0x10 [ 62.465036][ T51] ret_from_fork+0x4b/0x80 [ 62.469542][ T51] ? __pfx_kthread+0x10/0x10 [ 62.474128][ T51] ret_from_fork_asm+0x1a/0x30 [ 62.478896][ T51] [ 62.481918][ C1] vkms_vblank_simulate: vblank timer overrun