last executing test programs: 515.60707ms ago: executing program 3: symlinkat(&(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000)) 505.719982ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor', 0x800, 0x0) 502.948692ms ago: executing program 2: flock(0xffffffffffffffff, 0x0) 488.123454ms ago: executing program 3: statx(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000)) 484.923655ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp', 0x800, 0x0) 472.045957ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/netlabel', 0x2, 0x0) 469.959578ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pktcdvd/control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control', 0x800, 0x0) 455.39943ms ago: executing program 3: fchown(0xffffffffffffffff, 0x0, 0x0) 453.21376ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu', 0x800, 0x0) 438.344582ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwbinder', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwbinder', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwbinder', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwbinder', 0x800, 0x0) 426.147244ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control', 0x800, 0x0) 425.558854ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cdrom1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cdrom1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cdrom1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cdrom1', 0x800, 0x0) 419.226805ms ago: executing program 1: linkat(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0) 408.034707ms ago: executing program 4: readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) 399.882008ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio', 0x800, 0x0) 399.375118ms ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1', 0x800, 0x0) 390.08119ms ago: executing program 4: ftruncate(0xffffffffffffffff, 0x0) 381.721981ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context', 0x2, 0x0) 370.633973ms ago: executing program 1: utime(&(0x7f0000000000), &(0x7f0000000000)) 358.792725ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/img-rogue', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/img-rogue', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/img-rogue', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/img-rogue', 0x800, 0x0) 351.701665ms ago: executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 349.161316ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nmem0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nmem0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nmem0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nmem0', 0x800, 0x0) 339.300968ms ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37', 0x2, 0x0) 333.264919ms ago: executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem', 0x800, 0x0) 326.19037ms ago: executing program 4: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) 322.38771ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse', 0x2, 0x0) 305.340443ms ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem', 0x1, 0x0) 294.236924ms ago: executing program 1: readlink(&(0x7f0000000000), &(0x7f0000000000), 0x0) 262.08269ms ago: executing program 4: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/yama/ptrace_scope', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. 2024/06/18 07:27:37 fuzzer started 2024/06/18 07:27:37 dialing manager at 10.128.0.163:30033 [ 60.545451][ T5076] cgroup: Unknown subsys name 'net' [ 60.826548][ T5076] cgroup: Unknown subsys name 'rlimit' [ 62.058457][ T5101] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/06/18 07:27:43 starting 5 executor processes [ 69.324095][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.357707][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.433356][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.441232][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.471330][ T51] [ 69.473916][ T51] ============================= [ 69.478789][ T51] WARNING: suspicious RCU usage [ 69.483723][ T51] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted [ 69.491078][ T51] ----------------------------- [ 69.496130][ T51] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 69.505808][ T51] [ 69.505808][ T51] other info that might help us debug this: [ 69.505808][ T51] [ 69.516202][ T51] [ 69.516202][ T51] rcu_scheduler_active = 2, debug_locks = 1 [ 69.524326][ T51] 3 locks held by kworker/u8:3/51: 2024/06/18 07:27:46 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 69.529641][ T51] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 69.541454][ T51] #1: ffffc90000bb7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 69.552261][ T51] #2: ffffffff8f5c9290 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 69.561970][ T51] [ 69.561970][ T51] stack backtrace: [ 69.567900][ T51] CPU: 1 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 [ 69.577999][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 69.588076][ T51] Workqueue: netns cleanup_net [ 69.593080][ T51] Call Trace: [ 69.596599][ T51] [ 69.599614][ T51] dump_stack_lvl+0x241/0x360 [ 69.604331][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.609563][ T51] ? __pfx__printk+0x10/0x10 [ 69.614217][ T51] lockdep_rcu_suspicious+0x221/0x340 [ 69.619590][ T51] _destroy_all_sets+0x232/0x5f0 [ 69.624527][ T51] ip_set_net_exit+0x20/0x50 [ 69.629142][ T51] cleanup_net+0x802/0xcc0 [ 69.633588][ T51] ? __pfx_cleanup_net+0x10/0x10 [ 69.638542][ T51] ? process_scheduled_works+0x945/0x1830 [ 69.644257][ T51] process_scheduled_works+0xa2c/0x1830 [ 69.649812][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 69.655790][ T51] ? assign_work+0x364/0x3d0 [ 69.660386][ T51] worker_thread+0x86d/0xd70 [ 69.665037][ T51] ? __kthread_parkme+0x169/0x1d0 [ 69.670096][ T51] ? __pfx_worker_thread+0x10/0x10 [ 69.675547][ T51] kthread+0x2f0/0x390 [ 69.679722][ T51] ? __pfx_worker_thread+0x10/0x10 [ 69.684922][ T51] ? __pfx_kthread+0x10/0x10 [ 69.689518][ T51] ret_from_fork+0x4b/0x80 [ 69.694102][ T51] ? __pfx_kthread+0x10/0x10 [ 69.698682][ T51] ret_from_fork_asm+0x1a/0x30 [ 69.703569][ T51] [ 69.765688][ T51] [ 69.768172][ T51] ============================= [ 69.773412][ T51] WARNING: suspicious RCU usage [ 69.778281][ T51] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted [ 69.785599][ T51] ----------------------------- [ 69.790467][ T51] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 69.800275][ T51] [ 69.800275][ T51] other info that might help us debug this: [ 69.800275][ T51] [ 69.810939][ T51] [ 69.810939][ T51] rcu_scheduler_active = 2, debug_locks = 1 [ 69.819260][ T51] 3 locks held by kworker/u8:3/51: [ 69.824477][ T51] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 69.835581][ T51] #1: ffffc90000bb7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 69.846349][ T51] #2: ffffffff8f5c9290 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 69.855863][ T51] [ 69.855863][ T51] stack backtrace: [ 69.862108][ T51] CPU: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 [ 69.872221][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 69.882558][ T51] Workqueue: netns cleanup_net [ 69.887362][ T51] Call Trace: [ 69.890666][ T51] [ 69.893628][ T51] dump_stack_lvl+0x241/0x360 [ 69.898437][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.903943][ T51] ? __pfx__printk+0x10/0x10 [ 69.908623][ T51] lockdep_rcu_suspicious+0x221/0x340 [ 69.914049][ T51] _destroy_all_sets+0x53f/0x5f0 [ 69.919024][ T51] ip_set_net_exit+0x20/0x50 [ 69.923669][ T51] cleanup_net+0x802/0xcc0 [ 69.928312][ T51] ? __pfx_cleanup_net+0x10/0x10 [ 69.933645][ T51] ? process_scheduled_works+0x945/0x1830 [ 69.939590][ T51] process_scheduled_works+0xa2c/0x1830 [ 69.945377][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 69.951418][ T51] ? assign_work+0x364/0x3d0 [ 69.956053][ T51] worker_thread+0x86d/0xd70 [ 69.960683][ T51] ? __kthread_parkme+0x169/0x1d0 [ 69.965739][ T51] ? __pfx_worker_thread+0x10/0x10 [ 69.971056][ T51] kthread+0x2f0/0x390 [ 69.975153][ T51] ? __pfx_worker_thread+0x10/0x10 [ 69.980358][ T51] ? __pfx_kthread+0x10/0x10 [ 69.984943][ T51] ret_from_fork+0x4b/0x80 [ 69.989366][ T51] ? __pfx_kthread+0x10/0x10 [ 69.994034][ T51] ret_from_fork_asm+0x1a/0x30 [ 69.998805][ T51]