=============================
WARNING: suspicious RCU usage
6.8.0-rc2-syzkaller-00476-g3a0e92207940 #0 Not tainted
-----------------------------
net/netfilter/ipset/ip_set_hash_gen.h:455 suspicious rcu_dereference_protected() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
1 lock held by modprobe/20084:
 #0: ffffffff8d5ad540 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:298 [inline]
 #0: ffffffff8d5ad540 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2184 [inline]
 #0: ffffffff8d5ad540 (rcu_callback){....}-{0:0}, at: rcu_core+0x7bd/0x1680 kernel/rcu/tree.c:2465

stack backtrace:
CPU: 2 PID: 20084 Comm: modprobe Not tainted 6.8.0-rc2-syzkaller-00476-g3a0e92207940 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x125/0x1b0 lib/dump_stack.c:106
 lockdep_rcu_suspicious+0x20c/0x3b0 kernel/locking/lockdep.c:6712
 hash_netportnet6_destroy+0x2c4/0x3a0 net/netfilter/ipset/ip_set_hash_gen.h:455
 ip_set_destroy_set+0x65/0x100 net/netfilter/ipset/ip_set_core.c:1180
 rcu_do_batch kernel/rcu/tree.c:2190 [inline]
 rcu_core+0x819/0x1680 kernel/rcu/tree.c:2465
 __do_softirq+0x21c/0x8e7 kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu kernel/softirq.c:632 [inline]
 irq_exit_rcu+0xbb/0x120 kernel/softirq.c:644
 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1076
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:build_open_flags+0x348/0x690 fs/open.c:1295
Code: be 82 96 ff 48 8d 7b 0c 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 <84> d2 0f 85 34 03 00 00 89 6b 0c 4c 89 e5 4d 89 e6 81 e5 00 00 01
RSP: 0018:ffffc9000cb07d78 EFLAGS: 00000202
RAX: 0000000000000007 RBX: ffffc9000cb07dd8 RCX: ffffffff81f558a4
RDX: 0000000000000000 RSI: ffffffff81f558b2 RDI: ffffc9000cb07de4
RBP: 0000000000000100 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000008000
R13: ffffc9000cb07e90 R14: 0000000000000000 R15: 0000000000000000
 do_sys_openat2+0x97/0x1e0 fs/open.c:1392
 do_sys_open fs/open.c:1419 [inline]
 __do_sys_openat fs/open.c:1435 [inline]
 __se_sys_openat fs/open.c:1430 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1430
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xd5/0x270 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x6f/0x77
RIP: 0033:0x7f0565997a46
Code: 10 00 00 00 44 8b 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 0a 48 01 00 48 83 c8 ff c3 31
RSP: 002b:00007ffc0602ace8 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffc0602af48 RCX: 00007f0565997a46
RDX: 0000000000080000 RSI: 00007ffc0602ad60 RDI: 00000000ffffff9c
RBP: 00007ffc0602ad50 R08: 0000000000080000 R09: 00007ffc0602ad60
R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffc0602ad60
R13: 0000000000000008 R14: 00007ffc0602af2f R15: 00000000ffffffff
 </TASK>
----------------
Code disassembly (best guess):
   0:	be 82 96 ff 48       	mov    $0x48ff9682,%esi
   5:	8d 7b 0c             	lea    0xc(%rbx),%edi
   8:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
   f:	fc ff df
  12:	48 89 fa             	mov    %rdi,%rdx
  15:	48 c1 ea 03          	shr    $0x3,%rdx
  19:	0f b6 14 02          	movzbl (%rdx,%rax,1),%edx
  1d:	48 89 f8             	mov    %rdi,%rax
  20:	83 e0 07             	and    $0x7,%eax
  23:	83 c0 03             	add    $0x3,%eax
  26:	38 d0                	cmp    %dl,%al
  28:	7c 08                	jl     0x32
* 2a:	84 d2                	test   %dl,%dl <-- trapping instruction
  2c:	0f 85 34 03 00 00    	jne    0x366
  32:	89 6b 0c             	mov    %ebp,0xc(%rbx)
  35:	4c 89 e5             	mov    %r12,%rbp
  38:	4d 89 e6             	mov    %r12,%r14
  3b:	81                   	.byte 0x81
  3c:	e5 00                	in     $0x0,%eax
  3e:	00 01                	add    %al,(%rcx)