WARNING: suspicious RCU usage in _destroy_all_sets netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed ============================= WARNING: suspicious RCU usage 6.10.0-rc3-syzkaller-00164-g44ef20baed8e #0 Not tainted ----------------------------- net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u32:3/63: #0: ffff8880162e4948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206 #1: ffffc90000d07d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207 #2: ffffffff8f7370d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 net/core/net_namespace.c:594 stack backtrace: CPU: 2 PID: 63 Comm: kworker/u32:3 Not tainted 6.10.0-rc3-syzkaller-00164-g44ef20baed8e #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: netns cleanup_net Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:114 lockdep_rcu_suspicious+0x20b/0x3b0 kernel/locking/lockdep.c:6712 _destroy_all_sets+0x261/0x6d0 net/netfilter/ipset/ip_set_core.c:1200 ip_set_net_exit+0x26/0x60 net/netfilter/ipset/ip_set_core.c:2396 ops_exit_list+0xb0/0x180 net/core/net_namespace.c:173 cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 ============================= WARNING: suspicious RCU usage 6.10.0-rc3-syzkaller-00164-g44ef20baed8e #0 Not tainted ----------------------------- net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u32:3/63: #0: ffff8880162e4948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 kernel/workqueue.c:3206 #1: ffffc90000d07d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 kernel/workqueue.c:3207 #2: ffffffff8f7370d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 net/core/net_namespace.c:594 stack backtrace: CPU: 2 PID: 63 Comm: kworker/u32:3 Not tainted 6.10.0-rc3-syzkaller-00164-g44ef20baed8e #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: netns cleanup_net Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:114 lockdep_rcu_suspicious+0x20b/0x3b0 kernel/locking/lockdep.c:6712 _destroy_all_sets+0x4e6/0x6d0 net/netfilter/ipset/ip_set_core.c:1211 ip_set_net_exit+0x26/0x60 net/netfilter/ipset/ip_set_core.c:2396 ops_exit_list+0xb0/0x180 net/core/net_namespace.c:173 cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 [ 46.118797][ T39] audit: type=1400 audit(1718467163.568:82): avc: denied { siginh } for pid=5174 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.380033][ T39] audit: type=1400 audit(1718467163.848:83): avc: denied { write } for pid=5177 comm="sftp-server" path="pipe:[5295]" dev="pipefs" ino=5295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 46.910756][ T39] audit: type=1400 audit(1718467164.378:84): avc: denied { read } for pid=4670 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 46.920620][ T39] audit: type=1400 audit(1718467164.378:85): avc: denied { append } for pid=4670 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.930459][ T39] audit: type=1400 audit(1718467164.378:86): avc: denied { open } for pid=4670 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.940347][ T39] audit: type=1400 audit(1718467164.378:87): avc: denied { getattr } for pid=4670 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:51088' (ED25519) to the list of known hosts. [ 51.575289][ T39] audit: type=1400 audit(1718467169.048:88): avc: denied { execute } for pid=5185 comm="sh" name="syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 51.584749][ T39] audit: type=1400 audit(1718467169.048:89): avc: denied { execute_no_trans } for pid=5185 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2024/06/15 15:59:29 ignoring optional flag "pprof_port"="0" 2024/06/15 15:59:29 fuzzer started 2024/06/15 15:59:29 connecting to host at localhost:40361 2024/06/15 15:59:29 checking machine... 2024/06/15 15:59:29 checking revisions... [ 52.025328][ T39] audit: type=1400 audit(1718467169.498:90): avc: denied { getattr } for pid=5185 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.033394][ T39] audit: type=1400 audit(1718467169.498:91): avc: denied { read } for pid=5185 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.040409][ T39] audit: type=1400 audit(1718467169.498:92): avc: denied { open } for pid=5185 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2024/06/15 15:59:29 testing simple program... [ 52.048516][ T39] audit: type=1400 audit(1718467169.518:93): avc: denied { read } for pid=5185 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.056480][ T39] audit: type=1400 audit(1718467169.518:94): avc: denied { open } for pid=5185 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.064745][ T39] audit: type=1400 audit(1718467169.518:95): avc: denied { read } for pid=5185 comm="syz-fuzzer" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.068914][ T5195] cgroup: Unknown subsys name 'net' [ 52.073352][ T39] audit: type=1400 audit(1718467169.518:96): avc: denied { open } for pid=5185 comm="syz-fuzzer" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.083737][ T39] audit: type=1400 audit(1718467169.528:97): avc: denied { mounton } for pid=5195 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.273510][ T5195] cgroup: Unknown subsys name 'rlimit' [ 52.511361][ T5196] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 53.521837][ T5195] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.719978][ T5200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.724900][ T5200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.729052][ T5200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.733913][ T5200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.737985][ T5200] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.741572][ T5200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.912964][ T5198] chnl_net:caif_netlink_parms(): no params data found [ 54.033714][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.037203][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.040273][ T5198] bridge_slave_0: entered allmulticast mode [ 54.044155][ T5198] bridge_slave_0: entered promiscuous mode [ 54.050806][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.053846][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.056621][ T5198] bridge_slave_1: entered allmulticast mode [ 54.060214][ T5198] bridge_slave_1: entered promiscuous mode [ 54.106493][ T5198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.112638][ T5198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.160573][ T5198] team0: Port device team_slave_0 added [ 54.165035][ T5198] team0: Port device team_slave_1 added [ 54.200828][ T5198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.203450][ T5198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.213753][ T5198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.219532][ T5198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.222262][ T5198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.231823][ T5198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.279907][ T5198] hsr_slave_0: entered promiscuous mode [ 54.282911][ T5198] hsr_slave_1: entered promiscuous mode [ 54.446483][ T5198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.454267][ T5198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.461289][ T5198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.468351][ T5198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.496721][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.500410][ T5198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.504534][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.507741][ T5198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.579901][ T5198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.595136][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.598928][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.612577][ T5198] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.623075][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.626287][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.642828][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.645664][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.676839][ T5198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.794909][ T5198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.828122][ T5198] veth0_vlan: entered promiscuous mode [ 54.838142][ T5198] veth1_vlan: entered promiscuous mode [ 54.866725][ T5198] veth0_macvtap: entered promiscuous mode [ 54.872378][ T5198] veth1_macvtap: entered promiscuous mode [ 54.886018][ T5198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.896329][ T5198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.901371][ T5198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.905453][ T5198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.908644][ T5198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.912376][ T5198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 55.000095][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.004859][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.036479][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.039943][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/06/15 15:59:32 building call list... executing program [ 58.224195][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.361358][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 58.361377][ T39] audit: type=1400 audit(1718467175.828:122): avc: denied { read } for pid=5185 comm="syz-fuzzer" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.373962][ T39] audit: type=1400 audit(1718467175.828:123): avc: denied { open } for pid=5185 comm="syz-fuzzer" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.404070][ T39] audit: type=1400 audit(1718467175.878:124): avc: denied { read } for pid=5185 comm="syz-fuzzer" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 58.413761][ T39] audit: type=1400 audit(1718467175.878:125): avc: denied { open } for pid=5185 comm="syz-fuzzer" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 58.424739][ T39] audit: type=1400 audit(1718467175.878:126): avc: denied { read } for pid=5185 comm="syz-fuzzer" name="btrfs-control" dev="devtmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 58.436007][ T39] audit: type=1400 audit(1718467175.878:127): avc: denied { open } for pid=5185 comm="syz-fuzzer" path="/dev/btrfs-control" dev="devtmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 58.446215][ T39] audit: type=1400 audit(1718467175.878:128): avc: denied { read } for pid=5185 comm="syz-fuzzer" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 58.454922][ T39] audit: type=1400 audit(1718467175.878:129): avc: denied { open } for pid=5185 comm="syz-fuzzer" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 58.472486][ T39] audit: type=1400 audit(1718467175.948:130): avc: denied { read } for pid=5185 comm="syz-fuzzer" name="renderD128" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 58.482201][ T39] audit: type=1400 audit(1718467175.948:131): avc: denied { open } for pid=5185 comm="syz-fuzzer" path="/dev/dri/renderD128" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 58.772041][ T5185] can: request_module (can-proto-0) failed. [ 58.803636][ T5185] can: request_module (can-proto-0) failed. [ 58.834239][ T5185] can: request_module (can-proto-0) failed. [ 59.398826][ T5185] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.744326][ T5185] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.903212][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.982641][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.089592][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.197809][ T63] bridge_slave_1: left allmulticast mode [ 61.200699][ T63] bridge_slave_1: left promiscuous mode [ 61.204481][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.215120][ T63] bridge_slave_0: left allmulticast mode [ 61.217999][ T63] bridge_slave_0: left promiscuous mode [ 61.220667][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.478461][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.483730][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.487811][ T63] bond0 (unregistering): Released all slaves [ 61.825690][ T63] hsr_slave_0: left promiscuous mode [ 61.828455][ T63] hsr_slave_1: left promiscuous mode [ 61.831048][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.833895][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.837603][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.840161][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.861242][ T63] veth1_macvtap: left promiscuous mode [ 61.864170][ T63] veth0_macvtap: left promiscuous mode [ 61.866668][ T63] veth1_vlan: left promiscuous mode [ 61.869233][ T63] veth0_vlan: left promiscuous mode [ 62.378963][ T63] team0 (unregistering): Port device team_slave_1 removed [ 62.428327][ T63] team0 (unregistering): Port device team_slave_0 removed [ 63.297100][ T63] [ 63.298407][ T63] ============================= [ 63.300562][ T63] WARNING: suspicious RCU usage [ 63.302885][ T63] 6.10.0-rc3-syzkaller-00164-g44ef20baed8e #0 Not tainted [ 63.305964][ T63] ----------------------------- [ 63.308137][ T63] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage! [ 63.312670][ T63] [ 63.312670][ T63] other info that might help us debug this: [ 63.312670][ T63] [ 63.317114][ T63] [ 63.317114][ T63] rcu_scheduler_active = 2, debug_locks = 1 [ 63.320094][ T63] 3 locks held by kworker/u32:3/63: [ 63.322022][ T63] #0: ffff8880162e4948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 63.325791][ T63] #1: ffffc90000d07d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 63.329327][ T63] #2: ffffffff8f7370d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 63.332618][ T63] [ 63.332618][ T63] stack backtrace: [ 63.334943][ T63] CPU: 2 PID: 63 Comm: kworker/u32:3 Not tainted 6.10.0-rc3-syzkaller-00164-g44ef20baed8e #0 [ 63.339002][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 63.342923][ T63] Workqueue: netns cleanup_net [ 63.345073][ T63] Call Trace: [ 63.346543][ T63] [ 63.347883][ T63] dump_stack_lvl+0x16c/0x1f0 [ 63.350010][ T63] lockdep_rcu_suspicious+0x20b/0x3b0 [ 63.352415][ T63] _destroy_all_sets+0x261/0x6d0 [ 63.354641][ T63] ? __pfx_ip_set_net_exit+0x10/0x10 [ 63.357056][ T63] ip_set_net_exit+0x26/0x60 [ 63.359197][ T63] ops_exit_list+0xb0/0x180 [ 63.361215][ T63] cleanup_net+0x5b7/0xbf0 [ 63.363227][ T63] ? __pfx_cleanup_net+0x10/0x10 [ 63.365433][ T63] process_one_work+0x9fb/0x1b60 [ 63.367939][ T63] ? __pfx_lock_acquire+0x10/0x10 [ 63.370259][ T63] ? __pfx_process_one_work+0x10/0x10 [ 63.372705][ T63] ? assign_work+0x1a0/0x250 [ 63.374828][ T63] worker_thread+0x6c8/0xf70 [ 63.376946][ T63] ? __pfx_worker_thread+0x10/0x10 [ 63.379281][ T63] kthread+0x2c1/0x3a0 [ 63.381137][ T63] ? _raw_spin_unlock_irq+0x23/0x50 [ 63.383516][ T63] ? __pfx_kthread+0x10/0x10 [ 63.385615][ T63] ret_from_fork+0x45/0x80 [ 63.387653][ T63] ? __pfx_kthread+0x10/0x10 [ 63.389762][ T63] ret_from_fork_asm+0x1a/0x30 [ 63.391964][ T63] [ 63.393535][ T63] [ 63.394651][ T63] ============================= [ 63.396851][ T63] WARNING: suspicious RCU usage [ 63.399074][ T63] 6.10.0-rc3-syzkaller-00164-g44ef20baed8e #0 Not tainted [ 63.402495][ T63] ----------------------------- [ 63.404724][ T63] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage! [ 63.409002][ T63] [ 63.409002][ T63] other info that might help us debug this: [ 63.409002][ T63] [ 63.414541][ T63] [ 63.414541][ T63] rcu_scheduler_active = 2, debug_locks = 1 [ 63.418097][ T63] 3 locks held by kworker/u32:3/63: [ 63.420432][ T63] #0: ffff8880162e4948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 63.424852][ T63] #1: ffffc90000d07d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 63.429240][ T63] #2: ffffffff8f7370d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 63.433384][ T63] [ 63.433384][ T63] stack backtrace: [ 63.436067][ T63] CPU: 2 PID: 63 Comm: kworker/u32:3 Not tainted 6.10.0-rc3-syzkaller-00164-g44ef20baed8e #0 [ 63.440488][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 63.444939][ T63] Workqueue: netns cleanup_net [ 63.447114][ T63] Call Trace: [ 63.448644][ T63] [ 63.449964][ T63] dump_stack_lvl+0x16c/0x1f0 [ 63.452085][ T63] lockdep_rcu_suspicious+0x20b/0x3b0 [ 63.454496][ T63] _destroy_all_sets+0x4e6/0x6d0 [ 63.456748][ T63] ? __pfx_ip_set_net_exit+0x10/0x10 [ 63.459096][ T63] ip_set_net_exit+0x26/0x60 [ 63.461161][ T63] ops_exit_list+0xb0/0x180 [ 63.463227][ T63] cleanup_net+0x5b7/0xbf0 [ 63.465228][ T63] ? __pfx_cleanup_net+0x10/0x10 [ 63.467483][ T63] process_one_work+0x9fb/0x1b60 [ 63.469719][ T63] ? __pfx_lock_acquire+0x10/0x10 [ 63.471963][ T63] ? __pfx_process_one_work+0x10/0x10 [ 63.474165][ T63] ? assign_work+0x1a0/0x250 [ 63.476171][ T63] worker_thread+0x6c8/0xf70 [ 63.478004][ T63] ? __pfx_worker_thread+0x10/0x10 [ 63.480239][ T63] kthread+0x2c1/0x3a0 [ 63.482071][ T63] ? _raw_spin_unlock_irq+0x23/0x50 [ 63.484400][ T63] ? __pfx_kthread+0x10/0x10 [ 63.486445][ T63] ret_from_fork+0x45/0x80 [ 63.488508][ T63] ? __pfx_kthread+0x10/0x10 [ 63.490595][ T63] ret_from_fork_asm+0x1a/0x30 [ 63.492776][ T63] VM DIAGNOSIS: 15:59:47 Registers: info registers vcpu 0 CPU#0 RAX=00000000000982c7 RBX=0000000000000000 RCX=ffffffff8ae81889 RDX=0000000000000000 RSI=ffffffff8b2caf60 RDI=ffffffff8b900680 RBP=fffffbfff1b12af8 RSP=ffffffff8d807e20 R8 =0000000000000001 R9 =ffffed100d606fe5 R10=ffff88806b037f2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8d8957c0 R14=ffffffff8fe47790 R15=0000000000000000 RIP=ffffffff8ae82c7f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557787708680 CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000200000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6f48be70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63732036 33363d616e692022 725f6d6461736564 223d6f6564202238 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000054279 RBX=0000000000000001 RCX=ffffffff8ae81889 RDX=0000000000000000 RSI=ffffffff8b2caf60 RDI=ffffffff8b900680 RBP=ffffed1002fd6910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d626fe5 R10=ffff88806b137f2b R11=0000000000000000 R12=0000000000000001 R13=ffff888017eb4880 R14=ffffffff8fe47790 R15=0000000000000000 RIP=ffffffff8ae82c7f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557787708680 CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000200000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 08ab07b991e8ee74 a76e3247c47aa4a2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4dc3064164b2ec60 0c3f90d6c362220b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3684f076f67b235d 6b51a5c66d094593 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 70aee6b0c3c60e18 6356e539333a426e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001c40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 78de6aa393275c18 7dfe2b8c61d8b14a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d5d4fb597b29c78 984e32e7fafe7c1f ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 84c06bd4b77b4584 5ec663d87350fb3e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b872a7f24768564f fe3a19f2c3000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0723753260467e1a 70ee15811caa5e68 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0a8f8b8aaa8b633 1cfc52d9232a144d ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63732036 33363d616e692022 725f6d6461736564 223d6f6564202238 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000461eb RBX=0000000000000002 RCX=ffffffff8ae81889 RDX=0000000000000000 RSI=ffffffff8b2caf60 RDI=ffffffff8b900680 RBP=ffffed1002fd9000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d646fe5 R10=ffff88806b237f2b R11=0000000000000000 R12=0000000000000002 R13=ffff888017ec8000 R14=ffffffff8fe47790 R15=0000000000000000 RIP=ffffffff8ae82c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffb4fa90b8 CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000062003 Opmask01=00000000001000c0 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000033687465 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb4f98e80 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50422064656e7761 7073203a73250050 5241006e65706f5f 667062203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50420541404b5244 5556051f56000050 5241004b40554a5f 435547051f560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000000 356874652f74656e 2f306d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 00306e6170772f74 656e2f307968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a064f1673061410 09016f1e555a4047 5a0a1c1d080a070a 5e131109011c316e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b3f5f5f7f7f7f1f 0d1f7f1f7f5e5f5f 7e7e5f7f5e7f7f1f 5f1f1f4f5f7f777e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65616d6564206569 616d206420656164 6461203432203661 6e69612033000036 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6520203a64206569 6162206420353220 0a6120343220200a 6562612020000036 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=000000000003ac01 RBX=0000000000000003 RCX=ffffffff8ae81889 RDX=0000000000000000 RSI=ffffffff8b2caf60 RDI=ffffffff8b900680 RBP=ffffed1002fd9488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d666fe5 R10=ffff88806b337f2b R11=0000000000000000 R12=0000000000000003 R13=ffff888017eca440 R14=ffffffff8fe47790 R15=0000000000000000 RIP=ffffffff8ae82c7f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f64585766c0 CR3=0000000025b8e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004040101 Opmask01=0000000000000000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000376270616c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb4fb8e10 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5548474900000005 0000004b00000000 0000000000000000 c660fea900000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5548474953004d52 4c4147495300424b 4c56444049405700 4d52455447495300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000000 356874652f74656e 2f306d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 00306e6170772f74 656e2f307968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a064f1673061410 09016f1e555a4047 5a0a1c1d080a070a 5e131109011c316e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b3f5f5f7f7f7f1f 0d1f7f1f7f5e5f5f 7e7e5f7f5e7f7f1f 5f1f1f4f5f7f777e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65616d6564206569 616d206420656164 6461203432203661 6e69612033000036 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6520203a64206569 6162206420353220 0a6120343220200a 6562612020000036 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 syzkaller build log: go env (err=) GO111MODULE='auto' GOARCH='amd64' GOBIN='' GOCACHE='/syzkaller/.cache/go-build' GOENV='/syzkaller/.config/go/env' GOEXE='' GOEXPERIMENT='' GOFLAGS='' GOHOSTARCH='amd64' GOHOSTOS='linux' GOINSECURE='' GOMODCACHE='/syzkaller/jobs/linux/gopath/pkg/mod' GONOPROXY='' GONOSUMDB='' GOOS='linux' GOPATH='/syzkaller/jobs/linux/gopath' GOPRIVATE='' GOPROXY='https://proxy.golang.org,direct' GOROOT='/usr/local/go' GOSUMDB='sum.golang.org' GOTMPDIR='' GOTOOLCHAIN='auto' GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64' GOVCS='' GOVERSION='go1.21.4' GCCGO='gccgo' GOAMD64='v1' AR='ar' CC='gcc' CXX='g++' CGO_ENABLED='1' GOMOD='/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod' GOWORK='' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_FFLAGS='-O2 -g' CGO_LDFLAGS='-O2 -g' PKG_CONFIG='pkg-config' GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build2516977529=/tmp/go-build -gno-record-gcc-switches' git status (err=) HEAD detached at 39990d513 nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:32: run command via tools/syz-env for best compatibility, see: Makefile:33: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=39990d513277ce9372a4cc89bdac23d9fc30b056 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230811-094330'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=39990d513277ce9372a4cc89bdac23d9fc30b056 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230811-094330'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=39990d513277ce9372a4cc89bdac23d9fc30b056 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230811-094330'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress mkdir -p ./bin/linux_amd64 gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"39990d513277ce9372a4cc89bdac23d9fc30b056\"