last executing test programs:
318.042241ms ago: executing program 2:
poll(&(0x7f0000000000), 0x0, 0x0)
296.785044ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput', 0x800, 0x0)
284.515436ms ago: executing program 0:
fchownat(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0)
279.551957ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load', 0x2, 0x0)
275.613408ms ago: executing program 4:
pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
248.634052ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2', 0x2, 0x0)
246.459202ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor', 0x800, 0x0)
231.657254ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load', 0x2, 0x0)
228.910525ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user', 0x2, 0x0)
221.832306ms ago: executing program 4:
pread64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
211.630807ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/msm', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/msm', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/msm', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/msm', 0x800, 0x0)
211.124168ms ago: executing program 3:
linkat(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0)
198.010939ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/revoke-subject', 0x2, 0x0)
186.962951ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pmem0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pmem0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pmem0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pmem0', 0x800, 0x0)
178.166493ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ambient', 0x2, 0x0)
175.940533ms ago: executing program 4:
preadv2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
171.164983ms ago: executing program 3:
pwritev2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
154.907656ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control', 0x800, 0x0)
150.504437ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse', 0x2, 0x0)
141.796888ms ago: executing program 4:
munmap(0x0, 0x0)
139.137838ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36', 0x2, 0x0)
133.61361ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128', 0x800, 0x0)
122.820981ms ago: executing program 4:
statfs(&(0x7f0000000000), &(0x7f0000000000))
109.644063ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel', 0x2, 0x0)
103.271694ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats', 0x0, 0x0)
99.296794ms ago: executing program 3:
futimesat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000))
68.642389ms ago: executing program 1:
lstat(&(0x7f0000000000), &(0x7f0000000000))
68.198929ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ipv6host', 0x2, 0x0)
40.117124ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter', 0x800, 0x0)
0s ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vndbinder', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vndbinder', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vndbinder', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vndbinder', 0x800, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts.
2024/06/17 05:10:07 fuzzer started
2024/06/17 05:10:07 dialing manager at 10.128.0.163:30033
[ 61.144672][ T5079] cgroup: Unknown subsys name 'net'
[ 61.429466][ T5079] cgroup: Unknown subsys name 'rlimit'
[ 62.659495][ T5097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
2024/06/17 05:10:13 starting 5 executor processes
[ 70.338810][ T2854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 70.346881][ T2854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 70.365079][ T51]
[ 70.367576][ T51] =============================
[ 70.372531][ T51] WARNING: suspicious RCU usage
[ 70.377502][ T51] 6.10.0-rc4-syzkaller #0 Not tainted
[ 70.382960][ T51] -----------------------------
[ 70.387825][ T51] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage!
[ 70.397519][ T51]
[ 70.397519][ T51] other info that might help us debug this:
[ 70.397519][ T51]
[ 70.407901][ T51]
[ 70.407901][ T51] rcu_scheduler_active = 2, debug_locks = 1
[ 70.416120][ T51] 3 locks held by kworker/u8:3/51:
[ 70.421395][ T51] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 70.432545][ T51] #1: ffffc90000bb7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 70.443416][ T51] #2: ffffffff8f5c95d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 70.453111][ T51]
[ 70.453111][ T51] stack backtrace:
[ 70.459067][ T51] CPU: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-syzkaller #0
[ 70.467586][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 70.477662][ T51] Workqueue: netns cleanup_net
[ 70.482487][ T51] Call Trace:
[ 70.485964][ T51]
[ 70.489001][ T51] dump_stack_lvl+0x241/0x360
[ 70.493712][ T51] ? __pfx_dump_stack_lvl+0x10/0x10
[ 70.499003][ T51] ? __pfx__printk+0x10/0x10
[ 70.503640][ T51] lockdep_rcu_suspicious+0x221/0x340
[ 70.509037][ T51] _destroy_all_sets+0x232/0x5f0
[ 70.513997][ T51] ip_set_net_exit+0x20/0x50
[ 70.518580][ T51] cleanup_net+0x802/0xcc0
[ 70.523018][ T51] ? __pfx_cleanup_net+0x10/0x10
[ 70.527985][ T51] ? process_scheduled_works+0x945/0x1830
[ 70.533742][ T51] process_scheduled_works+0xa2c/0x1830
[ 70.539302][ T51] ? __pfx_process_scheduled_works+0x10/0x10
[ 70.545278][ T51] ? assign_work+0x364/0x3d0
[ 70.549967][ T51] worker_thread+0x86d/0xd70
[ 70.554563][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 70.560460][ T51] ? __kthread_parkme+0x169/0x1d0
[ 70.565571][ T51] ? __pfx_worker_thread+0x10/0x10
[ 70.570679][ T51] kthread+0x2f0/0x390
[ 70.574741][ T51] ? __pfx_worker_thread+0x10/0x10
[ 70.579843][ T51] ? __pfx_kthread+0x10/0x10
[ 70.584452][ T51] ret_from_fork+0x4b/0x80
2024/06/17 05:10:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[ 70.588864][ T51] ? __pfx_kthread+0x10/0x10
[ 70.593484][ T51] ret_from_fork_asm+0x1a/0x30
[ 70.598272][ T51]
[ 70.668082][ T51]
[ 70.670465][ T51] =============================
[ 70.675327][ T51] WARNING: suspicious RCU usage
[ 70.680442][ T51] 6.10.0-rc4-syzkaller #0 Not tainted
[ 70.685839][ T51] -----------------------------
[ 70.690975][ T51] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage!
[ 70.700792][ T51]
[ 70.700792][ T51] other info that might help us debug this:
[ 70.700792][ T51]
[ 70.711147][ T51]
[ 70.711147][ T51] rcu_scheduler_active = 2, debug_locks = 1
[ 70.719818][ T51] 3 locks held by kworker/u8:3/51:
[ 70.724954][ T51] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 70.736318][ T51] #1: ffffc90000bb7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 70.747094][ T51] #2: ffffffff8f5c95d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 70.756781][ T51]
[ 70.756781][ T51] stack backtrace:
[ 70.762839][ T51] CPU: 1 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-syzkaller #0
[ 70.771195][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 70.781355][ T51] Workqueue: netns cleanup_net
[ 70.786158][ T51] Call Trace:
[ 70.789457][ T51]
[ 70.792383][ T51] dump_stack_lvl+0x241/0x360
[ 70.797062][ T51] ? __pfx_dump_stack_lvl+0x10/0x10
[ 70.802342][ T51] ? __pfx__printk+0x10/0x10
[ 70.806940][ T51] lockdep_rcu_suspicious+0x221/0x340
[ 70.812310][ T51] _destroy_all_sets+0x53f/0x5f0
[ 70.817343][ T51] ip_set_net_exit+0x20/0x50
[ 70.821940][ T51] cleanup_net+0x802/0xcc0
[ 70.826539][ T51] ? __pfx_cleanup_net+0x10/0x10
[ 70.831486][ T51] ? process_scheduled_works+0x945/0x1830
[ 70.837192][ T51] process_scheduled_works+0xa2c/0x1830
[ 70.842838][ T51] ? __pfx_process_scheduled_works+0x10/0x10
[ 70.848998][ T51] ? assign_work+0x364/0x3d0
[ 70.853582][ T51] worker_thread+0x86d/0xd70
[ 70.858268][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 70.864156][ T51] ? __kthread_parkme+0x169/0x1d0
[ 70.869290][ T51] ? __pfx_worker_thread+0x10/0x10
[ 70.874477][ T51] kthread+0x2f0/0x390
[ 70.878537][ T51] ? __pfx_worker_thread+0x10/0x10
[ 70.883635][ T51] ? __pfx_kthread+0x10/0x10
[ 70.888219][ T51] ret_from_fork+0x4b/0x80
[ 70.892635][ T51] ? __pfx_kthread+0x10/0x10
[ 70.897223][ T51] ret_from_fork_asm+0x1a/0x30
[ 70.901994][ T51]