last executing test programs:
1.313630225s ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom', 0x800, 0x0)
1.278347061s ago: executing program 2:
open_tree(0xffffffffffffffff, &(0x7f0000000000), 0x0)
1.252531105s ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl', 0x800, 0x0)
1.207420252s ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats', 0x0, 0x0)
1.177384736s ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1', 0x800, 0x0)
932.805975ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull', 0x800, 0x0)
923.436046ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0', 0x800, 0x0)
911.730348ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ptrace', 0x2, 0x0)
896.63918ms ago: executing program 0:
fchown(0xffffffffffffffff, 0x0, 0x0)
892.010761ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec', 0x2, 0x0)
880.026413ms ago: executing program 0:
pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
878.107524ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self', 0x800, 0x0)
867.053035ms ago: executing program 4:
close(0xffffffffffffffff)
858.609386ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio', 0x800, 0x0)
855.889057ms ago: executing program 1:
futimesat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000))
852.350397ms ago: executing program 4:
clock_gettime(0x0, &(0x7f0000000000))
843.672529ms ago: executing program 3:
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
829.158001ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty', 0x800, 0x0)
824.439192ms ago: executing program 1:
statx(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000))
815.606313ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/target_ids', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/target_ids', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/target_ids', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/target_ids', 0x800, 0x0)
812.794443ms ago: executing program 4:
symlinkat(&(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000))
799.956526ms ago: executing program 0:
utimensat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0)
790.168317ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mali0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mali0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mali0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mali0', 0x800, 0x0)
778.616449ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu', 0x800, 0x0)
769.90519ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/schemes', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/schemes', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/schemes', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/schemes', 0x800, 0x0)
765.701401ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1', 0x800, 0x0)
750.649673ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1', 0x2, 0x0)
738.315965ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3', 0x800, 0x0)
189.240241ms ago: executing program 2:
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
0s ago: executing program 3:
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts.
2024/06/17 15:31:49 fuzzer started
2024/06/17 15:31:49 dialing manager at 10.128.0.163:30033
[ 60.825172][ T5081] cgroup: Unknown subsys name 'net'
[ 61.109942][ T5081] cgroup: Unknown subsys name 'rlimit'
[ 62.292656][ T5096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
2024/06/17 15:31:57 starting 5 executor processes
[ 71.501363][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 71.510756][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 71.519296][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 71.528317][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 71.536789][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 71.544257][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 71.905991][ T1248] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.920864][ T1248] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.017003][ T2474]
[ 72.019529][ T2474] =============================
[ 72.024601][ T2474] WARNING: suspicious RCU usage
[ 72.029579][ T2474] 6.10.0-rc4-syzkaller #0 Not tainted
[ 72.035223][ T2474] -----------------------------
[ 72.040264][ T2474] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage!
[ 72.050143][ T2474]
[ 72.050143][ T2474] other info that might help us debug this:
[ 72.050143][ T2474]
[ 72.060476][ T2474]
[ 72.060476][ T2474] rcu_scheduler_active = 2, debug_locks = 1
[ 72.068698][ T2474] 3 locks held by kworker/u8:9/2474:
[ 72.074252][ T2474] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 72.085477][ T2474] #1: ffffc9000900fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 72.096422][ T2474] #2: ffffffff8f5c95d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 72.106032][ T2474]
[ 72.106032][ T2474] stack backtrace:
[ 72.112084][ T2474] CPU: 0 PID: 2474 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller #0
[ 72.120782][ T2474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 72.130947][ T2474] Workqueue: netns cleanup_net
[ 72.135780][ T2474] Call Trace:
[ 72.139260][ T2474]
[ 72.142221][ T2474] dump_stack_lvl+0x241/0x360
[ 72.146948][ T2474] ? __pfx_dump_stack_lvl+0x10/0x10
[ 72.152187][ T2474] ? __pfx__printk+0x10/0x10
[ 72.156866][ T2474] lockdep_rcu_suspicious+0x221/0x340
[ 72.162281][ T2474] _destroy_all_sets+0x232/0x5f0
[ 72.167348][ T2474] ip_set_net_exit+0x20/0x50
[ 72.171971][ T2474] cleanup_net+0x802/0xcc0
[ 72.176433][ T2474] ? __pfx_cleanup_net+0x10/0x10
[ 72.181420][ T2474] ? process_scheduled_works+0x945/0x1830
[ 72.187344][ T2474] process_scheduled_works+0xa2c/0x1830
[ 72.193080][ T2474] ? __pfx_process_scheduled_works+0x10/0x10
[ 72.199277][ T2474] ? assign_work+0x364/0x3d0
[ 72.203921][ T2474] worker_thread+0x86d/0xd70
[ 72.208555][ T2474] ? _raw_spin_unlock_irqrestore+0xdd/0x140
2024/06/17 15:32:01 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[ 72.214656][ T2474] ? __kthread_parkme+0x169/0x1d0
[ 72.219685][ T2474] ? __pfx_worker_thread+0x10/0x10
[ 72.224829][ T2474] kthread+0x2f0/0x390
[ 72.228917][ T2474] ? __pfx_worker_thread+0x10/0x10
[ 72.234105][ T2474] ? __pfx_kthread+0x10/0x10
[ 72.238686][ T2474] ret_from_fork+0x4b/0x80
[ 72.243095][ T2474] ? __pfx_kthread+0x10/0x10
[ 72.247675][ T2474] ret_from_fork_asm+0x1a/0x30
[ 72.252442][ T2474]
[ 72.324563][ T2474]
[ 72.326987][ T2474] =============================
[ 72.331979][ T2474] WARNING: suspicious RCU usage
[ 72.336859][ T2474] 6.10.0-rc4-syzkaller #0 Not tainted
[ 72.342515][ T2474] -----------------------------
[ 72.347376][ T2474] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage!
[ 72.357342][ T2474]
[ 72.357342][ T2474] other info that might help us debug this:
[ 72.357342][ T2474]
[ 72.368093][ T2474]
[ 72.368093][ T2474] rcu_scheduler_active = 2, debug_locks = 1
[ 72.376516][ T2474] 3 locks held by kworker/u8:9/2474:
[ 72.382501][ T2474] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 72.393787][ T2474] #1: ffffc9000900fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 72.404744][ T2474] #2: ffffffff8f5c95d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 72.414531][ T2474]
[ 72.414531][ T2474] stack backtrace:
[ 72.420537][ T2474] CPU: 0 PID: 2474 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller #0
[ 72.429411][ T2474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 72.439582][ T2474] Workqueue: netns cleanup_net
[ 72.444395][ T2474] Call Trace:
[ 72.447732][ T2474]
[ 72.450689][ T2474] dump_stack_lvl+0x241/0x360
[ 72.455483][ T2474] ? __pfx_dump_stack_lvl+0x10/0x10
[ 72.460902][ T2474] ? __pfx__printk+0x10/0x10
[ 72.465547][ T2474] lockdep_rcu_suspicious+0x221/0x340
[ 72.470955][ T2474] _destroy_all_sets+0x53f/0x5f0
[ 72.475929][ T2474] ip_set_net_exit+0x20/0x50
[ 72.480567][ T2474] cleanup_net+0x802/0xcc0
[ 72.485030][ T2474] ? __pfx_cleanup_net+0x10/0x10
[ 72.490093][ T2474] ? process_scheduled_works+0x945/0x1830
[ 72.495836][ T2474] process_scheduled_works+0xa2c/0x1830
[ 72.501479][ T2474] ? __pfx_process_scheduled_works+0x10/0x10
[ 72.507595][ T2474] ? assign_work+0x364/0x3d0
[ 72.512222][ T2474] worker_thread+0x86d/0xd70
[ 72.516885][ T2474] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 72.522815][ T2474] ? __kthread_parkme+0x169/0x1d0
[ 72.527870][ T2474] ? __pfx_worker_thread+0x10/0x10
[ 72.533018][ T2474] kthread+0x2f0/0x390
[ 72.537201][ T2474] ? __pfx_worker_thread+0x10/0x10
[ 72.542359][ T2474] ? __pfx_kthread+0x10/0x10
[ 72.547075][ T2474] ret_from_fork+0x4b/0x80
[ 72.551533][ T2474] ? __pfx_kthread+0x10/0x10
[ 72.556159][ T2474] ret_from_fork_asm+0x1a/0x30
[ 72.560963][ T2474]