last executing test programs:
507.028343ms ago: executing program 0:
link(&(0x7f0000000000), &(0x7f0000000000))
471.563358ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse', 0x2, 0x0)
437.616514ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control', 0x800, 0x0)
408.490768ms ago: executing program 0:
pread64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
387.531641ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec', 0x2, 0x0)
379.085642ms ago: executing program 0:
clock_gettime(0x0, &(0x7f0000000000))
351.733357ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2', 0x800, 0x0)
331.7609ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1', 0x800, 0x0)
330.46509ms ago: executing program 4:
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
302.503394ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vtpmx', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vtpmx', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vtpmx', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vtpmx', 0x800, 0x0)
289.144716ms ago: executing program 4:
symlinkat(&(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000))
268.737499ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max', 0x2, 0x0)
259.37974ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pmem0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pmem0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pmem0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pmem0', 0x800, 0x0)
258.000531ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce', 0x800, 0x0)
232.419124ms ago: executing program 4:
pwritev2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
227.645245ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice', 0x800, 0x0)
217.904737ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control', 0x2, 0x0)
217.330477ms ago: executing program 2:
open(&(0x7f0000000000), 0x0, 0x0)
194.91174ms ago: executing program 4:
faccessat(0xffffffffffffffff, &(0x7f0000000000), 0x0)
194.287051ms ago: executing program 2:
pselect6(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))
186.041071ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0)
174.861524ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf', 0x2, 0x0)
170.444734ms ago: executing program 4:
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
160.583895ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats', 0x0, 0x0)
138.694879ms ago: executing program 1:
ftruncate(0xffffffffffffffff, 0x0)
113.789132ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/attrs', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/attrs', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/attrs', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/attrs', 0x800, 0x0)
107.795363ms ago: executing program 1:
lchown(&(0x7f0000000000), 0x0, 0x0)
79.103627ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio', 0x800, 0x0)
40.336223ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl', 0x800, 0x0)
0s ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binder', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binder', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binder', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binder', 0x800, 0x0)
kernel console output (not intermixed with test programs):
DUID 00:04:11:16:07:98:46:9e:df:1a:b4:2a:a6:b2:09:6b:72:d1
no interfaces have a carrier
[ 38.153340][ T4752] 8021q: adding VLAN 0 to HW filter on device bond0
[ 38.178027][ T4752] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts.
2024/06/16 22:55:54 fuzzer started
2024/06/16 22:55:55 dialing manager at 10.128.0.163:30033
syzkaller login: [ 61.161430][ T5082] cgroup: Unknown subsys name 'net'
[ 61.401763][ T5082] cgroup: Unknown subsys name 'rlimit'
[ 62.615778][ T5095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 62.629796][ T5095] syz-executor (5095) used greatest stack depth: 18832 bytes left
2024/06/16 22:56:02 starting 5 executor processes
[ 71.413607][ T35]
[ 71.416429][ T35] =============================
[ 71.421313][ T35] WARNING: suspicious RCU usage
[ 71.426510][ T35] 6.10.0-rc4-syzkaller #0 Not tainted
[ 71.431920][ T35] -----------------------------
[ 71.436850][ T35] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage!
[ 71.446550][ T35]
[ 71.446550][ T35] other info that might help us debug this:
[ 71.446550][ T35]
[ 71.456962][ T35]
[ 71.456962][ T35] rcu_scheduler_active = 2, debug_locks = 1
[ 71.465493][ T35] 3 locks held by kworker/u8:2/35:
[ 71.470975][ T35] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 71.482028][ T35] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 71.492754][ T35] #2: ffffffff8f5c95d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 71.502286][ T35]
[ 71.502286][ T35] stack backtrace:
[ 71.508346][ T35] CPU: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller #0
[ 71.516860][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 71.527048][ T35] Workqueue: netns cleanup_net
[ 71.532304][ T35] Call Trace:
[ 71.535590][ T35]
[ 71.538643][ T35] dump_stack_lvl+0x241/0x360
[ 71.543720][ T35] ? __pfx_dump_stack_lvl+0x10/0x10
[ 71.549097][ T35] ? __pfx__printk+0x10/0x10
[ 71.553692][ T35] lockdep_rcu_suspicious+0x221/0x340
[ 71.559061][ T35] _destroy_all_sets+0x232/0x5f0
[ 71.564025][ T35] ip_set_net_exit+0x20/0x50
[ 71.568799][ T35] cleanup_net+0x802/0xcc0
[ 71.573310][ T35] ? __pfx_cleanup_net+0x10/0x10
[ 71.578294][ T35] ? process_scheduled_works+0x945/0x1830
[ 71.584025][ T35] process_scheduled_works+0xa2c/0x1830
[ 71.589608][ T35] ? __pfx_process_scheduled_works+0x10/0x10
[ 71.595598][ T35] ? assign_work+0x364/0x3d0
[ 71.600239][ T35] worker_thread+0x86d/0xd70
[ 71.604832][ T35] ? __kthread_parkme+0x169/0x1d0
2024/06/16 22:56:05 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[ 71.609856][ T35] ? __pfx_worker_thread+0x10/0x10
[ 71.615053][ T35] kthread+0x2f0/0x390
[ 71.619118][ T35] ? __pfx_worker_thread+0x10/0x10
[ 71.624221][ T35] ? __pfx_kthread+0x10/0x10
[ 71.628804][ T35] ret_from_fork+0x4b/0x80
[ 71.633394][ T35] ? __pfx_kthread+0x10/0x10
[ 71.637973][ T35] ret_from_fork_asm+0x1a/0x30
[ 71.642844][ T35]
[ 71.752276][ T35]
[ 71.754654][ T35] =============================
[ 71.759951][ T35] WARNING: suspicious RCU usage
[ 71.764917][ T35] 6.10.0-rc4-syzkaller #0 Not tainted
[ 71.770478][ T35] -----------------------------
[ 71.775552][ T35] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage!
[ 71.785847][ T35]
[ 71.785847][ T35] other info that might help us debug this:
[ 71.785847][ T35]
[ 71.796109][ T35]
[ 71.796109][ T35] rcu_scheduler_active = 2, debug_locks = 1
[ 71.804278][ T35] 3 locks held by kworker/u8:2/35:
[ 71.809742][ T35] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 71.821105][ T35] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 71.831780][ T35] #2: ffffffff8f5c95d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 71.841465][ T35]
[ 71.841465][ T35] stack backtrace:
[ 71.847440][ T35] CPU: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller #0
[ 71.855788][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 71.866093][ T35] Workqueue: netns cleanup_net
[ 71.870995][ T35] Call Trace:
[ 71.874290][ T35]
[ 71.877343][ T35] dump_stack_lvl+0x241/0x360
[ 71.882157][ T35] ? __pfx_dump_stack_lvl+0x10/0x10
[ 71.887479][ T35] ? __pfx__printk+0x10/0x10
[ 71.892191][ T35] lockdep_rcu_suspicious+0x221/0x340
[ 71.897785][ T35] _destroy_all_sets+0x53f/0x5f0
[ 71.902839][ T35] ip_set_net_exit+0x20/0x50
[ 71.907531][ T35] cleanup_net+0x802/0xcc0
[ 71.911984][ T35] ? __pfx_cleanup_net+0x10/0x10
[ 71.916963][ T35] ? process_scheduled_works+0x945/0x1830
[ 71.922711][ T35] process_scheduled_works+0xa2c/0x1830
[ 71.928335][ T35] ? __pfx_process_scheduled_works+0x10/0x10
[ 71.934439][ T35] ? assign_work+0x364/0x3d0
[ 71.939060][ T35] worker_thread+0x86d/0xd70
[ 71.943694][ T35] ? __kthread_parkme+0x169/0x1d0
[ 71.948878][ T35] ? __pfx_worker_thread+0x10/0x10
[ 71.954101][ T35] kthread+0x2f0/0x390
[ 71.958199][ T35] ? __pfx_worker_thread+0x10/0x10
[ 71.963336][ T35] ? __pfx_kthread+0x10/0x10
[ 71.967994][ T35] ret_from_fork+0x4b/0x80
[ 71.972474][ T35] ? __pfx_kthread+0x10/0x10
[ 71.977090][ T35] ret_from_fork_asm+0x1a/0x30
[ 71.981963][ T35]