last executing test programs:
1.3624171s ago: executing program 2:
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
1.330342304s ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1', 0x800, 0x0)
1.038386079s ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot', 0x800, 0x0)
984.280108ms ago: executing program 3:
munmap(0x0, 0x0)
974.690859ms ago: executing program 1:
fsync(0xffffffffffffffff)
954.834632ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/virtual_nci', 0x2, 0x0)
951.947673ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/msm', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/msm', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/msm', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/msm', 0x800, 0x0)
938.464505ms ago: executing program 4:
faccessat(0xffffffffffffffff, &(0x7f0000000000), 0x0)
935.373145ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0', 0x800, 0x0)
931.700186ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles', 0x800, 0x0)
912.612999ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl', 0x800, 0x0)
906.94704ms ago: executing program 1:
getcwd(&(0x7f0000000000), 0x0)
894.688192ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cdrom1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cdrom1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cdrom1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cdrom1', 0x800, 0x0)
892.863322ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey', 0x800, 0x0)
888.183473ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ambient', 0x2, 0x0)
868.595826ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/rm_contexts', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/rm_contexts', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/rm_contexts', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/rm_contexts', 0x800, 0x0)
864.098956ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/schemes', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/schemes', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/schemes', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/schemes', 0x800, 0x0)
860.548007ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer', 0x800, 0x0)
850.179738ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/img-rogue', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/img-rogue', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/img-rogue', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/img-rogue', 0x800, 0x0)
838.26494ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/lightnvm/control', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/lightnvm/control', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/lightnvm/control', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/lightnvm/control', 0x800, 0x0)
828.789392ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0)
821.119723ms ago: executing program 3:
mount_setattr(0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0)
810.576284ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/oss_mixer', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer', 0x800, 0x0)
796.278747ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor', 0x800, 0x0)
775.32156ms ago: executing program 3:
open_tree(0xffffffffffffffff, &(0x7f0000000000), 0x0)
768.752191ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/yama/ptrace_scope', 0x2, 0x0)
749.640344ms ago: executing program 4:
utime(&(0x7f0000000000), &(0x7f0000000000))
712.99297ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable', 0x2, 0x0)
689.327283ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/relabel-self', 0x2, 0x0)
0s ago: executing program 2:
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts.
2024/06/17 21:51:08 fuzzer started
2024/06/17 21:51:08 dialing manager at 10.128.0.163:30033
[ 58.277714][ T5079] cgroup: Unknown subsys name 'net'
[ 58.557217][ T5079] cgroup: Unknown subsys name 'rlimit'
[ 59.655074][ T5099] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
2024/06/17 21:51:17 starting 5 executor processes
[ 69.274451][ T5388] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 69.284668][ T5388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 69.292661][ T5388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 69.301174][ T5388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 69.309701][ T5388] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 69.317990][ T5388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 69.715318][ T2831]
[ 69.717817][ T2831] =============================
[ 69.722679][ T2831] WARNING: suspicious RCU usage
[ 69.727852][ T2831] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted
[ 69.735153][ T2831] -----------------------------
[ 69.740115][ T2831] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage!
[ 69.749811][ T2831]
[ 69.749811][ T2831] other info that might help us debug this:
[ 69.749811][ T2831]
[ 69.760922][ T2831]
2024/06/17 21:51:20 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[ 69.760922][ T2831] rcu_scheduler_active = 2, debug_locks = 1
[ 69.769252][ T2831] 3 locks held by kworker/u8:9/2831:
[ 69.774736][ T2831] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 69.785835][ T2831] #1: ffffc90009e97d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 69.796464][ T2831] #2: ffffffff8f5c9290 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 69.806616][ T2831]
[ 69.806616][ T2831] stack backtrace:
[ 69.812711][ T2831] CPU: 1 PID: 2831 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0
[ 69.822975][ T2831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 69.833059][ T2831] Workqueue: netns cleanup_net
[ 69.837879][ T2831] Call Trace:
[ 69.841273][ T2831]
[ 69.844397][ T2831] dump_stack_lvl+0x241/0x360
[ 69.849187][ T2831] ? __pfx_dump_stack_lvl+0x10/0x10
[ 69.854401][ T2831] ? __pfx__printk+0x10/0x10
[ 69.859174][ T2831] lockdep_rcu_suspicious+0x221/0x340
[ 69.864557][ T2831] _destroy_all_sets+0x232/0x5f0
[ 69.869507][ T2831] ip_set_net_exit+0x20/0x50
[ 69.874276][ T2831] cleanup_net+0x802/0xcc0
[ 69.878716][ T2831] ? __pfx_cleanup_net+0x10/0x10
[ 69.883660][ T2831] ? process_scheduled_works+0x945/0x1830
[ 69.889733][ T2831] process_scheduled_works+0xa2c/0x1830
[ 69.895382][ T2831] ? __pfx_process_scheduled_works+0x10/0x10
[ 69.901557][ T2831] ? assign_work+0x364/0x3d0
[ 69.906219][ T2831] worker_thread+0x86d/0xd70
[ 69.910946][ T2831] ? __kthread_parkme+0x169/0x1d0
[ 69.916098][ T2831] ? __pfx_worker_thread+0x10/0x10
[ 69.921221][ T2831] kthread+0x2f0/0x390
[ 69.925307][ T2831] ? __pfx_worker_thread+0x10/0x10
[ 69.930436][ T2831] ? __pfx_kthread+0x10/0x10
[ 69.935024][ T2831] ret_from_fork+0x4b/0x80
[ 69.939520][ T2831] ? __pfx_kthread+0x10/0x10
[ 69.944109][ T2831] ret_from_fork_asm+0x1a/0x30
[ 69.948890][ T2831]
[ 69.979030][ T2831]
[ 69.981414][ T2831] =============================
[ 69.986387][ T2831] WARNING: suspicious RCU usage
[ 69.991430][ T2831] 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0 Not tainted
[ 69.998650][ T2831] -----------------------------
[ 70.003514][ T2831] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage!
[ 70.013296][ T2831]
[ 70.013296][ T2831] other info that might help us debug this:
[ 70.013296][ T2831]
[ 70.023892][ T2831]
[ 70.023892][ T2831] rcu_scheduler_active = 2, debug_locks = 1
[ 70.032009][ T2831] 3 locks held by kworker/u8:9/2831:
[ 70.037470][ T2831] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 70.048439][ T2831] #1: ffffc90009e97d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 70.059066][ T2831] #2: ffffffff8f5c9290 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 70.068698][ T2831]
[ 70.068698][ T2831] stack backtrace:
[ 70.074908][ T2831] CPU: 0 PID: 2831 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00033-g14d7c92f8df9 #0
[ 70.085261][ T2831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 70.095611][ T2831] Workqueue: netns cleanup_net
[ 70.100409][ T2831] Call Trace:
[ 70.103708][ T2831]
[ 70.106645][ T2831] dump_stack_lvl+0x241/0x360
[ 70.111352][ T2831] ? __pfx_dump_stack_lvl+0x10/0x10
[ 70.116568][ T2831] ? __pfx__printk+0x10/0x10
[ 70.121182][ T2831] lockdep_rcu_suspicious+0x221/0x340
[ 70.126575][ T2831] _destroy_all_sets+0x53f/0x5f0
[ 70.131536][ T2831] ip_set_net_exit+0x20/0x50
[ 70.136289][ T2831] cleanup_net+0x802/0xcc0
[ 70.140863][ T2831] ? __pfx_cleanup_net+0x10/0x10
[ 70.145929][ T2831] ? process_scheduled_works+0x945/0x1830
[ 70.151846][ T2831] process_scheduled_works+0xa2c/0x1830
[ 70.157507][ T2831] ? __pfx_process_scheduled_works+0x10/0x10
[ 70.163499][ T2831] ? assign_work+0x364/0x3d0
[ 70.168100][ T2831] worker_thread+0x86d/0xd70
[ 70.172801][ T2831] ? __kthread_parkme+0x169/0x1d0
[ 70.177823][ T2831] ?