last executing test programs:
1.488626792s ago: executing program 3:
execve(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))
1.392740833s ago: executing program 3:
symlinkat(&(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000))
1.330246018s ago: executing program 3:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
1.250270961s ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem', 0x1, 0x0)
1.150446531s ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1', 0x800, 0x0)
392.799232ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles', 0x800, 0x0)
380.534772ms ago: executing program 1:
getrusage(0x0, &(0x7f0000000000))
378.324822ms ago: executing program 2:
lseek(0xffffffffffffffff, 0x0, 0x0)
367.144462ms ago: executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mali0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mali0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mali0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mali0', 0x800, 0x0)
327.805901ms ago: executing program 0:
lremovexattr(&(0x7f0000000000), &(0x7f0000000000))
321.189217ms ago: executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control', 0x800, 0x0)
307.807197ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cdrom1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cdrom1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cdrom1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cdrom1', 0x800, 0x0)
301.903229ms ago: executing program 1:
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$I2C(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$I2C(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$I2C(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$I2C(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$I2C(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$I2C(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$I2C(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$I2C(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$I2C(&(0x7f0000000500), 0x4, 0x800)
299.565276ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm', 0x2, 0x0)
253.307879ms ago: executing program 0:
sched_setattr(0x0, &(0x7f0000000000), 0x0)
251.987078ms ago: executing program 4:
socket$bt_cmtp(0x1f, 0x3, 0x5)
249.458493ms ago: executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm', 0x800, 0x0)
239.674932ms ago: executing program 2:
faccessat(0xffffffffffffffff, &(0x7f0000000000), 0x0)
226.820908ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2', 0x800, 0x0)
197.560059ms ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer', 0x800, 0x0)
178.194977ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/xen/evtchn', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/xen/evtchn', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/xen/evtchn', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/xen/evtchn', 0x800, 0x0)
177.008759ms ago: executing program 2:
pselect6(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))
176.344073ms ago: executing program 5:
uname(&(0x7f0000000000))
142.466033ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context', 0x2, 0x0)
122.691914ms ago: executing program 4:
utimensat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0)
121.139896ms ago: executing program 2:
timer_gettime(0x0, &(0x7f0000000000))
113.189918ms ago: executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/yama/ptrace_scope', 0x2, 0x0)
109.74393ms ago: executing program 0:
socket$inet_sctp(0x2, 0x1, 0x84)
67.363063ms ago: executing program 1:
socket(0x1e, 0x2, 0x0)
65.09829ms ago: executing program 4:
sched_getparam(0x0, &(0x7f0000000000))
57.692346ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36', 0x2, 0x0)
41.408672ms ago: executing program 5:
syz_open_dev$dricontrol(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$dricontrol(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$dricontrol(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$dricontrol(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$dricontrol(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$dricontrol(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$dricontrol(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$dricontrol(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$dricontrol(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$dricontrol(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$dricontrol(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$dricontrol(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$dricontrol(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$dricontrol(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$dricontrol(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$dricontrol(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$dricontrol(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$dricontrol(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$dricontrol(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$dricontrol(&(0x7f0000000500), 0x4, 0x800)
40.537693ms ago: executing program 3:
socket$inet6_sctp(0xa, 0x1, 0x84)
17.51218ms ago: executing program 0:
semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000))
10.501343ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/init_regions', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/init_regions', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/init_regions', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/init_regions', 0x800, 0x0)
0s ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/schemes', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/schemes', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/schemes', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/schemes', 0x800, 0x0)
kernel console output (not intermixed with test programs):
[ 101.835742][ T45] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts.
2024/06/19 11:20:12 fuzzer started
2024/06/19 11:20:13 dialing manager at 10.128.0.169:30005
[ 105.469088][ T5091] cgroup: Unknown subsys name 'net'
[ 105.799115][ T5091] cgroup: Unknown subsys name 'rlimit'
2024/06/19 11:20:15 starting 6 executor processes
[ 107.656690][ T5103] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 108.839835][ T5151] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 111.375574][ T5352] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 115.177993][ T5601] mmap: syz-executor.5 (5601) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 117.050718][ T5703] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 117.060507][ T5703] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 117.069898][ T5703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 117.094250][ T5703] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 117.105633][ T5703] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 117.113326][ T5703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 117.600869][ T52]
[ 117.603562][ T52] =============================
[ 117.608458][ T52] WARNING: suspicious RCU usage
[ 117.613411][ T52] 6.10.0-rc4-syzkaller-00045-g92e5605a199e #0 Not tainted
[ 117.620545][ T52] -----------------------------
[ 117.625481][ T52] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage!
[ 117.635177][ T52]
[ 117.635177][ T52] other info that might help us debug this:
[ 117.635177][ T52]
[ 117.645505][ T52]
2024/06/19 11:20:25 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[ 117.645505][ T52] rcu_scheduler_active = 2, debug_locks = 1
[ 117.653649][ T52] 3 locks held by kworker/u8:4/52:
[ 117.658820][ T52] #0: ffff8880162d5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60
[ 117.669390][ T52] #1: ffffc90000bc7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60
[ 117.679534][ T52] #2: ffffffff8f73ddd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0
[ 117.689063][ T52]
[ 117.689063][ T52] stack backtrace:
[ 117.695009][ T52] CPU: 0 PID: 52 Comm: kworker/u8:4 Not tainted 6.10.0-rc4-syzkaller-00045-g92e5605a199e #0
[ 117.705110][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 117.715191][ T52] Workqueue: netns cleanup_net
[ 117.720003][ T52] Call Trace:
[ 117.723296][ T52]
[ 117.726238][ T52] dump_stack_lvl+0x16c/0x1f0
[ 117.730960][ T52] lockdep_rcu_suspicious+0x20b/0x3b0
[ 117.736370][ T52] _destroy_all_sets+0x261/0x6d0
[ 117.741354][ T52] ? __pfx_ip_set_net_exit+0x10/0x10
[ 117.746689][ T52] ip_set_net_exit+0x26/0x60
[ 117.751326][ T52] ops_exit_list+0xb3/0x180
[ 117.755869][ T52] cleanup_net+0x5b7/0xbf0
[ 117.760326][ T52] ? __pfx_cleanup_net+0x10/0x10
[ 117.765315][ T52] process_one_work+0x9fe/0x1b60
[ 117.770305][ T52] ? __pfx_lock_acquire+0x10/0x10
[ 117.775361][ T52] ? __pfx_process_one_work+0x10/0x10
[ 117.780768][ T52] ? srso_alias_return_thunk+0x5/0xfbef5
[ 117.786437][ T52] ? srso_alias_return_thunk+0x5/0xfbef5
[ 117.792093][ T52] ? assign_work+0x1a0/0x250
[ 117.796721][ T52] worker_thread+0x6c8/0xf70
[ 117.801359][ T52] ? srso_alias_return_thunk+0x5/0xfbef5
[ 117.807016][ T52] ? __kthread_parkme+0x148/0x220
[ 117.812085][ T52] ? srso_alias_return_thunk+0x5/0xfbef5
[ 117.817745][ T52] ? __pfx_worker_thread+0x10/0x10
[ 117.822892][ T52] kthread+0x2c4/0x3a0
[ 117.827006][ T52] ? _raw_spin_unlock_irq+0x23/0x50
[ 117.832228][ T52] ? __pfx_kthread+0x10/0x10
[ 117.836869][ T52] ret_from_fork+0x48/0x80
[ 117.841332][ T52] ? __pfx_kthread+0x10/0x10
[ 117.845969][ T52] ret_from_fork_asm+0x1a/0x30
[ 117.850802][ T52]
[ 118.025113][ T52]
[ 118.027495][ T52] =============================
[ 118.032428][ T52] WARNING: suspicious RCU usage
[ 118.037290][ T52] 6.10.0-rc4-syzkaller-00045-g92e5605a199e #0 Not tainted
[ 118.044510][ T52] -----------------------------
[ 118.049380][ T52] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage!
[ 118.059102][ T52]
[ 118.059102][ T52] other info that might help us debug this:
[ 118.059102][ T52]
[ 118.069390][ T52]
[ 118.069390][ T52] rcu_scheduler_active = 2, debug_locks = 1
[ 118.077612][ T52] 3 locks held by kworker/u8:4/52:
[ 118.082782][ T52] #0: ffff8880162d5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60
[ 118.093304][ T52] #1: ffffc90000bc7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60
[ 118.103372][ T52] #2: ffffffff8f73ddd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0
[ 118.112837][ T52]
[ 118.112837][ T52] stack backtrace:
[ 118.118743][ T52] CPU: 1 PID: 52 Comm: kworker/u8:4 Not tainted 6.10.0-rc4-syzkaller-00045-g92e5605a199e #0
[ 118.128845][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 118.138925][ T52] Workqueue: netns cleanup_net
[ 118.143744][ T52] Call Trace:
[ 118.147038][ T52]
[ 118.149988][ T52] dump_stack_lvl+0x16c/0x1f0
[ 118.154714][ T52] lockdep_rcu_suspicious+0x20b/0x3b0
[ 118.160134][ T52] _destroy_all_sets+0x4e6/0x6d0
[ 118.165121][ T52] ? __pfx_ip_set_net_exit+0x10/0x10
[ 118.170454][ T52] ip_set_net_exit+0x26/0x60
[ 118.175090][ T52] ops_exit_list+0xb3/0x180
[ 118.179630][ T52] cleanup_net+0x5b7/0xbf0
[ 118.184085][ T52] ? __pfx_cleanup_net+0x10/0x10
[ 118.189105][ T52] process_one_work+0x9fe/0x1b60
[ 118.194111][ T52] ? __pfx_lock_acquire+0x10/0x10
[ 118.199170][ T52] ? __pfx_process_one_work+0x10/0x10
[ 118.204580][ T52] ? srso_alias_return_thunk+0x5/0xfbef5
[ 118.210251][ T52] ? srso_alias_return_thunk+0x5/0xfbef5
[ 118.215910][ T52] ? assign_work+0x1a0/0x250
[ 118.220541][ T52] worker_thread+0x6c8/0xf70
[ 118.225183][ T52] ? srso_alias_return_thunk+0x5/0xfbef5
[ 118.230840][ T52] ? __kthread_parkme+0x148/0x220
[ 118.235911][ T52] ? srso_alias_return_thunk+0x5/0xfbef5
[ 118.241576][ T52] ? __pfx_worker_thread+0x10/0x10
[ 118.246727][ T52] kthread+0x2c4/0x3a0
[ 118.250841][ T52] ? _raw_spin_unlock_irq+0x23/0x50
[ 118.256065][ T52] ? __pfx_kthread+0x10/0x10
[ 118.260702][ T52] ret_from_fork+0x48/0x80
[ 118.265161][ T52] ? __pfx_kthread+0x10/0x10
[ 118.269798][ T52] ret_from_fork_asm+0x1a/0x30
[ 118.274632][ T52]