last executing test programs:
1.370834509s ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member', 0x2, 0x0)
1.343794143s ago: executing program 0:
utimes(&(0x7f0000000000), &(0x7f0000000000))
1.307606849s ago: executing program 0:
syncfs(0xffffffffffffffff)
1.277789903s ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl', 0x800, 0x0)
1.254063657s ago: executing program 0:
sync()
1.011562845s ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control', 0x2, 0x0)
966.758781ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold', 0x2, 0x0)
916.251199ms ago: executing program 2:
mremap(0x0, 0x0, 0x0, 0x0, 0x0)
850.387929ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty', 0x800, 0x0)
846.28506ms ago: executing program 4:
fsmount(0xffffffffffffffff, 0x0, 0x0)
826.401183ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0', 0x2, 0x0)
813.477684ms ago: executing program 4:
creat(&(0x7f0000000000), 0x0)
804.951296ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1', 0x800, 0x0)
775.910791ms ago: executing program 1:
fspick(0xffffffffffffffff, &(0x7f0000000000), 0x0)
774.485921ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot', 0x800, 0x0)
750.663804ms ago: executing program 1:
msync(0x0, 0x0, 0x0)
721.397879ms ago: executing program 1:
lseek(0xffffffffffffffff, 0x0, 0x0)
670.321026ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/mk_contexts', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/mk_contexts', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/mk_contexts', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/mk_contexts', 0x800, 0x0)
664.306838ms ago: executing program 1:
pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
630.718773ms ago: executing program 1:
utime(&(0x7f0000000000), &(0x7f0000000000))
608.663986ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats', 0x0, 0x0)
608.071777ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/random', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/random', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/random', 0x800, 0x0)
600.935777ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pmem0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pmem0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pmem0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pmem0', 0x800, 0x0)
580.868911ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf', 0x2, 0x0)
567.361822ms ago: executing program 3:
epoll_wait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
486.808295ms ago: executing program 0:
stat(&(0x7f0000000000), &(0x7f0000000000))
486.372715ms ago: executing program 3:
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), 0x0)
410.998427ms ago: executing program 3:
epoll_create1(0x0)
390.92119ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1', 0x800, 0x0)
0s ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/sync/sw_sync', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/sync/sw_sync', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/sync/sw_sync', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync', 0x800, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts.
2024/06/16 17:44:57 fuzzer started
2024/06/16 17:44:57 dialing manager at 10.128.0.163:30033
[ 57.868834][ T5076] cgroup: Unknown subsys name 'net'
[ 58.097071][ T5076] cgroup: Unknown subsys name 'rlimit'
[ 59.245578][ T5083] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
2024/06/16 17:45:05 starting 5 executor processes
[ 67.823458][ T5356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 67.836919][ T5356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 67.848010][ T5356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 67.856976][ T5356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 67.878221][ T5356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 67.898583][ T5356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 68.162943][ T2908]
[ 68.165485][ T2908] =============================
[ 68.170464][ T2908] WARNING: suspicious RCU usage
[ 68.175353][ T2908] 6.10.0-rc3-syzkaller-00174-ga3e18a540541 #0 Not tainted
[ 68.182570][ T2908] -----------------------------
[ 68.187443][ T2908] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage!
[ 68.197239][ T2908]
[ 68.197239][ T2908] other info that might help us debug this:
[ 68.197239][ T2908]
[ 68.207670][ T2908]
[ 68.207670][ T2908] rcu_scheduler_active = 2, debug_locks = 1
[ 68.215756][ T2908] 3 locks held by kworker/u8:8/2908:
[ 68.221176][ T2908] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 68.232212][ T2908] #1: ffffc90009ac7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 68.242853][ T2908] #2: ffffffff8f5c9050 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 68.252448][ T2908]
[ 68.252448][ T2908] stack backtrace:
[ 68.258460][ T2908] CPU: 0 PID: 2908 Comm: kworker/u8:8 Not tainted 6.10.0-rc3-syzkaller-00174-ga3e18a540541 #0
[ 68.268898][ T2908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 68.278987][ T2908] Workqueue: netns cleanup_net
[ 68.283893][ T2908] Call Trace:
[ 68.287204][ T2908]
[ 68.290156][ T2908] dump_stack_lvl+0x241/0x360
[ 68.294873][ T2908] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.300112][ T2908] ? __pfx__printk+0x10/0x10
[ 68.304933][ T2908] lockdep_rcu_suspicious+0x221/0x340
[ 68.310698][ T2908] _destroy_all_sets+0x232/0x5f0
[ 68.315680][ T2908] ip_set_net_exit+0x20/0x50
[ 68.320395][ T2908] cleanup_net+0x802/0xcc0
[ 68.324857][ T2908] ? __pfx_cleanup_net+0x10/0x10
[ 68.329843][ T2908] ? process_scheduled_works+0x945/0x1830
[ 68.335614][ T2908] process_scheduled_works+0xa2c/0x1830
[ 68.341229][ T2908] ? __pfx_process_scheduled_works+0x10/0x10
[ 68.347255][ T2908] ? assign_work+0x364/0x3d0
[ 68.351884][ T2908] worker_thread+0x86d/0xd70
[ 68.356519][ T2908] ? _raw_spin_unlock_irqrestore+0xdd/0x140
2024/06/16 17:45:08 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[ 68.362451][ T2908] ? __kthread_parkme+0x169/0x1d0
[ 68.367515][ T2908] ? __pfx_worker_thread+0x10/0x10
[ 68.372750][ T2908] kthread+0x2f0/0x390
[ 68.376957][ T2908] ? __pfx_worker_thread+0x10/0x10
[ 68.382097][ T2908] ? __pfx_kthread+0x10/0x10
[ 68.386724][ T2908] ret_from_fork+0x4b/0x80
[ 68.391174][ T2908] ? __pfx_kthread+0x10/0x10
[ 68.395798][ T2908] ret_from_fork_asm+0x1a/0x30
[ 68.400620][ T2908]
[ 68.421761][ T5355] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[ 68.475881][ T2908]
[ 68.486580][ T2908] =============================
[ 68.491866][ T2908] WARNING: suspicious RCU usage
[ 68.496838][ T2908] 6.10.0-rc3-syzkaller-00174-ga3e18a540541 #0 Not tainted
[ 68.504421][ T2908] -----------------------------
[ 68.509786][ T2908] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage!
[ 68.519650][ T2908]
[ 68.519650][ T2908] other info that might help us debug this:
[ 68.519650][ T2908]
[ 68.530364][ T2908]
[ 68.530364][ T2908] rcu_scheduler_active = 2, debug_locks = 1
[ 68.538858][ T2908] 3 locks held by kworker/u8:8/2908:
[ 68.544163][ T2908] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 68.555177][ T2908] #1: ffffc90009ac7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 68.565842][ T2908] #2: ffffffff8f5c9050 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 68.575621][ T2908]
[ 68.575621][ T2908] stack backtrace:
[ 68.581595][ T2908] CPU: 0 PID: 2908 Comm: kworker/u8:8 Not tainted 6.10.0-rc3-syzkaller-00174-ga3e18a540541 #0
[ 68.592148][ T2908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 68.602293][ T2908] Workqueue: netns cleanup_net
[ 68.607064][ T2908] Call Trace:
[ 68.610396][ T2908]
[ 68.613349][ T2908] dump_stack_lvl+0x241/0x360
[ 68.618051][ T2908] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.623532][ T2908] ? __pfx__printk+0x10/0x10
[ 68.628277][ T2908] lockdep_rcu_suspicious+0x221/0x340
[ 68.633683][ T2908] _destroy_all_sets+0x53f/0x5f0
[ 68.638678][ T2908] ip_set_net_exit+0x20/0x50
[ 68.643403][ T2908] cleanup_net+0x802/0xcc0
[ 68.647823][ T2908] ? __pfx_cleanup_net+0x10/0x10
[ 68.652853][ T2908] ? process_scheduled_works+0x945/0x1830
[ 68.658579][ T2908] process_scheduled_works+0xa2c/0x1830
[ 68.664157][ T2908] ? __pfx_process_scheduled_works+0x10/0x10
[ 68.670246][ T2908] ? assign_work+0x364/0x3d0
[ 68.674843][ T2908] worker_thread+0x86d/0xd70
[ 68.679437][ T2908] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 68.685436][ T2908] ? __kthread_parkme+0x169/0x1d0
[ 68.690459][ T2908] ? __pfx_worker_thread+0x10/0x10
[ 68.695562][ T2908] kthread+0x2f0/0x390
[ 68.699633][ T2908] ? __pfx_worker_thread+0x10/0x10
[ 68.704732][ T2908] ? __pfx_kthread+0x10/0x10
[ 68.709406][ T2908] ret_from_fork+0x4b/0x80
[ 68.713856][ T2908] ? __pfx_kthread+0x10/0x10
[ 68.718458][ T2908] ret_from_fork_asm+0x1a/0x30
[ 68.723412][ T2908]