last executing test programs:
815.880948ms ago: executing program 3:
syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$vcsu(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$vcsu(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$vcsu(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$vcsu(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$vcsu(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$vcsu(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$vcsu(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$vcsu(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$vcsu(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$vcsu(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$vcsu(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$vcsu(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$vcsu(&(0x7f0000000500), 0x4, 0x800)
742.351731ms ago: executing program 3:
readahead(0xffffffffffffffff, 0x0, 0x0)
705.94746ms ago: executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/target_ids', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/target_ids', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/target_ids', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/target_ids', 0x800, 0x0)
665.926193ms ago: executing program 3:
uselib(&(0x7f0000000000))
610.353355ms ago: executing program 3:
futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0)
570.800045ms ago: executing program 0:
chmod(&(0x7f0000000000), 0x0)
554.505692ms ago: executing program 3:
syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$audion(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$audion(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$audion(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$audion(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$audion(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$audion(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$audion(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$audion(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$audion(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$audion(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$audion(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$audion(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$audion(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$audion(&(0x7f0000000500), 0x4, 0x800)
499.910324ms ago: executing program 0:
lgetxattr(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0)
467.124847ms ago: executing program 0:
statx(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000))
415.768949ms ago: executing program 0:
madvise(0x0, 0x0, 0x0)
368.980355ms ago: executing program 0:
ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0)
325.506185ms ago: executing program 0:
pause()
281.549038ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer', 0x800, 0x0)
251.498017ms ago: executing program 1:
getuid()
232.547319ms ago: executing program 4:
sched_setparam(0x0, &(0x7f0000000000))
231.737655ms ago: executing program 2:
syz_open_dev$floppy(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$floppy(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$floppy(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$floppy(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$floppy(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$floppy(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$floppy(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$floppy(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$floppy(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$floppy(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$floppy(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$floppy(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$floppy(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$floppy(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$floppy(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$floppy(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$floppy(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$floppy(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$floppy(&(0x7f0000000500), 0x4, 0x800)
228.867716ms ago: executing program 5:
socket$can_j1939(0x1d, 0x2, 0x7)
204.773441ms ago: executing program 4:
mount_setattr(0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0)
200.627655ms ago: executing program 1:
sched_getattr(0x0, &(0x7f0000000000), 0x0, 0x0)
187.14864ms ago: executing program 5:
setpriority(0x0, 0x0, 0x0)
184.048866ms ago: executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
159.97025ms ago: executing program 1:
readv(0xffffffffffffffff, &(0x7f0000000000), 0x0)
147.332278ms ago: executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord', 0x800, 0x0)
144.538373ms ago: executing program 5:
mlock2(0x0, 0x0, 0x0)
144.053564ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self', 0x800, 0x0)
125.813418ms ago: executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/change-rule', 0x2, 0x0)
110.750295ms ago: executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0', 0x2, 0x0)
91.26113ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/mk_contexts', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/mk_contexts', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/mk_contexts', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/mk_contexts', 0x800, 0x0)
89.470013ms ago: executing program 4:
renameat2(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0)
75.837518ms ago: executing program 1:
iopl(0x0)
74.240095ms ago: executing program 5:
set_thread_area(&(0x7f0000000000))
51.20366ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/oss_mixer', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer', 0x800, 0x0)
49.784017ms ago: executing program 4:
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$hidraw(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$hidraw(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$hidraw(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$hidraw(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$hidraw(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$hidraw(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$hidraw(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$hidraw(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$hidraw(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$hidraw(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$hidraw(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$hidraw(&(0x7f0000000500), 0x4, 0x800)
37.242403ms ago: executing program 5:
fsync(0xffffffffffffffff)
32.373717ms ago: executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
0s ago: executing program 2:
getresuid(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts.
2024/06/17 01:18:55 fuzzer started
2024/06/17 01:18:55 dialing manager at 10.128.0.169:30003
[ 69.820413][ T5087] cgroup: Unknown subsys name 'net'
[ 70.091843][ T5087] cgroup: Unknown subsys name 'rlimit'
[ 71.050957][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.057606][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.343434][ T5095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
2024/06/17 01:18:57 starting 6 executor processes
[ 72.308722][ T5161] mmap: syz-executor.2 (5161) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 74.020705][ T5347] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 75.458401][ T5522] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 78.387416][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 78.399638][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 78.407387][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 78.417522][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 78.426148][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 78.438027][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 78.772741][ T35]
[ 78.775259][ T35] =============================
[ 78.780250][ T35] WARNING: suspicious RCU usage
[ 78.785111][ T35] 6.10.0-rc4-syzkaller #0 Not tainted
[ 78.790553][ T35] -----------------------------
[ 78.795410][ T35] net/netfilter/ipset/ip_set_core.c:1200 suspicious rcu_dereference_protected() usage!
[ 78.805550][ T35]
[ 78.805550][ T35] other info that might help us debug this:
[ 78.805550][ T35]
[ 78.816430][ T35]
2024/06/17 01:19:05 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[ 78.816430][ T35] rcu_scheduler_active = 2, debug_locks = 1
[ 78.824538][ T35] 3 locks held by kworker/u8:2/35:
[ 78.829716][ T35] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 78.840732][ T35] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 78.851487][ T35] #2: ffffffff8f5dba90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 78.861031][ T35]
[ 78.861031][ T35] stack backtrace:
[ 78.866965][ T35] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller #0
[ 78.875310][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 78.885377][ T35] Workqueue: netns cleanup_net
[ 78.890178][ T35] Call Trace:
[ 78.893476][ T35]
[ 78.896422][ T35] dump_stack_lvl+0x241/0x360
[ 78.901139][ T35] ? __pfx_dump_stack_lvl+0x10/0x10
[ 78.906366][ T35] ? __pfx__printk+0x10/0x10
[ 78.910984][ T35] ? srso_alias_return_thunk+0x5/0xfbef5
[ 78.916638][ T35] lockdep_rcu_suspicious+0x221/0x340
[ 78.922038][ T35] _destroy_all_sets+0x232/0x5f0
[ 78.926998][ T35] ip_set_net_exit+0x20/0x50
[ 78.931596][ T35] cleanup_net+0x804/0xcc0
[ 78.936037][ T35] ? __pfx_cleanup_net+0x10/0x10
[ 78.941003][ T35] ? process_scheduled_works+0x945/0x1830
[ 78.946728][ T35] process_scheduled_works+0xa2e/0x1830
[ 78.952309][ T35] ? __pfx_process_scheduled_works+0x10/0x10
[ 78.958302][ T35] ? assign_work+0x364/0x3d0
[ 78.962903][ T35] worker_thread+0x86d/0xd70
[ 78.967520][ T35] ? __kthread_parkme+0x169/0x1d0
[ 78.972571][ T35] ? __pfx_worker_thread+0x10/0x10
[ 78.977691][ T35] kthread+0x2f2/0x390
[ 78.981774][ T35] ? __pfx_worker_thread+0x10/0x10
[ 78.986896][ T35] ? __pfx_kthread+0x10/0x10
[ 78.991505][ T35] ret_from_fork+0x4d/0x80
[ 78.995937][ T35] ? __pfx_kthread+0x10/0x10
[ 79.000712][ T35] ret_from_fork_asm+0x1a/0x30
[ 79.005507][ T35]
[ 79.118273][ T35]
[ 79.120649][ T35] =============================
[ 79.125501][ T35] WARNING: suspicious RCU usage
[ 79.130749][ T35] 6.10.0-rc4-syzkaller #0 Not tainted
[ 79.136296][ T35] -----------------------------
[ 79.141154][ T35] net/netfilter/ipset/ip_set_core.c:1211 suspicious rcu_dereference_protected() usage!
[ 79.150862][ T35]
[ 79.150862][ T35] other info that might help us debug this:
[ 79.150862][ T35]
[ 79.161186][ T35]
[ 79.161186][ T35] rcu_scheduler_active = 2, debug_locks = 1
[ 79.169337][ T35] 3 locks held by kworker/u8:2/35:
[ 79.174469][ T35] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 79.185864][ T35] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 79.196894][ T35] #2: ffffffff8f5dba90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 79.206493][ T35]
[ 79.206493][ T35] stack backtrace:
[ 79.212485][ T35] CPU: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller #0
[ 79.220829][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 79.230889][ T35] Workqueue: netns cleanup_net
[ 79.235687][ T35] Call Trace:
[ 79.238969][ T35]
[ 79.241991][ T35] dump_stack_lvl+0x241/0x360
[ 79.246688][ T35] ? __pfx_dump_stack_lvl+0x10/0x10
[ 79.251897][ T35] ? __pfx__printk+0x10/0x10
[ 79.256504][ T35] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.262158][ T35] lockdep_rcu_suspicious+0x221/0x340
[ 79.267639][ T35] _destroy_all_sets+0x53f/0x5f0
[ 79.272589][ T35] ip_set_net_exit+0x20/0x50
[ 79.277192][ T35] cleanup_net+0x804/0xcc0
[ 79.281634][ T35] ? __pfx_cleanup_net+0x10/0x10
[ 79.286600][ T35] ? process_scheduled_works+0x945/0x1830
[ 79.292327][ T35] process_scheduled_works+0xa2e/0x1830
[ 79.297909][ T35] ? __pfx_process_scheduled_works+0x10/0x10
[ 79.303913][ T35] ? assign_work+0x364/0x3d0
[ 79.308523][ T35] worker_thread+0x86d/0xd70
[ 79.313142][ T35] ? __kthread_parkme+0x169/0x1d0
[ 79.318183][ T35] ? __pfx_worker_thread+0x10/0x10
[ 79.323394][ T35] kthread+0x2f2/0x390
[ 79.327475][ T35] ? __pfx_worker_thread+0x10/0x10
[ 79.332594][ T35] ? __pfx_kthread+0x10/0x10
[ 79.337197][ T35] ret_from_fork+0x4d/0x80
[ 79.341635][ T35] ? __pfx_kthread+0x10/0x10
[ 79.346237][ T35] ret_from_fork_asm+0x1a/0x30
[ 79.351040][ T35]
[ 79.354113][ C0] vkms_vblank_simulate: vblank timer overrun