last executing test programs: 2.643126541s ago: executing program 4 (id=5): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0) 2.636999692s ago: executing program 3 (id=4): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x0) 2.627283864s ago: executing program 0 (id=7): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cmdline', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cmdline', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cmdline', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cmdline', 0x800, 0x0) 2.575539002s ago: executing program 4 (id=10): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 2.575164282s ago: executing program 1 (id=11): socket$kcm(0x29, 0x2, 0x0) 2.574966552s ago: executing program 2 (id=12): socket(0x1, 0x1, 0x0) 2.574914372s ago: executing program 0 (id=13): socket(0x1e, 0x2, 0x0) 2.562950994s ago: executing program 2 (id=15): setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) 2.088035707s ago: executing program 2 (id=18): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2.085223378s ago: executing program 3 (id=14): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.927950982s ago: executing program 0 (id=17): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.87779279s ago: executing program 4 (id=19): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.869738351s ago: executing program 1 (id=16): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.725155593s ago: executing program 3 (id=20): mkdir(&(0x7f0000000000), 0x0) 1.284176772s ago: executing program 4 (id=22): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.194798255s ago: executing program 2 (id=21): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.190865116s ago: executing program 0 (id=23): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 947.310993ms ago: executing program 1 (id=24): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 562.776173ms ago: executing program 0 (id=28): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 494.412624ms ago: executing program 2 (id=29): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 302.908563ms ago: executing program 1 (id=30): gettid() 261.60227ms ago: executing program 3 (id=26): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 240.672223ms ago: executing program 1 (id=33): clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) exit(0x0) 218.461866ms ago: executing program 1 (id=34): getpid() 52.041322ms ago: executing program 2 (id=32): perf_event_open(&(0x7f0000000000), 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=31): unlink(&(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. [ 47.299856][ T3534] cgroup: Unknown subsys name 'net' [ 47.404434][ T3534] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.777305][ T3534] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.343886][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.369257][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.404705][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.470963][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.497278][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.508699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.927505][ T3618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.943777][ T3618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.952178][ T3618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.967428][ T3618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.975053][ T3618] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 50.982577][ T3618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.332201][ T3611] chnl_net:caif_netlink_parms(): no params data found [ 51.811900][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.848644][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.863825][ T3611] device bridge_slave_0 entered promiscuous mode [ 51.875430][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.884327][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.894157][ T3611] device bridge_slave_1 entered promiscuous mode [ 51.932969][ T3611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.944996][ T3611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.983526][ T3611] team0: Port device team_slave_0 added [ 51.992029][ T3611] team0: Port device team_slave_1 added [ 52.019165][ T3611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.026152][ T3611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.053849][ T3611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.069420][ T3611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.076798][ T3611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.103990][ T3611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.147231][ T3611] device hsr_slave_0 entered promiscuous mode [ 52.154301][ T3611] device hsr_slave_1 entered promiscuous mode [ 52.195238][ T51] [ 52.197899][ T51] ============================= [ 52.202776][ T51] WARNING: suspicious RCU usage [ 52.207773][ T51] 6.1.95-syzkaller #0 Not tainted [ 52.213309][ T51] ----------------------------- [ 52.218525][ T51] net/netfilter/ipset/ip_set_core.c:1202 suspicious rcu_dereference_protected() usage! [ 52.228241][ T51] [ 52.228241][ T51] other info that might help us debug this: [ 52.228241][ T51] [ 52.238630][ T51] [ 52.238630][ T51] rcu_scheduler_active = 2, debug_locks = 1 [ 52.246761][ T51] 3 locks held by kworker/u4:3/51: [ 52.251976][ T51] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 52.262711][ T51] #1: ffffc90000bc7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 52.272705][ T51] #2: ffffffff8e28d9d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 52.282092][ T51] [ 52.282092][ T51] stack backtrace: [ 52.288162][ T51] CPU: 1 PID: 51 Comm: kworker/u4:3 Not tainted 6.1.95-syzkaller #0 [ 52.296165][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 52.306221][ T51] Workqueue: netns cleanup_net [ 52.311122][ T51] Call Trace: [ 52.314487][ T51] [ 52.317426][ T51] dump_stack_lvl+0x1e3/0x2cb [ 52.322398][ T51] ? nf_tcp_handle_invalid+0x642/0x642 [ 52.327985][ T51] ? panic+0x764/0x764 [ 52.332093][ T51] lockdep_rcu_suspicious+0x21c/0x330 [ 52.337510][ T51] _destroy_all_sets+0x22c/0x5e0 [ 52.342479][ T51] ip_set_net_exit+0x1c/0x50 [ 52.347292][ T51] cleanup_net+0x6ce/0xb60 [ 52.351719][ T51] ? ops_free_list+0x3b0/0x3b0 [ 52.356563][ T51] ? process_one_work+0x7a9/0x11d0 [ 52.361787][ T51] process_one_work+0x8a9/0x11d0 [ 52.366965][ T51] ? worker_detach_from_pool+0x260/0x260 [ 52.373092][ T51] ? _raw_spin_lock_irqsave+0x120/0x120 [ 52.378650][ T51] ? kthread_data+0x4e/0xc0 [ 52.383176][ T51] ? wq_worker_running+0x97/0x190 [ 52.388326][ T51] worker_thread+0xa47/0x1200 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 52.393031][ T51] ? __sched_text_start+0x8/0x8 [ 52.397913][ T51] kthread+0x28d/0x320 [ 52.401972][ T51] ? worker_clr_flags+0x190/0x190 [ 52.406980][ T51] ? kthread_blkcg+0xd0/0xd0 [ 52.411651][ T51] ret_from_fork+0x1f/0x30 [ 52.416085][ T51] [ 52.420977][ T51] [ 52.423358][ T51] ============================= [ 52.428350][ T51] WARNING: suspicious RCU usage [ 52.433312][ T51] 6.1.95-syzkaller #0 Not tainted [ 52.438414][ T51] ----------------------------- [ 52.443294][ T51] net/netfilter/ip