last executing test programs: 2.518568547s ago: executing program 1 (id=10): perf_event_open(&(0x7f0000000000), 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.507586339s ago: executing program 1 (id=11): mkdir(&(0x7f0000000000), 0x0) 2.49946866s ago: executing program 0 (id=12): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0) 2.447311497s ago: executing program 1 (id=13): close(0xffffffffffffffff) 2.447119907s ago: executing program 0 (id=14): mkdirat(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.447072067s ago: executing program 3 (id=15): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cmdline', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cmdline', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cmdline', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cmdline', 0x800, 0x0) 2.447038667s ago: executing program 2 (id=3): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x0) 2.446982137s ago: executing program 1 (id=16): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 2.446956107s ago: executing program 0 (id=17): socket(0x1, 0x1, 0x0) 2.446895707s ago: executing program 1 (id=18): socket(0x1e, 0x2, 0x0) 2.43297347s ago: executing program 3 (id=19): setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) 2.322388306s ago: executing program 4 (id=5): socket$kcm(0x29, 0x2, 0x0) 1.95619253s ago: executing program 1 (id=21): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.880249002s ago: executing program 3 (id=23): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.812696041s ago: executing program 4 (id=24): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.637669527s ago: executing program 0 (id=20): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.530004583s ago: executing program 3 (id=27): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.344666731s ago: executing program 2 (id=26): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.073827261s ago: executing program 0 (id=30): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 916.467235ms ago: executing program 3 (id=29): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 884.773899ms ago: executing program 4 (id=28): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 493.478427ms ago: executing program 2 (id=31): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 346.087099ms ago: executing program 4 (id=34): clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) exit(0x0) 272.106ms ago: executing program 0 (id=32): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=33): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 47.414267][ T3535] cgroup: Unknown subsys name 'net' [ 47.571550][ T3535] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.852128][ T3535] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.826267][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.834360][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.887692][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.912249][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.937585][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.964343][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.051414][ T3595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.059936][ T3597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.068194][ T3597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.076200][ T3597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.083778][ T3597] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 50.091270][ T3597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.535809][ T3592] chnl_net:caif_netlink_parms(): no params data found [ 50.884577][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.936016][ T3592] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.957129][ T3592] device bridge_slave_0 entered promiscuous mode [ 50.982638][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.997012][ T3592] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.027282][ T3592] device bridge_slave_1 entered promiscuous mode [ 51.169502][ T3592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.241175][ T3592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.339772][ T3592] team0: Port device team_slave_0 added [ 51.361119][ T3592] team0: Port device team_slave_1 added [ 51.516897][ T3592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.524071][ T3592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.565190][ T3592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.587165][ T3592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.594819][ T3592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.622290][ T3592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.693638][ T3592] device hsr_slave_0 entered promiscuous mode [ 51.726910][ T3592] device hsr_slave_1 entered promiscuous mode [ 51.903787][ T3592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.916187][ T3592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.927266][ T3592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.937475][ T3592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.958517][ T34] [ 51.961114][ T34] ============================= [ 51.966063][ T34] WARNING: suspicious RCU usage [ 51.971105][ T34] 6.1.95-syzkaller #0 Not tainted [ 51.976217][ T34] ----------------------------- [ 51.981076][ T34] net/netfilter/ipset/ip_set_core.c:1202 suspicious rcu_dereference_protected() usage! [ 51.990840][ T34] [ 51.990840][ T34] other info that might help us debug this: [ 51.990840][ T34] [ 52.001241][ T34] [ 52.001241][ T34] rcu_scheduler_active = 2, debug_locks = 1 [ 52.009619][ T34] 3 locks held by kworker/u4:2/34: [ 52.014748][ T34] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 52.019169][ T3592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.025325][ T34] #1: ffffc90000ab7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 52.039876][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.041887][ T34] #2: ffffffff8e28d9d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 52.058452][ T34] [ 52.058452][ T34] stack backtrace: [ 52.064474][ T34] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted 6.1.95-syzkaller #0 [ 52.072541][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 52.082592][ T34] Workqueue: netns cleanup_net [ 52.087503][ T34] Call Trace: [ 52.090776][ T34] [ 52.093697][ T34] dump_stack_lvl+0x1e3/0x2cb [ 52.098381][ T34] ? nf_tcp_handle_invalid+0x642/0x642 [ 52.103833][ T34] ? panic+0x764/0x764 [ 52.107899][ T34] lockdep_rcu_suspicious+0x21c/0x330 [ 52.113288][ T34] _destroy_all_sets+0x22c/0x5e0 [ 52.118239][ T34] ip_set_net_exit+0x1c/0x50 [ 52.122841][ T34] cleanup_net+0x6ce/0xb60 [ 52.127358][ T34] ? ops_free_list+0x3b0/0x3b0 [ 52.132148][ T34] ? process_one_work+0x7a9/0x11d0 [ 52.137268][ T34] process_one_work+0x8a9/0x11d0 [ 52.142320][ T34] ? worker_detach_from_pool+0x260/0x260 [ 52.148050][ T34] ? _raw_spin_lock_irqsave+0x120/0x120 [ 52.153607][ T34] ? kthread_data+0x4e/0xc0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 52.158236][ T34] ? wq_worker_running+0x97/0x190 [ 52.163361][ T34] worker_thread+0xa47/0x1200 [ 52.168039][ T34] ? _raw_spin_unlock+0x40/0x40 [ 52.172979][ T34] kthread+0x28d/0x320 [ 52.177046][ T34] ? worker_clr_flags+0x190/0x190 [ 52.182058][ T34] ? kthread_blkcg+0xd0/0xd0 [ 52.186636][ T34] ret_from_fork+0x1f/0x30 [ 52.191053][ T34] [ 52.200486][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [