last executing test programs: 2.452628407s ago: executing program 2 (id=8): clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) exit(0x0) 2.43300294s ago: executing program 2 (id=11): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0) 2.423557502s ago: executing program 0 (id=1): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 2.36568254s ago: executing program 1 (id=12): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cmdline', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cmdline', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cmdline', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cmdline', 0x800, 0x0) 2.36551743s ago: executing program 1 (id=13): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 2.36545114s ago: executing program 2 (id=14): close(0xffffffffffffffff) 2.36522153s ago: executing program 0 (id=15): gettid() 2.36510382s ago: executing program 1 (id=16): socket(0x1e, 0x2, 0x0) 2.36497561s ago: executing program 3 (id=4): write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.36484997s ago: executing program 4 (id=17): socket$kcm(0x29, 0x2, 0x0) 2.360346831s ago: executing program 0 (id=18): setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) 1.83420915s ago: executing program 1 (id=20): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.822955252s ago: executing program 4 (id=23): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.743272145s ago: executing program 2 (id=21): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.64356342s ago: executing program 0 (id=19): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.425520343s ago: executing program 4 (id=26): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.258072559s ago: executing program 2 (id=27): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.063913048s ago: executing program 3 (id=25): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.063334058s ago: executing program 1 (id=24): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 975.223742ms ago: executing program 4 (id=29): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 745.090865ms ago: executing program 4 (id=31): perf_event_open(&(0x7f0000000000), 0x0, 0x0, 0xffffffffffffffff, 0x0) 721.511399ms ago: executing program 4 (id=34): mkdir(&(0x7f0000000000), 0x0) 355.590075ms ago: executing program 2 (id=30): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 315.295342ms ago: executing program 1 (id=32): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=33): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 50.144456][ T3535] cgroup: Unknown subsys name 'net' [ 50.270516][ T3535] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.523095][ T3535] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.559269][ T3601] chnl_net:caif_netlink_parms(): no params data found [ 53.728648][ T3625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.737220][ T3625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.744807][ T3625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.762722][ T3625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.770384][ T3625] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.778546][ T3625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.962217][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.044459][ T3601] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.058933][ T3601] device bridge_slave_0 entered promiscuous mode [ 54.095316][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.116670][ T3601] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.130370][ T3601] device bridge_slave_1 entered promiscuous mode [ 54.141120][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.176622][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.203949][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.230341][ T3601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.245743][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.248360][ T3601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.253695][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.282916][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.350845][ T3601] team0: Port device team_slave_0 added [ 54.378193][ T3601] team0: Port device team_slave_1 added [ 54.418320][ T3601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.436976][ T3601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.464576][ T3601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.478044][ T3601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.485009][ T3601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.512703][ T3601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.553259][ T3601] device hsr_slave_0 entered promiscuous mode [ 54.560347][ T3601] device hsr_slave_1 entered promiscuous mode [ 54.656559][ T11] [ 54.659246][ T11] ============================= [ 54.664102][ T11] WARNING: suspicious RCU usage [ 54.669603][ T11] 6.1.95-syzkaller #0 Not tainted [ 54.675211][ T11] ----------------------------- [ 54.680223][ T11] net/netfilter/ipset/ip_set_core.c:1202 suspicious rcu_dereference_protected() usage! [ 54.690088][ T11] [ 54.690088][ T11] other info that might help us debug this: [ 54.690088][ T11] [ 54.692967][ T3601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.700394][ T11] [ 54.700394][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 54.700438][ T11] 3 locks held by kworker/u4:1/11: [ 54.700449][ T11] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 54.731089][ T11] #1: ffffc90000107d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 54.741070][ T11] #2: ffffffff8e28d9d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 54.750605][ T11] [ 54.750605][ T11] stack backtrace: [ 54.756551][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.95-syzkaller #0 [ 54.764735][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 54.774793][ T11] Workqueue: netns cleanup_net [ 54.779564][ T11] Call Trace: [ 54.782834][ T11] [ 54.785747][ T11] dump_stack_lvl+0x1e3/0x2cb [ 54.790422][ T11] ? nf_tcp_handle_invalid+0x642/0x642 [ 54.795951][ T11] ? panic+0x764/0x764 [ 54.800049][ T11] lockdep_rcu_suspicious+0x21c/0x330 [ 54.805433][ T11] _destroy_all_sets+0x22c/0x5e0 [ 54.810376][ T11] ip_set_net_exit+0x1c/0x50 [ 54.814959][ T11] cleanup_net+0x6ce/0xb60 [ 54.819382][ T11] ? ops_free_list+0x3b0/0x3b0 [ 54.824149][ T11] ? process_one_work+0x7a9/0x11d0 [ 54.829245][ T11] process_one_work+0x8a9/0x11d0 [ 54.834193][ T11] ? worker_detach_from_pool+0x260/0x260 [ 54.839889][ T11] ? _raw_spin_lock_irqsave+0x120/0x120 [ 54.845533][ T11] ? kthread_data+0x4e/0xc0 [ 54.850027][ T11] ? wq_worker_running+0x97/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 54.855037][ T11] worker_thread+0xa47/0x1200 [ 54.859698][ T11] ? __sched_text_start+0x8/0x8 [ 54.864629][ T11] kthread+0x28d/0x320 [ 54.868785][ T11] ? worker_clr_flags+0x190/0x190 [ 54.873809][ T11] ? kthread_blkcg+0xd0/0xd0 [ 54.878468][ T11] ret_from_fork+0x1f/0x30 [ 54.882964][ T11] [ 54.897061][ T11] [ 54.899436][ T11] ============================= [ 54.904285][ T11] WARNING: suspicious RCU usage [ 54.909381][ T11] 6.1.95-syzkaller #0 Not tainted [ 54.912014][ T3601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.914392][ T11] ----------------------------- [ 54.914401][ T11] net/netfilter/ipset/ip_set_core.c:1213 suspicious rcu_dereference_protected() usage! [ 54.936466][ T11] [ 54.936466][ T11] other info that might help us debug this: [ 54.936466][ T11] [ 54.946860][ T11] [ 54.946860][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 54.954933][ T11] 3 locks held by kworker/u4:1/11: [ 54.960266][ T11] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 54.970708][ T11] #1: ffffc90000107d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 54.980827][ T11] #2: ffffffff8e28d9d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 54.990240][ T11] [ 54.990240][ T11] stack backtrace: [ 54.996192][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.95-syzkaller #0 [ 55.004264][ T11] Hardware name: Google Go