last executing test programs: 1m7.230119034s ago: executing program 1 (id=208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001000)=')-+\x00', 0x0, r0) 51.221237723s ago: executing program 1 (id=211): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) 48.188984004s ago: executing program 0 (id=212): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 39.906029679s ago: executing program 0 (id=213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000300140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 32.990955388s ago: executing program 1 (id=214): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="800037e9220ca1ce", 0x8, 0x24000804, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c) 30.284176139s ago: executing program 0 (id=215): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 23.414785225s ago: executing program 0 (id=216): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x1ff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 20.520346708s ago: executing program 1 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 14.681222735s ago: executing program 0 (id=218): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlockall(0x2) 9.727996823s ago: executing program 1 (id=219): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xfe8e, 0x12) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, &(0x7f0000000040)={0x77359400}) 2.051492325s ago: executing program 0 (id=220): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f0000000380)) 0s ago: executing program 1 (id=221): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0x86, 0x1, @vifc_lcl_addr=@loopback, @local}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:16687' (ED25519) to the list of known hosts. syzkaller login: [ 649.696624][ T3191] cgroup: Unknown subsys name 'net' [ 650.328866][ T3191] cgroup: Unknown subsys name 'cpuset' [ 650.557886][ T3191] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 743.278759][ T3191] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 964.398718][ T3207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.572789][ T3207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.832843][ T3206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.069897][ T3206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.077167][ T3207] hsr_slave_0: entered promiscuous mode [ 983.171274][ T3207] hsr_slave_1: entered promiscuous mode [ 985.780596][ T3206] hsr_slave_0: entered promiscuous mode [ 985.853456][ T3206] hsr_slave_1: entered promiscuous mode [ 985.913359][ T3206] debugfs: 'hsr0' already exists in 'hsr' [ 985.928695][ T3206] Cannot create hsr debugfs directory [ 997.067710][ T3207] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 997.401497][ T3207] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 997.595916][ T3207] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 998.760105][ T3207] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1002.302066][ T3206] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1002.640278][ T3206] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1002.992897][ T3206] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1003.311985][ T3206] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1027.157877][ T3207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.537246][ T3206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.183182][ T3207] veth0_vlan: entered promiscuous mode [ 1111.190119][ T3207] veth1_vlan: entered promiscuous mode [ 1114.118593][ T3207] veth0_macvtap: entered promiscuous mode [ 1114.628164][ T3207] veth1_macvtap: entered promiscuous mode [ 1118.582980][ T3394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.591770][ T3394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.727519][ T3394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.731530][ T3394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.901777][ T3206] veth0_vlan: entered promiscuous mode [ 1126.395425][ T3206] veth1_vlan: entered promiscuous mode [ 1127.539518][ T3207] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1129.260056][ T3206] veth0_macvtap: entered promiscuous mode [ 1130.791167][ T3206] veth1_macvtap: entered promiscuous mode [ 1135.172043][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.206118][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.208065][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.210187][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.542647][ T3833] hugetlbfs: Bad value 'Ï' for mount option 'size' [ 1166.542647][ T3833] [ 1250.319705][ T3871] capability: warning: `syz.0.18' uses deprecated v2 capabilities in a way that may be insecure [ 1302.806562][ T3894] binder: 3893:3894 ioctl 400c620e 2000000001c0 returned -22 [ 1380.731628][ T3926] ======================================================= [ 1380.731628][ T3926] WARNING: The mand mount option has been deprecated and [ 1380.731628][ T3926] and is ignored by this kernel. Remove the mand [ 1380.731628][ T3926] option from the mount to silence this warning. [ 1380.731628][ T3926] ======================================================= [ 1452.211215][ T3954] netlink: 44 bytes leftover after parsing attributes in process `syz.0.53'. [ 1465.439928][ T3958] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1508.912218][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 1519.212857][ T3981] netlink: 76 bytes leftover after parsing attributes in process `syz.1.65'. [ 1657.871303][ T4035] syz_tun: entered allmulticast mode [ 1696.710877][ T4050] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 1696.718327][ T4050] nbd: error processing sock list [ 1721.482289][ T4061] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1773.986724][ T4083] bridge_slave_1: entered promiscuous mode [ 1902.179308][ T4139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 1910.832613][ T4143] veth0: entered promiscuous mode [ 1911.012974][ T4142] veth0: left promiscuous mode [ 1943.817843][ T4158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 1950.531461][ T4160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 1950.567809][ T4160] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2010.458960][ T60] bond0: (slave bond_slave_0): interface is now down [ 2010.470817][ T60] bond0: (slave bond_slave_1): interface is now down [ 2010.624901][ T4182] bond0: (slave bond_slave_0): interface is now down [ 2010.627121][ T4182] bond0: (slave bond_slave_1): interface is now down [ 2010.767203][ T4182] bond0: (slave bond_slave_0): interface is now down [ 2010.769533][ T4182] bond0: (slave bond_slave_1): interface is now down [ 2010.886743][ T4182] bond0: now running without any active interface! [ 2022.269720][ T4198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 2071.342613][ T4215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.163'. [ 2211.420757][ T4262] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 2228.257727][ T4269] process 'syz.1.184' launched './file2' with NULL argv: empty string added [ 2383.482272][ T4331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.210'. [ 2400.507594][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 2420.700952][ T4345] netlink: 'syz.1.217': attribute type 83 has an invalid length. [ 2439.628181][ T4354] ------------[ cut here ]------------ [ 2439.630227][ T4354] Not in threaded context on PREEMPT_RT as expected [ 2439.634377][ C0] WARNING: [] kernel/sched/completion.c:76 at complete_all+0x1d2/0x24c, CPU#0: syz.1.221/4354 [ 2439.635739][ C0] Modules linked in: [ 2439.637290][ C0] CPU: 0 UID: 0 PID: 4354 Comm: syz.1.221 Not tainted syzkaller #0 PREEMPT [ 2439.638312][ C0] Hardware name: riscv-virtio,qemu (DT) [ 2439.639001][ C0] epc : complete_all+0x1d2/0x24c [ 2439.639764][ C0] ra : complete_all+0x1d2/0x24c [ 2439.640452][ C0] epc : ffffffff802bd882 ra : ffffffff802bd882 sp : ffff8f8003e07250 [ 2439.640892][ C0] gp : ffffffff89f9df20 tp : ffffaf8013b53500 t0 : ffff8f8003e06e14 [ 2439.641391][ C0] t1 : fffff5ef0dd978f2 t2 : 6874206e6920746f s0 : ffff8f8003e07290 [ 2439.641870][ C0] s1 : ffffaf8011ffc858 a0 : 0000000000000001 a1 : 0000000000000000 [ 2439.642295][ C0] a2 : 0000000000080000 a3 : ffffffff80146d20 a4 : 0000000000000000 [ 2439.642711][ C0] a5 : 0000000000000000 a6 : 0000000000000003 a7 : ffffaf806ecbc793 [ 2439.643127][ C0] s2 : ffffaf806ecdf460 s3 : ffffaf8013b54500 s4 : ffffffff9136c6e8 [ 2439.643621][ C0] s5 : 1ffff5f0023ff8ff s6 : 0000000000000001 s7 : ffffaf8011ffc694 [ 2439.644084][ C0] s8 : ffffaf8011ffc008 s9 : ffff8f8003e07420 s10: 1ffff1f0007c0e78 [ 2439.644581][ C0] s11: ffffaf8011ffc130 t3 : ffffffff87d9cae8 t4 : fffff5ef0dd978f2 [ 2439.645063][ C0] t5 : fffff5ef0dd978f3 t6 : ffff8f8003e06bd8 ssp : 0000000000000000 [ 2439.645508][ C0] status: 0000000200000120 badaddr: ffffffff802bd882 cause: 0000000000000003 [ 2439.646027][ C0] [] complete_all+0x1d2/0x24c [ 2439.646769][ C0] [] device_pm_sleep_init+0x8c/0x124 [ 2439.647557][ C0] [] device_initialize+0x1e2/0x4c8 [ 2439.648300][ C0] [] netdev_register_kobject+0x28/0x32c [ 2439.649096][ C0] [] register_netdevice+0x1140/0x219c [ 2439.649956][ C0] [] vif_add+0xc16/0x1430 [ 2439.650626][ C0] [] ip_mroute_setsockopt+0xdec/0x10e0 [ 2439.651372][ C0] [] do_ip_setsockopt+0x248/0x306c [ 2439.652500][ C0] [] ip_setsockopt+0x52/0xe4 [ 2439.653222][ C0] [] raw_setsockopt+0xbe/0x25c [ 2439.654051][ C0] [] sock_common_setsockopt+0x90/0xc0 [ 2439.654645][ C0] [] do_sock_setsockopt+0x20a/0x40c [ 2439.655408][ C0] [] __sys_setsockopt+0x13e/0x1e4 [ 2439.656232][ C0] [] __riscv_sys_setsockopt+0xa6/0x114 [ 2439.657142][ C0] [] syscall_handler+0x92/0x114 [ 2439.657864][ C0] [] do_trap_ecall_u+0x3d2/0x58c [ 2439.658707][ C0] [] handle_exception+0x15e/0x16a [ 2439.660933][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2439.661882][ C0] CPU: 0 UID: 0 PID: 4354 Comm: syz.1.221 Not tainted syzkaller #0 PREEMPT [ 2439.662523][ C0] Hardware name: riscv-virtio,qemu (DT) [ 2439.662820][ C0] Call Trace: [ 2439.663067][ C0] [] dump_backtrace+0x2e/0x3c [ 2439.663803][ C0] [] show_stack+0x30/0x3c [ 2439.664436][ C0] [] dump_stack_lvl+0x114/0x1ac [ 2439.665299][ C0] [] dump_stack+0x1c/0x28 [ 2439.666062][ C0] [] vpanic+0x274/0x684 [ 2439.666627][ C0] [] panic+0xa0/0xa4 [ 2439.667170][ C0] [] check_panic_on_warn+0xc0/0xe4 [ 2439.667781][ C0] [] __warn+0x284/0x498 [ 2439.668444][ C0] [] __report_bug+0x1d4/0x2ac [ 2439.669162][ C0] [] report_bug+0xd8/0x28c [ 2439.670201][ C0] [] handle_break+0x13a/0x30c [ 2439.671141][ C0] [] do_trap_break+0x188/0x358 [ 2439.672066][ C0] [] handle_exception+0x15e/0x16a [ 2439.672909][ C0] [] complete_all+0x1d2/0x24c [ 2439.673591][ C0] [] device_pm_sleep_init+0x8c/0x124 [ 2439.674365][ C0] [] device_initialize+0x1e2/0x4c8 [ 2439.675141][ C0] [] netdev_register_kobject+0x28/0x32c [ 2439.675893][ C0] [] register_netdevice+0x1140/0x219c [ 2439.676802][ C0] [] vif_add+0xc16/0x1430 [ 2439.677491][ C0] [] ip_mroute_setsockopt+0xdec/0x10e0 [ 2439.678246][ C0] [] do_ip_setsockopt+0x248/0x306c [ 2439.679808][ C0] [] ip_setsockopt+0x52/0xe4 [ 2439.680835][ C0] [] raw_setsockopt+0xbe/0x25c [ 2439.681677][ C0] [] sock_common_setsockopt+0x90/0xc0 [ 2439.682283][ C0] [] do_sock_setsockopt+0x20a/0x40c [ 2439.683020][ C0] [] __sys_setsockopt+0x13e/0x1e4 [ 2439.683811][ C0] [] __riscv_sys_setsockopt+0xa6/0x114 [ 2439.684725][ C0] [] syscall_handler+0x92/0x114 [ 2439.685632][ C0] [] do_trap_ecall_u+0x3d2/0x58c [ 2439.686996][ C0] [] handle_exception+0x15e/0x16a [ 2439.688763][ C0] SMP: stopping secondary CPUs