last executing test programs: 1m1.618589315s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 51.222513003s ago: executing program 0 (id=1): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') pread64(r0, &(0x7f0000002b40)=""/244, 0xf4, 0x4eb) 46.249197777s ago: executing program 1 (id=3): r0 = syz_io_uring_setup(0x7131, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) 36.552795748s ago: executing program 1 (id=4): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x268, 0x198, 0xfeffffff, 0x0, 0x198, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast1, @gre_key=0x20dd, @gre_key=0x2}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 35.242092104s ago: executing program 0 (id=5): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400"], 0x0) dup(0xffffffffffffffff) 32.716995898s ago: executing program 1 (id=6): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x1) sendto$inet(r1, &(0x7f0000000080)="ab", 0x1, 0x8855, 0x0, 0x0) 23.040751409s ago: executing program 1 (id=7): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) 18.789723206s ago: executing program 1 (id=8): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0xb0}, [@ldst={0x5, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, 0x0) 14.319032447s ago: executing program 0 (id=9): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x276) 0s ago: executing program 0 (id=10): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f23, 0x5, 0x2, 0x4000401, 0x1, 0x0, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x8, 0x10001, 0x1, 0x9, 0xe1cb, 0x6, 0x401, 0x3, 0x395, 0x80000089, 0x3, 0x32, 0xfffffff5, 0xffffeadb, 0x7, 0x3c, 0x8, 0x3, 0x8000000, 0x2ec0]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:55331' (ED25519) to the list of known hosts. syzkaller login: [ 616.690146][ T3192] cgroup: Unknown subsys name 'net' [ 617.800461][ T3192] cgroup: Unknown subsys name 'cpuset' [ 618.026258][ T3192] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 699.825172][ T3192] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 850.925375][ T3204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.393368][ T3204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.502011][ T3207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.192670][ T3207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.582930][ T3207] hsr_slave_0: entered promiscuous mode [ 869.638631][ T3207] hsr_slave_1: entered promiscuous mode [ 870.904477][ T3204] hsr_slave_0: entered promiscuous mode [ 870.974263][ T3204] hsr_slave_1: entered promiscuous mode [ 871.008632][ T3204] debugfs: 'hsr0' already exists in 'hsr' [ 871.012049][ T3204] Cannot create hsr debugfs directory [ 884.649452][ T3207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 884.972622][ T3207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 885.473529][ T3207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 886.125301][ T3207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 888.891769][ T3204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 889.136197][ T3204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 889.950754][ T3204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 890.422382][ T3204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 910.853300][ T3207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.979421][ T3204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.362798][ T3207] veth0_vlan: entered promiscuous mode [ 995.273687][ T3207] veth1_vlan: entered promiscuous mode [ 997.673233][ T3207] veth0_macvtap: entered promiscuous mode [ 997.939678][ T3207] veth1_macvtap: entered promiscuous mode [ 1002.210154][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.284850][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.325428][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.359323][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.826477][ T3204] veth0_vlan: entered promiscuous mode [ 1006.692894][ T3204] veth1_vlan: entered promiscuous mode [ 1008.814745][ T3207] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1009.530962][ T3204] veth0_macvtap: entered promiscuous mode [ 1010.475093][ T3204] veth1_macvtap: entered promiscuous mode [ 1013.935881][ T3209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.944173][ T3209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.946098][ T3209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.996124][ T3209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.810423][ T3822] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1039.424643][ T3822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.722577][ T3822] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1039.725188][ T3822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.731634][ T3822] usb 1-1: Product: syz [ 1039.733648][ T3822] usb 1-1: Manufacturer: syz [ 1039.735306][ T3822] usb 1-1: SerialNumber: syz [ 1040.075679][ T3822] usb 1-1: config 0 descriptor?? [ 1041.754510][ T3822] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1043.813453][ T3822] usb 1-1: USB disconnect, device number 2 [ 1078.478513][ C1] ------------[ cut here ]------------ [ 1078.479163][ C1] WARNING: [irq_settings_is_per_cpu_devid(desc)] kernel/irq/manage.c:2125 at request_threaded_irq+0x320/0x38c, CPU#1: syz.0.10/3870 [ 1078.482074][ C1] Modules linked in: [ 1078.483540][ C1] CPU: 1 UID: 0 PID: 3870 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT [ 1078.484533][ C1] Hardware name: riscv-virtio,qemu (DT) [ 1078.485254][ C1] epc : request_threaded_irq+0x320/0x38c [ 1078.485987][ C1] ra : request_threaded_irq+0x320/0x38c [ 1078.486639][ C1] epc : ffffffff8032d750 ra : ffffffff8032d750 sp : ffff8f800ac67810 [ 1078.487075][ C1] gp : ffffffff89f9df20 tp : ffffaf801c74cf80 t0 : ffffffff86391c0a [ 1078.487537][ C1] t1 : ffffffff9136c6e0 t2 : ffffffff8016a132 s0 : ffff8f800ac67870 [ 1078.487955][ C1] s1 : 0000000000000000 a0 : 0000000000000005 a1 : 0000000000000000 [ 1078.488337][ C1] a2 : 0000000000080000 a3 : ffffffff8032d750 a4 : ffff8f8004d6e1e8 [ 1078.488756][ C1] a5 : 00000000002041e8 a6 : 0000000000000003 a7 : ffffffff86660460 [ 1078.489221][ C1] s2 : 0000000000200000 s3 : ffffaf8011e8d000 s4 : 0000000000000005 [ 1078.489630][ C1] s5 : ffffffff84b56ef4 s6 : ffffaf801cd37000 s7 : 0000000000000000 [ 1078.490031][ C1] s8 : ffffffff87597e60 s9 : 0000000000020000 s10: ffffaf801cd37000 [ 1078.490444][ C1] s11: 0000000000000001 t3 : 0000000000000001 t4 : 0000000000001fff [ 1078.490814][ C1] t5 : 00000000000000c8 t6 : 0000000000000002 ssp : 0000000000000000 [ 1078.491201][ C1] status: 0000000200000120 badaddr: ffffffff8032d750 cause: 0000000000000003 [ 1078.491799][ C1] [] request_threaded_irq+0x320/0x38c [ 1078.492605][ C1] [] parport_attach+0x780/0xb14 [ 1078.493379][ C1] [] comedi_device_attach+0x350/0x7ec [ 1078.494018][ C1] [] do_devconfig_ioctl+0x1a2/0x654 [ 1078.494579][ C1] [] comedi_unlocked_ioctl+0x338/0x2c10 [ 1078.495207][ C1] [] __riscv_sys_ioctl+0x17c/0x1e4 [ 1078.495935][ C1] [] syscall_handler+0x92/0x114 [ 1078.496652][ C1] [] do_trap_ecall_u+0x3d2/0x58c [ 1078.497516][ C1] [] handle_exception+0x15e/0x16a [ 1078.499573][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1078.500470][ C1] CPU: 1 UID: 0 PID: 3870 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT [ 1078.501101][ C1] Hardware name: riscv-virtio,qemu (DT) [ 1078.501376][ C1] Call Trace: [ 1078.501606][ C1] [] dump_backtrace+0x2e/0x3c [ 1078.502316][ C1] [] show_stack+0x30/0x3c [ 1078.502863][ C1] [] dump_stack_lvl+0x114/0x1ac [ 1078.503672][ C1] [] dump_stack+0x1c/0x28 [ 1078.504422][ C1] [] vpanic+0x274/0x684 [ 1078.505036][ C1] [] panic+0xa0/0xa4 [ 1078.505606][ C1] [] check_panic_on_warn+0xc0/0xe4 [ 1078.506170][ C1] [] __warn+0x284/0x498 [ 1078.506743][ C1] [] __report_bug+0x1d4/0x2ac [ 1078.507406][ C1] [] report_bug+0xd8/0x28c [ 1078.508034][ C1] [] handle_break+0x13a/0x30c [ 1078.508716][ C1] [] do_trap_break+0x188/0x358 [ 1078.509534][ C1] [] handle_exception+0x15e/0x16a [ 1078.510303][ C1] [] request_threaded_irq+0x320/0x38c [ 1078.510865][ C1] [] parport_attach+0x780/0xb14 [ 1078.511581][ C1] [] comedi_device_attach+0x350/0x7ec [ 1078.512208][ C1] [] do_devconfig_ioctl+0x1a2/0x654 [ 1078.512749][ C1] [] comedi_unlocked_ioctl+0x338/0x2c10 [ 1078.513398][ C1] [] __riscv_sys_ioctl+0x17c/0x1e4 [ 1078.514084][ C1] [] syscall_handler+0x92/0x114 [ 1078.514794][ C1] [] do_trap_ecall_u+0x3d2/0x58c [ 1078.515624][ C1] [] handle_exception+0x15e/0x16a [ 1078.517004][ C1] SMP: stopping secondary CPUs