last executing test programs: 30.94992975s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 28.062210317s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x7d80dd10, 0x6, 0x78, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r2, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1}, 0x4) 9.187021792s ago: executing program 0 (id=3): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r2, 0x0, r1}) 6.330236317s ago: executing program 1 (id=4): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20840}, 0x200488c4) 3.495292171s ago: executing program 0 (id=5): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100b, 0x8000000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x50, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=6): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'comedi_parport\x00', [0x8001, 0x6, 0x1, 0x4, 0x7, 0xcc7, 0x8, 0x4000000, 0x1, 0x7fff, 0x60, 0x1, 0x7, 0x40000002, 0x6, 0x9, 0x1, 0x9, 0x3, 0x40080003, 0x40089, 0x109, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x40000006, 0x9, 0x10000, 0xfffffff5]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:63536' (ED25519) to the list of known hosts. syzkaller login: [ 604.136993][ T3187] cgroup: Unknown subsys name 'net' [ 604.722777][ T3187] cgroup: Unknown subsys name 'cpuset' [ 604.892928][ T3187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 688.483497][ T3187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 833.422232][ T3198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.722023][ T3198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.023472][ T3199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.210315][ T3199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.213362][ T3198] hsr_slave_0: entered promiscuous mode [ 848.292527][ T3198] hsr_slave_1: entered promiscuous mode [ 851.785904][ T3199] hsr_slave_0: entered promiscuous mode [ 851.832172][ T3199] hsr_slave_1: entered promiscuous mode [ 851.871676][ T3199] debugfs: 'hsr0' already exists in 'hsr' [ 851.876602][ T3199] Cannot create hsr debugfs directory [ 863.163825][ T3198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 863.513917][ T3198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 863.757979][ T3198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 863.915829][ T3198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 867.828179][ T3199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 868.197295][ T3199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 868.832348][ T3199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 869.156842][ T3199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 883.658129][ T3198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.670082][ T3199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.629890][ T3198] veth0_vlan: entered promiscuous mode [ 966.075680][ T3198] veth1_vlan: entered promiscuous mode [ 968.899699][ T3198] veth0_macvtap: entered promiscuous mode [ 969.634165][ T3199] veth0_vlan: entered promiscuous mode [ 969.750324][ T3198] veth1_macvtap: entered promiscuous mode [ 970.987942][ T3199] veth1_vlan: entered promiscuous mode [ 974.088629][ T3602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.149108][ T3602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.261378][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.267142][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.902887][ T3199] veth0_macvtap: entered promiscuous mode [ 976.933885][ T3199] veth1_macvtap: entered promiscuous mode [ 980.237594][ T155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.286032][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.287871][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.289433][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.007328][ T3198] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 997.698619][ T3815] syzkaller0: entered promiscuous mode [ 997.709801][ T3815] syzkaller0: entered allmulticast mode [ 1001.883067][ T3819] syzkaller0: entered promiscuous mode [ 1001.899049][ T3819] syzkaller0: entered allmulticast mode [ 1018.033688][ C1] ------------[ cut here ]------------ [ 1018.034388][ C1] WARNING: [irq_settings_is_per_cpu_devid(desc)] kernel/irq/manage.c:2150 at request_threaded_irq+0x320/0x38c, CPU#1: syz.1.6/3835 [ 1018.037432][ C1] Modules linked in: [ 1018.038766][ C1] CPU: 1 UID: 0 PID: 3835 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT [ 1018.039783][ C1] Hardware name: riscv-virtio,qemu (DT) [ 1018.040442][ C1] epc : request_threaded_irq+0x320/0x38c [ 1018.041238][ C1] ra : request_threaded_irq+0x320/0x38c [ 1018.041857][ C1] epc : ffffffff8033dfb0 ra : ffffffff8033dfb0 sp : ffff8f800a3177c0 [ 1018.042264][ C1] gp : ffffffff8a22a0c0 tp : ffffaf801cbf8000 t0 : ffffffff8642fdbe [ 1018.042664][ C1] t1 : ffffffff91601820 t2 : ffffffff80170222 s0 : ffff8f800a317820 [ 1018.043039][ C1] s1 : 0000000000000000 a0 : 0000000000000005 a1 : 0000000000000000 [ 1018.043382][ C1] a2 : 0000000000080000 a3 : ffffffff8033dfb0 a4 : ffff8f800465ba30 [ 1018.043801][ C1] a5 : 0000000000012a30 a6 : 0000000000000003 a7 : ffffffff86864460 [ 1018.044174][ C1] s2 : 0000000000200000 s3 : ffffaf8011d18000 s4 : 0000000000000006 [ 1018.044603][ C1] s5 : ffffffff84bcbc14 s6 : ffffaf801d1a3800 s7 : 0000000000000000 [ 1018.045017][ C1] s8 : ffffffff877b5b00 s9 : 0000000000020000 s10: ffffaf801d1a3800 [ 1018.045442][ C1] s11: 0000000000000001 t3 : 0000000000000001 t4 : 0000000000001fff [ 1018.045790][ C1] t5 : 00000000000000c8 t6 : 0000000000000002 ssp : 0000000000000000 [ 1018.046140][ C1] status: 0000000200000120 badaddr: ffffffff8033dfb0 cause: 0000000000000003 [ 1018.046692][ C1] [] request_threaded_irq+0x320/0x38c [ 1018.047591][ C1] [] parport_attach+0x780/0xb14 [ 1018.048367][ C1] [] comedi_device_attach+0x350/0x7ec [ 1018.049073][ C1] [] do_devconfig_ioctl+0x1a2/0x654 [ 1018.049684][ C1] [] comedi_unlocked_ioctl+0x750/0x30e0 [ 1018.050316][ C1] [] __riscv_sys_ioctl+0x17c/0x1e4 [ 1018.050853][ C1] [] syscall_handler+0x92/0x114 [ 1018.051470][ C1] [] do_trap_ecall_u+0x402/0x680 [ 1018.052068][ C1] [] handle_exception+0x15e/0x16a [ 1018.054027][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1018.055034][ C1] CPU: 1 UID: 0 PID: 3835 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT [ 1018.055606][ C1] Hardware name: riscv-virtio,qemu (DT) [ 1018.055874][ C1] Call Trace: [ 1018.056100][ C1] [] dump_backtrace+0x2e/0x3c [ 1018.056834][ C1] [] show_stack+0x30/0x3c [ 1018.057396][ C1] [] dump_stack_lvl+0x114/0x1ac [ 1018.058175][ C1] [] dump_stack+0x1c/0x28 [ 1018.058914][ C1] [] vpanic+0x334/0x760 [ 1018.059448][ C1] [] trace_suspend_resume+0x0/0x420 [ 1018.060044][ C1] [] check_panic_on_warn+0xc0/0xe4 [ 1018.060635][ C1] [] __warn+0x216/0x654 [ 1018.061178][ C1] [] __report_bug+0x1d4/0x2ac [ 1018.061906][ C1] [] report_bug+0xd8/0x28c [ 1018.062613][ C1] [] handle_break+0x13a/0x30c [ 1018.063261][ C1] [] do_trap_break+0x188/0x358 [ 1018.063866][ C1] [] handle_exception+0x15e/0x16a [ 1018.064458][ C1] [] request_threaded_irq+0x320/0x38c [ 1018.065105][ C1] [] parport_attach+0x780/0xb14 [ 1018.065880][ C1] [] comedi_device_attach+0x350/0x7ec [ 1018.066568][ C1] [] do_devconfig_ioctl+0x1a2/0x654 [ 1018.067142][ C1] [] comedi_unlocked_ioctl+0x750/0x30e0 [ 1018.067781][ C1] [] __riscv_sys_ioctl+0x17c/0x1e4 [ 1018.068304][ C1] [] syscall_handler+0x92/0x114 [ 1018.068948][ C1] [] do_trap_ecall_u+0x402/0x680 [ 1018.069588][ C1] [] handle_exception+0x15e/0x16a [ 1018.070748][ C1] SMP: stopping secondary CPUs