last executing test programs: 1m7.593643964s ago: executing program 0 (id=137): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7c, 0x6, 0x31, 0x20, 0x77d, 0x410, 0x3afa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x5a, 0x0, 0x1, 0x84, 0xda, 0x28, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m4.769231861s ago: executing program 1 (id=138): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) 56.601426129s ago: executing program 1 (id=139): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x6}, 0x1c) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)="1d828678bf334507752e4a463eaaa4e072db88b7dd83384ff076822b4ec3af9867f55719fddb21bd", 0x28}], 0x1}}], 0x1, 0x0) 42.029714429s ago: executing program 0 (id=140): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40.341971661s ago: executing program 1 (id=141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac00142c00fe8000000000520000000000000000bbfe80", @ANYRES64=r0], 0x0) 29.234571833s ago: executing program 1 (id=142): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 29.025321357s ago: executing program 0 (id=143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001280), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001340)={0x24, r1, 0x41b, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4004) 22.335217528s ago: executing program 0 (id=144): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406441, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff16, 0x0}) 13.559452936s ago: executing program 1 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14}}, 0x88}}, 0x0) 9.381969061s ago: executing program 0 (id=146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1c, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4.389141731s ago: executing program 1 (id=147): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffff0, @private2, 0x3}, 0x1c) 0s ago: executing program 0 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x184, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x138, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0xfffffffffffffc8b, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0xfc8b, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:25655' (ED25519) to the list of known hosts. syzkaller login: [ 592.849006][ T3192] cgroup: Unknown subsys name 'net' [ 593.997982][ T3192] cgroup: Unknown subsys name 'cpuset' [ 594.221466][ T3192] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 679.174795][ T3192] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 848.531092][ T3204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.719820][ T3204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.808288][ T3205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.042348][ T3205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.041531][ T3204] hsr_slave_0: entered promiscuous mode [ 869.109306][ T3204] hsr_slave_1: entered promiscuous mode [ 875.430876][ T3205] hsr_slave_0: entered promiscuous mode [ 875.470599][ T3205] hsr_slave_1: entered promiscuous mode [ 875.501516][ T3205] debugfs: 'hsr0' already exists in 'hsr' [ 875.517470][ T3205] Cannot create hsr debugfs directory [ 884.852701][ T3204] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 885.072213][ T3204] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 885.484069][ T3204] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 885.792325][ T3204] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 890.078965][ T3205] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 890.325068][ T3205] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 890.610832][ T3205] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 890.810943][ T3205] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 907.071710][ T3204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.561191][ T3205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.133779][ T3204] veth0_vlan: entered promiscuous mode [ 987.085409][ T3204] veth1_vlan: entered promiscuous mode [ 989.433760][ T3204] veth0_macvtap: entered promiscuous mode [ 989.635373][ T3204] veth1_macvtap: entered promiscuous mode [ 993.259515][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.455060][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.462711][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.147855][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.045376][ T3205] veth0_vlan: entered promiscuous mode [ 998.988437][ T3205] veth1_vlan: entered promiscuous mode [ 1002.292803][ T3204] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1003.035329][ T3205] veth0_macvtap: entered promiscuous mode [ 1003.574509][ T3205] veth1_macvtap: entered promiscuous mode [ 1006.793503][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.817834][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.819867][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.821747][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.249837][ T3822] process 'syz.1.2' launched './file2' with NULL argv: empty string added [ 1024.330563][ T3825] mmap: syz.0.1 (3825) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1027.980164][ T3827] netlink: 'syz.1.3': attribute type 1 has an invalid length. [ 1027.982523][ T3827] nbd: error processing sock list [ 1031.901083][ T3830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'. [ 1067.673711][ T3855] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1154.823949][ T3902] binder: 3901:3902 ioctl c00c620f 200000000980 returned -22 [ 1223.733231][ T3937] binder: 3936:3937 ioctl 400c620e 2000000001c0 returned -22 [ 1241.822427][ T3943] Zero length message leads to an empty skb [ 1293.112899][ T3966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.61'. [ 1545.111496][ T4093] netlink: 277 bytes leftover after parsing attributes in process `syz.0.117'. [ 1565.249199][ T3851] Process accounting resumed [ 1627.319308][ T4136] syz.0.135 uses obsolete (PF_INET,SOCK_PACKET) [ 1637.363098][ T3880] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1638.420317][ T3880] usb 1-1: config 0 has an invalid interface number: 90 but max is 0 [ 1638.438938][ T3880] usb 1-1: config 0 has no interface number 0 [ 1638.441990][ T3880] usb 1-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 1640.750740][ T3880] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 1640.753310][ T3880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.758262][ T3880] usb 1-1: Product: syz [ 1640.760024][ T3880] usb 1-1: Manufacturer: syz [ 1640.761678][ T3880] usb 1-1: SerialNumber: syz [ 1641.254884][ T3880] usb 1-1: config 0 descriptor?? [ 1641.466794][ T4140] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1644.735426][ T3880] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1645.584141][ T3880] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.90/input/input0 [ 1655.622307][ C1] powermate: config urb returned -71 [ 1655.630385][ C1] powermate: config urb returned -71 [ 1655.634089][ C1] powermate: config urb returned -71 [ 1657.147627][ C1] powermate 1-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 1657.158557][ T4106] usb 1-1: USB disconnect, device number 2 [ 1662.878393][ T4165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.140'. [ 2503.151113][ T33] INFO: task kworker/u8:3:3301 blocked for more than 435 seconds. [ 2503.154508][ T33] Tainted: G L syzkaller #0 [ 2510.341427][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2510.344147][ T33] task:kworker/u8:3 state:D stack:0 pid:3301 tgid:3301 ppid:2 task_flags:0x4208060 flags:0x00000000 [ 2514.841568][ T33] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 2519.277997][ T33] Call Trace: [ 2519.280852][ T33] [] __schedule+0xf10/0x4098 [ 2519.284364][ T33] [] schedule+0xb4/0x334 [ 2524.658469][ T33] [] schedule_preempt_disabled+0x16/0x28 [ 2524.661222][ T33] [] rwsem_down_write_slowpath+0x4b4/0xe20 [ 2524.663483][ T33] [] down_write+0x172/0x190 [ 2529.591973][ T33] [] wg_noise_handshake_create_initiation+0xee/0x5e4