6 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000400)={0x38, r1, 0x13, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 13:35:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x14}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2521.544151][T31071] total_active_file 0 [ 2521.564261][T31071] total_unevictable 0 [ 2521.572881][T31071] anon_cost 0 [ 2521.579684][T31071] file_cost 0 [ 2521.587896][T31071] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31071,uid=0 [ 2521.615318][T31071] Memory cgroup out of memory: Killed process 31071 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:35:56 executing program 0: openat$nci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)) pipe2(&(0x7f00000002c0), 0x0) 13:35:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800]}]}]}}]}, 0x478}}, 0x0) 13:35:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000900}}]}]}}]}, 0x74}}, 0x0) 13:35:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x15}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:35:56 executing program 0: io_setup(0x6, &(0x7f0000000000)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)={0x0, 0x3938700}) 13:35:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000a00}}]}]}}]}, 0x74}}, 0x0) [ 2521.879606][ T5117] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2521.915779][ T5117] CPU: 1 PID: 5117 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2521.924104][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2521.934179][ T5117] Call Trace: [ 2521.937473][ T5117] [ 2521.940417][ T5117] dump_stack_lvl+0x1e7/0x2e0 [ 2521.945168][ T5117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2521.950414][ T5117] ? __pfx__printk+0x10/0x10 [ 2521.952491][T28640] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2521.955012][ T5117] ? ___ratelimit+0x4c4/0x670 [ 2521.967332][ T5117] ? __pfx____ratelimit+0x10/0x10 [ 2521.972396][ T5117] dump_header+0xda/0x6a0 [ 2521.976760][ T5117] oom_kill_process+0x3a7/0x930 [ 2521.981643][ T5117] out_of_memory+0xf67/0x1320 [ 2521.986361][ T5117] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2521.992028][ T5117] ? __pfx___mutex_lock+0x10/0x10 [ 2521.997095][ T5117] ? __pfx_out_of_memory+0x10/0x10 [ 2522.002255][ T5117] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2522.007837][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2522.012907][ T5117] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2522.019016][ T5117] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2522.024274][ T5117] ? mem_cgroup_iter+0x3e9/0x560 [ 2522.029250][ T5117] try_charge_memcg+0xda2/0x18a0 [ 2522.034219][ T5117] ? mark_lock+0x9a/0x350 [ 2522.038605][ T5117] ? __pfx_try_charge_memcg+0x10/0x10 [ 2522.044055][ T5117] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2522.050331][ T5117] charge_memcg+0xa2/0x160 [ 2522.054785][ T5117] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2522.060877][ T5117] __read_swap_cache_async+0x480/0x8b0 [ 2522.066367][ T5117] ? mark_lock+0x9a/0x350 [ 2522.070726][ T5117] ? __pfx___read_swap_cache_async+0x10/0x10 13:35:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000b00}}]}]}}]}, 0x74}}, 0x0) [ 2522.076763][ T5117] swap_cluster_readahead+0x67c/0x810 [ 2522.082185][ T5117] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2522.088129][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2522.093204][ T5117] ? xas_descend+0x37e/0x470 [ 2522.097844][ T5117] swapin_readahead+0x1ea/0x1070 [ 2522.101652][T28640] usb 4-1: too many configurations: 182, using maximum allowed: 8 [ 2522.102802][ T5117] ? filemap_get_entry+0x127/0x4e0 [ 2522.115757][ T5117] ? __pfx_swapin_readahead+0x10/0x10 [ 2522.121172][ T5117] ? __filemap_get_folio+0x935/0xbc0 [ 2522.126488][ T5117] ? swap_cache_get_folio+0x9f/0x570 [ 2522.131816][ T5117] do_swap_page+0x791/0x3f40 [ 2522.136446][ T5117] ? rcu_is_watching+0x15/0xb0 [ 2522.141278][ T5117] ? do_swap_page+0x154/0x3f40 [ 2522.146078][ T5117] ? __pfx_do_swap_page+0x10/0x10 [ 2522.151133][ T5117] ? pte_offset_map_nolock+0x137/0x1f0 [ 2522.156663][ T5117] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2522.162509][ T5117] ? __pfx_validate_chain+0x10/0x10 [ 2522.167749][ T5117] __handle_mm_fault+0x15e8/0x72d0 [ 2522.172940][ T5117] ? __pfx___handle_mm_fault+0x10/0x10 [ 2522.178459][ T5117] ? mt_find+0x226/0x850 [ 2522.182767][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2522.187863][ T5117] ? mt_find+0x62d/0x850 [ 2522.192161][ T5117] ? mt_find+0x226/0x850 [ 2522.196484][ T5117] ? find_vma+0x142/0x1c0 [ 2522.200846][ T5117] ? __pfx_find_vma+0x10/0x10 [ 2522.205567][ T5117] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2522.211595][ T5117] handle_mm_fault+0x3c1/0x8a0 [ 2522.216410][ T5117] exc_page_fault+0x2ad/0x870 [ 2522.221127][ T5117] asm_exc_page_fault+0x26/0x30 [ 2522.221653][T28640] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2522.225984][ T5117] RIP: 0010:__get_user_8+0x11/0x20 [ 2522.226013][ T5117] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2522.237601][T28640] usb 4-1: can't read configurations, error -22 [ 2522.239029][ T5117] RSP: 0018:ffffc9000429fd98 EFLAGS: 00050202 [ 2522.239079][ T5117] RAX: 000055555742ada8 RBX: ffff88801a32b2f8 RCX: ffffc9000429fc03 [ 2522.278950][ T5117] RDX: 0000000000000000 RSI: ffffffff8baac7a0 RDI: ffffffff8bfe6ca0 [ 2522.286931][ T5117] RBP: ffffc9000429fec8 R08: ffffffff8f856cef R09: 1ffffffff1f0ad9d [ 2522.294941][ T5117] R10: dffffc0000000000 R11: fffffbfff1f0ad9e R12: ffffc9000429fda0 [ 2522.302936][ T5117] R13: ffffc9000429ffd8 R14: dffffc0000000000 R15: ffff88801a329dc0 [ 2522.310936][ T5117] __rseq_handle_notify_resume+0x158/0x1490 [ 2522.316846][ T5117] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2522.323202][ T5117] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2522.328951][ T5117] syscall_exit_to_user_mode+0x113/0x360 [ 2522.334588][ T5117] do_syscall_64+0x108/0x240 [ 2522.339189][ T5117] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2522.345122][ T5117] RIP: 0033:0x7fdd6aca91b5 [ 2522.349558][ T5117] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2522.369164][ T5117] RSP: 002b:00007fdd6aecfcf0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2522.377621][ T5117] RAX: 0000000000000000 RBX: 00000000000053a3 RCX: 00007fdd6aca91b5 [ 2522.385595][ T5117] RDX: 00007fdd6aecfd30 RSI: 0000000000000000 RDI: 0000000000000000 [ 2522.393582][ T5117] RBP: 00007fdd6aecfdbc R08: 0000000000000000 R09: 00007fff7fbc30b0 [ 2522.401594][ T5117] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2522.409577][ T5117] R13: 0000000000267a6b R14: 0000000000267a6b R15: 0000000000000000 [ 2522.412853][T28640] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2522.417572][ T5117] [ 2522.444669][ T5117] memory: usage 307200kB, limit 307200kB, failcnt 27822 [ 2522.454294][ T5117] memory+swap: usage 307768kB, limit 9007199254740988kB, failcnt 0 [ 2522.464544][ T5117] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2522.480409][ T5117] Memory cgroup stats for /syz4: [ 2522.480508][ T5117] cache 0 [ 2522.489653][ T5117] rss 12288 [ 2522.494577][ T5117] rss_huge 0 [ 2522.497809][ T5117] shmem 0 [ 2522.500765][ T5117] mapped_file 0 [ 2522.504632][ T5117] dirty 0 [ 2522.507596][ T5117] writeback 0 [ 2522.510903][ T5117] workingset_refault_anon 11754 [ 2522.516160][ T5117] workingset_refault_file 0 [ 2522.520675][ T5117] swap 569344 [ 2522.530669][ T5117] swapcached 0 [ 2522.534931][ T5117] pgpgin 381182 [ 2522.538392][ T5117] pgpgout 381179 [ 2522.542313][ T5117] pgfault 783236 [ 2522.545870][ T5117] pgmajfault 9951 [ 2522.549718][ T5117] inactive_anon 0 [ 2522.553757][ T5117] active_anon 12288 [ 2522.557582][ T5117] inactive_file 0 [ 2522.561447][ T5117] active_file 0 [ 2522.565175][ T5117] unevictable 0 [ 2522.568641][ T5117] hierarchical_memory_limit 314572800 [ 2522.574495][T28640] usb 4-1: too many configurations: 182, using maximum allowed: 8 [ 2522.581232][ T5117] hierarchical_memsw_limit 9223372036854771712 [ 2522.588522][ T5117] total_cache 0 [ 2522.593125][ T5117] total_rss 12288 [ 2522.596810][ T5117] total_rss_huge 0 [ 2522.600524][ T5117] total_shmem 0 [ 2522.604608][ T5117] total_mapped_file 0 [ 2522.608595][ T5117] total_dirty 0 [ 2522.612272][ T5117] total_writeback 0 [ 2522.616108][ T5117] total_workingset_refault_anon 11754 [ 2522.622067][ T5117] total_workingset_refault_file 0 [ 2522.627246][ T5117] total_swap 569344 [ 2522.631046][ T5117] total_swapcached 0 [ 2522.636151][ T5117] total_pgpgin 381182 [ 2522.640149][ T5117] total_pgpgout 381179 [ 2522.644785][ T5117] total_pgfault 783236 [ 2522.648854][ T5117] total_pgmajfault 9951 [ 2522.653162][ T5117] total_inactive_anon 0 [ 2522.657613][ T5117] total_active_anon 12288 [ 2522.662587][ T5117] total_inactive_file 0 [ 2522.667020][ T5117] total_active_file 0 [ 2522.671047][ T5117] total_unevictable 0 [ 2522.675142][ T5117] anon_cost 0 [ 2522.678687][ T5117] file_cost 0 13:35:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000c00}}]}]}}]}, 0x74}}, 0x0) 13:35:57 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0xffffffe7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xb6, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) syz_usb_connect_ath9k(0x3, 0xffffffe7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xb6, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) (async) 13:35:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x18}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:35:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) io_setup(0x5751, &(0x7f00000004c0)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000000)="6ef632c0735436258d1b068d241d066e5e16870fddeaaf87", 0x18}]) [ 2522.682419][ T5117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31102,uid=0 [ 2522.698177][ T5117] Memory cgroup out of memory: Killed process 31102 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2522.715942][T28640] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2522.724282][T28640] usb 4-1: can't read configurations, error -22 [ 2522.731621][T28640] usb usb4-port1: unable to enumerate USB device 13:35:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}]}]}}]}, 0x478}}, 0x0) 13:35:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x38}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:35:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000d00}}]}]}}]}, 0x74}}, 0x0) 13:35:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x3, 0x4}]}]}}, &(0x7f00000004c0)=""/197, 0x32, 0xc5, 0x1}, 0x20) [ 2522.990631][T31130] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2523.011043][T31130] CPU: 0 PID: 31130 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2523.019431][T31130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2523.029518][T31130] Call Trace: [ 2523.032848][T31130] [ 2523.035804][T31130] dump_stack_lvl+0x1e7/0x2e0 13:35:57 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 13:35:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x48}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2523.040531][T31130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2523.045778][T31130] ? __pfx__printk+0x10/0x10 [ 2523.050422][T31130] ? ___ratelimit+0x4c4/0x670 [ 2523.055142][T31130] ? __pfx____ratelimit+0x10/0x10 [ 2523.060212][T31130] dump_header+0xda/0x6a0 [ 2523.064588][T31130] oom_kill_process+0x3a7/0x930 [ 2523.069478][T31130] out_of_memory+0xf67/0x1320 [ 2523.074199][T31130] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2523.079890][T31130] ? __pfx___mutex_lock+0x10/0x10 [ 2523.085039][T31130] ? __pfx_out_of_memory+0x10/0x10 [ 2523.090193][T31130] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2523.095767][T31130] ? __pfx_lock_release+0x10/0x10 [ 2523.100836][T31130] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2523.106933][T31130] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2523.112161][T31130] ? mem_cgroup_iter+0x3e9/0x560 [ 2523.117139][T31130] try_charge_memcg+0xda2/0x18a0 [ 2523.122126][T31130] ? __pfx_try_charge_memcg+0x10/0x10 [ 2523.127528][T31130] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2523.133292][T31130] ? __pfx_lock_release+0x10/0x10 13:35:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4c}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2523.138413][T31130] ? memcg_account_kmem+0x1e7/0x210 [ 2523.143654][T31130] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2523.149496][T31130] __memcg_kmem_charge_page+0xe1/0x250 [ 2523.154997][T31130] memcg_charge_kernel_stack+0x3f8/0x550 [ 2523.160658][T31130] dup_task_struct+0x15d/0x7d0 [ 2523.165453][T31130] copy_process+0x5d5/0x3fc0 [ 2523.170084][T31130] ? __might_fault+0xa9/0x120 [ 2523.174794][T31130] ? __pfx_lock_release+0x10/0x10 [ 2523.179948][T31130] ? __pfx_copy_process+0x10/0x10 [ 2523.185042][T31130] ? __might_fault+0xc5/0x120 [ 2523.189757][T31130] ? __asan_memset+0x23/0x50 [ 2523.194388][T31130] kernel_clone+0x21d/0x8d0 [ 2523.198932][T31130] ? __pfx_kernel_clone+0x10/0x10 [ 2523.204039][T31130] __se_sys_clone3+0x2cb/0x350 [ 2523.208840][T31130] ? __might_fault+0xa9/0x120 [ 2523.213562][T31130] ? __pfx___se_sys_clone3+0x10/0x10 [ 2523.218934][T31130] ? do_syscall_64+0x108/0x240 [ 2523.223738][T31130] ? do_syscall_64+0xb4/0x240 [ 2523.228440][T31130] do_syscall_64+0xf9/0x240 [ 2523.232966][T31130] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2523.238892][T31130] RIP: 0033:0x7fdd6aca9b99 [ 2523.243329][T31130] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2523.262950][T31130] RSP: 002b:00007fdd6aecf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2523.271379][T31130] RAX: ffffffffffffffda RBX: 00007fdd6ac52270 RCX: 00007fdd6aca9b99 [ 2523.279387][T31130] RDX: 00007fdd6ac52270 RSI: 0000000000000058 RDI: 00007fdd6aecf960 13:35:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000e00}}]}]}}]}, 0x74}}, 0x0) [ 2523.287382][T31130] RBP: 00007fdd6baae6c0 R08: 00007fdd6baae6c0 R09: 00007fdd6aecfa47 [ 2523.295380][T31130] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2523.303366][T31130] R13: 000000000000000b R14: 00007fdd6aecf960 R15: 00007fdd6aecfa48 [ 2523.311375][T31130] [ 2523.321336][T31130] memory: usage 307200kB, limit 307200kB, failcnt 28009 13:35:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x15}]}) 13:35:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x700, &(0x7f0000000040)=[{0x25}]}) [ 2523.344771][T31130] memory+swap: usage 307756kB, limit 9007199254740988kB, failcnt 0 [ 2523.379222][T31130] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 13:35:58 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$rtc(&(0x7f0000001cc0), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x2, &(0x7f0000000140)) 13:35:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x60}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:35:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x25}]}) [ 2523.463387][T31130] Memory cgroup stats for /syz4: [ 2523.463548][T31130] cache 0 [ 2523.494760][T31130] rss 32768 [ 2523.502260][T31130] rss_huge 0 [ 2523.505491][T31130] shmem 0 [ 2523.508447][T31130] mapped_file 0 [ 2523.521495][T31130] dirty 0 [ 2523.531607][T31130] writeback 0 [ 2523.534943][T31130] workingset_refault_anon 11797 [ 2523.539903][T31130] workingset_refault_file 0 [ 2523.551470][T28640] usb 4-1: new high-speed USB device number 74 using dummy_hcd 13:35:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5}]}) 13:35:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10001100}}]}]}}]}, 0x74}}, 0x0) [ 2523.572594][T31130] swap 536576 [ 2523.575912][T31130] swapcached 16384 [ 2523.579648][T31130] pgpgin 381262 [ 2523.601333][T31130] pgpgout 381254 [ 2523.604909][T31130] pgfault 783351 [ 2523.608459][T31130] pgmajfault 10002 13:35:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x5}]}]}}, &(0x7f00000004c0)=""/197, 0x32, 0xc5, 0x1}, 0x20) 13:35:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x68}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2523.640796][T31130] inactive_anon 16384 [ 2523.648910][T31130] active_anon 16384 [ 2523.658880][T31130] inactive_file 0 [ 2523.691255][T31130] active_file 0 [ 2523.694758][T31130] unevictable 0 [ 2523.712218][T31130] hierarchical_memory_limit 314572800 [ 2523.717631][T31130] hierarchical_memsw_limit 9223372036854771712 [ 2523.739269][T31130] total_cache 0 [ 2523.744504][T31130] total_rss 32768 [ 2523.748367][T31130] total_rss_huge 0 [ 2523.752454][T31130] total_shmem 0 [ 2523.756291][T31130] total_mapped_file 0 [ 2523.766318][T31130] total_dirty 0 [ 2523.773905][T31130] total_writeback 0 [ 2523.779133][T31130] total_workingset_refault_anon 11797 13:35:58 executing program 0: r0 = socket(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 13:35:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10001200}}]}]}}]}, 0x74}}, 0x0) 13:35:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6c}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2523.795421][T31130] total_workingset_refault_file 0 [ 2523.806335][T31130] total_swap 536576 [ 2523.831888][T28640] usb 4-1: too many configurations: 182, using maximum allowed: 8 [ 2523.843375][T31130] total_swapcached 16384 [ 2523.853448][T31130] total_pgpgin 381262 [ 2523.865512][T31130] total_pgpgout 381254 [ 2523.875350][T31130] total_pgfault 783351 [ 2523.887942][T31130] total_pgmajfault 10002 13:35:58 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001580)={'wg2\x00'}) [ 2523.892728][T31130] total_inactive_anon 16384 [ 2523.897612][T31130] total_active_anon 16384 [ 2523.902256][T31130] total_inactive_file 0 [ 2523.906506][T31130] total_active_file 0 [ 2523.910575][T31130] total_unevictable 0 [ 2523.915167][T31130] anon_cost 0 [ 2523.918555][T31130] file_cost 0 [ 2523.922201][T31130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31130,uid=0 13:35:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10001400}}]}]}}]}, 0x74}}, 0x0) [ 2523.951458][T28640] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2523.959461][T28640] usb 4-1: can't read configurations, error -22 [ 2523.973621][T31130] Memory cgroup out of memory: Killed process 31130 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:35:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000002cc0)=@base={0xf}, 0x48) 13:35:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}]}]}}]}, 0x478}}, 0x0) 13:35:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x74}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:35:59 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000001cc0), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x2, &(0x7f0000000140)) 13:35:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10001500}}]}]}}]}, 0x74}}, 0x0) [ 2524.161286][T28640] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2524.199639][ T5117] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2524.254311][ T5117] CPU: 0 PID: 5117 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2524.262623][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2524.272710][ T5117] Call Trace: [ 2524.276049][ T5117] [ 2524.279011][ T5117] dump_stack_lvl+0x1e7/0x2e0 [ 2524.283749][ T5117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2524.289001][ T5117] ? __pfx__printk+0x10/0x10 [ 2524.293639][ T5117] ? ___ratelimit+0x4c4/0x670 [ 2524.298362][ T5117] ? __pfx____ratelimit+0x10/0x10 [ 2524.303441][ T5117] dump_header+0xda/0x6a0 [ 2524.307825][ T5117] oom_kill_process+0x3a7/0x930 [ 2524.312725][ T5117] out_of_memory+0xf67/0x1320 [ 2524.317467][ T5117] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2524.323138][ T5117] ? __pfx___mutex_lock+0x10/0x10 [ 2524.328209][ T5117] ? __pfx_out_of_memory+0x10/0x10 [ 2524.333384][ T5117] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2524.338962][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2524.344030][ T5117] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 13:35:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10001800}}]}]}}]}, 0x74}}, 0x0) [ 2524.350208][ T5117] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2524.355423][ T5117] ? mem_cgroup_iter+0x3e9/0x560 [ 2524.360401][ T5117] try_charge_memcg+0xda2/0x18a0 [ 2524.365347][ T5117] ? mark_lock+0x9a/0x350 [ 2524.369729][ T5117] ? __pfx_try_charge_memcg+0x10/0x10 [ 2524.375166][ T5117] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2524.381355][ T5117] charge_memcg+0xa2/0x160 [ 2524.385810][ T5117] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2524.391922][ T5117] __read_swap_cache_async+0x480/0x8b0 [ 2524.397435][ T5117] ? mark_lock+0x9a/0x350 [ 2524.401770][ T5117] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2524.407766][ T5117] swap_cluster_readahead+0x67c/0x810 [ 2524.413179][ T5117] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2524.419105][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2524.424150][ T5117] ? xas_descend+0x37e/0x470 [ 2524.428784][ T5117] swapin_readahead+0x1ea/0x1070 [ 2524.433742][ T5117] ? filemap_get_entry+0x127/0x4e0 [ 2524.438894][ T5117] ? __pfx_swapin_readahead+0x10/0x10 [ 2524.444303][ T5117] ? __filemap_get_folio+0x935/0xbc0 [ 2524.449600][ T5117] ? swap_cache_get_folio+0x9f/0x570 [ 2524.454896][ T5117] do_swap_page+0x791/0x3f40 [ 2524.459520][ T5117] ? rcu_is_watching+0x15/0xb0 [ 2524.464339][ T5117] ? do_swap_page+0x154/0x3f40 [ 2524.469164][ T5117] ? __pfx_do_swap_page+0x10/0x10 [ 2524.474199][ T5117] ? pte_offset_map_nolock+0x137/0x1f0 [ 2524.479765][ T5117] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2524.485590][ T5117] __handle_mm_fault+0x15e8/0x72d0 [ 2524.490746][ T5117] ? reacquire_held_locks+0x3eb/0x690 [ 2524.496187][ T5117] ? __pfx___handle_mm_fault+0x10/0x10 13:35:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7a}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2524.501674][ T5117] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2524.507439][ T5117] ? mtree_range_walk+0x6fd/0x8e0 [ 2524.512504][ T5117] ? lock_vma_under_rcu+0x18a/0x730 [ 2524.517741][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2524.522808][ T5117] ? lock_vma_under_rcu+0x2f9/0x730 [ 2524.528076][ T5117] ? lock_vma_under_rcu+0x18a/0x730 [ 2524.533323][ T5117] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2524.538919][ T5117] handle_mm_fault+0x3c1/0x8a0 [ 2524.543739][ T5117] exc_page_fault+0x456/0x870 [ 2524.548462][ T5117] asm_exc_page_fault+0x26/0x30 [ 2524.553332][ T5117] RIP: 0033:0x7fdd6aca91b8 [ 2524.557755][ T5117] Code: 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 2524.577375][ T5117] RSP: 002b:00007fdd6aecfcf0 EFLAGS: 00010293 [ 2524.583468][ T5117] RAX: 0000000000000000 RBX: 00000000000053a7 RCX: 00007fdd6aca91b5 [ 2524.591447][ T5117] RDX: 00007fdd6aecfd30 RSI: 0000000000000000 RDI: 0000000000000000 [ 2524.599423][ T5117] RBP: 00007fdd6aecfdbc R08: 0000000000000000 R09: 00007fff7fbc30b0 [ 2524.607410][ T5117] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2524.615409][ T5117] R13: 00000000002683aa R14: 00000000002683aa R15: 0000000000000000 [ 2524.623430][ T5117] [ 2524.641589][ T5117] memory: usage 307200kB, limit 307200kB, failcnt 28156 [ 2524.659141][ T5117] memory+swap: usage 307792kB, limit 9007199254740988kB, failcnt 0 [ 2524.667245][ T5117] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2524.674826][ T5117] Memory cgroup stats for /syz4: [ 2524.674972][ T5117] cache 0 [ 2524.689733][ T5117] rss 28672 [ 2524.711418][ T5117] rss_huge 0 [ 2524.714904][ T5117] shmem 0 [ 2524.717858][ T5117] mapped_file 0 [ 2524.729610][ T5117] dirty 0 [ 2524.733672][ T5117] writeback 0 [ 2524.736989][ T5117] workingset_refault_anon 11828 [ 2524.743479][ T5117] workingset_refault_file 0 [ 2524.748017][ T5117] swap 577536 [ 2524.752279][ T5117] swapcached 16384 [ 2524.756035][ T5117] pgpgin 381319 [ 2524.759504][ T5117] pgpgout 381312 [ 2524.763751][ T5117] pgfault 783441 [ 2524.767335][ T5117] pgmajfault 10042 [ 2524.771044][ T5117] inactive_anon 0 [ 2524.775010][ T5117] active_anon 28672 [ 2524.778846][ T5117] inactive_file 0 [ 2524.782689][ T5117] active_file 0 [ 2524.786288][ T5117] unevictable 0 [ 2524.789797][ T5117] hierarchical_memory_limit 314572800 [ 2524.795643][ T5117] hierarchical_memsw_limit 9223372036854771712 [ 2524.802098][ T5117] total_cache 0 [ 2524.805684][ T5117] total_rss 28672 [ 2524.809368][ T5117] total_rss_huge 0 [ 2524.813443][ T5117] total_shmem 0 [ 2524.813507][T28640] usb 4-1: too many configurations: 182, using maximum allowed: 8 [ 2524.817532][ T5117] total_mapped_file 0 [ 2524.829677][ T5117] total_dirty 0 [ 2524.833408][ T5117] total_writeback 0 [ 2524.837223][ T5117] total_workingset_refault_anon 11828 [ 2524.843214][ T5117] total_workingset_refault_file 0 [ 2524.848262][ T5117] total_swap 577536 [ 2524.853795][ T5117] total_swapcached 16384 [ 2524.858125][ T5117] total_pgpgin 381319 [ 2524.862771][ T5117] total_pgpgout 381312 [ 2524.866860][ T5117] total_pgfault 783441 [ 2524.871014][ T5117] total_pgmajfault 10042 [ 2524.875361][ T5117] total_inactive_anon 0 [ 2524.879525][ T5117] total_active_anon 28672 [ 2524.884338][ T5117] total_inactive_file 0 [ 2524.888514][ T5117] total_active_file 0 [ 2524.892603][ T5117] total_unevictable 0 [ 2524.896605][ T5117] anon_cost 0 [ 2524.899896][ T5117] file_cost 0 [ 2524.903730][ T5117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31178,uid=0 [ 2524.919478][ T5117] Memory cgroup out of memory: Killed process 31178 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2524.951556][T28640] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2524.959517][T28640] usb 4-1: can't read configurations, error -22 [ 2524.971095][T28640] usb usb4-port1: attempt power cycle [ 2525.381489][T28640] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2525.511682][T28640] usb 4-1: too many configurations: 182, using maximum allowed: 8 [ 2525.636296][T28640] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2525.644574][T28640] usb 4-1: can't read configurations, error -22 13:36:00 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0xffffffe7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xb6, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) 13:36:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x64}]}) 13:36:00 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x156}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10001e02}}]}]}}]}, 0x74}}, 0x0) 13:36:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847]}]}]}}]}, 0x478}}, 0x0) [ 2525.801315][T28640] usb 4-1: new high-speed USB device number 77 using dummy_hcd 13:36:00 executing program 0: set_mempolicy(0x3, &(0x7f00000003c0)=0x1, 0x7ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{}]}) [ 2525.871472][T28640] usb 4-1: device descriptor read/8, error -71 [ 2525.878380][T31200] __nla_validate_parse: 38 callbacks suppressed [ 2525.878398][T31200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:00 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20}, 0x20}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20}, 0xfffffdef}}, 0x0) [ 2525.967429][T31199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2525.996875][T28640] usb usb4-port1: unable to enumerate USB device 13:36:00 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x2) 13:36:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10001e03}}]}]}}]}, 0x74}}, 0x0) 13:36:00 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2b2}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2526.168974][T31212] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:01 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) dup(r0) [ 2526.230926][T31215] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x282, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0) [ 2526.319897][T31212] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x300}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10003800}}]}]}}]}, 0x74}}, 0x0) [ 2526.361678][T28640] usb 4-1: new high-speed USB device number 78 using dummy_hcd 13:36:01 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001900)={0x0, 0x7fffffff}) 13:36:01 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f00000002c0)="6e5a03da3e1878a8656162311d6ddc6095799eb35023725adebfc616c517bb984d295fd9f476e6d33dabea4c8bcc", 0x2e, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/46, 0x2e}], 0x1}, 0x42) [ 2526.489732][T31226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2526.534837][T31228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10003a00}}]}]}}]}, 0x74}}, 0x0) 13:36:01 executing program 0: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0xffffffff98b19bf6}}, 0x0) [ 2526.651840][T28640] usb 4-1: too many configurations: 182, using maximum allowed: 8 [ 2526.660552][T31228] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2526.682662][T31233] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x36a}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2526.736823][T31208] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2526.767110][T31208] CPU: 0 PID: 31208 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2526.775513][T31208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2526.785613][T31208] Call Trace: [ 2526.788907][T31208] [ 2526.791844][T31208] dump_stack_lvl+0x1e7/0x2e0 [ 2526.796551][T31208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2526.801756][T31208] ? __pfx__printk+0x10/0x10 [ 2526.806351][T31208] ? ___ratelimit+0x4c4/0x670 [ 2526.811076][T31208] ? __pfx____ratelimit+0x10/0x10 [ 2526.816121][T31208] dump_header+0xda/0x6a0 [ 2526.820461][T31208] oom_kill_process+0x3a7/0x930 [ 2526.825324][T31208] out_of_memory+0xf67/0x1320 [ 2526.830045][T31208] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2526.835687][T31208] ? __pfx___mutex_lock+0x10/0x10 [ 2526.840723][T31208] ? __pfx_out_of_memory+0x10/0x10 [ 2526.845865][T31208] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2526.851424][T31208] ? __pfx_lock_release+0x10/0x10 [ 2526.856462][T31208] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2526.862535][T31208] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2526.867778][T31208] ? mem_cgroup_iter+0x3e9/0x560 [ 2526.872777][T31208] try_charge_memcg+0xda2/0x18a0 [ 2526.877743][T31208] ? mark_lock+0x9a/0x350 [ 2526.882126][T31208] ? __pfx_try_charge_memcg+0x10/0x10 [ 2526.887541][T31208] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2526.893731][T31208] charge_memcg+0xa2/0x160 [ 2526.898162][T31208] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2526.904234][T31208] __read_swap_cache_async+0x480/0x8b0 [ 2526.909700][T31208] ? mark_lock+0x9a/0x350 [ 2526.914038][T31208] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2526.920039][T31208] swap_cluster_readahead+0x67c/0x810 [ 2526.925427][T31208] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2526.931357][T31208] ? __pfx_lock_release+0x10/0x10 [ 2526.936396][T31208] ? xas_descend+0x37e/0x470 [ 2526.941000][T31208] swapin_readahead+0x1ea/0x1070 [ 2526.945941][T31208] ? filemap_get_entry+0x127/0x4e0 [ 2526.951070][T31208] ? __pfx_swapin_readahead+0x10/0x10 [ 2526.956461][T31208] ? __filemap_get_folio+0x935/0xbc0 [ 2526.961761][T31208] ? swap_cache_get_folio+0x9f/0x570 [ 2526.967058][T31208] do_swap_page+0x791/0x3f40 [ 2526.971664][T31208] ? rcu_is_watching+0x15/0xb0 [ 2526.976454][T31208] ? do_swap_page+0x154/0x3f40 [ 2526.981223][T31208] ? __pfx_do_swap_page+0x10/0x10 [ 2526.986264][T31208] ? pte_offset_map_nolock+0x137/0x1f0 [ 2526.991731][T31208] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2526.997559][T31208] __handle_mm_fault+0x15e8/0x72d0 [ 2527.002693][T31208] ? reacquire_held_locks+0x3eb/0x690 [ 2527.008090][T31208] ? __pfx___handle_mm_fault+0x10/0x10 [ 2527.013593][T31208] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2527.019352][T31208] ? mtree_range_walk+0x6fd/0x8e0 [ 2527.024393][T31208] ? lock_vma_under_rcu+0x18a/0x730 [ 2527.029600][T31208] ? __pfx_lock_release+0x10/0x10 [ 2527.034633][T31208] ? lock_vma_under_rcu+0x2f9/0x730 [ 2527.039869][T31208] ? lock_vma_under_rcu+0x18a/0x730 [ 2527.045068][T31208] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2527.050619][T31208] handle_mm_fault+0x3c1/0x8a0 [ 2527.055690][T31208] exc_page_fault+0x456/0x870 [ 2527.060404][T31208] asm_exc_page_fault+0x26/0x30 [ 2527.065258][T31208] RIP: 0033:0x7fdd6ac27182 [ 2527.069679][T31208] Code: 24 70 0f 29 9c 24 80 00 00 00 0f 29 a4 24 90 00 00 00 0f 29 ac 24 a0 00 00 00 0f 29 b4 24 b0 00 00 00 0f 29 bc 24 c0 00 00 00 <80> 3d 3d e5 ca 00 00 74 56 e8 e0 54 01 00 48 8b 3d d1 83 15 00 48 [ 2527.089309][T31208] RSP: 002b:00007fdd6baae000 EFLAGS: 00010246 [ 2527.095383][T31208] RAX: 0000000000000000 RBX: 00007fdd6acc9a1d RCX: 00007fdd6acd8a24 [ 2527.103359][T31208] RDX: 0000000000249734 RSI: 0000000000000000 RDI: 00007fdd6acc9a1d [ 2527.111344][T31208] RBP: 00007fdd6acd8a24 R08: 0000000000000003 R09: 00007fff7fbc30b0 [ 2527.119415][T31208] R10: 00007fff7fbc3080 R11: 0000000000078766 R12: 0000000000000000 [ 2527.127386][T31208] R13: 000000000000000b R14: 00007fdd6adabf80 R15: 00007fdd6aecfa48 [ 2527.135372][T31208] [ 2527.151343][T28640] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2527.159333][T28640] usb 4-1: can't read configurations, error -22 [ 2527.184729][T31238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2527.186897][T31208] memory: usage 307180kB, limit 307200kB, failcnt 28739 13:36:02 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 13:36:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10003c00}}]}]}}]}, 0x74}}, 0x0) [ 2527.202070][T31208] memory+swap: usage 307712kB, limit 9007199254740988kB, failcnt 0 [ 2527.210175][T31208] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2527.218078][T31208] Memory cgroup stats for /syz4: [ 2527.218226][T31208] cache 0 [ 2527.228011][T31208] rss 32768 [ 2527.231641][T31208] rss_huge 0 [ 2527.235028][T31208] shmem 0 [ 2527.238272][T31208] mapped_file 0 [ 2527.268350][T31208] dirty 0 [ 2527.272917][T31208] writeback 0 [ 2527.277339][T31208] workingset_refault_anon 12037 [ 2527.288493][T31208] workingset_refault_file 0 [ 2527.295038][T31208] swap 524288 [ 2527.298735][T31208] swapcached 20480 [ 2527.308155][T31208] pgpgin 381562 [ 2527.313217][T31208] pgpgout 381554 13:36:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x0) 13:36:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10003c01}}]}]}}]}, 0x74}}, 0x0) [ 2527.316996][T31208] pgfault 783788 [ 2527.320719][T31208] pgmajfault 10256 [ 2527.324829][T28640] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2527.345249][T31208] inactive_anon 24576 [ 2527.373324][T31208] active_anon 8192 13:36:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3d2}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2527.393618][T31208] inactive_file 0 13:36:02 executing program 0: socket$inet(0x2, 0x3, 0xb7) [ 2527.435523][T31208] active_file 0 [ 2527.465768][T31208] unevictable 0 [ 2527.469294][T31208] hierarchical_memory_limit 314572800 13:36:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10004000}}]}]}}]}, 0x74}}, 0x0) 13:36:02 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x2}, 0xc) [ 2527.506885][T31208] hierarchical_memsw_limit 9223372036854771712 [ 2527.514171][T31208] total_cache 0 [ 2527.517808][T31208] total_rss 32768 [ 2527.537701][T31208] total_rss_huge 0 [ 2527.548088][T31208] total_shmem 0 [ 2527.554510][T31208] total_mapped_file 0 [ 2527.558857][T31208] total_dirty 0 [ 2527.569334][T31208] total_writeback 0 [ 2527.573767][T31208] total_workingset_refault_anon 12037 [ 2527.579304][T31208] total_workingset_refault_file 0 [ 2527.585589][T31208] total_swap 524288 [ 2527.589525][T31208] total_swapcached 20480 [ 2527.622455][T31208] total_pgpgin 381562 [ 2527.631084][T31208] total_pgpgout 381554 [ 2527.635798][T28640] usb 4-1: too many configurations: 182, using maximum allowed: 8 [ 2527.644590][T31208] total_pgfault 783788 [ 2527.664768][T31208] total_pgmajfault 10256 13:36:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3da}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10004800}}]}]}}]}, 0x74}}, 0x0) [ 2527.678127][T31208] total_inactive_anon 24576 [ 2527.690220][T31208] total_active_anon 8192 [ 2527.722848][T31208] total_inactive_file 0 [ 2527.727073][T31208] total_active_file 0 [ 2527.731098][T31208] total_unevictable 0 [ 2527.749450][T31208] anon_cost 0 [ 2527.754378][T31208] file_cost 0 [ 2527.761543][T28640] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2527.769500][T28640] usb 4-1: can't read configurations, error -22 [ 2527.778288][T31208] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31197,uid=0 [ 2527.801915][T28640] usb usb4-port1: attempt power cycle [ 2527.809974][T31208] Memory cgroup out of memory: Killed process 31197 (syz-executor.4) total-vm:54640kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848]}]}]}}]}, 0x478}}, 0x0) 13:36:02 executing program 0: poll(0x0, 0x0, 0xfffffffe) 13:36:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x43f}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2528.133278][T31269] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2528.145258][T31269] CPU: 0 PID: 31269 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2528.153595][T31269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2528.163655][T31269] Call Trace: [ 2528.166956][T31269] [ 2528.169965][T31269] dump_stack_lvl+0x1e7/0x2e0 [ 2528.174656][T31269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2528.179885][T31269] ? __pfx__printk+0x10/0x10 [ 2528.184507][T31269] ? ___ratelimit+0x4c4/0x670 [ 2528.189218][T31269] ? __pfx____ratelimit+0x10/0x10 [ 2528.194255][T31269] dump_header+0xda/0x6a0 [ 2528.198600][T31269] oom_kill_process+0x3a7/0x930 [ 2528.203475][T31269] out_of_memory+0xf67/0x1320 [ 2528.208174][T31269] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2528.213817][T31269] ? __pfx___mutex_lock+0x10/0x10 [ 2528.218873][T31269] ? __pfx_out_of_memory+0x10/0x10 [ 2528.224011][T31269] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2528.229570][T31269] ? __pfx_lock_release+0x10/0x10 [ 2528.234612][T31269] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2528.240700][T31269] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2528.245909][T31269] ? mem_cgroup_iter+0x3e9/0x560 [ 2528.250879][T31269] try_charge_memcg+0xda2/0x18a0 [ 2528.255826][T31269] ? mark_lock+0x9a/0x350 [ 2528.260198][T31269] ? __pfx_try_charge_memcg+0x10/0x10 [ 2528.265593][T31269] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2528.271754][T31269] charge_memcg+0xa2/0x160 [ 2528.276177][T31269] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2528.282250][T31269] __read_swap_cache_async+0x480/0x8b0 [ 2528.287716][T31269] ? mark_lock+0x9a/0x350 [ 2528.292058][T31269] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2528.298113][T31269] swap_cluster_readahead+0x67c/0x810 [ 2528.303519][T31269] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2528.309451][T31269] ? __pfx_lock_release+0x10/0x10 [ 2528.314507][T31269] ? xas_descend+0x37e/0x470 [ 2528.319144][T31269] swapin_readahead+0x1ea/0x1070 [ 2528.324183][T31269] ? filemap_get_entry+0x127/0x4e0 [ 2528.329319][T31269] ? __pfx_swapin_readahead+0x10/0x10 [ 2528.334711][T31269] ? __filemap_get_folio+0x935/0xbc0 [ 2528.340014][T31269] ? swap_cache_get_folio+0x9f/0x570 [ 2528.345399][T31269] do_swap_page+0x791/0x3f40 [ 2528.349998][T31269] ? __lock_acquire+0x1345/0x1fd0 [ 2528.355033][T31269] ? rcu_is_watching+0x15/0xb0 [ 2528.359817][T31269] ? do_swap_page+0x154/0x3f40 [ 2528.364598][T31269] ? __pfx_do_swap_page+0x10/0x10 [ 2528.369642][T31269] ? pte_offset_map_nolock+0x137/0x1f0 [ 2528.375120][T31269] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2528.380950][T31269] ? __pfx_validate_chain+0x10/0x10 [ 2528.386153][T31269] __handle_mm_fault+0x15e8/0x72d0 [ 2528.391295][T31269] ? __pfx___handle_mm_fault+0x10/0x10 [ 2528.396763][T31269] ? mt_find+0x226/0x850 [ 2528.401015][T31269] ? __pfx_lock_release+0x10/0x10 [ 2528.406065][T31269] ? mt_find+0x62d/0x850 [ 2528.410324][T31269] ? mt_find+0x226/0x850 [ 2528.414599][T31269] ? find_vma+0x142/0x1c0 [ 2528.418932][T31269] ? __pfx_find_vma+0x10/0x10 [ 2528.423610][T31269] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2528.429677][T31269] handle_mm_fault+0x3c1/0x8a0 [ 2528.434478][T31269] exc_page_fault+0x2ad/0x870 [ 2528.439168][T31269] asm_exc_page_fault+0x26/0x30 [ 2528.444024][T31269] RIP: 0010:__get_user_8+0x11/0x20 [ 2528.449145][T31269] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2528.468756][T31269] RSP: 0000:ffffc9000ccd7d78 EFLAGS: 00050202 [ 2528.474825][T31269] RAX: 000055555742ada8 RBX: ffff888048bcd0b8 RCX: ffffc9000ccd7c03 [ 2528.482815][T31269] RDX: 0000000000000000 RSI: ffffffff8baac7a0 RDI: ffffffff8bfe6ca0 [ 2528.490806][T31269] RBP: ffffc9000ccd7ec0 R08: ffffffff8f856cef R09: 1ffffffff1f0ad9d [ 2528.498794][T31269] R10: dffffc0000000000 R11: fffffbfff1f0ad9e R12: ffffc9000ccd7d80 [ 2528.506779][T31269] R13: ffffc9000ccd7fd8 R14: dffffc0000000000 R15: ffff888048bcbb80 [ 2528.514780][T31269] __rseq_handle_notify_resume+0x158/0x1490 [ 2528.520725][T31269] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2528.527079][T31269] ? irqentry_exit_to_user_mode+0x52/0x270 [ 2528.532906][T31269] irqentry_exit_to_user_mode+0xbb/0x270 [ 2528.538572][T31269] exc_page_fault+0x587/0x870 [ 2528.543275][T31269] asm_exc_page_fault+0x26/0x30 [ 2528.548141][T31269] RIP: 0033:0x7fdd6ac36d53 [ 2528.552563][T31269] Code: 22 48 81 fa e7 03 00 00 0f 87 ec 00 00 00 48 c1 e2 04 48 8d 0d 7e 13 17 00 48 01 ca c6 02 01 48 89 42 08 48 8b 0d 2d 6c 17 00 <48> 8b 53 10 4c 8d 81 00 00 40 00 4c 39 c2 0f 83 d1 00 00 00 4c 8d [ 2528.572170][T31269] RSP: 002b:00007fdd6aecfb00 EFLAGS: 00010206 [ 2528.578240][T31269] RAX: 0000000000000003 RBX: 00007fdd6adabf80 RCX: 00007fdd6a800000 [ 2528.586209][T31269] RDX: 00007fdd6ada80c0 RSI: 0000000000000080 RDI: 00007fdd6adabf80 [ 2528.594199][T31269] RBP: 0000000000000032 R08: 00007fdd6adabf8c R09: 00007fdd6adabf8c [ 2528.602195][T31269] R10: 00007fdd6aecfc60 R11: 0000000000000246 R12: 00007fdd6adabf80 [ 2528.610170][T31269] R13: 000000000026932d R14: 00007fdd6aecfc80 R15: 00007fdd6adabf80 [ 2528.618167][T31269] [ 2528.624400][T28640] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2528.631307][T31269] memory: usage 307200kB, limit 307200kB, failcnt 29062 [ 2528.645507][T31269] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 2528.654174][T31269] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2528.661637][T31269] Memory cgroup stats for /syz4: [ 2528.661737][T31269] cache 0 [ 2528.669837][T31269] rss 12288 [ 2528.673362][T31269] rss_huge 0 [ 2528.676693][T31269] shmem 0 [ 2528.679777][T31269] mapped_file 0 [ 2528.683659][T31269] dirty 0 [ 2528.686774][T31269] writeback 0 [ 2528.690184][T31269] workingset_refault_anon 12129 [ 2528.695607][T31269] workingset_refault_file 0 [ 2528.700245][T31269] swap 552960 [ 2528.703989][T31269] swapcached 12288 [ 2528.708108][T31269] pgpgin 381692 [ 2528.711986][T31269] pgpgout 381689 [ 2528.715647][T31269] pgfault 783976 [ 2528.719313][T31269] pgmajfault 10362 [ 2528.723630][T31269] inactive_anon 0 [ 2528.727379][T31269] active_anon 4096 [ 2528.731495][T31269] inactive_file 0 [ 2528.735275][T31269] active_file 0 [ 2528.738853][T31269] unevictable 0 [ 2528.743789][T31269] hierarchical_memory_limit 314572800 [ 2528.749344][T31269] hierarchical_memsw_limit 9223372036854771712 [ 2528.755874][T31269] total_cache 0 [ 2528.759498][T31269] total_rss 12288 [ 2528.763473][T28640] usb 4-1: too many configurations: 182, using maximum allowed: 8 [ 2528.772249][T31269] total_rss_huge 0 [ 2528.776114][T31269] total_shmem 0 [ 2528.779712][T31269] total_mapped_file 0 [ 2528.783900][T31269] total_dirty 0 [ 2528.787469][T31269] total_writeback 0 [ 2528.791841][T31269] total_workingset_refault_anon 12129 [ 2528.797372][T31269] total_workingset_refault_file 0 [ 2528.802627][T31269] total_swap 552960 [ 2528.806561][T31269] total_swapcached 12288 [ 2528.811824][T31269] total_pgpgin 381692 [ 2528.816371][T31269] total_pgpgout 381689 [ 2528.820557][T31269] total_pgfault 783976 [ 2528.824803][T31269] total_pgmajfault 10362 [ 2528.829150][T31269] total_inactive_anon 0 [ 2528.845585][T31269] total_active_anon 4096 [ 2528.850338][T31269] total_inactive_file 0 [ 2528.856723][T31269] total_active_file 0 [ 2528.860895][T31269] total_unevictable 0 [ 2528.865050][T31269] anon_cost 0 [ 2528.868419][T31269] file_cost 0 [ 2528.872225][T31269] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31269,uid=0 [ 2528.888331][T31269] Memory cgroup out of memory: Killed process 31269 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2528.905934][T28640] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2528.914890][T28640] usb 4-1: can't read configurations, error -22 13:36:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x444}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10004c00}}]}]}}]}, 0x74}}, 0x0) 13:36:03 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) poll(&(0x7f0000000000)=[{r0, 0x4}], 0x1, 0x0) 13:36:03 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}]}]}}]}, 0x478}}, 0x0) 13:36:03 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x13c4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x43, &(0x7f0000001500)=@generic={0x0, 0x0, 0x3b, "52b79433", "4e1e661e1bb25e8951c7aac7e43c3f9616f465bdd8b367edb733f73af37cb74b7e9356e93e42a5ae8efac40e03566ac12ed4407a396e438a7dea2b"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000014c0)=@ready={0x0, 0x0, 0xffffffffffffff73, "e3d24ce0", {0x1, 0x4b, 0x3, 0x2, 0x6}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) 13:36:03 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/198}, {&(0x7f0000000280)=""/95}], 0x100000000000014d, 0x0, 0x0) 13:36:04 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) 13:36:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x500}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10004e00}}]}]}}]}, 0x74}}, 0x0) [ 2529.190662][ T5117] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2529.203765][ T5117] CPU: 0 PID: 5117 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2529.212067][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2529.222416][ T5117] Call Trace: [ 2529.225725][ T5117] [ 2529.228686][ T5117] dump_stack_lvl+0x1e7/0x2e0 [ 2529.233416][ T5117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2529.238655][ T5117] ? __pfx__printk+0x10/0x10 [ 2529.243280][ T5117] ? ___ratelimit+0x4c4/0x670 [ 2529.248005][ T5117] ? __pfx____ratelimit+0x10/0x10 [ 2529.253080][ T5117] dump_header+0xda/0x6a0 [ 2529.257458][ T5117] oom_kill_process+0x3a7/0x930 [ 2529.262359][ T5117] out_of_memory+0xf67/0x1320 [ 2529.267076][ T5117] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2529.272726][ T5117] ? __pfx___mutex_lock+0x10/0x10 [ 2529.277787][ T5117] ? __pfx_out_of_memory+0x10/0x10 [ 2529.282935][ T5117] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2529.288502][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2529.293551][ T5117] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2529.299646][ T5117] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2529.304855][ T5117] ? mem_cgroup_iter+0x3e9/0x560 [ 2529.309796][ T5117] try_charge_memcg+0xda2/0x18a0 [ 2529.314738][ T5117] ? mark_lock+0x9a/0x350 [ 2529.319095][ T5117] ? __pfx_try_charge_memcg+0x10/0x10 [ 2529.324611][ T5117] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2529.330802][ T5117] charge_memcg+0xa2/0x160 [ 2529.335236][ T5117] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2529.341320][ T5117] __read_swap_cache_async+0x480/0x8b0 [ 2529.346801][ T5117] ? mark_lock+0x9a/0x350 [ 2529.351158][ T5117] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2529.357169][ T5117] swap_cluster_readahead+0x67c/0x810 [ 2529.362561][ T5117] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2529.368491][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2529.373533][ T5117] ? xas_descend+0x37e/0x470 [ 2529.378143][ T5117] swapin_readahead+0x1ea/0x1070 [ 2529.383087][ T5117] ? filemap_get_entry+0x127/0x4e0 [ 2529.388280][ T5117] ? __pfx_swapin_readahead+0x10/0x10 [ 2529.393689][ T5117] ? __filemap_get_folio+0x935/0xbc0 [ 2529.398991][ T5117] ? swap_cache_get_folio+0x9f/0x570 [ 2529.404288][ T5117] do_swap_page+0x791/0x3f40 [ 2529.408879][ T5117] ? rcu_is_watching+0x15/0xb0 [ 2529.413671][ T5117] ? do_swap_page+0x154/0x3f40 [ 2529.418439][ T5117] ? __pfx_do_swap_page+0x10/0x10 [ 2529.423489][ T5117] ? pte_offset_map_nolock+0x137/0x1f0 [ 2529.428971][ T5117] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2529.434783][ T5117] ? __pfx_validate_chain+0x10/0x10 [ 2529.440008][ T5117] __handle_mm_fault+0x15e8/0x72d0 [ 2529.445147][ T5117] ? __pfx___handle_mm_fault+0x10/0x10 [ 2529.450625][ T5117] ? mt_find+0x226/0x850 [ 2529.454884][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2529.459929][ T5117] ? mt_find+0x62d/0x850 [ 2529.464180][ T5117] ? mt_find+0x226/0x850 [ 2529.468452][ T5117] ? find_vma+0x142/0x1c0 [ 2529.472790][ T5117] ? __pfx_find_vma+0x10/0x10 [ 2529.477471][ T5117] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2529.483480][ T5117] handle_mm_fault+0x3c1/0x8a0 [ 2529.488257][ T5117] exc_page_fault+0x2ad/0x870 [ 2529.492951][ T5117] asm_exc_page_fault+0x26/0x30 [ 2529.497803][ T5117] RIP: 0010:__get_user_8+0x11/0x20 [ 2529.502920][ T5117] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2529.522531][ T5117] RSP: 0018:ffffc9000429fd98 EFLAGS: 00050202 [ 2529.528599][ T5117] RAX: 000055555742ada8 RBX: ffff88801a32b2f8 RCX: ffffc9000429fc03 [ 2529.536571][ T5117] RDX: 0000000000000000 RSI: ffffffff8baac7a0 RDI: ffffffff8bfe6ca0 [ 2529.544541][ T5117] RBP: ffffc9000429fec8 R08: ffffffff8f856cef R09: 1ffffffff1f0ad9d [ 2529.552510][ T5117] R10: dffffc0000000000 R11: fffffbfff1f0ad9e R12: ffffc9000429fda0 [ 2529.560478][ T5117] R13: ffffc9000429ffd8 R14: dffffc0000000000 R15: ffff88801a329dc0 [ 2529.568465][ T5117] __rseq_handle_notify_resume+0x158/0x1490 [ 2529.574378][ T5117] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2529.580747][ T5117] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2529.586482][ T5117] syscall_exit_to_user_mode+0x113/0x360 [ 2529.592129][ T5117] do_syscall_64+0x108/0x240 [ 2529.596733][ T5117] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2529.602648][ T5117] RIP: 0033:0x7fdd6aca91b5 [ 2529.607069][ T5117] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2529.626766][ T5117] RSP: 002b:00007fdd6aecfcf0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2529.635190][ T5117] RAX: 0000000000000000 RBX: 00000000000053ad RCX: 00007fdd6aca91b5 [ 2529.643165][ T5117] RDX: 00007fdd6aecfd30 RSI: 0000000000000000 RDI: 0000000000000000 [ 2529.651146][ T5117] RBP: 00007fdd6aecfdbc R08: 0000000000000000 R09: 00007fff7fbc30b0 [ 2529.659123][ T5117] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2529.667093][ T5117] R13: 00000000002696cd R14: 00000000002696cd R15: 0000000000000000 [ 2529.675084][ T5117] 13:36:04 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000003c0)=[{r1, 0x4}, {r0}, {r2, 0x4}, {r0}, {r0, 0x1}], 0x5, 0x0) [ 2529.705337][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.711792][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.723924][ T5117] memory: usage 307200kB, limit 307200kB, failcnt 29294 13:36:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10005202}}]}]}}]}, 0x74}}, 0x0) [ 2529.749291][ T5117] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 2529.778644][ T5117] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2529.792804][T28640] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2529.806805][ T5117] Memory cgroup stats for /syz4: [ 2529.806947][ T5117] cache 0 [ 2529.825377][ T5117] rss 8192 13:36:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x600}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2529.830803][ T5117] rss_huge 0 [ 2529.835547][ T5117] shmem 0 [ 2529.838636][ T5117] mapped_file 0 [ 2529.842306][ T5117] dirty 0 [ 2529.845456][ T5117] writeback 0 [ 2529.848902][ T5117] workingset_refault_anon 12195 [ 2529.854232][ T5117] workingset_refault_file 0 [ 2529.858875][ T5117] swap 503808 [ 2529.862431][ T5117] swapcached 4096 [ 2529.866200][ T5117] pgpgin 381776 [ 2529.869794][ T5117] pgpgout 381774 [ 2529.874614][ T5117] pgfault 784104 13:36:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="02", 0x1}], 0x3}, 0x0) [ 2529.879953][ T5117] pgmajfault 10422 [ 2529.884822][ T5117] inactive_anon 0 [ 2529.888662][ T5117] active_anon 8192 [ 2529.903202][ T5117] inactive_file 0 [ 2529.919184][ T5117] active_file 0 [ 2529.924197][ T5117] unevictable 0 [ 2529.927814][ T5117] hierarchical_memory_limit 314572800 [ 2529.934258][ T5117] hierarchical_memsw_limit 9223372036854771712 [ 2529.941585][T28640] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 2529.943371][ T5117] total_cache 0 [ 2529.952957][ T5117] total_rss 8192 [ 2529.956525][ T5117] total_rss_huge 0 [ 2529.960262][ T5117] total_shmem 0 [ 2529.964340][ T5117] total_mapped_file 0 [ 2529.968341][ T5117] total_dirty 0 [ 2529.972177][ T5117] total_writeback 0 [ 2529.976245][ T5117] total_workingset_refault_anon 12195 13:36:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10006602}}]}]}}]}, 0x74}}, 0x0) [ 2529.991361][ T5117] total_workingset_refault_file 0 [ 2529.996433][ T5117] total_swap 503808 [ 2530.000259][ T5117] total_swapcached 4096 [ 2530.011257][ T5117] total_pgpgin 381776 [ 2530.015282][ T5117] total_pgpgout 381774 [ 2530.019376][ T5117] total_pgfault 784104 13:36:04 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0xfeac) 13:36:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x700}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2530.038729][ T5117] total_pgmajfault 10422 [ 2530.057645][ T5117] total_inactive_anon 0 [ 2530.062881][ T5117] total_active_anon 8192 [ 2530.067159][ T5117] total_inactive_file 0 [ 2530.076767][ T5117] total_active_file 0 [ 2530.080775][ T5117] total_unevictable 0 [ 2530.092706][ T5117] anon_cost 0 [ 2530.096132][ T5117] file_cost 0 [ 2530.099529][ T5117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31278,uid=0 13:36:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ff]}]}]}}]}, 0x478}}, 0x0) [ 2530.134007][ T5117] Memory cgroup out of memory: Killed process 31278 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x282, 0x0) r1 = dup(r0) flock(r1, 0x1) 13:36:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x900}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10006800}}]}]}}]}, 0x74}}, 0x0) 13:36:05 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) 13:36:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:05 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f00000018c0), 0x10, 0x0, 0x0) 13:36:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10006c00}}]}]}}]}, 0x74}}, 0x0) [ 2530.461629][ T5117] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2530.492550][ T5117] CPU: 0 PID: 5117 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2530.500844][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 13:36:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10007400}}]}]}}]}, 0x74}}, 0x0) [ 2530.510921][ T5117] Call Trace: [ 2530.514219][ T5117] [ 2530.517165][ T5117] dump_stack_lvl+0x1e7/0x2e0 [ 2530.521875][ T5117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2530.527134][ T5117] ? __pfx__printk+0x10/0x10 [ 2530.531758][ T5117] ? ___ratelimit+0x4c4/0x670 [ 2530.536505][ T5117] ? __pfx____ratelimit+0x10/0x10 [ 2530.541563][ T5117] dump_header+0xda/0x6a0 [ 2530.545921][ T5117] oom_kill_process+0x3a7/0x930 [ 2530.550808][ T5117] out_of_memory+0xf67/0x1320 [ 2530.555526][ T5117] ? mem_cgroup_out_of_memory+0xf7/0x3b0 13:36:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d03, 0x0, 0x7}]}) [ 2530.561181][ T5117] ? __pfx___mutex_lock+0x10/0x10 [ 2530.566225][ T5117] ? __pfx_out_of_memory+0x10/0x10 [ 2530.571376][ T5117] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2530.576961][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2530.582018][ T5117] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2530.588140][ T5117] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2530.593405][ T5117] ? mem_cgroup_iter+0x3e9/0x560 [ 2530.598376][ T5117] try_charge_memcg+0xda2/0x18a0 [ 2530.603331][ T5117] ? mark_lock+0x9a/0x350 [ 2530.607698][ T5117] ? __pfx_try_charge_memcg+0x10/0x10 [ 2530.613117][ T5117] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2530.619274][ T5117] charge_memcg+0xa2/0x160 [ 2530.623698][ T5117] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2530.629776][ T5117] __read_swap_cache_async+0x480/0x8b0 [ 2530.635251][ T5117] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2530.641233][ T5117] ? mlock_drain_local+0x79/0x490 [ 2530.646259][ T5117] ? mlock_drain_local+0x79/0x490 [ 2530.651288][ T5117] ? mlock_drain_local+0x28c/0x490 [ 2530.656413][ T5117] swap_cluster_readahead+0x67c/0x810 [ 2530.661802][ T5117] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2530.667703][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2530.672749][ T5117] ? xas_descend+0x37e/0x470 [ 2530.677356][ T5117] swapin_readahead+0x1ea/0x1070 [ 2530.682298][ T5117] ? filemap_get_entry+0x127/0x4e0 [ 2530.687510][ T5117] ? __pfx_swapin_readahead+0x10/0x10 [ 2530.692907][ T5117] ? __filemap_get_folio+0x935/0xbc0 [ 2530.698210][ T5117] ? swap_cache_get_folio+0x9f/0x570 [ 2530.703508][ T5117] do_swap_page+0x791/0x3f40 [ 2530.708104][ T5117] ? rcu_is_watching+0x15/0xb0 [ 2530.712888][ T5117] ? do_swap_page+0x154/0x3f40 [ 2530.717658][ T5117] ? __pfx_do_swap_page+0x10/0x10 [ 2530.722679][ T5117] ? pte_offset_map_nolock+0x137/0x1f0 [ 2530.728143][ T5117] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2530.733974][ T5117] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2530.740337][ T5117] __handle_mm_fault+0x15e8/0x72d0 [ 2530.745493][ T5117] ? reacquire_held_locks+0x3eb/0x690 [ 2530.750867][ T5117] ? __pfx___handle_mm_fault+0x10/0x10 [ 2530.756352][ T5117] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2530.762089][ T5117] ? mtree_range_walk+0x6fd/0x8e0 [ 2530.767130][ T5117] ? lock_vma_under_rcu+0x18a/0x730 [ 2530.772357][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2530.777398][ T5117] ? lock_vma_under_rcu+0x2f9/0x730 [ 2530.782722][ T5117] ? lock_vma_under_rcu+0x18a/0x730 [ 2530.787947][ T5117] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2530.793506][ T5117] handle_mm_fault+0x3c1/0x8a0 [ 2530.798290][ T5117] exc_page_fault+0x456/0x870 [ 2530.802988][ T5117] asm_exc_page_fault+0x26/0x30 [ 2530.807852][ T5117] RIP: 0033:0x7fdd6ac7a780 [ 2530.812264][ T5117] Code: ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 <80> 3d 71 57 10 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 48 3d 00 [ 2530.831961][ T5117] RSP: 002b:00007fdd6aecfd58 EFLAGS: 00010246 [ 2530.838037][ T5117] RAX: 00000000000000a8 RBX: 00000000000053af RCX: 0000000000000000 [ 2530.846007][ T5117] RDX: 0000000040000001 RSI: 00007fdd6aecfdbc RDI: 00000000ffffffff [ 2530.853982][ T5117] RBP: 00007fdd6aecfdbc R08: 0000000000000010 R09: 00007fff7fbc30b0 [ 2530.861958][ T5117] R10: 00007fff7fbc3080 R11: 0000000000078972 R12: 0000000000000032 [ 2530.869928][ T5117] R13: 0000000000269b8a R14: 0000000000269b8a R15: 0000000000000000 [ 2530.877911][ T5117] [ 2530.884751][T31318] __nla_validate_parse: 27 callbacks suppressed [ 2530.884767][T31318] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xb00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10007802}}]}]}}]}, 0x74}}, 0x0) [ 2530.915660][T31324] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2530.925162][ T5117] memory: usage 307200kB, limit 307200kB, failcnt 29466 [ 2530.947265][ T5117] memory+swap: usage 307716kB, limit 9007199254740988kB, failcnt 0 [ 2530.966813][T31328] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2530.967911][ T5117] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2530.996350][ T5117] Memory cgroup stats for /syz4: [ 2530.996493][ T5117] cache 0 [ 2531.009398][ T5117] rss 12288 [ 2531.016841][ T5117] rss_huge 0 [ 2531.020180][ T5117] shmem 0 [ 2531.040790][ T5117] mapped_file 0 [ 2531.045924][T31332] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2531.050709][ T5117] dirty 0 13:36:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xc00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2531.068433][ T5117] writeback 0 [ 2531.075104][T31333] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2531.075154][ T5117] workingset_refault_anon 12238 [ 2531.089956][ T5117] workingset_refault_file 0 [ 2531.099948][ T5117] swap 536576 13:36:06 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_getnetconf={0x14, 0x52, 0x1}, 0x14}}, 0x0) 13:36:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10007a00}}]}]}}]}, 0x74}}, 0x0) [ 2531.117223][ T5117] swapcached 4096 [ 2531.124344][ T5117] pgpgin 381841 [ 2531.130350][ T5117] pgpgout 381838 [ 2531.138960][ T5117] pgfault 784211 [ 2531.145505][ T5117] pgmajfault 10476 [ 2531.149327][ T5117] inactive_anon 12288 [ 2531.157050][ T5117] active_anon 0 13:36:06 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@ipv6_deladdrlabel={0x1c, 0x32, 0x1}, 0x1c}}, 0x0) [ 2531.167474][ T5117] inactive_file 0 [ 2531.176796][ T5117] active_file 0 [ 2531.183336][ T5117] unevictable 0 [ 2531.192568][T31336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2531.202480][ T5117] hierarchical_memory_limit 314572800 [ 2531.208406][ T5117] hierarchical_memsw_limit 9223372036854771712 [ 2531.219579][ T5117] total_cache 0 [ 2531.221836][T28640] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2531.226603][ T5117] total_rss 12288 [ 2531.238294][T28640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2531.240952][ T5117] total_rss_huge 0 [ 2531.256987][ T5117] total_shmem 0 [ 2531.261371][T31340] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2531.264876][T28640] usb 4-1: Product: syz [ 2531.273433][ T5117] total_mapped_file 0 [ 2531.279194][ T5117] total_dirty 0 [ 2531.284201][ T5117] total_writeback 0 [ 2531.289232][T28640] usb 4-1: Manufacturer: syz [ 2531.291760][ T5117] total_workingset_refault_anon 12238 [ 2531.297679][T28640] usb 4-1: SerialNumber: syz [ 2531.301256][ T5117] total_workingset_refault_file 0 [ 2531.310028][ T5117] total_swap 536576 [ 2531.317434][ T5117] total_swapcached 4096 [ 2531.325859][ T5117] total_pgpgin 381841 [ 2531.329971][ T5117] total_pgpgout 381838 [ 2531.334490][T31343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2531.334605][ T5117] total_pgfault 784211 [ 2531.348508][ T5117] total_pgmajfault 10476 [ 2531.352901][T28640] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2531.363770][ T5117] total_inactive_anon 12288 13:36:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b28090987f70e06d038e7ff7fc6e5539b3263078b089b0c083860090890e0878f0e1ac6e7049b334a959b4b9a240a5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe2c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c63d36770243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1008892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928900d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b03000000cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c113d12a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571ebff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4804afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa34046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d789364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c220300000007b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000ebffffffffffffff00", 0x1000}}, 0x1006) [ 2531.368496][ T5117] total_active_anon 0 13:36:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10007c02}}]}]}}]}, 0x74}}, 0x0) [ 2531.391542][ T5117] total_inactive_file 0 [ 2531.399247][ T5117] total_active_file 0 [ 2531.426597][ T5117] total_unevictable 0 [ 2531.437163][ T5117] anon_cost 0 [ 2531.446245][ T5117] file_cost 0 [ 2531.452880][ T5117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31307,uid=0 [ 2531.468874][T31347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2531.480085][ T5117] Memory cgroup out of memory: Killed process 31307 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8848kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd03]}]}]}}]}, 0x478}}, 0x0) [ 2531.517528][T31349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2531.705909][T31351] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2531.716601][T31351] CPU: 0 PID: 31351 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2531.725023][T31351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2531.735077][T31351] Call Trace: [ 2531.738356][T31351] [ 2531.741311][T31351] dump_stack_lvl+0x1e7/0x2e0 [ 2531.746017][T31351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2531.751225][T31351] ? __pfx__printk+0x10/0x10 [ 2531.755823][T31351] ? ___ratelimit+0x4c4/0x670 [ 2531.760533][T31351] ? __pfx____ratelimit+0x10/0x10 [ 2531.765564][T31351] dump_header+0xda/0x6a0 [ 2531.769920][T31351] oom_kill_process+0x3a7/0x930 [ 2531.774812][T31351] out_of_memory+0xf67/0x1320 [ 2531.779540][T31351] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2531.785192][T31351] ? __pfx___mutex_lock+0x10/0x10 [ 2531.790222][T31351] ? __pfx_out_of_memory+0x10/0x10 [ 2531.795348][T31351] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2531.800896][T31351] ? __pfx_lock_release+0x10/0x10 [ 2531.805924][T31351] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2531.811994][T31351] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2531.817204][T31351] ? mem_cgroup_iter+0x3e9/0x560 [ 2531.822163][T31351] try_charge_memcg+0xda2/0x18a0 [ 2531.827167][T31351] ? __pfx_try_charge_memcg+0x10/0x10 [ 2531.832547][T31351] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2531.838259][T31351] ? __pfx_lock_release+0x10/0x10 [ 2531.843288][T31351] ? memcg_account_kmem+0x1e7/0x210 [ 2531.848496][T31351] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2531.854320][T31351] __memcg_kmem_charge_page+0xe1/0x250 [ 2531.859802][T31351] memcg_charge_kernel_stack+0x3f8/0x550 [ 2531.865447][T31351] dup_task_struct+0x15d/0x7d0 [ 2531.870225][T31351] copy_process+0x5d5/0x3fc0 [ 2531.874863][T31351] ? __might_fault+0xa9/0x120 [ 2531.879650][T31351] ? __pfx_lock_release+0x10/0x10 [ 2531.884687][T31351] ? __pfx_copy_process+0x10/0x10 [ 2531.889715][T31351] ? __might_fault+0xc5/0x120 [ 2531.894397][T31351] ? __asan_memset+0x23/0x50 [ 2531.898991][T31351] kernel_clone+0x21d/0x8d0 [ 2531.903528][T31351] ? __pfx_kernel_clone+0x10/0x10 [ 2531.908673][T31351] __se_sys_clone3+0x2cb/0x350 [ 2531.913457][T31351] ? __pfx___se_sys_clone3+0x10/0x10 [ 2531.918779][T31351] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2531.924811][T31351] ? exc_page_fault+0x587/0x870 [ 2531.929704][T31351] ? do_syscall_64+0xb4/0x240 [ 2531.934403][T31351] do_syscall_64+0xf9/0x240 [ 2531.938950][T31351] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2531.944860][T31351] RIP: 0033:0x7fdd6aca9b99 [ 2531.949269][T31351] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2531.968877][T31351] RSP: 002b:00007fdd6aecf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2531.977312][T31351] RAX: ffffffffffffffda RBX: 00007fdd6ac52270 RCX: 00007fdd6aca9b99 [ 2531.985323][T31351] RDX: 00007fdd6ac52270 RSI: 0000000000000058 RDI: 00007fdd6aecf960 [ 2531.993368][T31351] RBP: 00007fdd6baae6c0 R08: 00007fdd6baae6c0 R09: 00007fdd6aecfa47 [ 2532.001380][T31351] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2532.009365][T31351] R13: 000000000000000b R14: 00007fdd6aecf960 R15: 00007fdd6aecfa48 [ 2532.017380][T31351] [ 2532.020541][ C0] vkms_vblank_simulate: vblank timer overrun [ 2532.029180][T31351] memory: usage 307200kB, limit 307200kB, failcnt 29648 [ 2532.036248][T31351] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 2532.044434][T31351] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 13:36:06 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x13c4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100004eb40033dd54213d990b2e917bdea763eb7fcb132895a6246677e8514415a04c15e20000000010004e98be8a7d78605a935d0ea13dcd7be326879f048fe30374d00f6ddb891dff5a4abdf9732d695604f3b4fe97ca35cd0890a6ac2d058ab0b19c02b534d200d81d4992b71ede6dabfce39970c9de4bc4d8cca4a2153171e306ed0b334279d999ccd1e98524a80ac2042b39b64d5e65d92d8f4de7445df5695129e9d3eb62b2864a6b6ae6518db487b782a8d61d00aa7ee1e58771c261efe6d0441f65723e06b7703e2eb6b9c490ea108062eab4a18add2a28d84d369bfebaae8326eeec0c98cf035b4f7006cbd2704d7629e82096d6b3f3dc536858c2fc5c4ade594b012bc2428ca0d97b6d73e754156582d6ed5fa30427f1f573305ae8dc8ac8d6cd3e1cbb2b211c5e9020996173807b40caaa2d11d802016514953864476f00b0295f8f3b0775e9ef9655d0ad5872bda6f9a8879ca6a5aaa6d6b0a35b66b7dd1c6cb6fca345e47f97fea54626c5e1137d5700c731447dce92ec2f6e0751a8da1e8799dc62890c0bf117642505b7d57ef3eb9f396369ff7b44e215953a1adc7206e819fec3a66487b5f7af69f2ebc2e0db03a98d20b9a421384a4a0a5425cb50cc33a82a0607936feddb8641e8af0ad3255df65294e0e68cea65a2d343bad6d0f1883cded89a244be7dff3949a27240f48ffc1593ccbe1a9dca3fdbbc7648452a1abbcb7a5f915a813222f238388331efaf9567d1bd265fe46044c8d4bd0a271f4b7c1cf9056a0b07997f836fe4a8f57e0c2341df0f471a9dd75cfd7c27356cbe186ded9ed0ad4809dd82d1fab612a5c403996dcb403ebfbdd9a546616272572e02a3dc93b9dda82fec71349af89f733bcc3cfa27c6e590d153d220bbe0e1725291da416aa7f82158c1d69a8cf62e506e8c0c4665746af94aaf6a747287987e5ebce74bd39beb4bc75b80f7eeb3f0d91719db24ecbcb360b34e2fc391aa487c59610d5a9663d0336d85728b8b5510964c09511f3efded43811020cf825ef9d150767d7d0eb61b1d0120f0eac9547e50f863ee7a1b8062a71332c3ce9feec510ee3346174e087364b902e31b1427fe72d29bfac673686df9d19d6831e0953cc53846c385c348c1094b5ffc9dd775b50045ca8594cadbb7f78feb032f7f0acceb546cccecdecf34fc019e441a24710e97fb3021db58de1e628e9f59b297bf54083a74164581f40a3c5774a0d3bba2b8ca749cd89e1ce638fd0f62e22fc263952ce00fae08bcd9d8bb79e35d7847e3e8a58f0d44bb5eeac80e7292255cdef3e62952f484f006ecc2f9f2affc754a09b372ede93561164df685a93265b6ae4a31d2afd289a5593b04bce09d92923fffbb8041d96d706eee30c952208c530095e2b28eb5a71747dfbeac550762811b0fa6d9000a7a13a39eaddf5b227a449c772b9ebf79f3dab471d8ddf69e2952fd5c1cd2c128cc2822e84a86e95da3885d70ecfb360d2eab26ecaf6cc79a0186ccd1427f2b17bbfcd3d1b18faf957d20c974e2b418d988732e6d2076657f244cd1e15bc17b407260b98ce9d2c64179f0906cc628b2b70bac2afa289fa4b18191fb2af143b7dfebf7f2a843fe9cac3d7590c5c9d815f0b9d1a386e140867ee642046b59032913417d0803f46692c6e0c9af8d40a6cdeceae38c0c32d1dc05741012f199ba3cfc52504035ac80d397e66dd7cc50e17581c5d91ae3e616722a7700af4dcd6d9eecdca16c4edbe600c2ce4e8321721e222c1ac828670f999b28bb09492ef6414e8b0c1c8ba2c8f94bcf7bd508b38e0595f7564dbf8eda753aec2a58f88d5032b89aaed08767e28c2c2661cafd45c87633de83629c031ba80c5be92eed6e073904871c6d991420208cf86993d5c6a292e59884baa2eeeeb2a0a070468537d5db280753a403811443a9294db43ba6f249f4b167c0692ce192d5a95c9e288eef98c4bd7d8f0488e40a3d0ce3723727e0399a8b65af40b3a18f5e893a14fb45d61f929b8574ad6b7e612b99ae555cd146ad6ff600104c3d0ff604d6e1054aae254bd6efb843b1aa6eb17135b80bdf76f9d42e5331d4445a7203f5746ba2109086d58e4e1fe2bf53d0e579544a3964446aad7d4ce5998b450a45c96e4b16326bc6f11b66d779b2f065822bc0858a0d3f585935d37b02f95eaccba94834c5eecc266bfedb586c8ba61483a79092d8a32a600015423ff81b9c24d329cec891cab8c61a4fa14ef240dccc6dc888bee9c4c01085eeabae643d57b08527ef7984938c9fb2ad6fbc385950ce49e51ae51ccda0d685552bd20825dc6f0ad1d28c3b004879c372c0e98aa8b3a3caf08931aa0f057a1595e358946ba3f5ab943e83b04379971b414678398102435124cbb9f389de09eef92b1ea3d1ddd1d3e04fd68046b892b1fde256b9ad260fc6478ed7717210d6d7f2e28be33dea3a0362f2d7a326d0cab1b40a4b348c98590ea032f9fc77ea68acc6381fc369909467646fa64e94bd4793b0cec9ed9d7fab9d1cba37ea93830284ee064a6375f5c24187afd0987ba6e985459823cb38a5ef70539fb61c824fbd9bedc4a4735061cc86ae2e9142167097feece1e3ac46f7822595e81d4bb34cc6f8365a797759406667968391f818bb015f00fab83a1706510c54a3c48238118235aa03ad6bc733c5f9260f73dd9a2dd38f2ff40c696018588b31439d8980d8bebd91f623859db45bb016d9b82f18163e8eacb240f1a89bd472a3fdc26986f61c8cb3d5f11b286fc4e3f1a5123f2b5fb931f64ccf1234e6118b0d3e04122748f2977365b2cfe68ec8e57fa41cfff051a99b856061906c11e4671056750edb170a553d19b99bf83e17a797da47f5424dfa0b485baccd2ed801cff102c5032feb6ab789b0ef062aad75b073fdbf8288b8cee974a64a0c0dd4b743874fabb01f757b07d8777c7815baa9e4f4cf41c6bd19253bda0da753d7215745eae857f586811e053bc27b7ee1413d5b93e10e4fb78a3dd25f0dc43c67cec292282c0d9f37610447228bfdb198c3c1fa448969b34e5e7d710102602901dbb77d99b8d82707fa2df8c15ffc280594eb825a09d5683246e2fe6ee0e864525a222448d5c38cef289c2d2a4b268e496920fc621d8255e626b8c9ec600e5a7be6a9aa0ee6b1efdff1e51e5dc844e4ee93f0f35d9979145aa11c65586cf05b739a49b97eb14e1bf57a674f8ede04dd4461cd88a5a416c88872324baba5433aae3b8f4c6341cdd1d35c3ce326570f8e9af0bbf21fd7930bbbb2ad58a9e07a8c2c3a63bd3f4b6f21935f90c1dbf08977e637d81a365ef2d280da273f1223bbf9006eb94a27fecbb9a125b5eb63f9d100f46b98bba59136ecb2de24ded405b018fe9cee4a05cbcb91c2ba1f2bd8a9713a223a105a3208c4893610e659df5647365778441599faa5ebf2fbfa6b45a585b09ace62559c2b0afe979ff91adab50c431f87ca817a675588a5093f2958e86841a4c8c1c8a7dacddc37f087ad17e2853d849a65759026afba77785c62cd99cbc58e41efdfb972b45c0db38105125a31b4fd472f3236fb12f9ed196eae6b7be28e1fdf4a609326d0662233f91401dfdfbd7918d46186780d9dbe950ee621acc07baa632f80e18570f9219c8e233ff5793464bc7bc92023e9ba54be4a20ce5ca0511ae52fe3514c3b6f734cfb26324d80f599daaee870bb5dcdf98b3f5458dbcfa427280651246ff40df7ab20fe3700b6ffe8f63b99ce6a9466d81d85ae9fc30beab6644d5247b54e445a91a383d222a57f1ed97d9799edb8d3feb128bec14bce6ce1015d38d4dbb153051837c468ed095ce1e2145d4df420818fb5a534ed5633ed944cd35e6278a70d12e2db9e371d14c000775af9e4b56a053d4c37ba3905a41df14694aa0f09d9fe18e4f95d653dc2dda135bf799891a9cc563bac52651e823749e8c9793c0c634530d017dd9f53d034e83203833666a3bf9ece51236f385e1916aa15368f08ddf3b4675efb462ff73c52541d2e77936550fb16aadbeb74da57c865afd9529938446b6123a28dbeb813fb64ae9e94af6820e9ea9c79f4371ac5575753449c8773e6403bd6eb09ac166defb6647992f241c75a248e5755468f41f094e85b715176501975762f9f1a5f38152a218c9da6e6e1a3eb637f745baa9bb6e6f3b3e68cc049be25e03ae28d44cedb9a4b753790856278cb039bce39fdfdc88aadb9ee84e0d36fa484893aad6f227a7296d92a2e1a79c7220eb447a857470a20c19cf2b93e901623961710803c0b96356c2ea4b4f5dcfa03403f02fafe5dac139b5ba49380315c4f468717615191bf046a43d08195084e7ff960b5f795850dba0abb5e0432ebb0267b7915e465d2b37c2fa56d2ec3456c10ca1c8511f5757e4223d6a13bff73147c2bcd361d29d7aef797e6d46593155dda1f8f2e604cc7f335c531b575159a64d30e9e59d3e493ee3bc8e9bc9a25227b4f11f887ca17b0d11f47460f13eb7353e847ce4cce7af40e7c5e187f6b1bcb0e6396348c3f7b6a2d350d82d8c9166a2e9f1195bd0541346655df746f445ac9c4ed8a3916a2316be6e1fb6fe52bae8d0da9c94aac7539d6e3f4246c2472ebb8e0e553244c46881596c7c4de9e7872751b6aa5e0e6ed27662087b85b8abb8d3d413ee26762deed1d0ce37e410a6607faf521d7b91c0c47e04fb060e95fc5250fe6f18423dd4b5ee5ee8262dcbc879ea7eb2a1e308dcac7a60c58a3ff60c8197037f7d0a47ec9f2672958263ebf471cdc3a556e3f4a47efa6bb3dbbbc684af845beb0de80dbc85473c07860d3f337bac3f575a7aed2fea53509f6c90ba86924a458b6066dc6a7fcfb3df36257f28a8de999da3a58288ef67a04fe3dbee97474d68a0eb4333317264369ae45a0a1a7af772c321623f3345366cecbd3a23230f9f054bb1905ccd7daa89bc99a6c0bd32a9af5abc883d52d0011225b5b9e5236f308a19bf11e813bc72a7bdc4f95bdaac3053e6714e23e9b7ead4fc8446285755a26607eea1a3c8188de5d243baee84b053b633179c4f4a7adc8b75868b5e18fc880b5f8cd95f309fa006afd7a4f7e309884b47b7aced13c7dc968856b9cfac70155c9f9ee55e8e511c1c6cdf5a6a8af682fa3ce0ef124bac588ac8586cae3a51416ef8a94712a38a59bca5699505ff88c4494f547e5f23d5a03882abc416588300943eee65da67883a2ef04a2271fdb44e4cac42f2c423c8aa0676da8df86b5cfe9fa63f6cf6a1e0464bc28c4eeead8f78952a5cbfa506cfed53b01851a1644cd0d414bc134844ffc469c940d891747db6ed3535962e9a17bb8d454a357062105a5ea0794504decdde12079a16ab24daa46e0f95a3decfc3fc596c9e4cef0c975d178c49b9111a9f59be25d5b1d3babef78c57204972f8db5ef343c98aaf34314ca28ed7a8067261394aab2c85dd1800cc62a8f336a1b3ce0ee049f599ec269e9897a079fc705595214813d63fa057d3c1cb07fdac543004b42598f29706225ecb96e863561c011d7d27c2ac68120fba00938b733b07d6218e54c2b3fe925750863461929153141134895faf778c8f4302b23522f64287e1e800b82f412ef295b7cdcab78ade644a3a4088d9c5816a391fa4f5893410759c4bfa277e53d39e32ea64a2136a7c2a4e0bf4dabd57841c108b272e8eaa4333975063d659fa5e24bfc2414e9b1201ad6acb9bc46bca5d1840aaf80246fccdf3456d2df6e288adf27242455a53c8d55033f9973ec7a9666a040a2038ee89ed57510c467b5ff9d5e359c3423de87c17efa2651b8dea8948e2dee0a75f1614fbd773745e006412a84c488be622b9dc4a5d2575cca54251745600004ef17e08ee9de6273f6a1ecd59ff97f5f939c8b9a8a1746cbeea866853e11cb67614feae84b2a197dda9f2ae4d0b810f98c5601f65d36ba777283e2b67abe19bdf9bcdec0d7fa51bf1a8bddf187f24fca5a0a2511b80850000a400004efe55e0139acb24758ff4aeb9cad68bbdd50399f588ffd3aba7174d3c9cd89ace58f063bd83525b627b3ab921728d51cb868ea09ed4b0081ca5ca16946911cb6ec540aef8cbf813730b6f84406036c958704175516335ba17df50376e3d9ead3a9130ba45d1363c6b076da21af9cfa43e87a9b08f690db23ad91edc4b37cdec1bbbd58754f16e529947f877d416172eab30ab66c25aec583d3c8121a41af3c8b5867bf8163600004e82f1b79b7bc598ac0d5a7fe26af1325e0bf66e7ec8c200b88681fe8ff37f2db955ec8590e9031b9950cbb12d50f303154e0318a2d55700002400004e02d028541e342b2382dcfb6e545606863ab6587133c554d17f33763c47e97dd53b3c3abb1f00004eb805f8be70a7a0fd6fb18947c997477819bc29ef0b775704d6cbf308e597b0000800004e97b9d43e338b8944fa00004e29231ba4614fdba3e197dccc4a74879f8654e63e172b64f40bcfdbec0cd6f0f3b46f7e70ef27be8eca40d6270e1fc4800398f91b3ad3cd6fdabcd5da6b7eb23af934b8af0d196f6927d0aa800c96241db03261670814851e3e6208ad878e6b653c7f912f82b2162d15db95948ad6c381fa46f4163020732c03353ec71d720e3936e37d5e81c402a8c53611ee449ae9df06f1bda914589d631517a66d51af570992c879efed551013192fc378661b0b3cb5e63e17d93be5f32eaa78b8ea526298762e28b930dc786c0ec21d2730a063acaf82fdb4853aed2871b27f2be4cfa515a55a071592b6aed032872a504272dc6f74ce32ea2995cf333dee0000fc00004e0aa66da99dfb93e5bb83172f7f355e995ff4ebea22674f834f43eabb3faf84ea4cf08f78474333febe3b280994ad20f66d926a95f1094f910aba4c331ebeef8ff1e4aa82550731efa339a77917f20a127643198192e99875336074d2e46189ccf399e8efa43fd3003bb91da2c408789c16985ada2b7d2d8afb7ac58939855fd5f4c09f1bf23bbb467a66db8a0c536cad04bb1f49ca679dc330b8016eb032d92be8133f2766b0a14d13220bd83c33f4f2a51f9c73c5674fcde05ba8aa5a12a7988f7e4ab66c604c0071c594222fafcb1cd3de1a181ff2263fc9675f6923a93ee2c0dcaebd2b92ecefe7e445e396ef7a422b9d552613344e87424c0c9b"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x43, &(0x7f0000001500)=@generic={0x0, 0x0, 0x3b, "52b79433", "4e1e661e1bb25e8951c7aac7e43c3f9616f465bdd8b367edb733f73af37cb74b7e9356e93e42a5ae8efac40e03566ac12ed4407a396e438a7dea2b"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000014c0)=@ready={0x0, 0x0, 0xffffffffffffff73, "e3d24ce0", {0x1, 0x4b, 0x3, 0x2, 0x6}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x13c4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x43, &(0x7f0000001500)=@generic={0x0, 0x0, 0x3b, "52b79433", "4e1e661e1bb25e8951c7aac7e43c3f9616f465bdd8b367edb733f73af37cb74b7e9356e93e42a5ae8efac40e03566ac12ed4407a396e438a7dea2b"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000014c0)=@ready={0x0, 0x0, 0xffffffffffffff73, "e3d24ce0", {0x1, 0x4b, 0x3, 0x2, 0x6}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) (async) 13:36:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10008100}}]}]}}]}, 0x74}}, 0x0) 13:36:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xe00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2532.050399][ T5153] usb 4-1: USB disconnect, device number 81 [ 2532.059973][T31351] Memory cgroup stats for /syz4: [ 2532.060125][T31351] cache 0 [ 2532.068411][T17346] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 2532.092943][T31351] rss 12288 [ 2532.096112][T31351] rss_huge 0 [ 2532.099328][T31351] shmem 0 [ 2532.102973][ T5153] usb 4-1: ath9k_htc: USB layer deinitialized [ 2532.116969][T31351] mapped_file 0 [ 2532.131003][T31351] dirty 0 [ 2532.143646][T31351] writeback 0 [ 2532.146982][T31351] workingset_refault_anon 12287 [ 2532.173171][T31351] workingset_refault_file 0 [ 2532.177749][T31351] swap 499712 [ 2532.185313][T31351] swapcached 8192 [ 2532.191249][T31351] pgpgin 381911 [ 2532.195396][T31351] pgpgout 381908 [ 2532.199951][T31351] pgfault 784317 [ 2532.204263][T31351] pgmajfault 10531 [ 2532.208124][T31351] inactive_anon 12288 [ 2532.216024][T31351] active_anon 0 13:36:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10008400}}]}]}}]}, 0x74}}, 0x0) [ 2532.224107][T31351] inactive_file 0 [ 2532.231749][T31351] active_file 0 [ 2532.238727][T31351] unevictable 0 [ 2532.247366][T31351] hierarchical_memory_limit 314572800 [ 2532.276113][T31351] hierarchical_memsw_limit 9223372036854771712 [ 2532.286391][T31351] total_cache 0 [ 2532.290185][T31351] total_rss 12288 [ 2532.300556][T31351] total_rss_huge 0 [ 2532.317126][T31351] total_shmem 0 13:36:07 executing program 0: setrlimit(0x0, &(0x7f00000000c0)={0x100000000}) 13:36:07 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10008a03}}]}]}}]}, 0x74}}, 0x0) [ 2532.325636][T31351] total_mapped_file 0 [ 2532.339720][T31351] total_dirty 0 [ 2532.352559][T31351] total_writeback 0 [ 2532.358775][T31351] total_workingset_refault_anon 12287 [ 2532.364862][T31351] total_workingset_refault_file 0 [ 2532.382689][T31351] total_swap 499712 [ 2532.387785][T31351] total_swapcached 8192 [ 2532.399810][T31351] total_pgpgin 381911 [ 2532.408784][T31351] total_pgpgout 381908 [ 2532.417924][T31351] total_pgfault 784317 13:36:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000002c0), 0x10, 0x0, &(0x7f0000000300)) [ 2532.431308][T31351] total_pgmajfault 10531 [ 2532.435785][T31351] total_inactive_anon 12288 [ 2532.441326][T31351] total_active_anon 0 [ 2532.446040][T31351] total_inactive_file 0 [ 2532.450724][T31351] total_active_file 0 [ 2532.454972][T31351] total_unevictable 0 [ 2532.461447][T31351] anon_cost 0 [ 2532.464911][T31351] file_cost 0 13:36:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff2]}]}]}}]}, 0x478}}, 0x0) [ 2532.468362][T31351] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31351,uid=0 [ 2532.485766][T31351] Memory cgroup out of memory: Killed process 31351 (syz-executor.4) total-vm:54508kB, anon-rss:440kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1000a203}}]}]}}]}, 0x74}}, 0x0) 13:36:07 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1100}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2532.551359][ T5153] usb 4-1: new high-speed USB device number 82 using dummy_hcd 13:36:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1000be01}}]}]}}]}, 0x74}}, 0x0) [ 2532.706484][T31374] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2532.718266][T31374] CPU: 0 PID: 31374 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2532.726735][T31374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2532.736826][T31374] Call Trace: [ 2532.740221][T31374] [ 2532.743177][T31374] dump_stack_lvl+0x1e7/0x2e0 [ 2532.747913][T31374] ? __pfx_dump_stack_lvl+0x10/0x10 13:36:07 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1200}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2532.753160][T31374] ? __pfx__printk+0x10/0x10 [ 2532.757797][T31374] ? ___ratelimit+0x4c4/0x670 [ 2532.762524][T31374] ? __pfx____ratelimit+0x10/0x10 [ 2532.767594][T31374] dump_header+0xda/0x6a0 [ 2532.771969][T31374] oom_kill_process+0x3a7/0x930 [ 2532.776870][T31374] out_of_memory+0xf67/0x1320 [ 2532.781600][T31374] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2532.787276][T31374] ? __pfx___mutex_lock+0x10/0x10 [ 2532.792335][T31374] ? __pfx_out_of_memory+0x10/0x10 [ 2532.797498][T31374] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2532.803089][T31374] ? __pfx_lock_release+0x10/0x10 [ 2532.808156][T31374] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2532.814256][T31374] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2532.819467][T31374] ? mem_cgroup_iter+0x3e9/0x560 [ 2532.824432][T31374] try_charge_memcg+0xda2/0x18a0 [ 2532.829438][T31374] ? __pfx_try_charge_memcg+0x10/0x10 [ 2532.834845][T31374] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2532.840596][T31374] ? __pfx_lock_release+0x10/0x10 [ 2532.845664][T31374] ? memcg_account_kmem+0x1e7/0x210 [ 2532.850908][T31374] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2532.856746][T31374] __memcg_kmem_charge_page+0xe1/0x250 [ 2532.862245][T31374] memcg_charge_kernel_stack+0x3f8/0x550 [ 2532.867918][T31374] dup_task_struct+0x15d/0x7d0 [ 2532.872686][T31374] copy_process+0x5d5/0x3fc0 [ 2532.877308][T31374] ? __might_fault+0xa9/0x120 [ 2532.881991][T31374] ? __pfx_lock_release+0x10/0x10 [ 2532.887047][T31374] ? __pfx_copy_process+0x10/0x10 [ 2532.892077][T31374] ? __might_fault+0xc5/0x120 [ 2532.896767][T31374] ? __asan_memset+0x23/0x50 [ 2532.901370][T31374] kernel_clone+0x21d/0x8d0 [ 2532.905892][T31374] ? __pfx_kernel_clone+0x10/0x10 [ 2532.910980][T31374] __se_sys_clone3+0x2cb/0x350 [ 2532.915777][T31374] ? __pfx___se_sys_clone3+0x10/0x10 [ 2532.921104][T31374] ? do_syscall_64+0x108/0x240 [ 2532.925910][T31374] ? do_syscall_64+0xb4/0x240 [ 2532.930612][T31374] do_syscall_64+0xf9/0x240 [ 2532.935136][T31374] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2532.941207][T31374] RIP: 0033:0x7fdd6aca9b99 [ 2532.945627][T31374] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2532.961875][ T5153] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 2532.965221][T31374] RSP: 002b:00007fdd6aecf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2532.981391][T31374] RAX: ffffffffffffffda RBX: 00007fdd6ac52270 RCX: 00007fdd6aca9b99 [ 2532.989391][T31374] RDX: 00007fdd6ac52270 RSI: 0000000000000058 RDI: 00007fdd6aecf960 [ 2532.997383][T31374] RBP: 00007fdd6baae6c0 R08: 00007fdd6baae6c0 R09: 00007fdd6aecfa47 13:36:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1000de00}}]}]}}]}, 0x74}}, 0x0) 13:36:07 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1400}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2533.005357][T31374] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2533.013343][T31374] R13: 000000000000000b R14: 00007fdd6aecf960 R15: 00007fdd6aecfa48 [ 2533.021359][T31374] [ 2533.024540][ C0] vkms_vblank_simulate: vblank timer overrun [ 2533.064757][T31374] memory: usage 307200kB, limit 307200kB, failcnt 29814 [ 2533.072460][T31374] memory+swap: usage 307736kB, limit 9007199254740988kB, failcnt 0 [ 2533.080746][T31374] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2533.089551][T31374] Memory cgroup stats for /syz4: [ 2533.089899][T31374] cache 0 [ 2533.121265][T31374] rss 12288 [ 2533.126022][T31374] rss_huge 0 [ 2533.129394][T31374] shmem 0 [ 2533.132853][T31374] mapped_file 0 [ 2533.136458][T31374] dirty 0 [ 2533.139563][T31374] writeback 0 [ 2533.144474][T31374] workingset_refault_anon 12339 [ 2533.149471][T31374] workingset_refault_file 0 [ 2533.154401][T31374] swap 536576 [ 2533.157890][T31374] swapcached 8192 [ 2533.161770][T31374] pgpgin 381979 [ 2533.165435][T31374] pgpgout 381976 13:36:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1000ea01}}]}]}}]}, 0x74}}, 0x0) 13:36:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1500}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2533.169178][T31374] pgfault 784418 [ 2533.173338][T31374] pgmajfault 10580 [ 2533.192279][T31374] inactive_anon 0 [ 2533.205460][T31374] active_anon 12288 [ 2533.216364][T31374] inactive_file 0 [ 2533.223472][T31374] active_file 0 [ 2533.230567][T31374] unevictable 0 [ 2533.237825][T31374] hierarchical_memory_limit 314572800 [ 2533.247628][T31374] hierarchical_memsw_limit 9223372036854771712 [ 2533.256322][T31374] total_cache 0 [ 2533.260056][T31374] total_rss 12288 [ 2533.264095][T31374] total_rss_huge 0 [ 2533.269214][T31374] total_shmem 0 [ 2533.273480][T31374] total_mapped_file 0 [ 2533.277662][T31374] total_dirty 0 [ 2533.281768][T31374] total_writeback 0 [ 2533.285768][T31374] total_workingset_refault_anon 12339 [ 2533.292912][T31374] total_workingset_refault_file 0 [ 2533.309717][T31374] total_swap 536576 [ 2533.314220][T31374] total_swapcached 8192 [ 2533.318821][T31374] total_pgpgin 381979 13:36:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1800}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1000f002}}]}]}}]}, 0x74}}, 0x0) 13:36:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x282, 0x0) close(r0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 2533.325875][T31374] total_pgpgout 381976 [ 2533.330090][T31374] total_pgfault 784418 [ 2533.335339][T31374] total_pgmajfault 10580 [ 2533.340720][T31374] total_inactive_anon 0 [ 2533.345523][T31374] total_active_anon 12288 [ 2533.389330][T31374] total_inactive_file 0 [ 2533.402196][T31374] total_active_file 0 [ 2533.406360][T31374] total_unevictable 0 [ 2533.410356][T31374] anon_cost 0 [ 2533.416463][T31374] file_cost 0 [ 2533.420577][T31374] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31374,uid=0 13:36:08 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000200), 0x10, 0xc9d19474f367fbb4, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/239, 0xef}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x10, 0x0) [ 2533.451492][T31374] Memory cgroup out of memory: Killed process 31374 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}]}]}}]}, 0x478}}, 0x0) 13:36:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1000f2ff}}]}]}}]}, 0x74}}, 0x0) 13:36:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3800}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:08 executing program 0: r0 = semget(0x2, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x5, 0x1000}, {0x0, 0x7}], 0x2) 13:36:08 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000100)="e31dc030190a0593c413fc5646424416817afd4f728d8e57e45936a06966cb3ae9370e02b5452c492876f27dca71dc331717a0cd3c4c1aa9bd661f1a44b8c9461d2084e4f7f5cf0d031da768d833725faa50fed1f46335b11187c3167e5e0941e79ab5a5d19d6358d1d5b34e7f6c5c6ddaac34d08544cf1bfff50d41dade5b3c272d60", 0x83}, {&(0x7f00000001c0)="c10548a182aa9b1a17e04fc2e049f3a4d47cad143156db82d0e3052f9ef87fafcbeed137fa4bdb9af17e38219cd3e719a4d5e3d894583c08933a5ac8e4ec3a69f67bd776d51c665638c6d91a06ba0e2bc9ade9efd6097f0a7b4f554a025f9fd14f1c9722dccff75d052b14c34138651ce56ca768a4333322939af3db4e25c4c34f", 0x81}, {&(0x7f0000000280)="0691f014348c514524faa92b83f055c11bf92f45d9e34ffeda0dff38b70ae271631f18e1da437c7d6fc5b4c1c25f807305843855d5124ef51285474488442e3574c73868ce3e6ebd8f3ea45cd89e1175e19a606857a6d5117af1761a7703c9c724a5ccf1cdadbe2e79b08b3aee", 0x6d}], 0x3}, 0x0) sendto(r0, &(0x7f00000007c0)="d2ba343d139ebc2b4581c136b0871eb3ef0afaa82afd51c8fd5e76f9089dfdb337a3ff0848bdf38bf34144cf32fad9881728d5ed13d80ae05c56eedc1abdb330574644816e9c472f4ba87757838ca1ab25f891d8afedb32ac6c190b302118f4c70399a2141f3b915deea6afd01a0a43d36399fff1f2216d389c7e1bd6ae707ffa13f14a04513b1885fe694597c90c441de", 0x91, 0x0, 0x0, 0x0) [ 2533.735571][T31401] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2533.766039][T31401] CPU: 0 PID: 31401 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2533.774469][T31401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2533.784558][T31401] Call Trace: [ 2533.787866][T31401] [ 2533.790815][T31401] dump_stack_lvl+0x1e7/0x2e0 [ 2533.795525][T31401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2533.800750][T31401] ? __pfx__printk+0x10/0x10 [ 2533.805347][T31401] ? ___ratelimit+0x4c4/0x670 [ 2533.810037][T31401] ? __pfx____ratelimit+0x10/0x10 [ 2533.815095][T31401] dump_header+0xda/0x6a0 [ 2533.819454][T31401] oom_kill_process+0x3a7/0x930 [ 2533.824334][T31401] out_of_memory+0xf67/0x1320 [ 2533.829047][T31401] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2533.834709][T31401] ? __pfx___mutex_lock+0x10/0x10 [ 2533.839740][T31401] ? __pfx_out_of_memory+0x10/0x10 [ 2533.844862][T31401] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2533.850416][T31401] ? __pfx_lock_release+0x10/0x10 [ 2533.855461][T31401] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2533.861550][T31401] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2533.866760][T31401] ? mem_cgroup_iter+0x3e9/0x560 [ 2533.871743][T31401] try_charge_memcg+0xda2/0x18a0 [ 2533.876718][T31401] ? __pfx_try_charge_memcg+0x10/0x10 [ 2533.882146][T31401] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2533.887871][T31401] ? __pfx_lock_release+0x10/0x10 [ 2533.892905][T31401] ? memcg_account_kmem+0x1e7/0x210 [ 2533.898120][T31401] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2533.903930][T31401] __memcg_kmem_charge_page+0xe1/0x250 [ 2533.909676][T31401] memcg_charge_kernel_stack+0x3f8/0x550 [ 2533.915310][T31401] dup_task_struct+0x15d/0x7d0 [ 2533.920088][T31401] copy_process+0x5d5/0x3fc0 [ 2533.924690][T31401] ? __might_fault+0xa9/0x120 [ 2533.929381][T31401] ? __pfx_lock_release+0x10/0x10 [ 2533.934428][T31401] ? __lock_acquire+0x1345/0x1fd0 [ 2533.939464][T31401] ? __pfx_copy_process+0x10/0x10 [ 2533.944496][T31401] ? __might_fault+0xc5/0x120 [ 2533.949277][T31401] ? __asan_memset+0x23/0x50 [ 2533.953905][T31401] kernel_clone+0x21d/0x8d0 [ 2533.958431][T31401] ? __pfx_kernel_clone+0x10/0x10 [ 2533.963557][T31401] ? __pfx_lock_release+0x10/0x10 [ 2533.968698][T31401] __se_sys_clone3+0x2cb/0x350 [ 2533.973479][T31401] ? __might_fault+0xa9/0x120 [ 2533.978172][T31401] ? __pfx___se_sys_clone3+0x10/0x10 [ 2533.983462][T31401] ? rcu_is_watching+0x15/0xb0 [ 2533.988254][T31401] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2533.994256][T31401] ? exc_page_fault+0x587/0x870 [ 2533.999121][T31401] ? do_syscall_64+0xb4/0x240 [ 2534.003814][T31401] do_syscall_64+0xf9/0x240 [ 2534.008335][T31401] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2534.014253][T31401] RIP: 0033:0x7fdd6aca9b99 [ 2534.018705][T31401] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2534.038407][T31401] RSP: 002b:00007fdd6aecf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2534.046831][T31401] RAX: ffffffffffffffda RBX: 00007fdd6ac52270 RCX: 00007fdd6aca9b99 [ 2534.054807][T31401] RDX: 00007fdd6ac52270 RSI: 0000000000000058 RDI: 00007fdd6aecf960 [ 2534.062784][T31401] RBP: 00007fdd6baae6c0 R08: 00007fdd6baae6c0 R09: 00007fdd6aecfa47 [ 2534.070762][T31401] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2534.078738][T31401] R13: 000000000000000b R14: 00007fdd6aecf960 R15: 00007fdd6aecfa48 13:36:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3f04}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2534.086731][T31401] [ 2534.089841][ C0] vkms_vblank_simulate: vblank timer overrun 13:36:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1000fff2}}]}]}}]}, 0x74}}, 0x0) 13:36:09 executing program 0: mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) [ 2534.142255][ T5153] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2534.154033][T31401] memory: usage 307200kB, limit 307200kB, failcnt 30025 [ 2534.162833][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2534.173025][T31401] memory+swap: usage 307772kB, limit 9007199254740988kB, failcnt 0 [ 2534.181594][ T5153] usb 4-1: Product: syz 13:36:09 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4000}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2534.188713][ T5153] usb 4-1: Manufacturer: syz [ 2534.195249][T31401] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2534.208437][ T5153] usb 4-1: SerialNumber: syz [ 2534.221812][T31401] Memory cgroup stats for /syz4: [ 2534.221956][T31401] cache 0 13:36:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000}}]}]}}]}, 0x74}}, 0x0) [ 2534.249195][T31401] rss 0 [ 2534.257793][T31401] rss_huge 0 [ 2534.271079][T31401] shmem 0 [ 2534.282856][ T5153] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2534.292478][T31401] mapped_file 0 [ 2534.304502][T31401] dirty 0 [ 2534.310924][T31401] writeback 0 [ 2534.318135][T31401] workingset_refault_anon 12399 [ 2534.325027][T31401] workingset_refault_file 0 [ 2534.329707][T31401] swap 585728 [ 2534.339566][T31401] swapcached 0 [ 2534.343298][T31401] pgpgin 382051 [ 2534.346934][T31401] pgpgout 382051 [ 2534.352065][T31401] pgfault 784529 [ 2534.355867][T31401] pgmajfault 10635 [ 2534.359746][T31401] inactive_anon 0 [ 2534.364253][T31401] active_anon 0 [ 2534.368272][T31401] inactive_file 0 [ 2534.373061][T31401] active_file 0 [ 2534.376732][T31401] unevictable 0 [ 2534.380361][T31401] hierarchical_memory_limit 314572800 [ 2534.386718][T31401] hierarchical_memsw_limit 9223372036854771712 [ 2534.395635][T31401] total_cache 0 [ 2534.399298][T31401] total_rss 0 [ 2534.403494][T31401] total_rss_huge 0 [ 2534.407407][T31401] total_shmem 0 [ 2534.411024][T31401] total_mapped_file 0 [ 2534.417045][T31401] total_dirty 0 [ 2534.423821][T31401] total_writeback 0 [ 2534.434859][T31401] total_workingset_refault_anon 12399 [ 2534.445357][T31401] total_workingset_refault_file 0 [ 2534.452801][T31401] total_swap 585728 [ 2534.462577][T31401] total_swapcached 0 [ 2534.466509][T31401] total_pgpgin 382051 [ 2534.470498][T31401] total_pgpgout 382051 [ 2534.479857][T31401] total_pgfault 784529 [ 2534.484340][T31401] total_pgmajfault 10635 [ 2534.488586][T31401] total_inactive_anon 0 [ 2534.493098][T31401] total_active_anon 0 [ 2534.497101][T31401] total_inactive_file 0 [ 2534.502387][T31401] total_active_file 0 [ 2534.506399][T31401] total_unevictable 0 [ 2534.510390][T31401] anon_cost 0 [ 2534.514052][T31401] file_cost 0 [ 2534.517374][T31401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31401,uid=0 [ 2534.536203][T31401] Memory cgroup out of memory: Killed process 31401 (syz-executor.4) total-vm:54508kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2534.911358][T22829] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 13:36:10 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x13c4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x43, &(0x7f0000001500)=@generic={0x0, 0x0, 0x3b, "52b79433", "4e1e661e1bb25e8951c7aac7e43c3f9616f465bdd8b367edb733f73af37cb74b7e9356e93e42a5ae8efac40e03566ac12ed4407a396e438a7dea2b"}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000014c0)=@ready={0x0, 0x0, 0xffffffffffffff73, "e3d24ce0", {0x1, 0x4b, 0x3, 0x2, 0x6}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x13c4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x43, &(0x7f0000001500)=@generic={0x0, 0x0, 0x3b, "52b79433", "4e1e661e1bb25e8951c7aac7e43c3f9616f465bdd8b367edb733f73af37cb74b7e9356e93e42a5ae8efac40e03566ac12ed4407a396e438a7dea2b"}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000014c0)=@ready={0x0, 0x0, 0xffffffffffffff73, "e3d24ce0", {0x1, 0x4b, 0x3, 0x2, 0x6}}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) (async) 13:36:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4404}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:10 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$unix(r0, 0x0, 0x0) 13:36:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000001}}]}]}}]}, 0x74}}, 0x0) 13:36:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}]}]}}]}, 0x478}}, 0x0) [ 2535.954695][T31359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2535.964745][T31359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2535.985218][T31001] usb 4-1: USB disconnect, device number 82 [ 2536.045453][T31431] __nla_validate_parse: 33 callbacks suppressed [ 2536.045471][T31431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:10 executing program 0: unlinkat(0xffffffffffffffff, 0x0, 0x18) [ 2536.119437][T31436] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:11 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setown(r1, 0x6, r2) dup2(r0, r1) 13:36:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffff0000}}]}]}}]}, 0x74}}, 0x0) [ 2536.187105][T31436] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:11 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4788}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:11 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) [ 2536.262186][T31443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000}}]}]}}]}, 0x74}}, 0x0) [ 2536.345142][T31446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:11 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x40a) r2 = dup2(r0, r0) recvfrom(r2, &(0x7f00000000c0)=""/231, 0xe7, 0x0, 0x0, 0x0) [ 2536.415410][T31451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2536.426233][T31438] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2536.458962][T31446] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2536.468462][T31438] CPU: 1 PID: 31438 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2536.468487][T31438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2536.468499][T31438] Call Trace: [ 2536.468510][T31438] [ 2536.468518][T31438] dump_stack_lvl+0x1e7/0x2e0 [ 2536.468558][T31438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2536.468589][T31438] ? __pfx__printk+0x10/0x10 13:36:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x2}}]}]}}]}, 0x74}}, 0x0) [ 2536.468615][T31438] ? ___ratelimit+0x4c4/0x670 [ 2536.468646][T31438] ? __pfx____ratelimit+0x10/0x10 [ 2536.468677][T31438] dump_header+0xda/0x6a0 [ 2536.521790][T31438] oom_kill_process+0x3a7/0x930 [ 2536.526678][T31438] out_of_memory+0xf67/0x1320 [ 2536.531401][T31438] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2536.537071][T31438] ? __pfx___mutex_lock+0x10/0x10 [ 2536.542127][T31438] ? __pfx_out_of_memory+0x10/0x10 [ 2536.547269][T31438] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2536.552833][T31438] ? __pfx_lock_release+0x10/0x10 [ 2536.557872][T31438] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2536.563972][T31438] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2536.569190][T31438] ? mem_cgroup_iter+0x3e9/0x560 [ 2536.574135][T31438] try_charge_memcg+0xda2/0x18a0 [ 2536.579074][T31438] ? mark_lock+0x9a/0x350 [ 2536.583517][T31438] ? __pfx_try_charge_memcg+0x10/0x10 [ 2536.588922][T31438] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2536.595081][T31438] charge_memcg+0xa2/0x160 [ 2536.599510][T31438] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2536.605581][T31438] __read_swap_cache_async+0x480/0x8b0 [ 2536.611080][T31438] ? mark_lock+0x9a/0x350 [ 2536.615428][T31438] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2536.621423][T31438] swap_cluster_readahead+0x67c/0x810 [ 2536.626805][T31438] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2536.632707][T31438] ? __pfx_lock_release+0x10/0x10 [ 2536.637760][T31438] ? xas_descend+0x37e/0x470 [ 2536.642379][T31438] swapin_readahead+0x1ea/0x1070 [ 2536.647330][T31438] ? filemap_get_entry+0x127/0x4e0 [ 2536.652473][T31438] ? __pfx_swapin_readahead+0x10/0x10 [ 2536.657870][T31438] ? __filemap_get_folio+0x935/0xbc0 [ 2536.663176][T31438] ? swap_cache_get_folio+0x9f/0x570 [ 2536.668491][T31438] do_swap_page+0x791/0x3f40 [ 2536.673094][T31438] ? rcu_is_watching+0x15/0xb0 [ 2536.677904][T31438] ? do_swap_page+0x154/0x3f40 [ 2536.682676][T31438] ? __pfx_do_swap_page+0x10/0x10 [ 2536.687704][T31438] ? pte_offset_map_nolock+0x137/0x1f0 [ 2536.693172][T31438] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2536.699080][T31438] ? __pfx_validate_chain+0x10/0x10 [ 2536.704299][T31438] ? is_bpf_text_address+0x28d/0x2b0 [ 2536.709584][T31438] ? is_bpf_text_address+0x26/0x2b0 [ 2536.714803][T31438] __handle_mm_fault+0x15e8/0x72d0 [ 2536.719948][T31438] ? __pfx___handle_mm_fault+0x10/0x10 [ 2536.725416][T31438] ? mt_find+0x226/0x850 [ 2536.729669][T31438] ? __pfx_lock_release+0x10/0x10 [ 2536.734721][T31438] ? mt_find+0x62d/0x850 [ 2536.739003][T31438] ? mt_find+0x226/0x850 [ 2536.743283][T31438] ? find_vma+0x142/0x1c0 [ 2536.747625][T31438] ? __pfx_find_vma+0x10/0x10 [ 2536.752311][T31438] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2536.758307][T31438] handle_mm_fault+0x3c1/0x8a0 [ 2536.763094][T31438] exc_page_fault+0x2ad/0x870 [ 2536.767790][T31438] asm_exc_page_fault+0x26/0x30 [ 2536.772642][T31438] RIP: 0010:__get_user_8+0x11/0x20 [ 2536.777757][T31438] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2536.797362][T31438] RSP: 0018:ffffc90013b0fd98 EFLAGS: 00050206 [ 2536.803433][T31438] RAX: 00007fdd6baaefe8 RBX: ffff888157c032f8 RCX: ffffc90013b0fc03 [ 2536.811415][T31438] RDX: 0000000000000000 RSI: ffffffff8baac7a0 RDI: ffffffff8bfe6ca0 [ 2536.819389][T31438] RBP: ffffc90013b0fec8 R08: ffffffff8f856cef R09: 1ffffffff1f0ad9d [ 2536.827359][T31438] R10: dffffc0000000000 R11: fffffbfff1f0ad9e R12: ffffc90013b0fda0 [ 2536.835330][T31438] R13: ffffc90013b0ffd8 R14: dffffc0000000000 R15: ffff888157c01dc0 [ 2536.843320][T31438] __rseq_handle_notify_resume+0x158/0x1490 [ 2536.849242][T31438] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2536.855586][T31438] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2536.861325][T31438] syscall_exit_to_user_mode+0x113/0x360 [ 2536.866975][T31438] do_syscall_64+0x108/0x240 [ 2536.871582][T31438] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2536.877492][T31438] RIP: 0033:0x7fdd6ac7dda9 [ 2536.881920][T31438] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2536.901536][T31438] RSP: 002b:00007fdd6baae0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2536.909960][T31438] RAX: 0000000000000003 RBX: 00007fdd6adabf80 RCX: 00007fdd6ac7dda9 [ 2536.917942][T31438] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2536.925922][T31438] RBP: 00007fdd6acca47a R08: 0000000000000000 R09: 0000000000000000 [ 2536.933906][T31438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2536.941893][T31438] R13: 000000000000000b R14: 00007fdd6adabf80 R15: 00007fdd6aecfa48 [ 2536.949891][T31438] 13:36:11 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4800}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2536.972816][T22829] usb 4-1: Service connection timeout for: 256 [ 2536.979055][T22829] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2536.988160][T22829] ath9k_htc: Failed to initialize the device [ 2536.988304][T31456] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2537.002214][T31001] usb 4-1: ath9k_htc: USB layer deinitialized [ 2537.018046][T31438] memory: usage 307200kB, limit 307200kB, failcnt 30361 13:36:11 executing program 0: readv(0xffffffffffffffff, &(0x7f00000025c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 13:36:11 executing program 0: setrlimit(0x8, &(0x7f0000000500)) socketpair(0x1, 0x5, 0x0, 0x0) [ 2537.047795][T31438] memory+swap: usage 307748kB, limit 9007199254740988kB, failcnt 0 [ 2537.078165][T31438] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2537.086062][T31459] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:12 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0x0) [ 2537.122396][T31438] Memory cgroup stats for /syz4: [ 2537.122555][T31438] cache 0 [ 2537.140011][T31438] rss 8192 [ 2537.147876][T31438] rss_huge 0 [ 2537.152182][T31457] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2537.167657][T31438] shmem 0 13:36:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3}}]}]}}]}, 0x74}}, 0x0) 13:36:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4888}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2537.170774][T31438] mapped_file 0 [ 2537.176449][T31438] dirty 0 [ 2537.180720][T31438] writeback 0 [ 2537.201589][T31438] workingset_refault_anon 12530 13:36:12 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001800), 0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x10, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/195, 0xc3}], 0x1}, 0x42) [ 2537.220067][T31438] workingset_refault_file 0 [ 2537.229690][T31438] swap 585728 [ 2537.247921][T31438] swapcached 8192 [ 2537.273955][T31438] pgpgin 382194 [ 2537.282682][T31438] pgpgout 382192 [ 2537.292204][T31438] pgfault 784729 [ 2537.299242][T31438] pgmajfault 10739 [ 2537.313349][T31438] inactive_anon 0 [ 2537.320486][T31438] active_anon 8192 13:36:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4c00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2537.328971][T31438] inactive_file 0 [ 2537.335254][T31438] active_file 0 [ 2537.338856][T31438] unevictable 0 [ 2537.352832][T31438] hierarchical_memory_limit 314572800 [ 2537.371459][T31438] hierarchical_memsw_limit 9223372036854771712 13:36:12 executing program 0: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x3819, 0xffffffffffffffff, 0x0) 13:36:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x4}}]}]}}]}, 0x74}}, 0x0) [ 2537.381334][T31001] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2537.384447][T31438] total_cache 0 [ 2537.397840][T31438] total_rss 8192 [ 2537.403361][T31438] total_rss_huge 0 [ 2537.407214][T31438] total_shmem 0 13:36:12 executing program 0: getpeername$inet(0xffffffffffffff9c, 0x0, 0x0) [ 2537.441259][T31438] total_mapped_file 0 [ 2537.445303][T31438] total_dirty 0 [ 2537.448787][T31438] total_writeback 0 [ 2537.480569][T31438] total_workingset_refault_anon 12530 13:36:12 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000), &(0x7f0000000100)=0x4) [ 2537.491596][T31438] total_workingset_refault_file 0 [ 2537.496758][T31438] total_swap 585728 [ 2537.500582][T31438] total_swapcached 8192 [ 2537.518310][T31438] total_pgpgin 382194 [ 2537.522605][T31438] total_pgpgout 382192 [ 2537.526706][T31438] total_pgfault 784729 [ 2537.530796][T31438] total_pgmajfault 10739 [ 2537.535784][T31438] total_inactive_anon 0 [ 2537.539962][T31438] total_active_anon 8192 [ 2537.544281][T31438] total_inactive_file 0 [ 2537.548450][T31438] total_active_file 0 [ 2537.552730][T31438] total_unevictable 0 [ 2537.556751][T31438] anon_cost 0 [ 2537.561830][T31438] file_cost 0 [ 2537.565141][T31438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31428,uid=0 13:36:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5601}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x5}}]}]}}]}, 0x74}}, 0x0) 13:36:12 executing program 0: nanosleep(&(0x7f00000002c0), 0x0) 13:36:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}]}]}}]}, 0x478}}, 0x0) [ 2537.606325][T31438] Memory cgroup out of memory: Killed process 31428 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:12 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000580)=@in6, 0x0) 13:36:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6}}]}]}}]}, 0x74}}, 0x0) [ 2537.711699][T31001] usb 4-1: too many configurations: 98, using maximum allowed: 8 13:36:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x40) [ 2538.087432][T31489] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2538.102583][T31489] CPU: 1 PID: 31489 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2538.110921][T31489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2538.120975][T31489] Call Trace: [ 2538.124261][T31489] [ 2538.127192][T31489] dump_stack_lvl+0x1e7/0x2e0 [ 2538.131886][T31489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2538.137106][T31489] ? __pfx__printk+0x10/0x10 [ 2538.141717][T31489] ? ___ratelimit+0x4c4/0x670 [ 2538.146399][T31489] ? __pfx____ratelimit+0x10/0x10 [ 2538.151448][T31489] dump_header+0xda/0x6a0 [ 2538.155791][T31489] oom_kill_process+0x3a7/0x930 [ 2538.160654][T31489] out_of_memory+0xf67/0x1320 [ 2538.165346][T31489] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2538.170998][T31489] ? __pfx___mutex_lock+0x10/0x10 [ 2538.176044][T31489] ? __pfx_out_of_memory+0x10/0x10 [ 2538.181204][T31489] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2538.186782][T31489] ? __pfx_lock_release+0x10/0x10 [ 2538.191819][T31489] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2538.197982][T31489] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2538.203192][T31489] ? mem_cgroup_iter+0x3e9/0x560 [ 2538.208174][T31489] try_charge_memcg+0xda2/0x18a0 [ 2538.213120][T31489] ? mark_lock+0x9a/0x350 [ 2538.217494][T31489] ? __pfx_try_charge_memcg+0x10/0x10 [ 2538.222915][T31489] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2538.229076][T31489] charge_memcg+0xa2/0x160 [ 2538.233500][T31489] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2538.239593][T31489] __read_swap_cache_async+0x480/0x8b0 [ 2538.245059][T31489] ? mark_lock+0x9a/0x350 [ 2538.249394][T31489] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2538.255405][T31489] swap_cluster_readahead+0x67c/0x810 [ 2538.260903][T31489] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2538.266821][T31489] ? __pfx_lock_release+0x10/0x10 [ 2538.271873][T31489] ? xas_descend+0x37e/0x470 [ 2538.276475][T31489] swapin_readahead+0x1ea/0x1070 [ 2538.281429][T31489] ? filemap_get_entry+0x127/0x4e0 [ 2538.286705][T31489] ? __pfx_swapin_readahead+0x10/0x10 [ 2538.292134][T31489] ? __filemap_get_folio+0x935/0xbc0 [ 2538.297469][T31489] ? swap_cache_get_folio+0x9f/0x570 [ 2538.302807][T31489] do_swap_page+0x791/0x3f40 [ 2538.307421][T31489] ? rcu_is_watching+0x15/0xb0 [ 2538.312205][T31489] ? do_swap_page+0x154/0x3f40 [ 2538.316988][T31489] ? __pfx_do_swap_page+0x10/0x10 [ 2538.322021][T31489] ? pte_offset_map_nolock+0x137/0x1f0 [ 2538.327507][T31489] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2538.333353][T31489] __handle_mm_fault+0x15e8/0x72d0 [ 2538.338521][T31489] ? reacquire_held_locks+0x3eb/0x690 [ 2538.343926][T31489] ? __pfx___handle_mm_fault+0x10/0x10 [ 2538.349410][T31489] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2538.355151][T31489] ? mtree_range_walk+0x6fd/0x8e0 [ 2538.360180][T31489] ? lock_vma_under_rcu+0x18a/0x730 [ 2538.365386][T31489] ? __pfx_lock_release+0x10/0x10 [ 2538.370422][T31489] ? lock_vma_under_rcu+0x2f9/0x730 [ 2538.375665][T31489] ? lock_vma_under_rcu+0x18a/0x730 [ 2538.380897][T31489] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2538.386473][T31489] handle_mm_fault+0x3c1/0x8a0 [ 2538.391270][T31489] exc_page_fault+0x456/0x870 [ 2538.396009][T31489] asm_exc_page_fault+0x26/0x30 [ 2538.400901][T31489] RIP: 0033:0x7fdd6ac36d45 [ 2538.405314][T31489] Code: 41 5c c3 66 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ec 00 00 00 48 c1 e2 04 48 8d 0d 7e 13 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 2d 6c 17 00 48 8b 53 10 4c 8d 81 00 [ 2538.424942][T31489] RSP: 002b:00007fdd6aecfb00 EFLAGS: 00010206 [ 2538.431017][T31489] RAX: 0000000000000003 RBX: 00007fdd6adabf80 RCX: 00007fdd6ada80c0 [ 2538.438991][T31489] RDX: 00007fdd6ada80c0 RSI: 00007fdd6aecfce8 RDI: 00007fdd6adabf80 [ 2538.446982][T31489] RBP: 0000000000000000 R08: 00007fdd6a8000c0 R09: 00007fdd6adabf8c [ 2538.454948][T31489] R10: 0000000000000003 R11: 0000000000078e50 R12: 00007fdd6adabf80 [ 2538.463007][T31489] R13: 0000000000000fc1 R14: 0000000000000000 R15: 00007fdd6adabf80 [ 2538.470996][T31489] [ 2538.478333][T31489] memory: usage 307200kB, limit 307200kB, failcnt 30828 [ 2538.485375][T31489] memory+swap: usage 307728kB, limit 9007199254740988kB, failcnt 0 [ 2538.493686][T31489] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2538.501079][T31489] Memory cgroup stats for /syz4: [ 2538.501273][T31489] cache 0 [ 2538.509154][T31489] rss 12288 [ 2538.512884][T31489] rss_huge 0 [ 2538.516103][T31489] shmem 0 [ 2538.519055][T31489] mapped_file 0 [ 2538.522606][T31489] dirty 0 [ 2538.525561][T31489] writeback 0 [ 2538.528849][T31489] workingset_refault_anon 12711 [ 2538.533973][T31489] workingset_refault_file 0 [ 2538.538811][T31489] swap 540672 [ 2538.542644][T31489] swapcached 8192 [ 2538.546294][T31489] pgpgin 382389 [ 2538.549744][T31489] pgpgout 382386 [ 2538.553720][T31489] pgfault 785015 [ 2538.557297][T31489] pgmajfault 10906 [ 2538.561016][T31489] inactive_anon 8192 [ 2538.565564][T31489] active_anon 4096 [ 2538.569304][T31489] inactive_file 0 [ 2538.572997][T31489] active_file 0 [ 2538.576466][T31489] unevictable 0 [ 2538.579913][T31489] hierarchical_memory_limit 314572800 [ 2538.585596][T31489] hierarchical_memsw_limit 9223372036854771712 [ 2538.591895][T31489] total_cache 0 [ 2538.595374][T31489] total_rss 12288 [ 2538.599018][T31489] total_rss_huge 0 [ 2538.603083][T31489] total_shmem 0 [ 2538.606564][T31489] total_mapped_file 0 [ 2538.610567][T31489] total_dirty 0 [ 2538.615196][T31489] total_writeback 0 [ 2538.619031][T31489] total_workingset_refault_anon 12711 [ 2538.624884][T31489] total_workingset_refault_file 0 [ 2538.629907][T31489] total_swap 540672 [ 2538.634148][T31489] total_swapcached 8192 [ 2538.638315][T31489] total_pgpgin 382389 [ 2538.643166][T31489] total_pgpgout 382386 [ 2538.647241][T31489] total_pgfault 785015 [ 2538.651824][T31489] total_pgmajfault 10906 [ 2538.656092][T31489] total_inactive_anon 8192 [ 2538.660511][T31489] total_active_anon 4096 [ 2538.665086][T31489] total_inactive_file 0 [ 2538.669247][T31489] total_active_file 0 [ 2538.673744][T31489] total_unevictable 0 [ 2538.677755][T31489] anon_cost 0 [ 2538.681046][T31489] file_cost 0 [ 2538.685144][T31489] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31489,uid=0 [ 2538.700965][T31489] Memory cgroup out of memory: Killed process 31489 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2538.961691][T31001] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2538.970790][T31001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2538.979814][T31001] usb 4-1: Product: syz [ 2538.984073][T31001] usb 4-1: Manufacturer: syz [ 2538.988680][T31001] usb 4-1: SerialNumber: syz 13:36:13 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "9f21283f", {0x1, 0x8, 0x5, 0x6, 0x3}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "be85efa6", {0x1, 0x0, 0xfff, 0x0, 0x7}}) 13:36:13 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5865}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x7}}]}]}}]}, 0x74}}, 0x0) 13:36:13 executing program 0: r0 = semget(0x2, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x9, 0x0) 13:36:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}]}]}}]}, 0x478}}, 0x0) 13:36:14 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 2539.071356][T31001] usb 4-1: can't set config #1, error -71 [ 2539.092747][T31001] usb 4-1: USB disconnect, device number 83 13:36:14 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) 13:36:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8}}]}]}}]}, 0x74}}, 0x0) 13:36:14 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6000}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2539.273484][T31499] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2539.303218][T31499] CPU: 1 PID: 31499 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2539.311628][T31499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2539.321683][T31499] Call Trace: [ 2539.324958][T31499] [ 2539.327881][T31499] dump_stack_lvl+0x1e7/0x2e0 [ 2539.332572][T31499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2539.337832][T31499] ? __pfx__printk+0x10/0x10 [ 2539.342442][T31499] ? ___ratelimit+0x4c4/0x670 [ 2539.347124][T31499] ? __pfx____ratelimit+0x10/0x10 [ 2539.352152][T31499] dump_header+0xda/0x6a0 [ 2539.356491][T31499] oom_kill_process+0x3a7/0x930 [ 2539.361349][T31499] out_of_memory+0xf67/0x1320 [ 2539.366128][T31499] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2539.371766][T31499] ? __pfx___mutex_lock+0x10/0x10 [ 2539.376799][T31499] ? __pfx_out_of_memory+0x10/0x10 [ 2539.381927][T31499] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2539.387505][T31499] ? __pfx_lock_release+0x10/0x10 [ 2539.392537][T31499] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2539.398699][T31499] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2539.403907][T31499] ? mem_cgroup_iter+0x3e9/0x560 [ 2539.408868][T31499] try_charge_memcg+0xda2/0x18a0 [ 2539.413830][T31499] ? __pfx_try_charge_memcg+0x10/0x10 [ 2539.419207][T31499] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2539.424944][T31499] ? __pfx_lock_release+0x10/0x10 [ 2539.429983][T31499] ? memcg_account_kmem+0x1e7/0x210 [ 2539.435243][T31499] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2539.441057][T31499] __memcg_kmem_charge_page+0xe1/0x250 [ 2539.446525][T31499] memcg_charge_kernel_stack+0x28a/0x550 [ 2539.452169][T31499] dup_task_struct+0x15d/0x7d0 [ 2539.456938][T31499] copy_process+0x5d5/0x3fc0 [ 2539.461554][T31499] ? __might_fault+0xa9/0x120 [ 2539.466244][T31499] ? __pfx_lock_release+0x10/0x10 [ 2539.471279][T31499] ? __pfx_copy_process+0x10/0x10 [ 2539.476305][T31499] ? __might_fault+0xc5/0x120 [ 2539.480986][T31499] ? __asan_memset+0x23/0x50 [ 2539.485581][T31499] kernel_clone+0x21d/0x8d0 [ 2539.490112][T31499] ? __pfx_kernel_clone+0x10/0x10 [ 2539.495159][T31499] __se_sys_clone3+0x2cb/0x350 [ 2539.499949][T31499] ? __might_fault+0xa9/0x120 [ 2539.504645][T31499] ? __pfx___se_sys_clone3+0x10/0x10 [ 2539.509976][T31499] ? do_syscall_64+0x108/0x240 [ 2539.514844][T31499] ? do_syscall_64+0xb4/0x240 [ 2539.519531][T31499] do_syscall_64+0xf9/0x240 [ 2539.524079][T31499] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2539.530000][T31499] RIP: 0033:0x7fdd6aca9b99 [ 2539.534423][T31499] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2539.554030][T31499] RSP: 002b:00007fdd6aecf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2539.562447][T31499] RAX: ffffffffffffffda RBX: 00007fdd6ac52270 RCX: 00007fdd6aca9b99 [ 2539.570419][T31499] RDX: 00007fdd6ac52270 RSI: 0000000000000058 RDI: 00007fdd6aecf960 [ 2539.578393][T31499] RBP: 00007fdd6baae6c0 R08: 00007fdd6baae6c0 R09: 00007fdd6aecfa47 [ 2539.586383][T31499] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2539.594373][T31499] R13: 000000000000000b R14: 00007fdd6aecf960 R15: 00007fdd6aecfa48 [ 2539.602359][T31499] 13:36:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002680)={&(0x7f00000000c0)=@in={0x2, 0x1}, 0xc, &(0x7f0000002480)=[{0x0}, {&(0x7f0000000180)="5ab88985ba540a719a929b3bcc19391bd9a6dd959a4ad941e86585aabbb7e020ccb75c3dd6e54c5e6f901827a650b370d4f0a566271ce3368d29b80c1d5428dd1db501e5d45bd5188351a4167754453fdc83c919438de8f1b2d0da16448ab7006b6cbbfb583752732a37b6ae794617a64eaeb6f4b341d5cb9bde27fc57f70c9719", 0x81}, {&(0x7f0000000240)="dfe4a001435e3c42d4846211fd8fdf", 0xf}, {0x0}, {0x0}, {&(0x7f0000002380)="1e", 0x1}], 0x6}, 0x0) [ 2539.635385][T31499] memory: usage 307200kB, limit 307200kB, failcnt 30990 [ 2539.674598][T31499] memory+swap: usage 307752kB, limit 9007199254740988kB, failcnt 0 [ 2539.693390][T31499] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2539.709679][T31499] Memory cgroup stats for /syz4: [ 2539.709903][T31499] cache 0 [ 2539.724756][T31499] rss 12288 [ 2539.731729][T31499] rss_huge 0 [ 2539.738462][T31499] shmem 0 13:36:14 executing program 0: nanosleep(&(0x7f00000014c0)={0x0, 0xffffffff80000000}, 0x0) 13:36:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x9}}]}]}}]}, 0x74}}, 0x0) 13:36:14 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6558}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2539.747709][T31499] mapped_file 0 [ 2539.758323][T31499] dirty 0 [ 2539.768715][T31499] writeback 0 [ 2539.777862][T31499] workingset_refault_anon 12752 13:36:14 executing program 0: r0 = semget(0x2, 0x0, 0x0) semop(r0, &(0x7f00000008c0)=[{0x0, 0x4, 0x1400}], 0x1) [ 2539.842481][T31001] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2539.871447][T31499] workingset_refault_file 0 [ 2539.876012][T31499] swap 573440 [ 2539.879311][T31499] swapcached 12288 [ 2539.887796][T31499] pgpgin 382459 [ 2539.896060][T31499] pgpgout 382456 [ 2539.909789][T31499] pgfault 785121 [ 2539.918312][T31499] pgmajfault 10956 [ 2539.931256][T31499] inactive_anon 4096 [ 2539.939715][T31499] active_anon 8192 13:36:14 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) [ 2539.947317][T31499] inactive_file 0 [ 2539.957860][T31499] active_file 0 [ 2539.968943][T31499] unevictable 0 [ 2539.980802][T31499] hierarchical_memory_limit 314572800 13:36:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xa}}]}]}}]}, 0x74}}, 0x0) 13:36:14 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6800}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2539.999204][T31499] hierarchical_memsw_limit 9223372036854771712 [ 2540.019529][T31499] total_cache 0 [ 2540.029423][T31499] total_rss 12288 [ 2540.042725][T31499] total_rss_huge 0 13:36:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0xa) [ 2540.051110][T31499] total_shmem 0 [ 2540.063371][T31499] total_mapped_file 0 [ 2540.079145][T31499] total_dirty 0 [ 2540.086362][T31499] total_writeback 0 [ 2540.096267][T31499] total_workingset_refault_anon 12752 [ 2540.107544][T31499] total_workingset_refault_file 0 [ 2540.118470][T31499] total_swap 573440 [ 2540.131359][T31499] total_swapcached 12288 [ 2540.132334][T31001] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 2540.154521][T31499] total_pgpgin 382459 [ 2540.158670][T31499] total_pgpgout 382456 [ 2540.163251][T31499] total_pgfault 785121 [ 2540.167472][T31499] total_pgmajfault 10956 [ 2540.173316][T31499] total_inactive_anon 4096 [ 2540.179056][T31499] total_active_anon 8192 [ 2540.183556][T31499] total_inactive_file 0 [ 2540.187866][T31499] total_active_file 0 [ 2540.193079][T31499] total_unevictable 0 [ 2540.197235][T31499] anon_cost 0 [ 2540.200652][T31499] file_cost 0 13:36:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6a03}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}]}]}}]}, 0x478}}, 0x0) 13:36:15 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup2(r0, r0) getsockopt(r1, 0x0, 0x0, 0x0, 0x0) 13:36:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xb}}]}]}}]}, 0x74}}, 0x0) [ 2540.204201][T31499] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31499,uid=0 [ 2540.220126][T31499] Memory cgroup out of memory: Killed process 31499 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:15 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001800), 0x10, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000680)="41b08816c08c645dc17df19b24e9dc26edd5c64588027801e413310dbc3eb775", 0x20, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x10, 0x0) 13:36:15 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = getpid() fcntl$setown(r0, 0x6, r1) 13:36:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xc}}]}]}}]}, 0x74}}, 0x0) [ 2540.484360][T31540] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2540.506005][T31540] CPU: 0 PID: 31540 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2540.514386][T31540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2540.524568][T31540] Call Trace: [ 2540.527871][T31540] [ 2540.530823][T31540] dump_stack_lvl+0x1e7/0x2e0 [ 2540.535547][T31540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2540.540774][T31540] ? __pfx__printk+0x10/0x10 [ 2540.545399][T31540] ? ___ratelimit+0x4c4/0x670 [ 2540.550121][T31540] ? __pfx____ratelimit+0x10/0x10 [ 2540.555187][T31540] dump_header+0xda/0x6a0 [ 2540.559551][T31540] oom_kill_process+0x3a7/0x930 [ 2540.564430][T31540] out_of_memory+0xf67/0x1320 [ 2540.569127][T31540] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2540.574764][T31540] ? __pfx___mutex_lock+0x10/0x10 [ 2540.579796][T31540] ? __pfx_out_of_memory+0x10/0x10 [ 2540.584915][T31540] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2540.590469][T31540] ? __pfx_lock_release+0x10/0x10 [ 2540.595506][T31540] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2540.601574][T31540] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2540.606788][T31540] ? mem_cgroup_iter+0x3e9/0x560 [ 2540.611732][T31540] try_charge_memcg+0xda2/0x18a0 [ 2540.616690][T31540] ? __pfx_try_charge_memcg+0x10/0x10 [ 2540.622145][T31540] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2540.627859][T31540] ? __pfx_lock_release+0x10/0x10 [ 2540.632983][T31540] ? memcg_account_kmem+0x1e7/0x210 [ 2540.638218][T31540] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2540.644033][T31540] __memcg_kmem_charge_page+0xe1/0x250 [ 2540.649532][T31540] memcg_charge_kernel_stack+0x28a/0x550 [ 2540.655188][T31540] dup_task_struct+0x15d/0x7d0 [ 2540.659952][T31540] copy_process+0x5d5/0x3fc0 [ 2540.664548][T31540] ? __might_fault+0xa9/0x120 [ 2540.669248][T31540] ? __pfx_lock_release+0x10/0x10 [ 2540.674282][T31540] ? __pfx_copy_process+0x10/0x10 [ 2540.679309][T31540] ? __might_fault+0xc5/0x120 [ 2540.684001][T31540] ? __asan_memset+0x23/0x50 [ 2540.688596][T31540] kernel_clone+0x21d/0x8d0 [ 2540.693110][T31540] ? __pfx_kernel_clone+0x10/0x10 [ 2540.698157][T31540] __se_sys_clone3+0x2cb/0x350 [ 2540.702927][T31540] ? __might_fault+0xa9/0x120 [ 2540.707612][T31540] ? __pfx___se_sys_clone3+0x10/0x10 [ 2540.712933][T31540] ? do_syscall_64+0x108/0x240 [ 2540.717712][T31540] ? do_syscall_64+0xb4/0x240 [ 2540.722394][T31540] do_syscall_64+0xf9/0x240 [ 2540.726909][T31540] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2540.732835][T31540] RIP: 0033:0x7fdd6aca9b99 [ 2540.737252][T31540] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2540.756860][T31540] RSP: 002b:00007fdd6aecf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2540.765284][T31540] RAX: ffffffffffffffda RBX: 00007fdd6ac52270 RCX: 00007fdd6aca9b99 [ 2540.773258][T31540] RDX: 00007fdd6ac52270 RSI: 0000000000000058 RDI: 00007fdd6aecf960 13:36:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6c00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2540.781258][T31540] RBP: 00007fdd6baae6c0 R08: 00007fdd6baae6c0 R09: 00007fdd6aecfa47 [ 2540.789225][T31540] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2540.797193][T31540] R13: 000000000000000b R14: 00007fdd6aecf960 R15: 00007fdd6aecfa48 [ 2540.805176][T31540] [ 2540.822858][T31540] memory: usage 307200kB, limit 307200kB, failcnt 31148 [ 2540.844979][T31540] memory+swap: usage 307696kB, limit 9007199254740988kB, failcnt 0 [ 2540.876081][T31540] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 13:36:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xd}}]}]}}]}, 0x74}}, 0x0) 13:36:15 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2012, r0, 0x0) [ 2540.903095][T31540] Memory cgroup stats for /syz4: [ 2540.903242][T31540] cache 0 [ 2540.925465][T31540] rss 12288 13:36:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)="c4e54cc61a785d58fa80230a3609fc6f9eebcf864787acf268d2bfafac72d5543f", 0x21}, {&(0x7f00000002c0)="e8b39e7dd9bb219b1e90f365f0e8504f8c996379d5607adf0b00a3a113cb000960e3d3a27379f2ad910880166d7c70606d8ce6f1253f93b78c4048b92bac2818a453162d2dad5ff1aa78ff25c757c28f4c9e2cae8959ed9948c22c4a937fabf92b967667bfe24f3698ab6b258c34df85", 0x70}], 0x2}, 0x8) [ 2540.997350][T31540] rss_huge 0 [ 2541.014887][T31540] shmem 0 [ 2541.025855][T31540] mapped_file 0 [ 2541.039833][T31540] dirty 0 13:36:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xe}}]}]}}]}, 0x74}}, 0x0) [ 2541.047500][T31540] writeback 0 [ 2541.057337][T31540] workingset_refault_anon 12801 [ 2541.058448][T31553] __nla_validate_parse: 28 callbacks suppressed [ 2541.058463][T31553] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2541.064088][T31540] workingset_refault_file 0 [ 2541.089151][T31540] swap 528384 [ 2541.092903][T31540] swapcached 8192 13:36:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7400}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2541.096635][T31540] pgpgin 382522 13:36:16 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc, 0x100000000}) [ 2541.130964][T31562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2541.131426][T31540] pgpgout 382519 [ 2541.153706][T31540] pgfault 785218 [ 2541.157735][T31540] pgmajfault 11004 [ 2541.167380][T31540] inactive_anon 4096 [ 2541.173089][T31540] active_anon 8192 [ 2541.178061][T31540] inactive_file 0 [ 2541.189256][T31540] active_file 0 [ 2541.197661][T31540] unevictable 0 [ 2541.200656][T31565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2541.210071][T31540] hierarchical_memory_limit 314572800 [ 2541.220733][T31540] hierarchical_memsw_limit 9223372036854771712 [ 2541.236911][T31540] total_cache 0 [ 2541.240596][T31540] total_rss 12288 [ 2541.248055][T31540] total_rss_huge 0 [ 2541.260013][T31540] total_shmem 0 [ 2541.266231][T31540] total_mapped_file 0 [ 2541.270321][T31540] total_dirty 0 [ 2541.274287][T31565] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2541.277902][T31540] total_writeback 0 [ 2541.290513][T31540] total_workingset_refault_anon 12801 [ 2541.299696][T31540] total_workingset_refault_file 0 [ 2541.305683][T31540] total_swap 528384 [ 2541.309517][T31540] total_swapcached 8192 [ 2541.314444][T31540] total_pgpgin 382522 [ 2541.318452][T31540] total_pgpgout 382519 [ 2541.323317][T31540] total_pgfault 785218 [ 2541.327471][T31540] total_pgmajfault 11004 [ 2541.332272][T31540] total_inactive_anon 4096 [ 2541.336707][T31540] total_active_anon 8192 [ 2541.340954][T31540] total_inactive_file 0 [ 2541.345657][T31540] total_active_file 0 [ 2541.349766][T31540] total_unevictable 0 [ 2541.354783][T31540] anon_cost 0 [ 2541.358098][T31540] file_cost 0 [ 2541.361571][T31540] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31540,uid=0 [ 2541.377606][T31540] Memory cgroup out of memory: Killed process 31540 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2541.421369][T31001] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2541.430484][T31001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2541.439003][T31001] usb 4-1: Product: syz [ 2541.444195][T31001] usb 4-1: Manufacturer: syz [ 2541.448789][T31001] usb 4-1: SerialNumber: syz [ 2541.492564][T31001] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 13:36:17 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "9f21283f", {0x1, 0x8, 0x5, 0x6, 0x3}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "be85efa6", {0x1, 0x0, 0xfff, 0x0, 0x7}}) 13:36:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x282, 0x0) close(r0) dup(r0) 13:36:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x10}}]}]}}]}, 0x74}}, 0x0) 13:36:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7a00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}]}]}}]}, 0x478}}, 0x0) [ 2542.118166][T28640] usb 4-1: USB disconnect, device number 84 [ 2542.151248][T15704] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 2542.160540][T28640] usb 4-1: ath9k_htc: USB layer deinitialized [ 2542.184008][T31574] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:17 executing program 0: r0 = semget(0x2, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/54) [ 2542.263999][T31572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:17 executing program 0: getitimer(0x3470826bd13be32b, 0x0) 13:36:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8100}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x11}}]}]}}]}, 0x74}}, 0x0) 13:36:17 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) fcntl$getflags(r0, 0x31a3d84af4d395a1) [ 2542.414579][T31587] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r0, 0x2) [ 2542.480111][T31585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x12}}]}]}}]}, 0x74}}, 0x0) 13:36:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8847}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2542.549768][T31585] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2542.560275][T31583] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2542.615057][T31583] CPU: 0 PID: 31583 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2542.623454][T31583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2542.633549][T31583] Call Trace: [ 2542.636857][T31583] [ 2542.639813][T31583] dump_stack_lvl+0x1e7/0x2e0 [ 2542.644774][T31583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2542.649651][T31597] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2542.649991][T31583] ? __pfx__printk+0x10/0x10 13:36:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x14}}]}]}}]}, 0x74}}, 0x0) 13:36:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)=@ipv6_getroute={0x2c, 0x1a, 0x803, 0x0, 0x0, {}, [@RTA_IIF={0x8}, @RTA_MARK={0x8}]}, 0x2c}}, 0x0) [ 2542.663901][T31583] ? ___ratelimit+0x4c4/0x670 [ 2542.668637][T31583] ? __pfx____ratelimit+0x10/0x10 [ 2542.673701][T31583] dump_header+0xda/0x6a0 [ 2542.678087][T31583] oom_kill_process+0x3a7/0x930 [ 2542.682986][T31583] out_of_memory+0xf67/0x1320 [ 2542.687694][T31583] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2542.693373][T31583] ? __pfx___mutex_lock+0x10/0x10 [ 2542.698442][T31583] ? __pfx_out_of_memory+0x10/0x10 [ 2542.703610][T31583] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2542.709195][T31583] ? __pfx_lock_release+0x10/0x10 [ 2542.714259][T31583] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2542.720374][T31583] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2542.725640][T31583] ? mem_cgroup_iter+0x3e9/0x560 [ 2542.730602][T31583] try_charge_memcg+0xda2/0x18a0 [ 2542.735552][T31583] ? mark_lock+0x9a/0x350 [ 2542.739907][T31583] ? __pfx_try_charge_memcg+0x10/0x10 [ 2542.745309][T31583] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2542.751484][T31583] charge_memcg+0xa2/0x160 [ 2542.755906][T31583] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2542.761997][T31583] __read_swap_cache_async+0x480/0x8b0 [ 2542.767475][T31583] ? mark_lock+0x9a/0x350 [ 2542.771813][T31583] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2542.777812][T31583] swap_cluster_readahead+0x67c/0x810 [ 2542.783212][T31583] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2542.789123][T31583] ? __pfx_lock_release+0x10/0x10 [ 2542.794161][T31583] ? xas_descend+0x37e/0x470 [ 2542.798775][T31583] swapin_readahead+0x1ea/0x1070 [ 2542.803724][T31583] ? filemap_get_entry+0x127/0x4e0 [ 2542.808905][T31583] ? __pfx_swapin_readahead+0x10/0x10 [ 2542.814301][T31583] ? __filemap_get_folio+0x935/0xbc0 [ 2542.819600][T31583] ? swap_cache_get_folio+0x9f/0x570 [ 2542.824903][T31583] do_swap_page+0x791/0x3f40 [ 2542.829513][T31583] ? rcu_is_watching+0x15/0xb0 [ 2542.834313][T31583] ? do_swap_page+0x154/0x3f40 [ 2542.839083][T31583] ? __pfx_do_swap_page+0x10/0x10 [ 2542.844132][T31583] ? pte_offset_map_nolock+0x137/0x1f0 [ 2542.849593][T31583] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2542.855446][T31583] __handle_mm_fault+0x15e8/0x72d0 [ 2542.860581][T31583] ? reacquire_held_locks+0x3eb/0x690 [ 2542.866040][T31583] ? __pfx___handle_mm_fault+0x10/0x10 [ 2542.871511][T31583] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2542.877241][T31583] ? mtree_range_walk+0x6fd/0x8e0 [ 2542.882278][T31583] ? lock_vma_under_rcu+0x18a/0x730 [ 2542.887483][T31583] ? __pfx_lock_release+0x10/0x10 [ 2542.892508][T31583] ? lock_vma_under_rcu+0x2f9/0x730 [ 2542.897728][T31583] ? lock_vma_under_rcu+0x18a/0x730 [ 2542.903025][T31583] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2542.908580][T31583] handle_mm_fault+0x3c1/0x8a0 [ 2542.913358][T31583] exc_page_fault+0x456/0x870 [ 2542.918051][T31583] asm_exc_page_fault+0x26/0x30 [ 2542.922907][T31583] RIP: 0033:0x7fdd6ac2ea72 [ 2542.927332][T31583] Code: 89 d8 48 ba db 34 b6 d7 82 de 1b 43 48 89 d0 48 f7 64 24 58 48 8d 3d ba af 09 00 31 c0 41 8b 36 48 c1 ea 12 48 01 ca 48 89 e9 <48> 2b 15 8f 95 17 00 e8 a2 86 ff ff 49 83 be 88 00 00 00 ff 0f 84 [ 2542.946939][T31583] RSP: 002b:00007fdd6baae0f0 EFLAGS: 00010206 [ 2542.953011][T31583] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007fdd6acd8a24 [ 2542.960985][T31583] RDX: 000000000026cb3a RSI: 0000000000000000 RDI: 00007fdd6acc9a1d [ 2542.968962][T31583] RBP: 00007fdd6acd8a24 R08: 0000000000000003 R09: 00007fff7fbc30b0 [ 2542.977032][T31583] R10: 00007fff7fbc3080 R11: 0000000000079188 R12: 0000000000000000 [ 2542.985005][T31583] R13: 000000000000000b R14: 00007fdd6adabf80 R15: 00007fdd6aecfa48 [ 2542.992998][T31583] 13:36:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) sched_setaffinity(r1, 0x8, &(0x7f0000000c80)=0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c50000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000340), 0x8) openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x189) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0x12, 0x0, 0x1, 0x0, 0x0, 0x4019}, 0x4048080) mkdirat(r0, 0x0, 0x88) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00acac6f59d38d2cdc14a1", @ANYBLOB="924d8879dafe336a5d4f6389e62ae87c0e46ea93ff76b7a84f4662e8e4c18fee6090970d2fd1f651c1c4da261ac215b230bc299867d60b8def0cca281be3d62f7804d14dc26a311af69128eedf4a3b396337177d36ad61f4147df212d452fc46e3db900fd10667d283032c9d661bfd243a88cae5f53e300d1a96146bcd7e9d3f7d2546d662bfac8470b83fca2a70a5d54ae093d596e7fcfc7020a9a1f25f9392ed2561eecfce0abbda36b5b18023e90b5bc380cb02d0aa6386a839c32d9f29545476e29c7730c98c363c370aa20da7e58eb1"], 0x40}, 0x1, 0x0, 0x0, 0x4811}, 0x0) [ 2543.017997][T28640] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2543.031479][T31583] memory: usage 307200kB, limit 307200kB, failcnt 31483 [ 2543.038684][T31583] memory+swap: usage 307760kB, limit 9007199254740988kB, failcnt 0 [ 2543.052553][T31583] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2543.075208][T31583] Memory cgroup stats for /syz4: [ 2543.075365][T31583] cache 0 [ 2543.102237][T31583] rss 12288 [ 2543.114065][T31583] rss_huge 0 [ 2543.121585][T31583] shmem 0 13:36:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x15}}]}]}}]}, 0x74}}, 0x0) 13:36:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8848}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2543.124561][T31583] mapped_file 0 [ 2543.128054][T31583] dirty 0 [ 2543.131002][T31583] writeback 0 [ 2543.155350][T31583] workingset_refault_anon 12899 [ 2543.160250][T31583] workingset_refault_file 0 [ 2543.201474][T31583] swap 573440 [ 2543.204821][T31583] swapcached 12288 [ 2543.208557][T31583] pgpgin 382665 [ 2543.231355][T31583] pgpgout 382662 [ 2543.234956][T31583] pgfault 785408 [ 2543.238572][T31583] pgmajfault 11113 [ 2543.249805][T31583] inactive_anon 4096 [ 2543.266471][T31583] active_anon 8192 [ 2543.270236][T31583] inactive_file 0 [ 2543.285995][T31583] active_file 0 [ 2543.289509][T31583] unevictable 0 13:36:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x18}}]}]}}]}, 0x74}}, 0x0) [ 2543.301406][T31583] hierarchical_memory_limit 314572800 [ 2543.306821][T31583] hierarchical_memsw_limit 9223372036854771712 [ 2543.311452][T28640] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 2543.319080][T31583] total_cache 0 [ 2543.326504][T31583] total_rss 12288 [ 2543.340679][T31583] total_rss_huge 0 13:36:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xb202}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2543.351284][T31583] total_shmem 0 [ 2543.355524][T31583] total_mapped_file 0 [ 2543.365871][T31583] total_dirty 0 [ 2543.371723][T31583] total_writeback 0 [ 2543.377864][T31583] total_workingset_refault_anon 12899 [ 2543.384101][T31583] total_workingset_refault_file 0 [ 2543.389217][T31583] total_swap 573440 [ 2543.393643][T31583] total_swapcached 12288 [ 2543.397997][T31583] total_pgpgin 382665 [ 2543.402596][T31583] total_pgpgout 382662 [ 2543.406858][T31583] total_pgfault 785408 [ 2543.411011][T31583] total_pgmajfault 11113 [ 2543.416303][T31583] total_inactive_anon 4096 [ 2543.425780][T31583] total_active_anon 8192 [ 2543.430140][T31583] total_inactive_file 0 [ 2543.436011][T31583] total_active_file 0 [ 2543.440118][T31583] total_unevictable 0 [ 2543.449335][T31583] anon_cost 0 [ 2543.449373][T31613] wireguard0: entered promiscuous mode [ 2543.454069][T31583] file_cost 0 [ 2543.462673][T31583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31571,uid=0 [ 2543.476639][T31613] wireguard0: entered allmulticast mode [ 2543.478976][T31583] Memory cgroup out of memory: Killed process 31571 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49cfeff]}]}]}}]}, 0x478}}, 0x0) 13:36:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x38}}]}]}}]}, 0x74}}, 0x0) 13:36:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd203}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3a}}]}]}}]}, 0x74}}, 0x0) 13:36:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xda03}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3c}}]}]}}]}, 0x74}}, 0x0) [ 2544.141445][T28640] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2544.150556][T28640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 13:36:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf2ff}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2544.191699][T28640] usb 4-1: Product: syz [ 2544.195921][T28640] usb 4-1: Manufacturer: syz [ 2544.200548][T28640] usb 4-1: SerialNumber: syz [ 2544.292715][T28640] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 13:36:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x48}}]}]}}]}, 0x74}}, 0x0) 13:36:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfff2}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x4c}}]}]}}]}, 0x74}}, 0x0) [ 2544.861469][ T4339] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 13:36:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x4e}}]}]}}]}, 0x74}}, 0x0) [ 2545.345020][T31621] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2545.356748][T31621] CPU: 0 PID: 31621 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2545.365097][T31621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2545.375145][T31621] Call Trace: [ 2545.378418][T31621] [ 2545.381346][T31621] dump_stack_lvl+0x1e7/0x2e0 [ 2545.386032][T31621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2545.391248][T31621] ? __pfx__printk+0x10/0x10 [ 2545.395865][T31621] ? ___ratelimit+0x4c4/0x670 [ 2545.400577][T31621] ? __pfx____ratelimit+0x10/0x10 [ 2545.405634][T31621] dump_header+0xda/0x6a0 [ 2545.409996][T31621] oom_kill_process+0x3a7/0x930 [ 2545.414876][T31621] out_of_memory+0xf67/0x1320 [ 2545.419563][T31621] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2545.425196][T31621] ? __pfx___mutex_lock+0x10/0x10 [ 2545.430227][T31621] ? __pfx_out_of_memory+0x10/0x10 [ 2545.435351][T31621] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2545.440898][T31621] ? __pfx_lock_release+0x10/0x10 [ 2545.445928][T31621] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2545.452012][T31621] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2545.457234][T31621] ? mem_cgroup_iter+0x3e9/0x560 [ 2545.462210][T31621] try_charge_memcg+0xda2/0x18a0 [ 2545.467168][T31621] ? mark_lock+0x9a/0x350 [ 2545.471528][T31621] ? __pfx_try_charge_memcg+0x10/0x10 [ 2545.476941][T31621] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2545.483101][T31621] charge_memcg+0xa2/0x160 [ 2545.487547][T31621] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2545.493630][T31621] __read_swap_cache_async+0x480/0x8b0 [ 2545.499104][T31621] ? mark_lock+0x9a/0x350 [ 2545.503449][T31621] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2545.509473][T31621] ? blk_start_plug+0x6f/0x1b0 [ 2545.514263][T31621] swap_cluster_readahead+0x398/0x810 [ 2545.519660][T31621] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2545.525559][T31621] ? __pfx_lock_release+0x10/0x10 [ 2545.530597][T31621] ? xas_descend+0x37e/0x470 [ 2545.535214][T31621] swapin_readahead+0x1ea/0x1070 [ 2545.540154][T31621] ? filemap_get_entry+0x127/0x4e0 [ 2545.545277][T31621] ? __pfx_swapin_readahead+0x10/0x10 [ 2545.550678][T31621] ? __filemap_get_folio+0x935/0xbc0 [ 2545.555986][T31621] ? swap_cache_get_folio+0x9f/0x570 [ 2545.561282][T31621] do_swap_page+0x791/0x3f40 [ 2545.565871][T31621] ? rcu_is_watching+0x15/0xb0 [ 2545.570661][T31621] ? do_swap_page+0x154/0x3f40 [ 2545.575422][T31621] ? __pfx_do_swap_page+0x10/0x10 [ 2545.580485][T31621] ? pte_offset_map_nolock+0x137/0x1f0 [ 2545.585949][T31621] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2545.591763][T31621] __handle_mm_fault+0x15e8/0x72d0 [ 2545.596894][T31621] ? reacquire_held_locks+0x3eb/0x690 [ 2545.602265][T31621] ? __pfx___handle_mm_fault+0x10/0x10 [ 2545.607737][T31621] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2545.613480][T31621] ? mtree_range_walk+0x6fd/0x8e0 [ 2545.618529][T31621] ? lock_vma_under_rcu+0x18a/0x730 [ 2545.623733][T31621] ? __pfx_lock_release+0x10/0x10 [ 2545.628768][T31621] ? lock_vma_under_rcu+0x2f9/0x730 [ 2545.634009][T31621] ? lock_vma_under_rcu+0x18a/0x730 [ 2545.639210][T31621] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2545.644759][T31621] handle_mm_fault+0x3c1/0x8a0 [ 2545.649557][T31621] exc_page_fault+0x456/0x870 [ 2545.654254][T31621] asm_exc_page_fault+0x26/0x30 [ 2545.659104][T31621] RIP: 0033:0x7fdd6ac52a22 [ 2545.663539][T31621] Code: 54 24 38 e8 50 27 fd ff be 01 00 00 00 48 89 df e8 73 43 03 00 4c 8b 54 24 38 48 8b b3 a0 06 00 00 4c 39 f6 0f 82 c7 08 00 00 <48> 8b 44 24 30 4c 29 f6 4c 29 d0 48 39 f0 0f 82 a2 07 00 00 4c 89 [ 2545.683151][T31621] RSP: 002b:00007fdd6aecf9f0 EFLAGS: 00010246 [ 2545.689226][T31621] RAX: 0000000000000001 RBX: 00007fdd6ba8d6c0 RCX: 000055555742ba30 [ 2545.697195][T31621] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00007fdd6ba8d980 [ 2545.705163][T31621] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2545.713146][T31621] R10: 0000000000021000 R11: 0000000000000149 R12: 00007fdd6aecfc90 [ 2545.721121][T31621] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 2545.729126][T31621] [ 2545.735997][T28640] usb 4-1: USB disconnect, device number 85 [ 2545.743121][T31621] memory: usage 307200kB, limit 307200kB, failcnt 32686 [ 2545.763369][T31621] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 2545.771880][T31621] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2545.779289][T31621] Memory cgroup stats for /syz4: [ 2545.779776][T31621] cache 0 [ 2545.793495][T31621] rss 12288 [ 2545.796670][T31621] rss_huge 0 [ 2545.799939][T31621] shmem 0 [ 2545.806272][T31621] mapped_file 0 [ 2545.810838][T31621] dirty 0 [ 2545.816223][T31621] writeback 0 [ 2545.819528][T31621] workingset_refault_anon 13359 [ 2545.828168][T31621] workingset_refault_file 0 [ 2545.835538][T31621] swap 512000 [ 2545.838848][T31621] swapcached 8192 [ 2545.848555][T31621] pgpgin 383151 [ 2545.852186][T31621] pgpgout 383148 [ 2545.855727][T31621] pgfault 786118 [ 2545.859264][T31621] pgmajfault 11559 [ 2545.866833][T31621] inactive_anon 0 [ 2545.870481][T31621] active_anon 12288 [ 2545.874356][T31621] inactive_file 0 [ 2545.877988][T31621] active_file 0 [ 2545.885359][T31621] unevictable 0 [ 2545.888816][T31621] hierarchical_memory_limit 314572800 [ 2545.894395][T31621] hierarchical_memsw_limit 9223372036854771712 [ 2545.900558][T31621] total_cache 0 [ 2545.904339][T31621] total_rss 12288 [ 2545.907980][T31621] total_rss_huge 0 [ 2545.912037][T31621] total_shmem 0 [ 2545.915506][T31621] total_mapped_file 0 [ 2545.919475][T31621] total_dirty 0 [ 2545.923202][T31621] total_writeback 0 [ 2545.927036][T31621] total_workingset_refault_anon 13359 [ 2545.932470][T31621] total_workingset_refault_file 0 [ 2545.937492][T31621] total_swap 512000 [ 2545.941507][T31621] total_swapcached 8192 [ 2545.945723][T31621] total_pgpgin 383151 [ 2545.949707][T31621] total_pgpgout 383148 [ 2545.954864][T31621] total_pgfault 786118 [ 2545.958927][T31621] total_pgmajfault 11559 [ 2545.963404][T31621] total_inactive_anon 0 [ 2545.967571][T31621] total_active_anon 12288 [ 2545.972066][T31621] total_inactive_file 0 [ 2545.976233][T31621] total_active_file 0 [ 2545.980220][T31621] total_unevictable 0 [ 2545.984377][T31621] anon_cost 0 [ 2545.987667][T31621] file_cost 0 [ 2545.990937][T31621] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31621,uid=0 [ 2546.006697][T31621] Memory cgroup out of memory: Killed process 31621 (syz-executor.4) total-vm:54640kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2546.131384][ T4339] usb 4-1: Service connection timeout for: 256 [ 2546.137583][ T4339] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2546.154520][ T4339] ath9k_htc: Failed to initialize the device [ 2546.160900][T28640] usb 4-1: ath9k_htc: USB layer deinitialized 13:36:21 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "9f21283f", {0x1, 0x8, 0x5, 0x6, 0x3}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "be85efa6", {0x1, 0x0, 0xfff, 0x0, 0x7}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "be85efa6", {0x1, 0x0, 0xfff, 0x0, 0x7}}) 13:36:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x68}}]}]}}]}, 0x74}}, 0x0) 13:36:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x2b, '\x00', [@padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x0, @local}, @hao={0xc9, 0x0, @local}, @generic={0x0, 0x0, "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"}, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x8) 13:36:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}]}]}}]}, 0x478}}, 0x0) 13:36:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2749baca85309be96d5a45bbb29ea06f9cbc7eea15bc1ee369d2707231280f0415df341ab76de90db5ff7ffffffd075b373f51be98db7efbbe8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c1f870adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eacb4389adbb47efb7b3f19046c7f1bd1bf56e58555d96137f95b3aacd74ed1c8a8676468cf2405e48723c6b1ff3698422f88ffed8617dd64330f4c38ba86e3b50da03f4b1e4808aa5c9e9546d7190747c6abc5beab28cec4ff7faa3fab48cdb3d64cfd5d698416752a16f32a54ccef577832e4cf684fce2cb0bab7f6a5821b26483322000000000000596c6e1ac996b8a0924948750b6e52c09d53950e5c8143db8669f8a5bf6511df822532e3c78d019149651255048aab0399e5d6e317b6f3fbc2600ffc3c66c7244b7bcf6b78b5e8c0ee04ce344ceb084b4f2ef09b59a36a92b3874edc559e5bf58a567d385ba92df9121dfa257e60655dcbff581c75107b01b5baaf29ebaf24861c538fefcaecb52a6b69fc450e10645df60a9d50131466113c6aac5abbcf9e9f2f0384da3f9892af413bd87f51f7f0cf61096fd79327fa66effe89a72d7a75d40f0c1ad299f55eafcd52a39649ab6021e30f901933f11092"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 2546.328437][T31657] __nla_validate_parse: 25 callbacks suppressed [ 2546.328457][T31657] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2546.426224][T31663] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6c}}]}]}}]}, 0x74}}, 0x0) 13:36:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2546.613808][T31652] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2546.634767][T31652] CPU: 1 PID: 31652 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2546.643143][T31652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2546.653231][T31652] Call Trace: [ 2546.656531][T31652] [ 2546.659477][T31652] dump_stack_lvl+0x1e7/0x2e0 [ 2546.664193][T31652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2546.669474][T31652] ? __pfx__printk+0x10/0x10 [ 2546.671559][T28640] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2546.674081][T31652] ? ___ratelimit+0x4c4/0x670 [ 2546.686315][T31652] ? __pfx____ratelimit+0x10/0x10 [ 2546.691395][T31652] dump_header+0xda/0x6a0 [ 2546.695759][T31652] oom_kill_process+0x3a7/0x930 [ 2546.700643][T31652] out_of_memory+0xf67/0x1320 [ 2546.705348][T31652] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2546.710984][T31652] ? __pfx___mutex_lock+0x10/0x10 [ 2546.716012][T31652] ? __pfx_out_of_memory+0x10/0x10 [ 2546.721139][T31652] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2546.726694][T31652] ? __pfx_lock_release+0x10/0x10 [ 2546.731742][T31652] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2546.737821][T31652] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2546.743025][T31652] ? mem_cgroup_iter+0x3e9/0x560 [ 2546.747984][T31652] try_charge_memcg+0xda2/0x18a0 [ 2546.752932][T31652] ? mark_lock+0x9a/0x350 [ 2546.757316][T31652] ? __pfx_try_charge_memcg+0x10/0x10 [ 2546.762715][T31652] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2546.768867][T31652] charge_memcg+0xa2/0x160 [ 2546.773290][T31652] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2546.779365][T31652] __read_swap_cache_async+0x480/0x8b0 [ 2546.784826][T31652] ? mark_lock+0x9a/0x350 [ 2546.789162][T31652] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2546.795158][T31652] swap_cluster_readahead+0x67c/0x810 [ 2546.800540][T31652] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2546.806462][T31652] ? __pfx_lock_release+0x10/0x10 [ 2546.811495][T31652] ? xas_descend+0x37e/0x470 [ 2546.816102][T31652] swapin_readahead+0x1ea/0x1070 [ 2546.821045][T31652] ? filemap_get_entry+0x127/0x4e0 [ 2546.826180][T31652] ? __pfx_swapin_readahead+0x10/0x10 [ 2546.831569][T31652] ? __filemap_get_folio+0x935/0xbc0 [ 2546.836863][T31652] ? swap_cache_get_folio+0x9f/0x570 [ 2546.842170][T31652] do_swap_page+0x791/0x3f40 [ 2546.846802][T31652] ? rcu_is_watching+0x15/0xb0 [ 2546.851597][T31652] ? do_swap_page+0x154/0x3f40 [ 2546.856360][T31652] ? __pfx_do_swap_page+0x10/0x10 [ 2546.861385][T31652] ? pte_offset_map_nolock+0x137/0x1f0 [ 2546.866850][T31652] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2546.872663][T31652] __handle_mm_fault+0x15e8/0x72d0 [ 2546.877796][T31652] ? reacquire_held_locks+0x3eb/0x690 [ 2546.883174][T31652] ? __pfx___handle_mm_fault+0x10/0x10 [ 2546.888649][T31652] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2546.894380][T31652] ? mtree_range_walk+0x6fd/0x8e0 [ 2546.899404][T31652] ? lock_vma_under_rcu+0x18a/0x730 [ 2546.904603][T31652] ? __pfx_lock_release+0x10/0x10 [ 2546.909629][T31652] ? lock_vma_under_rcu+0x2f9/0x730 [ 2546.914850][T31652] ? lock_vma_under_rcu+0x18a/0x730 [ 2546.920048][T31652] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2546.925599][T31652] handle_mm_fault+0x3c1/0x8a0 [ 2546.930389][T31652] exc_page_fault+0x456/0x870 [ 2546.935094][T31652] asm_exc_page_fault+0x26/0x30 [ 2546.939946][T31652] RIP: 0033:0x7fdd6ac369e8 [ 2546.944370][T31652] Code: 1f 00 41 57 41 56 41 55 49 89 fd 41 54 55 53 48 83 ec 08 40 84 f6 0f 84 16 02 00 00 31 d2 48 39 3d 8d 55 17 00 0f 95 c2 31 ed <48> 83 bf 88 00 00 00 ff 8d 14 95 01 00 00 00 0f 84 53 02 00 00 41 [ 2546.963991][T31652] RSP: 002b:00007fdd6aecfac0 EFLAGS: 00010246 [ 2546.970066][T31652] RAX: 00007fdd6a800068 RBX: 00007fdd6adabf80 RCX: 00007fdd6a800000 [ 2546.978041][T31652] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fdd6adabf80 [ 2546.986018][T31652] RBP: 0000000000000000 R08: 00007fdd6ac00000 R09: 00007fdd6adabf8c [ 2546.994512][T31652] R10: 00007fdd6aecfc60 R11: 0000000000000246 R12: 00007fdd6ada80c0 [ 2547.002481][T31652] R13: 00007fdd6adabf80 R14: 00007fdd6aecfc80 R15: 00007fdd6adabf80 [ 2547.010487][T31652] [ 2547.024952][T31652] memory: usage 307200kB, limit 307200kB, failcnt 33073 [ 2547.035865][T31669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:21 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000280)=""/95, 0x5f}], 0x2, 0x0, 0x0) [ 2547.069506][T31652] memory+swap: usage 307720kB, limit 9007199254740988kB, failcnt 0 [ 2547.086798][T31672] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2547.097476][T31652] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 13:36:22 executing program 0: sched_setscheduler(0x0, 0x0, &(0x7f0000004440)) [ 2547.116842][T31652] Memory cgroup stats for /syz4: [ 2547.116988][T31652] cache 0 [ 2547.135934][T31652] rss 12288 [ 2547.139651][T31652] rss_huge 0 [ 2547.145000][T31652] shmem 0 [ 2547.147972][T31652] mapped_file 0 [ 2547.156697][T31652] dirty 0 [ 2547.159659][T31652] writeback 0 [ 2547.164660][T31652] workingset_refault_anon 13482 13:36:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x74}}]}]}}]}, 0x74}}, 0x0) 13:36:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2547.170072][T31652] workingset_refault_file 0 [ 2547.180141][T31652] swap 532480 [ 2547.187226][T31652] swapcached 8192 [ 2547.190885][T31652] pgpgin 383303 [ 2547.196897][T31652] pgpgout 383300 [ 2547.207219][T31652] pgfault 786350 [ 2547.210879][T31652] pgmajfault 11691 [ 2547.216107][T31652] inactive_anon 4096 [ 2547.220025][T31652] active_anon 8192 [ 2547.241875][T31652] inactive_file 0 [ 2547.244688][T31677] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2547.245520][T31652] active_file 0 [ 2547.245531][T31652] unevictable 0 [ 2547.245556][T31652] hierarchical_memory_limit 314572800 [ 2547.245566][T31652] hierarchical_memsw_limit 9223372036854771712 [ 2547.245577][T31652] total_cache 0 [ 2547.245586][T31652] total_rss 12288 [ 2547.245594][T31652] total_rss_huge 0 [ 2547.261596][T28640] usb 4-1: too many configurations: 98, using maximum allowed: 8 13:36:22 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000940)='ns/ipc\x00') [ 2547.289749][T31652] total_shmem 0 [ 2547.298991][T31652] total_mapped_file 0 [ 2547.307124][T31652] total_dirty 0 [ 2547.310895][T31652] total_writeback 0 [ 2547.319399][T31680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2547.324934][T31652] total_workingset_refault_anon 13482 [ 2547.349809][T31677] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2547.362462][T31652] total_workingset_refault_file 0 [ 2547.367509][T31652] total_swap 532480 13:36:22 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 13:36:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x7a}}]}]}}]}, 0x74}}, 0x0) 13:36:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2547.391708][T31652] total_swapcached 8192 [ 2547.395901][T31652] total_pgpgin 383303 [ 2547.399896][T31652] total_pgpgout 383300 [ 2547.415635][T31652] total_pgfault 786350 [ 2547.420254][T31652] total_pgmajfault 11691 13:36:22 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @ipv4}}}, 0x88) [ 2547.440417][T31652] total_inactive_anon 4096 [ 2547.446348][T31652] total_active_anon 8192 [ 2547.459117][T31652] total_inactive_file 0 [ 2547.476823][T31652] total_active_file 0 [ 2547.480835][T31652] total_unevictable 0 [ 2547.483273][T31689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2547.503876][T31652] anon_cost 0 [ 2547.507231][T31652] file_cost 0 [ 2547.510532][T31652] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31652,uid=0 [ 2547.522363][T31689] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2547.534367][T31652] Memory cgroup out of memory: Killed process 31652 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2547.555207][T31690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:22 executing program 0: ptrace$poke(0x4, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000004440)) 13:36:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}]}]}}]}, 0x478}}, 0x0) 13:36:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x84}}]}]}}]}, 0x74}}, 0x0) 13:36:22 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000740)) 13:36:22 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240), 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000300), 0x8) 13:36:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xde}}]}]}}]}, 0x74}}, 0x0) 13:36:22 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000001c00), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000001c40)) [ 2547.847559][T31700] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2547.883960][T31700] CPU: 1 PID: 31700 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2547.892693][T31700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2547.902786][T31700] Call Trace: [ 2547.906100][T31700] [ 2547.909058][T31700] dump_stack_lvl+0x1e7/0x2e0 [ 2547.913776][T31700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2547.919022][T31700] ? __pfx__printk+0x10/0x10 [ 2547.923643][T31700] ? ___ratelimit+0x4c4/0x670 [ 2547.928365][T31700] ? __pfx____ratelimit+0x10/0x10 [ 2547.933423][T31700] dump_header+0xda/0x6a0 [ 2547.937788][T31700] oom_kill_process+0x3a7/0x930 [ 2547.942664][T31700] out_of_memory+0xf67/0x1320 13:36:22 executing program 0: clock_gettime(0x1, 0x0) rt_sigtimedwait(&(0x7f0000000140)={[0x8]}, 0x0, 0x0, 0x8) rt_sigtimedwait(0x0, &(0x7f00000003c0), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:36:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2547.947363][T31700] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2547.953024][T31700] ? __pfx___mutex_lock+0x10/0x10 [ 2547.958082][T31700] ? __pfx_out_of_memory+0x10/0x10 [ 2547.963239][T31700] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2547.968812][T31700] ? __pfx_lock_release+0x10/0x10 [ 2547.973866][T31700] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2547.979987][T31700] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2547.985215][T31700] ? mem_cgroup_iter+0x3e9/0x560 [ 2547.990193][T31700] try_charge_memcg+0xda2/0x18a0 [ 2547.995188][T31700] ? __pfx_try_charge_memcg+0x10/0x10 [ 2548.000584][T31700] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2548.006327][T31700] ? __pfx_lock_release+0x10/0x10 [ 2548.011391][T31700] ? memcg_account_kmem+0x1e7/0x210 [ 2548.016632][T31700] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2548.022469][T31700] __memcg_kmem_charge_page+0xe1/0x250 [ 2548.027966][T31700] memcg_charge_kernel_stack+0x3f8/0x550 [ 2548.033643][T31700] dup_task_struct+0x15d/0x7d0 [ 2548.038446][T31700] copy_process+0x5d5/0x3fc0 [ 2548.043099][T31700] ? __might_fault+0xa9/0x120 13:36:22 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xa}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2548.047811][T31700] ? __pfx_lock_release+0x10/0x10 [ 2548.052877][T31700] ? __pfx_copy_process+0x10/0x10 [ 2548.057930][T31700] ? __might_fault+0xc5/0x120 [ 2548.062634][T31700] ? __asan_memset+0x23/0x50 [ 2548.067247][T31700] kernel_clone+0x21d/0x8d0 [ 2548.071771][T31700] ? __pfx_kernel_clone+0x10/0x10 [ 2548.076840][T31700] __se_sys_clone3+0x2cb/0x350 [ 2548.081634][T31700] ? __pfx___se_sys_clone3+0x10/0x10 [ 2548.086991][T31700] ? do_syscall_64+0x108/0x240 [ 2548.091795][T31700] ? do_syscall_64+0xb4/0x240 [ 2548.096511][T31700] do_syscall_64+0xf9/0x240 [ 2548.101047][T31700] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2548.106978][T31700] RIP: 0033:0x7fdd6aca9b99 [ 2548.111413][T31700] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2548.131043][T31700] RSP: 002b:00007fdd6aecf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2548.131625][T28640] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2548.139462][T31700] RAX: ffffffffffffffda RBX: 00007fdd6ac52270 RCX: 00007fdd6aca9b99 [ 2548.139480][T31700] RDX: 00007fdd6ac52270 RSI: 0000000000000058 RDI: 00007fdd6aecf960 [ 2548.139496][T31700] RBP: 00007fdd6baae6c0 R08: 00007fdd6baae6c0 R09: 00007fdd6aecfa47 [ 2548.139512][T31700] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2548.139526][T31700] R13: 000000000000000b R14: 00007fdd6aecf960 R15: 00007fdd6aecfa48 [ 2548.139556][T31700] [ 2548.178917][T31700] memory: usage 307180kB, limit 307200kB, failcnt 33250 [ 2548.201959][T28640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2548.209497][T31700] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 2548.224781][T31700] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2548.238751][T31700] Memory cgroup stats for /syz4: [ 2548.238891][T31700] cache 0 [ 2548.247454][T31700] rss 4096 [ 2548.250758][T31700] rss_huge 0 [ 2548.252512][T28640] usb 4-1: Product: syz [ 2548.259820][T28640] usb 4-1: Manufacturer: syz [ 2548.261970][T31700] shmem 0 [ 2548.267067][T28640] usb 4-1: SerialNumber: syz [ 2548.269761][T31700] mapped_file 0 [ 2548.276240][T31700] dirty 0 [ 2548.279342][T31700] writeback 0 [ 2548.283304][T31700] workingset_refault_anon 13510 [ 2548.294293][T31700] workingset_refault_file 0 13:36:23 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xb}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2548.303624][T31700] swap 569344 [ 2548.309437][T31700] swapcached 0 [ 2548.315055][T31700] pgpgin 383366 [ 2548.318741][T31700] pgpgout 383365 [ 2548.322965][T31700] pgfault 786454 [ 2548.325056][T28640] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2548.336919][T31700] pgmajfault 11742 13:36:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x102}}]}]}}]}, 0x74}}, 0x0) [ 2548.354612][T31700] inactive_anon 0 [ 2548.365085][T31700] active_anon 4096 [ 2548.375669][T31700] inactive_file 0 [ 2548.386419][T31700] active_file 0 [ 2548.396436][T31700] unevictable 0 [ 2548.403029][T31700] hierarchical_memory_limit 314572800 [ 2548.414131][T31700] hierarchical_memsw_limit 9223372036854771712 [ 2548.423168][T31700] total_cache 0 [ 2548.426813][T31700] total_rss 4096 [ 2548.436400][T31700] total_rss_huge 0 [ 2548.440228][T31700] total_shmem 0 [ 2548.444102][T31700] total_mapped_file 0 [ 2548.448232][T31700] total_dirty 0 [ 2548.458647][T31700] total_writeback 0 [ 2548.463936][T31700] total_workingset_refault_anon 13510 [ 2548.469476][T31700] total_workingset_refault_file 0 [ 2548.480547][T31700] total_swap 569344 [ 2548.484747][T31700] total_swapcached 0 [ 2548.488744][T31700] total_pgpgin 383366 [ 2548.496802][T31700] total_pgpgout 383365 [ 2548.503684][T31700] total_pgfault 786454 [ 2548.507854][T31700] total_pgmajfault 11742 [ 2548.514003][T31700] total_inactive_anon 0 [ 2548.518357][T31700] total_active_anon 4096 [ 2548.523155][T31700] total_inactive_file 0 [ 2548.527427][T31700] total_active_file 0 [ 2548.532786][T31700] total_unevictable 0 [ 2548.536892][T31700] anon_cost 0 [ 2548.540281][T31700] file_cost 0 [ 2548.544510][T31700] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31700,uid=0 [ 2548.560247][T31700] Memory cgroup out of memory: Killed process 31700 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2548.911623][T15709] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2549.524249][T22829] usb 4-1: USB disconnect, device number 86 13:36:24 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xc}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:24 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0xffffffffffffff24, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e480, [{{0x9, 0x2, 0xfffffffffffffe96}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) 13:36:24 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240), 0x8) 13:36:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69cfeff]}]}]}}]}, 0x478}}, 0x0) 13:36:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x13c}}]}]}}]}, 0x74}}, 0x0) 13:36:25 executing program 0: socket(0x1d, 0x0, 0x1ff) [ 2550.135379][T15709] usb 4-1: Service connection timeout for: 256 [ 2550.161221][T15709] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2550.181237][T15709] ath9k_htc: Failed to initialize the device 13:36:25 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xd}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1be}}]}]}}]}, 0x74}}, 0x0) 13:36:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5e27, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) [ 2550.211663][T22829] usb 4-1: ath9k_htc: USB layer deinitialized 13:36:25 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xe}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={@loopback, 0x0, r1}) 13:36:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1ea}}]}]}}]}, 0x74}}, 0x0) [ 2550.410769][T31731] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2550.445762][T31731] CPU: 0 PID: 31731 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2550.454153][T31731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2550.464227][T31731] Call Trace: [ 2550.467531][T31731] [ 2550.470481][T31731] dump_stack_lvl+0x1e7/0x2e0 [ 2550.475212][T31731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2550.480462][T31731] ? __pfx__printk+0x10/0x10 [ 2550.485079][T31731] ? ___ratelimit+0x4c4/0x670 [ 2550.490321][T31731] ? __pfx____ratelimit+0x10/0x10 [ 2550.495389][T31731] dump_header+0xda/0x6a0 [ 2550.499769][T31731] oom_kill_process+0x3a7/0x930 [ 2550.504667][T31731] out_of_memory+0xf67/0x1320 [ 2550.509402][T31731] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2550.515070][T31731] ? __pfx___mutex_lock+0x10/0x10 [ 2550.520107][T31731] ? __pfx_out_of_memory+0x10/0x10 [ 2550.525236][T31731] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2550.530793][T31731] ? __pfx_lock_release+0x10/0x10 [ 2550.535828][T31731] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2550.541902][T31731] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2550.547108][T31731] ? mem_cgroup_iter+0x3e9/0x560 [ 2550.552052][T31731] try_charge_memcg+0xda2/0x18a0 [ 2550.556991][T31731] ? mark_lock+0x9a/0x350 [ 2550.561341][T31731] ? __pfx_try_charge_memcg+0x10/0x10 [ 2550.566738][T31731] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2550.572913][T31731] charge_memcg+0xa2/0x160 [ 2550.577340][T31731] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2550.583417][T31731] __read_swap_cache_async+0x480/0x8b0 [ 2550.588891][T31731] ? mark_lock+0x9a/0x350 [ 2550.593248][T31731] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2550.599251][T31731] swap_cluster_readahead+0x67c/0x810 [ 2550.604645][T31731] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2550.610557][T31731] ? __pfx_lock_release+0x10/0x10 [ 2550.615590][T31731] ? xas_descend+0x37e/0x470 [ 2550.620198][T31731] swapin_readahead+0x1ea/0x1070 [ 2550.625152][T31731] ? filemap_get_entry+0x127/0x4e0 [ 2550.630294][T31731] ? __pfx_swapin_readahead+0x10/0x10 [ 2550.635683][T31731] ? __filemap_get_folio+0x935/0xbc0 [ 2550.640978][T31731] ? swap_cache_get_folio+0x9f/0x570 [ 2550.646285][T31731] do_swap_page+0x791/0x3f40 [ 2550.650893][T31731] ? rcu_is_watching+0x15/0xb0 [ 2550.655678][T31731] ? do_swap_page+0x154/0x3f40 [ 2550.660440][T31731] ? __pfx_do_swap_page+0x10/0x10 [ 2550.665465][T31731] ? pte_offset_map_nolock+0x137/0x1f0 [ 2550.670937][T31731] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2550.676751][T31731] __handle_mm_fault+0x15e8/0x72d0 [ 2550.681886][T31731] ? reacquire_held_locks+0x3eb/0x690 [ 2550.687259][T31731] ? __pfx___handle_mm_fault+0x10/0x10 [ 2550.692751][T31731] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2550.698542][T31731] ? mtree_range_walk+0x6fd/0x8e0 [ 2550.703575][T31731] ? lock_vma_under_rcu+0x18a/0x730 [ 2550.708784][T31731] ? __pfx_lock_release+0x10/0x10 [ 2550.713829][T31731] ? lock_vma_under_rcu+0x2f9/0x730 [ 2550.719053][T31731] ? lock_vma_under_rcu+0x18a/0x730 [ 2550.724259][T31731] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2550.729821][T31731] handle_mm_fault+0x3c1/0x8a0 [ 2550.734602][T31731] exc_page_fault+0x456/0x870 [ 2550.739291][T31731] asm_exc_page_fault+0x26/0x30 [ 2550.744144][T31731] RIP: 0033:0x7fdd6ac371b5 [ 2550.748561][T31731] Code: c0 0f 83 18 0d 00 00 49 89 ca 48 89 ce 48 89 cf 48 89 c8 49 c1 ea 08 48 c1 ee 10 4c 8d 42 18 0f b6 dd 48 c1 ef 18 48 c1 e8 20 <48> 0f af 05 cb e4 c9 00 48 03 42 10 41 81 e2 fe 00 00 00 4c 89 84 [ 2550.768189][T31731] RSP: 002b:00007fdd6aecfb30 EFLAGS: 00010246 [ 2550.774354][T31731] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000008 [ 2550.782345][T31731] RDX: 00007fdd6a800078 RSI: 0000000000000000 RDI: 0000000000000000 [ 2550.790661][T31731] RBP: 0000000000000000 R08: 00007fdd6a800090 R09: 00007fff7fbc30b0 [ 2550.798634][T31731] R10: 0000000000000000 R11: 0000000000079708 R12: 00007fdd6aecfcd0 [ 2550.806603][T31731] R13: 0000000000000fc1 R14: 00007fdd6aecfce8 R15: 00007fdd6aecfc38 [ 2550.814596][T31731] [ 2550.819601][T31731] memory: usage 307188kB, limit 307200kB, failcnt 33561 13:36:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x201}}]}]}}]}, 0x74}}, 0x0) 13:36:25 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xf}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) io_setup(0x5751, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000000)="6ef632c0735436258d", 0x9}]) [ 2550.858594][T31731] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 2550.868852][T31731] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 2550.890466][T22829] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2550.892141][T31731] Memory cgroup stats for /syz4: [ 2550.898436][T31731] cache 0 [ 2550.921835][T31731] rss 12288 [ 2550.929786][T31731] rss_huge 0 [ 2550.956363][T31731] shmem 0 [ 2550.959483][T31731] mapped_file 0 [ 2550.967854][T31731] dirty 0 [ 2550.971957][T31731] writeback 0 [ 2550.975380][T31731] workingset_refault_anon 13626 [ 2550.980368][T31731] workingset_refault_file 0 [ 2550.990467][T31731] swap 548864 [ 2550.994001][T31731] swapcached 8192 [ 2550.997788][T31731] pgpgin 383506 [ 2551.007268][T31731] pgpgout 383503 [ 2551.010984][T31731] pgfault 786653 13:36:25 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x10}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x21e}}]}]}}]}, 0x74}}, 0x0) [ 2551.020029][T31731] pgmajfault 11836 [ 2551.030865][T31731] inactive_anon 0 [ 2551.034965][T31731] active_anon 12288 [ 2551.039330][T31731] inactive_file 0 13:36:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), r0) [ 2551.072394][T31731] active_file 0 [ 2551.075907][T31731] unevictable 0 [ 2551.079385][T31731] hierarchical_memory_limit 314572800 [ 2551.095690][T31731] hierarchical_memsw_limit 9223372036854771712 [ 2551.118046][T31731] total_cache 0 13:36:26 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x11}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2551.124772][T31731] total_rss 12288 [ 2551.133157][T31731] total_rss_huge 0 [ 2551.145552][T31731] total_shmem 0 [ 2551.150114][T31731] total_mapped_file 0 [ 2551.158235][T31731] total_dirty 0 [ 2551.164974][T31731] total_writeback 0 [ 2551.168891][T31731] total_workingset_refault_anon 13626 [ 2551.178124][T31731] total_workingset_refault_file 0 [ 2551.183948][T22829] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 2551.187724][T31731] total_swap 548864 [ 2551.196064][T31731] total_swapcached 8192 13:36:26 executing program 0: r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 2551.223832][T31731] total_pgpgin 383506 [ 2551.233796][T31731] total_pgpgout 383503 [ 2551.240083][T31731] total_pgfault 786653 [ 2551.244986][T31731] total_pgmajfault 11836 [ 2551.250012][T31731] total_inactive_anon 0 [ 2551.255106][T31731] total_active_anon 12288 [ 2551.259592][T31731] total_inactive_file 0 [ 2551.264882][T31731] total_active_file 0 [ 2551.269042][T31731] total_unevictable 0 [ 2551.286667][T31731] anon_cost 0 [ 2551.290009][T31731] file_cost 0 [ 2551.311551][T22829] usb 4-1: config index 0 descriptor too short (expected 9, got 0) 13:36:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x252}}]}]}}]}, 0x74}}, 0x0) [ 2551.315847][T31731] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31731,uid=0 [ 2551.351395][T22829] usb 4-1: can't read configurations, error -22 13:36:26 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000008c0), 0xffffffffffffffff) 13:36:26 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x12}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2551.394321][T31770] __nla_validate_parse: 30 callbacks suppressed [ 2551.394342][T31770] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2551.422215][T31731] Memory cgroup out of memory: Killed process 31731 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}]}]}}]}, 0x478}}, 0x0) [ 2551.464296][T31776] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2551.502521][T22829] usb 4-1: new high-speed USB device number 88 using dummy_hcd 13:36:26 executing program 0: r0 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000040)) [ 2551.511022][T31778] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x266}}]}]}}]}, 0x74}}, 0x0) 13:36:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, &(0x7f0000000540)}, 0x90) [ 2551.569711][T31778] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:26 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x14}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:26 executing program 0: openat$mixer(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) [ 2551.655062][T31787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2551.720260][T31790] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) 13:36:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x278}}]}]}}]}, 0x74}}, 0x0) 13:36:26 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x15}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2551.792176][T31790] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2551.811686][T22829] usb 4-1: too many configurations: 128, using maximum allowed: 8 13:36:26 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x0, 0x0, 0x1, 0x0, 0x3f}, 0x20) [ 2551.887900][T31799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2551.941456][T22829] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2551.954570][T22829] usb 4-1: can't read configurations, error -22 [ 2551.968033][T22829] usb usb4-port1: attempt power cycle [ 2552.006327][T31802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2552.049892][T31804] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2552.380338][T31781] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2552.391303][T22829] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2552.392198][T31781] CPU: 0 PID: 31781 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2552.407530][T31781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2552.417592][T31781] Call Trace: [ 2552.420886][T31781] [ 2552.423857][T31781] dump_stack_lvl+0x1e7/0x2e0 [ 2552.428605][T31781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2552.433819][T31781] ? __pfx__printk+0x10/0x10 [ 2552.438452][T31781] ? ___ratelimit+0x4c4/0x670 [ 2552.443160][T31781] ? __pfx____ratelimit+0x10/0x10 [ 2552.448210][T31781] dump_header+0xda/0x6a0 [ 2552.452563][T31781] oom_kill_process+0x3a7/0x930 [ 2552.457424][T31781] out_of_memory+0xf67/0x1320 [ 2552.462119][T31781] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2552.467780][T31781] ? __pfx___mutex_lock+0x10/0x10 [ 2552.472854][T31781] ? __pfx_out_of_memory+0x10/0x10 [ 2552.477988][T31781] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2552.483547][T31781] ? __pfx_lock_release+0x10/0x10 [ 2552.488591][T31781] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2552.495102][T31781] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2552.500311][T31781] ? mem_cgroup_iter+0x3e9/0x560 [ 2552.505264][T31781] try_charge_memcg+0xda2/0x18a0 [ 2552.510215][T31781] ? mark_lock+0x9a/0x350 [ 2552.514564][T31781] ? __pfx_try_charge_memcg+0x10/0x10 [ 2552.519961][T31781] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2552.526118][T31781] charge_memcg+0xa2/0x160 [ 2552.530540][T31781] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2552.536613][T31781] __read_swap_cache_async+0x480/0x8b0 [ 2552.542081][T31781] ? mark_lock+0x9a/0x350 [ 2552.546422][T31781] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2552.552418][T31781] swap_cluster_readahead+0x67c/0x810 [ 2552.557812][T31781] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2552.563726][T31781] ? __pfx_lock_release+0x10/0x10 [ 2552.568774][T31781] ? xas_descend+0x37e/0x470 [ 2552.573403][T31781] swapin_readahead+0x1ea/0x1070 [ 2552.578358][T31781] ? filemap_get_entry+0x127/0x4e0 [ 2552.583500][T31781] ? __pfx_swapin_readahead+0x10/0x10 [ 2552.588895][T31781] ? __filemap_get_folio+0x935/0xbc0 [ 2552.594196][T31781] ? swap_cache_get_folio+0x9f/0x570 [ 2552.599493][T31781] do_swap_page+0x791/0x3f40 [ 2552.604134][T31781] ? __lock_acquire+0x1345/0x1fd0 [ 2552.609182][T31781] ? rcu_is_watching+0x15/0xb0 [ 2552.613992][T31781] ? do_swap_page+0x154/0x3f40 [ 2552.618761][T31781] ? __pfx_do_swap_page+0x10/0x10 [ 2552.623817][T31781] ? pte_offset_map_nolock+0x137/0x1f0 [ 2552.629297][T31781] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2552.635113][T31781] ? __pfx_validate_chain+0x10/0x10 [ 2552.640322][T31781] __handle_mm_fault+0x15e8/0x72d0 [ 2552.645464][T31781] ? __pfx___handle_mm_fault+0x10/0x10 [ 2552.650937][T31781] ? mt_find+0x226/0x850 [ 2552.655192][T31781] ? __pfx_lock_release+0x10/0x10 [ 2552.660238][T31781] ? mt_find+0x62d/0x850 [ 2552.664506][T31781] ? mt_find+0x226/0x850 [ 2552.668780][T31781] ? find_vma+0x142/0x1c0 [ 2552.673137][T31781] ? __pfx_find_vma+0x10/0x10 [ 2552.677823][T31781] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2552.683845][T31781] handle_mm_fault+0x3c1/0x8a0 [ 2552.688677][T31781] exc_page_fault+0x2ad/0x870 [ 2552.693390][T31781] asm_exc_page_fault+0x26/0x30 [ 2552.698245][T31781] RIP: 0010:__get_user_8+0x11/0x20 [ 2552.703365][T31781] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2552.722981][T31781] RSP: 0000:ffffc90015807d78 EFLAGS: 00050202 [ 2552.729059][T31781] RAX: 000055555742ada8 RBX: ffff8881587fee78 RCX: ffffc90015807c03 [ 2552.737125][T31781] RDX: 0000000000000000 RSI: ffffffff8baac7a0 RDI: ffffffff8bfe6ca0 [ 2552.745113][T31781] RBP: ffffc90015807ec0 R08: ffffffff8f856cef R09: 1ffffffff1f0ad9d [ 2552.753088][T31781] R10: dffffc0000000000 R11: fffffbfff1f0ad9e R12: ffffc90015807d80 [ 2552.761064][T31781] R13: ffffc90015807fd8 R14: dffffc0000000000 R15: ffff8881587fd940 [ 2552.769060][T31781] __rseq_handle_notify_resume+0x158/0x1490 [ 2552.774991][T31781] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2552.781377][T31781] ? irqentry_exit_to_user_mode+0x52/0x270 [ 2552.787201][T31781] irqentry_exit_to_user_mode+0xbb/0x270 [ 2552.793376][T31781] exc_page_fault+0x587/0x870 [ 2552.798069][T31781] asm_exc_page_fault+0x26/0x30 [ 2552.802925][T31781] RIP: 0033:0x7fdd6ac86ef6 [ 2552.807346][T31781] Code: e8 c4 00 49 83 c7 01 49 83 c4 01 4d 3b 7d 00 73 33 4c 39 e7 0f 83 22 ff ff ff 48 8d 3d 33 90 0f 00 e8 2e e0 fc ff 48 8b 04 24 <4c> 89 30 48 8b 44 24 08 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f [ 2552.826958][T31781] RSP: 002b:00007fdd6aecf990 EFLAGS: 00010206 [ 2552.833035][T31781] RAX: 000055555742ba30 RBX: 0000000000000128 RCX: 000055555742ba30 [ 2552.841038][T31781] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007fdd6ad7ff20 [ 2552.849019][T31781] RBP: 0000000000000020 R08: 0000000000000001 R09: 0000000000000000 [ 2552.856998][T31781] R10: 0000000000021000 R11: 0000000000000149 R12: 0000000000000002 [ 2552.864973][T31781] R13: 00007fdd6b8d5b60 R14: 0000000000000000 R15: 0000000000000002 [ 2552.872978][T31781] [ 2552.879132][T31781] memory: usage 307200kB, limit 307200kB, failcnt 34630 [ 2552.890487][T31781] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 2552.898815][T31781] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2552.906212][T31781] Memory cgroup stats for /syz4: [ 2552.906342][T31781] cache 0 [ 2552.918214][T31781] rss 12288 [ 2552.924022][T31781] rss_huge 0 [ 2552.927347][T31781] shmem 0 [ 2552.930357][T31781] mapped_file 0 [ 2552.931673][T22829] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 2552.935721][T31781] dirty 0 [ 2552.944841][T31781] writeback 0 [ 2552.948261][T31781] workingset_refault_anon 14010 [ 2552.953513][T31781] workingset_refault_file 0 [ 2552.958107][T31781] swap 512000 [ 2552.961751][T31781] swapcached 8192 [ 2552.965490][T31781] pgpgin 383915 [ 2552.969028][T31781] pgpgout 383912 [ 2552.972981][T31781] pgfault 787231 [ 2552.977323][T31781] pgmajfault 12199 [ 2552.981060][T31781] inactive_anon 0 [ 2552.986768][T31781] active_anon 12288 [ 2552.990579][T31781] inactive_file 0 [ 2552.994927][T31781] active_file 0 [ 2552.998522][T31781] unevictable 0 [ 2553.002292][T31781] hierarchical_memory_limit 314572800 [ 2553.007767][T31781] hierarchical_memsw_limit 9223372036854771712 [ 2553.014304][T31781] total_cache 0 [ 2553.017832][T31781] total_rss 12288 [ 2553.021779][T31781] total_rss_huge 0 [ 2553.025616][T31781] total_shmem 0 [ 2553.029175][T31781] total_mapped_file 0 [ 2553.033411][T31781] total_dirty 0 [ 2553.036895][T31781] total_writeback 0 [ 2553.040725][T31781] total_workingset_refault_anon 14010 [ 2553.046563][T31781] total_workingset_refault_file 0 [ 2553.051658][T31781] total_swap 512000 [ 2553.055470][T31781] total_swapcached 8192 [ 2553.059651][T31781] total_pgpgin 383915 [ 2553.063915][T22829] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2553.066833][T31781] total_pgpgout 383912 [ 2553.072067][T22829] usb 4-1: can't read configurations, error -22 [ 2553.082998][T31781] total_pgfault 787231 [ 2553.087088][T31781] total_pgmajfault 12199 [ 2553.093029][T31781] total_inactive_anon 0 [ 2553.097219][T31781] total_active_anon 12288 [ 2553.101809][T31781] total_inactive_file 0 [ 2553.105980][T31781] total_active_file 0 [ 2553.109987][T31781] total_unevictable 0 [ 2553.114147][T31781] anon_cost 0 [ 2553.117449][T31781] file_cost 0 13:36:28 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0xffffffffffffff24, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e480, [{{0x9, 0x2, 0xfffffffffffffe96}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) 13:36:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000400)={0x44, r1, 0x13, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5, 0x4, 's'}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 13:36:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x27c}}]}]}}]}, 0x74}}, 0x0) 13:36:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x18}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2553.120804][T31781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31781,uid=0 13:36:28 executing program 0: openat$bsg(0xffffff9c, &(0x7f0000001380), 0x0, 0x0) [ 2553.187793][T31781] Memory cgroup out of memory: Killed process 31781 (syz-executor.4) total-vm:54640kB, anon-rss:368kB, file-rss:8816kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x2f0}}]}]}}]}, 0x74}}, 0x0) 13:36:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}]}]}}]}, 0x478}}, 0x0) 13:36:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x6, 0x4) 13:36:28 executing program 0: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) 13:36:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x300}}]}]}}]}, 0x74}}, 0x0) 13:36:28 executing program 0: syz_genetlink_get_family_id$smc(&(0x7f00000008c0), 0xffffffffffffffff) 13:36:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x48}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2553.522045][T22829] usb 4-1: new high-speed USB device number 90 using dummy_hcd 13:36:28 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, r0) 13:36:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x31e}}]}]}}]}, 0x74}}, 0x0) 13:36:28 executing program 0: r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 13:36:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4c}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2553.651585][T22829] usb 4-1: too many configurations: 128, using maximum allowed: 8 13:36:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) io_setup(0x5751, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000000)="0394a3f38be8bf12eb", 0x9, 0x1}]) [ 2553.771698][T22829] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2553.786555][T22829] usb 4-1: can't read configurations, error -22 [ 2553.800020][T22829] usb usb4-port1: unable to enumerate USB device 13:36:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x38a}}]}]}}]}, 0x74}}, 0x0) 13:36:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x60}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="04020000", @ANYRES16, @ANYBLOB="01"], 0x204}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x3}, {0x4}}]}, 0x20}}, 0x0) 13:36:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3a2}}]}]}}]}, 0x74}}, 0x0) 13:36:28 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000002600), 0xffffffffffffffff) 13:36:28 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x68}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:29 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)={0x14, r0, 0x1}, 0x14}}, 0x0) 13:36:29 executing program 0: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 13:36:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x500}}]}]}}]}, 0x74}}, 0x0) 13:36:29 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6c}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2554.326534][T31818] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2554.341683][T31818] CPU: 0 PID: 31818 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2554.350082][T31818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2554.360168][T31818] Call Trace: [ 2554.363464][T31818] [ 2554.366410][T31818] dump_stack_lvl+0x1e7/0x2e0 [ 2554.371118][T31818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2554.376341][T31818] ? __pfx__printk+0x10/0x10 [ 2554.380961][T31818] ? ___ratelimit+0x4c4/0x670 [ 2554.385655][T31818] ? __pfx____ratelimit+0x10/0x10 [ 2554.390690][T31818] dump_header+0xda/0x6a0 [ 2554.395031][T31818] oom_kill_process+0x3a7/0x930 [ 2554.399888][T31818] out_of_memory+0xf67/0x1320 [ 2554.404572][T31818] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2554.410214][T31818] ? __pfx___mutex_lock+0x10/0x10 [ 2554.415295][T31818] ? __pfx_out_of_memory+0x10/0x10 [ 2554.420437][T31818] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2554.426008][T31818] ? __pfx_lock_release+0x10/0x10 [ 2554.431056][T31818] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2554.437175][T31818] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2554.442416][T31818] ? mem_cgroup_iter+0x3e9/0x560 [ 2554.447379][T31818] try_charge_memcg+0xda2/0x18a0 [ 2554.452423][T31818] ? mark_lock+0x9a/0x350 [ 2554.456787][T31818] ? __pfx_try_charge_memcg+0x10/0x10 [ 2554.462194][T31818] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2554.468353][T31818] charge_memcg+0xa2/0x160 [ 2554.472801][T31818] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2554.478883][T31818] __read_swap_cache_async+0x480/0x8b0 [ 2554.484355][T31818] ? mark_lock+0x9a/0x350 [ 2554.488729][T31818] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2554.494741][T31818] ? blk_start_plug+0x6f/0x1b0 [ 2554.499572][T31818] swap_cluster_readahead+0x398/0x810 [ 2554.505052][T31818] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2554.510961][T31818] ? __pfx_lock_release+0x10/0x10 [ 2554.516008][T31818] ? xas_descend+0x37e/0x470 [ 2554.520620][T31818] swapin_readahead+0x1ea/0x1070 [ 2554.525574][T31818] ? filemap_get_entry+0x127/0x4e0 [ 2554.530709][T31818] ? __pfx_swapin_readahead+0x10/0x10 [ 2554.536106][T31818] ? __filemap_get_folio+0x935/0xbc0 [ 2554.541407][T31818] ? swap_cache_get_folio+0x9f/0x570 [ 2554.546712][T31818] do_swap_page+0x791/0x3f40 [ 2554.551310][T31818] ? rcu_is_watching+0x15/0xb0 [ 2554.556098][T31818] ? do_swap_page+0x154/0x3f40 [ 2554.560888][T31818] ? __pfx_do_swap_page+0x10/0x10 [ 2554.565918][T31818] ? pte_offset_map_nolock+0x137/0x1f0 [ 2554.571405][T31818] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2554.577233][T31818] __handle_mm_fault+0x15e8/0x72d0 [ 2554.582397][T31818] ? reacquire_held_locks+0x3eb/0x690 [ 2554.587774][T31818] ? __pfx___handle_mm_fault+0x10/0x10 [ 2554.593252][T31818] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2554.599006][T31818] ? mtree_range_walk+0x6fd/0x8e0 [ 2554.604044][T31818] ? lock_vma_under_rcu+0x18a/0x730 [ 2554.609250][T31818] ? __pfx_lock_release+0x10/0x10 [ 2554.614289][T31818] ? lock_vma_under_rcu+0x2f9/0x730 [ 2554.619515][T31818] ? lock_vma_under_rcu+0x18a/0x730 [ 2554.624725][T31818] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2554.630282][T31818] handle_mm_fault+0x3c1/0x8a0 [ 2554.635065][T31818] exc_page_fault+0x456/0x870 [ 2554.639772][T31818] asm_exc_page_fault+0x26/0x30 [ 2554.644653][T31818] RIP: 0033:0x7fdd6ac6257b [ 2554.649076][T31818] Code: 42 60 48 83 ea 80 48 39 fa 72 e4 0f 1f 40 00 c5 fe 7f 07 c5 fe 7f 47 20 c5 fe 7f 47 40 c5 fe 7f 47 60 0f 01 d6 75 04 c5 f8 77 c5 fc 77 c3 40 0f b6 c6 48 89 d1 48 89 fa f3 aa 48 89 d0 eb e2 [ 2554.668712][T31818] RSP: 002b:00007fdd6aecf9c8 EFLAGS: 00010242 [ 2554.674791][T31818] RAX: 000055555742ba20 RBX: 00007fdd6ba8d6c0 RCX: 000055555742ba10 [ 2554.682795][T31818] RDX: 000055555742bb00 RSI: 0000000000000000 RDI: 000055555742bab8 [ 2554.690769][T31818] RBP: 000000000000000f R08: 00000000ffffffff R09: 0000000000000000 [ 2554.698757][T31818] R10: 0000000000021000 R11: 0000000000000010 R12: 00007fdd6aecfc90 [ 2554.706765][T31818] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 2554.714841][T31818] [ 2554.736166][T31818] memory: usage 307200kB, limit 307200kB, failcnt 35373 [ 2554.743545][T31818] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 2554.752264][T31818] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2554.759869][T31818] Memory cgroup stats for /syz4: [ 2554.760008][T31818] cache 0 [ 2554.768830][T31818] rss 12288 [ 2554.772609][T31818] rss_huge 0 [ 2554.776081][T31818] shmem 0 [ 2554.779248][T31818] mapped_file 0 [ 2554.783382][T31818] dirty 0 13:36:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x600}}]}]}}]}, 0x74}}, 0x0) 13:36:29 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x74}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2554.786588][T31818] writeback 0 [ 2554.801375][T31818] workingset_refault_anon 14263 [ 2554.806587][T31818] workingset_refault_file 0 [ 2554.813048][T31818] swap 512000 [ 2554.819391][T31818] swapcached 8192 [ 2554.826838][T31818] pgpgin 384222 [ 2554.830396][T31818] pgpgout 384219 [ 2554.844835][T31818] pgfault 787654 [ 2554.849236][T31818] pgmajfault 12454 [ 2554.856794][T31818] inactive_anon 8192 [ 2554.860874][T31818] active_anon 4096 [ 2554.868105][T31818] inactive_file 0 [ 2554.874180][T31818] active_file 0 [ 2554.878043][T31818] unevictable 0 [ 2554.885316][T31818] hierarchical_memory_limit 314572800 13:36:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x700}}]}]}}]}, 0x74}}, 0x0) [ 2554.890965][T31818] hierarchical_memsw_limit 9223372036854771712 [ 2554.899442][T31818] total_cache 0 [ 2554.904540][T31818] total_rss 12288 [ 2554.917429][T31818] total_rss_huge 0 [ 2554.924525][T31818] total_shmem 0 [ 2554.929285][T31818] total_mapped_file 0 [ 2554.936126][T31818] total_dirty 0 13:36:29 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7a}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2554.942321][T31818] total_writeback 0 [ 2554.948976][T31818] total_workingset_refault_anon 14263 [ 2554.954690][T31818] total_workingset_refault_file 0 [ 2554.959860][T31818] total_swap 512000 [ 2554.964967][T31818] total_swapcached 8192 [ 2554.969286][T31818] total_pgpgin 384222 [ 2554.973545][T31818] total_pgpgout 384219 [ 2554.980975][T31818] total_pgfault 787654 [ 2554.987882][T31818] total_pgmajfault 12454 [ 2554.995998][T31818] total_inactive_anon 8192 [ 2555.004132][T31818] total_active_anon 4096 [ 2555.008545][T31818] total_inactive_file 0 [ 2555.013983][T31818] total_active_file 0 [ 2555.018098][T31818] total_unevictable 0 [ 2555.023862][T31818] anon_cost 0 [ 2555.027716][T31818] file_cost 0 [ 2555.035553][T31818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31818,uid=0 [ 2555.051768][T31818] Memory cgroup out of memory: Killed process 31818 (syz-executor.4) total-vm:54640kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:31 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0xffffffffffffff24, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e480, [{{0x9, 0x2, 0xfffffffffffffe96}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) syz_usb_connect_ath9k(0x3, 0xffffffffffffff24, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e480, [{{0x9, 0x2, 0xfffffffffffffe96}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) (async) 13:36:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x900}}]}]}}]}, 0x74}}, 0x0) 13:36:31 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x156}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}]}]}}]}, 0x478}}, 0x0) 13:36:31 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2b2}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xa00}}]}]}}]}, 0x74}}, 0x0) [ 2556.428327][T31886] __nla_validate_parse: 31 callbacks suppressed [ 2556.428348][T31886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:31 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x300}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xb00}}]}]}}]}, 0x74}}, 0x0) [ 2556.548292][T31878] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2556.561570][T31878] CPU: 1 PID: 31878 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2556.569937][T31878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2556.580025][T31878] Call Trace: [ 2556.582180][T31890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2556.583310][T31878] [ 2556.583324][T31878] dump_stack_lvl+0x1e7/0x2e0 [ 2556.583369][T31878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2556.605522][T31878] ? __pfx__printk+0x10/0x10 [ 2556.610144][T31878] ? ___ratelimit+0x4c4/0x670 [ 2556.614847][T31878] ? __pfx____ratelimit+0x10/0x10 [ 2556.619905][T31878] dump_header+0xda/0x6a0 [ 2556.624301][T31878] oom_kill_process+0x3a7/0x930 [ 2556.629190][T31878] out_of_memory+0xf67/0x1320 [ 2556.633902][T31878] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2556.639543][T31878] ? __pfx___mutex_lock+0x10/0x10 [ 2556.644576][T31878] ? __pfx_out_of_memory+0x10/0x10 [ 2556.649734][T31878] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2556.655289][T31878] ? __pfx_lock_release+0x10/0x10 [ 2556.660323][T31878] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2556.666414][T31878] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2556.671624][T31878] ? mem_cgroup_iter+0x3e9/0x560 [ 2556.676577][T31878] try_charge_memcg+0xda2/0x18a0 [ 2556.681517][T31878] ? mark_lock+0x9a/0x350 [ 2556.685863][T31878] ? __pfx_try_charge_memcg+0x10/0x10 [ 2556.691262][T31878] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2556.697413][T31878] charge_memcg+0xa2/0x160 [ 2556.701827][T31878] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2556.707905][T31878] __read_swap_cache_async+0x480/0x8b0 [ 2556.713400][T31878] ? mark_lock+0x9a/0x350 [ 2556.717744][T31878] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2556.723768][T31878] swap_cluster_readahead+0x67c/0x810 [ 2556.729176][T31878] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2556.735090][T31878] ? __pfx_lock_release+0x10/0x10 [ 2556.740122][T31878] ? xas_descend+0x37e/0x470 [ 2556.744736][T31878] swapin_readahead+0x1ea/0x1070 [ 2556.749682][T31878] ? filemap_get_entry+0x127/0x4e0 [ 2556.754835][T31878] ? __pfx_swapin_readahead+0x10/0x10 [ 2556.760243][T31878] ? __filemap_get_folio+0x935/0xbc0 [ 2556.765548][T31878] ? swap_cache_get_folio+0x9f/0x570 [ 2556.770854][T31878] do_swap_page+0x791/0x3f40 [ 2556.775450][T31878] ? rcu_is_watching+0x15/0xb0 [ 2556.780229][T31878] ? do_swap_page+0x154/0x3f40 [ 2556.784997][T31878] ? __pfx_do_swap_page+0x10/0x10 [ 2556.790025][T31878] ? pte_offset_map_nolock+0x137/0x1f0 [ 2556.795490][T31878] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2556.801309][T31878] __handle_mm_fault+0x15e8/0x72d0 [ 2556.806538][T31878] ? reacquire_held_locks+0x3eb/0x690 [ 2556.811910][T31878] ? __pfx___handle_mm_fault+0x10/0x10 [ 2556.817382][T31878] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2556.823121][T31878] ? mtree_range_walk+0x6fd/0x8e0 [ 2556.828160][T31878] ? lock_vma_under_rcu+0x18a/0x730 [ 2556.833367][T31878] ? __pfx_lock_release+0x10/0x10 [ 2556.838400][T31878] ? lock_vma_under_rcu+0x2f9/0x730 [ 2556.843622][T31878] ? lock_vma_under_rcu+0x18a/0x730 [ 2556.848849][T31878] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2556.854427][T31878] handle_mm_fault+0x3c1/0x8a0 [ 2556.859218][T31878] exc_page_fault+0x456/0x870 [ 2556.863916][T31878] asm_exc_page_fault+0x26/0x30 [ 2556.868786][T31878] RIP: 0033:0x7fdd6ac36cdb [ 2556.873215][T31878] Code: 54 55 53 48 89 fb 48 83 ec 10 8b 47 08 85 c0 0f 85 87 01 00 00 8b 47 0c 85 c0 0f 84 7c 01 00 00 80 7f 20 00 0f 84 72 01 00 00 <48> 8b 87 88 00 00 00 48 83 f8 ff 75 38 be 01 00 00 00 48 89 df e8 [ 2556.892838][T31878] RSP: 002b:00007fdd6aecfb00 EFLAGS: 00010202 [ 2556.898928][T31878] RAX: 0000000000000001 RBX: 00007fdd6adabf80 RCX: 00007fdd6adabf80 [ 2556.906898][T31878] RDX: 00007fdd6a8000c0 RSI: 00007fdd6aecfce8 RDI: 00007fdd6adabf80 [ 2556.914868][T31878] RBP: 0000000000000000 R08: 00007fdd6a8000c0 R09: 00007fdd6adabf8c [ 2556.922840][T31878] R10: 0000000000000003 R11: 0000000000079bae R12: 00007fdd6adabf80 [ 2556.930814][T31878] R13: 0000000000000fc1 R14: 0000000000000000 R15: 00007fdd6adabf80 [ 2556.938797][T31878] 13:36:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xc00}}]}]}}]}, 0x74}}, 0x0) [ 2556.958055][T31878] memory: usage 307200kB, limit 307200kB, failcnt 35756 [ 2556.968016][T31891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2556.987772][T31878] memory+swap: usage 307696kB, limit 9007199254740988kB, failcnt 0 [ 2556.999325][T31878] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2557.007963][T31878] Memory cgroup stats for /syz4: [ 2557.008106][T31878] cache 0 [ 2557.021861][T31891] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2557.023854][T31878] rss 12288 [ 2557.031695][T22829] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2557.034546][T31878] rss_huge 0 [ 2557.034558][T31878] shmem 0 [ 2557.043163][T31893] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:31 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36a}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2557.051820][T31878] mapped_file 0 [ 2557.068514][T31878] dirty 0 [ 2557.073337][T31878] writeback 0 [ 2557.080872][T31878] workingset_refault_anon 14387 [ 2557.108264][T31878] workingset_refault_file 0 [ 2557.115644][T31878] swap 507904 [ 2557.119065][T31896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2557.119112][T31878] swapcached 8192 [ 2557.138688][T31878] pgpgin 384383 [ 2557.142566][T31878] pgpgout 384380 [ 2557.146308][T31878] pgfault 787889 [ 2557.150098][T31878] pgmajfault 12586 13:36:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xd00}}]}]}}]}, 0x74}}, 0x0) [ 2557.159647][T31878] inactive_anon 0 [ 2557.163702][T31878] active_anon 12288 [ 2557.164479][T31896] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2557.167687][T31878] inactive_file 0 [ 2557.184130][T31878] active_file 0 [ 2557.187810][T31878] unevictable 0 [ 2557.191907][T31878] hierarchical_memory_limit 314572800 13:36:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3d2}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2557.213535][T31878] hierarchical_memsw_limit 9223372036854771712 [ 2557.219939][T31878] total_cache 0 [ 2557.225058][T31878] total_rss 12288 [ 2557.234868][T31878] total_rss_huge 0 [ 2557.239379][T31878] total_shmem 0 [ 2557.243965][T31878] total_mapped_file 0 [ 2557.248160][T31878] total_dirty 0 [ 2557.252462][T31878] total_writeback 0 [ 2557.256566][T31878] total_workingset_refault_anon 14387 13:36:32 executing program 0: openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2557.256718][T31898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2557.262837][T31878] total_workingset_refault_file 0 [ 2557.277782][T31878] total_swap 507904 [ 2557.287635][T31878] total_swapcached 8192 [ 2557.299120][T31878] total_pgpgin 384383 [ 2557.303884][T31878] total_pgpgout 384380 [ 2557.308409][T31878] total_pgfault 787889 [ 2557.321562][T22829] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 2557.328417][T31878] total_pgmajfault 12586 [ 2557.330307][T31900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2557.335090][T31878] total_inactive_anon 0 [ 2557.347973][T31878] total_active_anon 12288 [ 2557.364624][T31878] total_inactive_file 0 13:36:32 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "35a74daf46be01e015720f3e1f4713a6051f481922c0c731beb6bf7853c8c2c30a02cfc1931d02653bbe71efdd406b654e462c6bb7aa54929ce90f8034433124"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) [ 2557.372541][T31878] total_active_file 0 [ 2557.378977][T31878] total_unevictable 0 [ 2557.388027][T31878] anon_cost 0 [ 2557.393841][T31878] file_cost 0 13:36:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xe00}}]}]}}]}, 0x74}}, 0x0) 13:36:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3da}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2557.411418][T31878] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31878,uid=0 [ 2557.428597][T31900] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2557.445680][T31878] Memory cgroup out of memory: Killed process 31878 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}]}]}}]}, 0x478}}, 0x0) [ 2557.481702][T22829] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2557.489700][T22829] usb 4-1: can't read configurations, error -22 13:36:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000cc0), 0xffffffffffffffff) 13:36:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1100}}]}]}}]}, 0x74}}, 0x0) 13:36:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x43f}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:32 executing program 0: openat$sequencer2(0xffffff9c, &(0x7f0000002d00), 0x4180, 0x0) [ 2557.651761][T22829] usb 4-1: new high-speed USB device number 92 using dummy_hcd 13:36:32 executing program 0: socket(0x2c, 0x3, 0xfffff743) 13:36:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x444}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x0, 0x2000000}, 0xc) 13:36:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1200}}]}]}}]}, 0x74}}, 0x0) 13:36:32 executing program 0: io_setup(0x6, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={[0xfffeffff]}, 0x8}) 13:36:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x500}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1400}}]}]}}]}, 0x74}}, 0x0) [ 2557.954921][T22829] usb 4-1: too many configurations: 128, using maximum allowed: 8 13:36:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1500}}]}]}}]}, 0x74}}, 0x0) 13:36:32 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x600}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:33 executing program 0: keyctl$instantiate_iov(0x9, 0x0, &(0x7f0000000300), 0x0, 0x0) [ 2558.091399][T22829] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2558.101791][T22829] usb 4-1: can't read configurations, error -22 [ 2558.125966][T22829] usb usb4-port1: attempt power cycle 13:36:33 executing program 0: syz_open_dev$I2C(&(0x7f0000000140), 0x0, 0x4040) [ 2558.344244][T31911] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2558.355963][T31911] CPU: 0 PID: 31911 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2558.364307][T31911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2558.374376][T31911] Call Trace: [ 2558.377667][T31911] [ 2558.380611][T31911] dump_stack_lvl+0x1e7/0x2e0 [ 2558.385397][T31911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2558.390602][T31911] ? __pfx__printk+0x10/0x10 [ 2558.395204][T31911] ? ___ratelimit+0x4c4/0x670 [ 2558.399912][T31911] ? __pfx____ratelimit+0x10/0x10 [ 2558.404980][T31911] dump_header+0xda/0x6a0 [ 2558.409457][T31911] oom_kill_process+0x3a7/0x930 [ 2558.414334][T31911] out_of_memory+0xf67/0x1320 [ 2558.419037][T31911] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2558.424685][T31911] ? __pfx___mutex_lock+0x10/0x10 [ 2558.429722][T31911] ? __pfx_out_of_memory+0x10/0x10 [ 2558.434845][T31911] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2558.440491][T31911] ? __pfx_lock_release+0x10/0x10 [ 2558.445540][T31911] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2558.451639][T31911] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2558.456857][T31911] ? mem_cgroup_iter+0x3e9/0x560 [ 2558.461826][T31911] try_charge_memcg+0xda2/0x18a0 [ 2558.466768][T31911] ? mark_lock+0x9a/0x350 [ 2558.471115][T31911] ? __pfx_try_charge_memcg+0x10/0x10 [ 2558.476518][T31911] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2558.482673][T31911] charge_memcg+0xa2/0x160 [ 2558.487113][T31911] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2558.493195][T31911] __read_swap_cache_async+0x480/0x8b0 [ 2558.498668][T31911] ? mark_lock+0x9a/0x350 [ 2558.503013][T31911] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2558.509035][T31911] swap_cluster_readahead+0x67c/0x810 [ 2558.514439][T31911] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2558.520347][T31911] ? __pfx_lock_release+0x10/0x10 [ 2558.525385][T31911] ? xas_descend+0x37e/0x470 [ 2558.529986][T31911] swapin_readahead+0x1ea/0x1070 [ 2558.534933][T31911] ? filemap_get_entry+0x127/0x4e0 [ 2558.540159][T31911] ? __pfx_swapin_readahead+0x10/0x10 [ 2558.545558][T31911] ? __filemap_get_folio+0x935/0xbc0 [ 2558.550856][T31911] ? swap_cache_get_folio+0x9f/0x570 [ 2558.556148][T31911] do_swap_page+0x791/0x3f40 [ 2558.560764][T31911] ? rcu_is_watching+0x15/0xb0 [ 2558.565548][T31911] ? do_swap_page+0x154/0x3f40 [ 2558.570311][T31911] ? __pfx_do_swap_page+0x10/0x10 [ 2558.575336][T31911] ? pte_offset_map_nolock+0x137/0x1f0 [ 2558.580807][T31911] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2558.586630][T31911] __handle_mm_fault+0x15e8/0x72d0 [ 2558.591889][T31911] ? reacquire_held_locks+0x3eb/0x690 [ 2558.597267][T31911] ? __pfx___handle_mm_fault+0x10/0x10 [ 2558.602743][T31911] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2558.608507][T31911] ? mtree_range_walk+0x6fd/0x8e0 [ 2558.613559][T31911] ? lock_vma_under_rcu+0x18a/0x730 [ 2558.618785][T31911] ? __pfx_lock_release+0x10/0x10 [ 2558.623823][T31911] ? lock_vma_under_rcu+0x2f9/0x730 [ 2558.629058][T31911] ? lock_vma_under_rcu+0x18a/0x730 [ 2558.634271][T31911] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2558.639823][T31911] handle_mm_fault+0x3c1/0x8a0 [ 2558.644608][T31911] exc_page_fault+0x456/0x870 [ 2558.649305][T31911] asm_exc_page_fault+0x26/0x30 [ 2558.654158][T31911] RIP: 0033:0x7fdd6ac28240 [ 2558.658574][T31911] Code: 48 89 2d bb d4 ca 00 eb 86 48 89 c1 48 89 ea 48 8d 35 e4 0e 0a 00 31 c0 48 8d 3d eb 0e 0a 00 e8 b6 fd ff ff 66 0f 1f 44 00 00 <48> 8b 0d 91 d4 ca 00 4c 63 05 7a d4 ca 00 48 8b 05 7b d4 ca 00 49 [ 2558.678178][T31911] RSP: 002b:00007fdd6aecfab8 EFLAGS: 00010206 [ 2558.684337][T31911] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 00007fdd6a800000 [ 2558.692323][T31911] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000badf00d [ 2558.700310][T31911] RBP: 0000000000000000 R08: 00007fdd6ac00000 R09: 00007fdd6adabf8c [ 2558.708292][T31911] R10: 0000000000000003 R11: 0000000000079c88 R12: 00007fdd6ada80c0 [ 2558.716272][T31911] R13: 00007fdd6adabf80 R14: 0000000000000000 R15: 00007fdd6adabf80 [ 2558.724269][T31911] [ 2558.736220][T31911] memory: usage 307200kB, limit 307200kB, failcnt 36357 [ 2558.744010][T31911] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 2558.753081][T31911] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2558.760403][T31911] Memory cgroup stats for /syz4: [ 2558.760498][T31911] cache 0 [ 2558.769050][T31911] rss 12288 [ 2558.775145][T31911] rss_huge 0 [ 2558.778534][T31911] shmem 0 [ 2558.781961][T31911] mapped_file 0 [ 2558.786840][T31911] dirty 0 [ 2558.789856][T31911] writeback 0 [ 2558.795979][T31911] workingset_refault_anon 14580 [ 2558.800941][T31911] workingset_refault_file 0 [ 2558.801248][T22829] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2558.806796][T31911] swap 512000 [ 2558.817296][T31911] swapcached 8192 [ 2558.821037][T31911] pgpgin 384618 [ 2558.824848][T31911] pgpgout 384615 [ 2558.828521][T31911] pgfault 788221 [ 2558.834106][T31911] pgmajfault 12785 [ 2558.837929][T31911] inactive_anon 0 [ 2558.842057][T31911] active_anon 12288 [ 2558.845956][T31911] inactive_file 0 [ 2558.849668][T31911] active_file 0 [ 2558.854163][T31911] unevictable 0 [ 2558.857718][T31911] hierarchical_memory_limit 314572800 [ 2558.863453][T31911] hierarchical_memsw_limit 9223372036854771712 [ 2558.869698][T31911] total_cache 0 [ 2558.873932][T31911] total_rss 12288 [ 2558.877673][T31911] total_rss_huge 0 [ 2558.881589][T31911] total_shmem 0 [ 2558.885164][T31911] total_mapped_file 0 [ 2558.889219][T31911] total_dirty 0 [ 2558.893090][T31911] total_writeback 0 [ 2558.896918][T31911] total_workingset_refault_anon 14580 [ 2558.902563][T31911] total_workingset_refault_file 0 [ 2558.907698][T31911] total_swap 512000 [ 2558.911869][T31911] total_swapcached 8192 [ 2558.917079][T31911] total_pgpgin 384618 [ 2558.921082][T31911] total_pgpgout 384615 [ 2558.925272][T31911] total_pgfault 788221 [ 2558.929332][T31911] total_pgmajfault 12785 [ 2558.933993][T31911] total_inactive_anon 0 [ 2558.938173][T31911] total_active_anon 12288 [ 2558.942794][T22829] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 2558.945798][T31911] total_inactive_file 0 [ 2558.956306][T31911] total_active_file 0 [ 2558.960299][T31911] total_unevictable 0 [ 2558.964416][T31911] anon_cost 0 [ 2558.967736][T31911] file_cost 0 [ 2558.971030][T31911] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31911,uid=0 [ 2558.986866][T31911] Memory cgroup out of memory: Killed process 31911 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2559.071274][T22829] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 2559.079279][T22829] usb 4-1: can't read configurations, error -22 13:36:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000400)={0x30, r1, 0x13, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x30}}, 0x0) 13:36:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1800}}]}]}}]}, 0x74}}, 0x0) 13:36:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x700}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}]}]}}]}, 0x478}}, 0x0) [ 2559.231380][T22829] usb 4-1: new high-speed USB device number 94 using dummy_hcd 13:36:34 executing program 3: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f00000012c0)={0xa8, 0x0, 0x22, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r1 = socket$key(0xf, 0x3, 0x2) r2 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxselin\x05x\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc088cf2, 0x14c, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x10}) mq_timedsend(r2, 0x0, 0x0, 0x4a17, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000000000)=0xe93) mq_timedsend(r2, &(0x7f0000000280)="1f1640c4a61c56530e3530b385b6d7c3706b34b0473added06f476f122aa1e59", 0x20, 0x65, &(0x7f0000000600)={0x0, 0x3938700}) pread64(r2, &(0x7f00000003c0)=""/32, 0x20, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000004b00), 0x400, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000004b40), 0x0, 0x0) r8 = gettid() mq_timedsend(r2, &(0x7f0000000480)="d337cb81d6a086996c1279fb38ac31c600888a1231de1f9bdb018bb63a889b1f99d65ea750a7a48405448f6ea1a79d8cb9848312468e3ac166f853b23623333b2b8afd15bc22775d3dde1f8dab63ddb3faae6bd98b9f8e8b68266195269c52d4e7647acf688d9cc59cd1b8524f4107980ce9327206aea02333038dfbd9621bf1157dd9d1195dda3dcde88d5292c3816f005b4c00ec3890a1167482e6b866abda8961533e416f8118b0fe90051c4b1cacfe977129286db10d66a240fcb3acdbbce3de6510841a1f225d1a0094eff8a0d39f18a99c85b78c8dce2a3d57ceafe26d113b7fc1dca7f4b37c191ffd384a906f09cbcfc9f67ef986d148faf54f2cfc", 0xff, 0xd3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) r11 = syz_clone3(&(0x7f0000004e80)={0x20820000, &(0x7f0000004c40), &(0x7f0000004c80), &(0x7f0000004cc0)=0x0, {0x40}, &(0x7f0000004d00)=""/144, 0x90, &(0x7f0000004dc0)=""/82, &(0x7f0000004e40)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000f80)=ANY=[@ANYBLOB="0100000084da41dfcc01000000000000040d9b782c1ecec023e8f65c2b2279df5301107ceb590e9b6c95a5599bf48566", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=r10, @ANYBLOB='./file0\x00']) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000780)="c0594cb6a57211e11230bf51bf46610b7c252b1ba908e6576be490605dd41ac06a7d64209cbb3762cfe37753834bd342e4a4e6feaf34578903b52cd6551a332c0ba851be9a0b7c6944b4375094476f485f558d7b62f4efd0467528e11de7d1cc663a425d161732f7755afb302e47d321c10143d4cd6778770a48d39e247d3832d209c28541006926b6acf8067d2797603dfc4990432a7352eee81582a346e156c336d834b45d452b21f1ed4e09e7e75a3f12af818e261f2dfab32ac0dcfd2eb22469b074c818e65836a8f7f78afb0c6955cdd19493d32a33045278eaddc21c30813d8c150bca13babea2e39b135bfffd9b57c7ef09bbfb5b5060d7a69fab3a", 0xff}, {&(0x7f00000000c0)="e2c4bbf8705e246c688bc1d340ebabf8a31647a5da926150137be29ebc", 0x1d}, {&(0x7f0000000100)="8729b4ec5b291c63196cb9d9e49cad49a24552b5", 0x14}, {&(0x7f0000000880)="5a6cb7908a09d4634d325cb0beb2ca48a425beaf57c5c37e31687a3d28e0df187e74560da445ae0a3c48eef565662dd1f2b9f3d4f654ab922b5cf2d927b2c179b36ffb3b4c599ccf5f6b3a404027ad37f16bdb27bc16004d5c177c15d0cfcc600cf35486165b672a73e1e2f0bd468ee267c0b0bcb17f07d757aa0517a6b779fb4a7c0f243b45da7935b4bbb121de70fe7d002e92d68de049871966e266e185ce5f722789c6674568b5af37ba7c8d4aa22cbbf1009d47ef88a648ccbf78a9ac2c8addc36621b6b4f5ff8c44eaf0621e5868822d3a08842e6ea9025706849ff7b623923c02ad60bc7d95b7e1221b", 0xed}, {&(0x7f0000000140)}, {&(0x7f0000000340)="b47210c1acffc63b74fda5ca4f9b30c90163f50b0b61a7387852541434cb0bf17d03ea1a05c305fdff6108f6179e0e0fcd2b56861ccae70ded4e0af20fd7cf349c6eafc1d33558f1f6dbbdd111615317c8eeb7bf28f74cf8ae108981a4f006f3460e8e3e41b65e1a6e97ca2b6363c8c1f65be822a89e1ab288923a1381975d", 0x7f}, {&(0x7f0000000980)="5fbbbdb7ef43d6df8e8d040b48de978e7ee64219b5c01d499e2cd3f77aab57f75c06dcbc0a81222a99e9b8d21b24acca095fe90b0c5b674c8d9731c766ef4f2127a442b146f2622dcf7c33b7ae5f37e1f30b2661dafc2904a4cb9d19d9e7aa4d7bf5c6a4811a6a091d5dd283295f2b68bba8971e1dcb70ecddd5a0ae1a1c370e16b6894f294bb54c4e80b02a554c41d0a292ff3914d20688b8636c3336432500609062d250b0f473ada4740b72aa9cb7633138e788c0f56fc02d62802acfe20d16017ec0e12eb3c7e06c432352b2d259226cd55b5f0ddd5105d9352bce0df0ac8b6409cb3c9ead6ddd77dc10a7967d50e3f28b73120e", 0xf6}, {&(0x7f0000000a80)="12cf88227718bb1e6753101958db68715392f6ee6a2ce1a469f705a5e5a93c0c5f80bdfe1dd4ec3a10129e0c8ee8cf0b17df43f2b6f8b1942c6647f74ac149d7d0db24ae43e1c3cb57bc0188222c3618eda4241cec06aa895118239436b0a8bcb1e3", 0x62}, {&(0x7f0000000b00)="10b7e9cb62d067f2a3e07da0151a29fd22ef28f52b7b5f323c497a1cdad2b2bb36b849042fb18500325171ac3412d6a4e39f537f6c3886e4c84397f1ac6b1b56e989c02a384705d34aaf34e5ed49f69d65dcb45590ee173aa05792060df739acb321e5d1da3b3f8f459467", 0x6b}], 0x9, &(0x7f0000001080)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32, @ANYRES32=r13, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES64=r8, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000008551234eb1217e97c841ac154dc2c5245bac2f2996089c9281989ea8b437ebcb4180c698ed7ee7102d311252b2f1e37df3addd7b0d25ef9759aa48681c1e16f6b1b38609ecc7a7e641599751543933ddf9ca6c47e6ba22deaa77c86592b73c41", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x4000000}}, {{&(0x7f0000001d00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001d80)="e229ace02c4d340f116e5672c84c2d3b5f3195d1d3604b91d95c5833b3285d18c739d215a13eeac799fdda248966ce778e6a5f9c0f84ca33b2e3940de2cfbe8aa1cadb0ae4c398746185187628080da6321037bd896195915581af70c0d06a54a1e1c4c5b947694236c7", 0x6a}, {&(0x7f0000001e00)="1277eec8fa972b199f1297d03f107d0209fc5f7664e630d6e135e729f1467ebfaf1ae1bea9aaac51d60b0f3fefa79dbb5eb85b1cfcf21034f3deb0e4ca7d3360ff9a355352228bd0065e39ea67ba302342d2a44481e14ed41a91b9071d8c30656e01e8c4c2770cc8eebfd619cd465b8013499049e3fa8064df2757d353ebd46ff60e3e57cf4f12cf61420e8249cb33f5ba71d0269db18308f3b52aa542fec8d21af32754ec9193c2d06eac53b057414e241a680d00f4002162508c0da2120f0e7a9efd914d52d735d76ab3c5f5931dcba204daba5417a762c27eba8366d9bef3285e3cf09bac094bb2d7", 0xea}, {&(0x7f0000001f00)="dd7a647016dc0e5106cc732782dff086a971e2e61591ce784d4ab621d71b010d436de711287cf5bf747a1663b289a2f82e856706e1883ec35af9925f9ea4a33a484a3ee5547564a9b06d8ac3b119913d71262e4ae1cc22dce4f8138068ea646bd35afd319e109bd03592b8c0ae705ee6515e3c7d739718d76ccc4e30d2ae953ca81674e5f94a828ff2e635a01b4c6523498198d97c", 0x95}], 0x3, 0x0, 0x0, 0x40}}, {{&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000d80)="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", 0x200}, {&(0x7f0000001740)="eafbff0843ae8417fca0dbbb68c58ec6b7f42c3c44bd41af5a3c0dc104e05134990364fd08dccaf8c5096603fad0b538883a44e3c16c41af5c3b2513e3b4f20f7f3c663bfadad1b3de4dfe85f4caa30f94fa7b3bd43e4cf0ebb4653b4dbe98bf877fad2049df94bd4b1dbf000f942d6ddc9c6c8cb7f605f7c3a80e5687e99bd80a2abac78f38c446ee803748e0e299ffe72cf7303ea9c52c149a57cd56cae1fab97603a4453c7d4bc5fe4e595816c97105c8d7383d8f2a1d78c3c5f354ae65abf9fe6fd891440bfefcbe457d9b1bcb45f5f939b362811ffe2419f195bd0a95073515", 0xe2}, {&(0x7f00000014c0)="9ad98b69da6050ff468d44b290180c2a6efbfb0189453259bf1697c4acf573d3cf95f116277ead11b2e45482a74e79d35cb9de44ec3ecaa3d5f95e46a29162a3ac5d25ef5127a954b2056b4372511cf01ec1ead6178b3b2471add2d5bbf25e29a3e7bd480e4dab173dc6a68970f63070276e705317db48ed4e39dbeadbe81bef336b4ec327396750d31f2e000000000000000000", 0x94}], 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000100001800000000000000e20000000100fb645b430329fc0000785a554a8ffa1cc2ab77e33417f085a8f021dc04d7ff", @ANYRES32, @ANYRES32, @ANYRES64=r13, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r1], 0x58}}, {{&(0x7f0000002480)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000002500)="80e590143e5e861fffcb7deac5d407e97f58e60784407cf640522d27c7a8931a11e3a3a13ee866dfb58ef4450b96461de501205751060d17d419e3ec744af4d76a85ca3d40e0ca8d29a9b7517c6f935fa757f72da9ff84852cd1f7e34652e70eb2867d2181ce560e86760bf89b40e918f1d33f14ac055b28e16b61358457d966feb500f3ca07f67b4f561bfa70879b9593a98c8b2534778c8b74b82241a19e72e9e218ba0b004787badd91c36e7b59fef8d956c759df2ddf5cf30841ae3f6610ec95857f0cee2b08fc93", 0xca}, {&(0x7f0000002600)="06566e54247a0a1de0b830aa9d9ce55b362520840f62b19578f054cad1fa7014ba846b483866a892ec3f9a8aeb0b81842f0d832d8f74ab0072c64679841cd7d3a1f3d4fe5e103f0e4253203961052169524bf58144133d3ac3483a374ecd1e67b81bc6c1f4bcd6d0a7060673cd374a8cd5a77ed873bdc1d46aebcfa79e3ea3f657899fdd09c16ec5253a588882739aba19689422574b65128be975c9ef6223501bf602786cac77", 0xa7}, {&(0x7f00000026c0)="cdc536652775c9a2224bef19c6472be065e8a2713e1c7f3766613fc017fc304661c6c4118eaf0f223b401f424113a2e480b3cc8c94bf86bd0ae00ce98dcfc8b38d4f11772ff0561275cb26d1364285ec5c08308be5d7214873cc679152e83a26ccc43d1bf269cdafd9a103b7ac33f43c", 0x70}, {&(0x7f0000002740)="79ea39bd41f7fa12af993bee23617d78b30be2af547aa74a0d0aba6191d58d37aa98a2bc8e478411e1a4e01166d7f54dcbd51cecd6b3f7c770499a721ea0d34fb1973d641a809525cdc1d6cf112eecad3c605148f416101515b626", 0x5b}, {&(0x7f00000027c0)="c99d25d0a23b56142cd9442e458827449dd66c2f456f220a846e1d00cc4c443a24066d386fc202e7ed095fcfa58e812ac8f7172acbe33607e61b0eea6069bb265bba7c71bdbbe688236c466acd5542b47fcb8ee5881056a2eb2c7c01f8c6bd700b7e168efd436eca92374dec4097281152aaafd2e7a7946f915d2e6b5b25d63a045b091370d96f04480b3a7e3b9dadcec86a66103cb1874729cd5b5b59dfb57623df388b79046243822e8fdce0aa80c802237ebb8cd82f2bd913ccba9a8276279acc2522863cae4d53", 0xc9}, {&(0x7f00000028c0)="e9e840edc8967958d809cc7add0a90ed920b19636bf58073db735b2ad771d28e2a53a3c93e70340ccd63859f8ff7d7623ac723dbffe61e501bd6b43d4f77bea8a3652553b4d51eaaffafbe84a4a18445a00ccea0c8baad40d03844206895ad2c43206d7e9b29", 0x66}], 0x6, &(0x7f0000019640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYBLOB="1a86d120b54137faaca16d89919be983ac7aa51cf651bf73773f0f578cd7f1083ba346c308d26a027751078882c5606756333cd05e8392e350d1fc0585bac5b5aa9b79007deee88814edbc2adbe2a7ab3eff94d31ec92233cceab8fdd67e5b5d23f93e278f2acc7e6eb43f376b22c82f89eb3b235a23d0121310fbe953fbfd417923dc45a3dcc5", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="000000001000000000000000010000000100000034000000000000000100000001000000", @ANYRES32=r9, @ANYRESOCT=r12, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r14, @ANYRES32=0xee01, @ANYBLOB="03000000"], 0xa0, 0x1}}, {{&(0x7f0000005000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005440)=[{&(0x7f00000197c0)="3f0704ea57d0ced27a3c40059068e6244f1e655e7c600d295efbc5cdfc89f99097091425c2150388746f9f934f4f6840de27f5bdc7760dfe4f25c12c1a6ee530f5a2c5096527eda2f8a613154bef7e7da313393908a398043090dfe4138a346f052ea3befabef9d8f6374140f84beb7203b4486527787f42972ed57b6d4a66549d62f4519bf6b02a63bee934ab5309e9f47d0c409fa4536c62ce670982b4b9d09b14bd0c449febbcd4b65dd60aa4a7af2cbe32ec71afd73da9538a2764e52a4186aea77fb4bfadf4f290aa49a2290ff86c446ada3135db6fc67e8f3773", 0xdd}, {&(0x7f0000005180)="fc7592f44cc3e8bacecc541dccd4d8d3e16013b67e104f9344ee162c53e6ccaa1b179d97", 0x24}, {&(0x7f0000000640)="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", 0x110}, {&(0x7f0000005280)="61d06e6320064a1b8cdf62a72c0ff61d65b5283aa2231f9e285648398d07162eafa3149b36c8a32897", 0x29}, {&(0x7f00000052c0)="fafb4cedcb40b4b227caf100e3b219cd930f6c84b764b84f31e618ae1740991b9c1e7649fcbe35fc0dc6093a8f8e7ac91b6fb739b8c5bc4c3693056337ddfa3cb7a969a89475d665d2053918e58eace1dfe14c2e395fe561bb2431a0a41e81d5a9f87c5f4c784dd109788e6852c07e69b077e93d821597b5cb786737139acd171a17caaaf6e71dd1db5e0d28d78f64257598ef54d18758c14bff8bcf558bb8dec46509cb9965291c49f5bc41b64a", 0xae}, {&(0x7f0000005380)="89e515a4abf3a64d0ccb680d9a82558b83e742e3a797258e35f1f9ec60889788886e8017eb0f0d4cd7ac114615310944cc902fa4cf1ad5b7be693f6d27d612d190cee0511009322497a02bdfc7fa9ba6efd57e373157ce6bd1dc6134dcb9896bceb1a9c3d6e55c61548923ed5562f10b3d62f7ac1c4ae390b895c02eccff470f8eae21939fe845f47a0b7315c1c45538e2ed47712b3387703309985784a0e2f68575bdc5604aaf39b3654cce649ffc7423cf625b", 0xb4}], 0x6, 0x0, 0x0, 0x408d051}}], 0x5, 0x8000) getgroups(0x1, &(0x7f0000000000)=[r5, 0xee01, r4]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000054c0)=@filter={'filter\x00', 0x2, 0x4, 0x370, 0xffffffff, 0x1d0, 0xd0, 0x1d0, 0xfeffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x29}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x11, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'vxcan1\x00', {}, {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7ff, 0x391}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@frag={{}, {[0x7, 0xd96d], 0x1, 0x24}}, @common=@unspec=@owner={{}, {0x0, r3, r15, r16, 0x4, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff05) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r18 = geteuid() mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000013c0), 0x8000, &(0x7f0000003440)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r16}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xdd3}}], [{@euid_eq={'euid', 0x3d, r17}}, {@flag='nomand'}, {@audit}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r18}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@seclabel}]}}) r19 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r19, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) syz_usb_ep_write$ath9k_ep1(r19, 0x82, 0x1258, &(0x7f0000000140)={[{0x40, 0x4e00, "49204ec44934d1b2a6db3c0d37d127ba186a096565656ea48c9090428d908090737a5d7afb212af992219ad26775affbd272b60e6a73b116e4de8842d361aaf4"}, {0xde, 0x4e00, "3dafca4206eeab7ac4d0f380b277893b2654a942d692966117dc9c7e18983af9d6feed274fb99e9e539f3a96aae5dbfa30c2c1eda851f4a31c4539880216f8490a51720589c827a67fa9fbd52e2dc853637f3a0551b4e0f713dbeab0571fe1914c4681c143e4c49af10d6df280b8a8f1e3fc6fffeac41c7ba4ae2ae2b898608060043ac05779608096bcd0236551364e23525d848fef2f02eb8ff66c4f3d5b049785fdba3772b0cb55932d85dada602abef5f561c148e16b8d7e01e712923974b204f26ebdf32ad59703c1bf71102f310594a8df244bf4d27991334b0676"}, {0x5a, 0x4e00, "b61500ba28dfd2f76c54eaae319fb560b9404d4701ef0a1950430f3967cac3e351bc0295603bca84c4b7e416f5450808fe00cefcbefd5b139cf09ca68389c940d0593b237e24b0fd80338ffb076a60e5c1bb3b2cbd65ad035c2b"}, {0x1000, 0x4e00, "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"}, {0x56, 0x4e00, "8447c4449f11e2a460c83919c408de80c759a8e81f7a7e07aa78311b2a7c295e86f0f0bd2240170d586435c0d2011da5fac575742bf201114662f08f3ec42310bb853ef304ce26222a263fec08eff5dde4606733ecb8"}, {0x4, 0x4e00, "30f2842e"}, {0x5b, 0x4e00, "3edf15bd2e7b6cad58f1e9571a33cda911f2316745b9ccff3286c23b34b43f25236a9618028637e3d149d8b6607bb46b007352fceed73960282056c7b280c397ed9f4fd41dabfcff55e7778f3caa5efbf2d4ba1cbe7428b6047c78"}, {0x2, 0x4e00, ':-'}]}) 13:36:34 executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000008a40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) 13:36:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={0x0, @l2={0x1f, 0x0, @none}, @generic={0x0, "baff968e752519b60f2c951c7398"}, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='gretap0\x00'}) 13:36:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1e02}}]}]}}]}, 0x74}}, 0x0) 13:36:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x900}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:34 executing program 0: openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x20400, 0x0) [ 2559.471267][T22829] usb 4-1: device not accepting address 94, error -71 [ 2559.494016][T22829] usb usb4-port1: unable to enumerate USB device 13:36:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000d80)={'syztnl1\x00', 0x0}) 13:36:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xa00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1e03}}]}]}}]}, 0x74}}, 0x0) 13:36:34 executing program 0: r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000300)="e1", 0x1) 13:36:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xb00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:34 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x8}, {}, {}, {}]}, 0x90) [ 2559.834320][T31948] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2559.855417][T31948] CPU: 0 PID: 31948 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2559.861480][T22829] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2559.863772][T31948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2559.863791][T31948] Call Trace: 13:36:34 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003540)={0x6, 0xc, &(0x7f00000032c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000003340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003440), 0x10}, 0x90) [ 2559.863801][T31948] [ 2559.863812][T31948] dump_stack_lvl+0x1e7/0x2e0 [ 2559.892338][T31948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2559.897588][T31948] ? __pfx__printk+0x10/0x10 [ 2559.902224][T31948] ? ___ratelimit+0x4c4/0x670 [ 2559.906952][T31948] ? __pfx____ratelimit+0x10/0x10 [ 2559.912028][T31948] dump_header+0xda/0x6a0 [ 2559.916438][T31948] oom_kill_process+0x3a7/0x930 [ 2559.921341][T31948] out_of_memory+0xf67/0x1320 [ 2559.926074][T31948] ? mem_cgroup_out_of_memory+0xf7/0x3b0 13:36:34 executing program 0: bpf$BPF_LINK_CREATE_XDP(0xc, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) [ 2559.931752][T31948] ? __pfx___mutex_lock+0x10/0x10 [ 2559.936817][T31948] ? __pfx_out_of_memory+0x10/0x10 [ 2559.941984][T31948] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2559.947568][T31948] ? __pfx_lock_release+0x10/0x10 [ 2559.952639][T31948] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2559.958770][T31948] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2559.964024][T31948] ? mem_cgroup_iter+0x3e9/0x560 [ 2559.969010][T31948] try_charge_memcg+0xda2/0x18a0 [ 2559.973992][T31948] ? mark_lock+0x9a/0x350 [ 2559.978557][T31948] ? __pfx_try_charge_memcg+0x10/0x10 13:36:34 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={@map, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 2559.984012][T31948] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2559.990196][T31948] charge_memcg+0xa2/0x160 [ 2559.994642][T31948] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2560.000742][T31948] __read_swap_cache_async+0x480/0x8b0 [ 2560.006269][T31948] ? mark_lock+0x9a/0x350 [ 2560.010642][T31948] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2560.016676][T31948] swap_cluster_readahead+0x67c/0x810 [ 2560.022100][T31948] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2560.028044][T31948] ? __pfx_lock_release+0x10/0x10 [ 2560.033127][T31948] ? xas_descend+0x37e/0x470 [ 2560.037769][T31948] swapin_readahead+0x1ea/0x1070 [ 2560.042780][T31948] ? filemap_get_entry+0x127/0x4e0 [ 2560.047944][T31948] ? __pfx_swapin_readahead+0x10/0x10 [ 2560.053360][T31948] ? __filemap_get_folio+0x935/0xbc0 [ 2560.058685][T31948] ? swap_cache_get_folio+0x9f/0x570 [ 2560.064004][T31948] do_swap_page+0x791/0x3f40 [ 2560.068637][T31948] ? rcu_is_watching+0x15/0xb0 [ 2560.073458][T31948] ? do_swap_page+0x154/0x3f40 [ 2560.078258][T31948] ? __pfx_do_swap_page+0x10/0x10 13:36:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xc00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2560.083318][T31948] ? pte_offset_map_nolock+0x137/0x1f0 [ 2560.088825][T31948] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2560.094677][T31948] __handle_mm_fault+0x15e8/0x72d0 [ 2560.099855][T31948] ? reacquire_held_locks+0x3eb/0x690 [ 2560.105264][T31948] ? __pfx___handle_mm_fault+0x10/0x10 [ 2560.110779][T31948] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2560.116553][T31948] ? mtree_range_walk+0x6fd/0x8e0 [ 2560.121625][T31948] ? lock_vma_under_rcu+0x18a/0x730 [ 2560.126956][T31948] ? __pfx_lock_release+0x10/0x10 [ 2560.132035][T31948] ? lock_vma_under_rcu+0x2f9/0x730 [ 2560.137294][T31948] ? lock_vma_under_rcu+0x18a/0x730 [ 2560.142523][T31948] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2560.148107][T31948] handle_mm_fault+0x3c1/0x8a0 [ 2560.152928][T31948] exc_page_fault+0x456/0x870 [ 2560.157653][T31948] asm_exc_page_fault+0x26/0x30 [ 2560.162524][T31948] RIP: 0033:0x7fdd6ac25100 13:36:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xd00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3800}}]}]}}]}, 0x74}}, 0x0) [ 2560.166968][T31948] Code: 68 03 00 00 00 e9 40 ff ff ff ff 25 72 3f 15 00 68 17 00 00 00 e9 30 ff ff ff ff 25 6a 3f 15 00 68 16 00 00 00 e9 20 ff ff ff 25 62 3f 15 00 68 15 00 00 00 e9 10 ff ff ff ff 25 5a 3f 15 00 [ 2560.186610][T31948] RSP: 002b:00007fdd6aecfb28 EFLAGS: 00010286 [ 2560.192711][T31948] RAX: 00000000fffffff6 RBX: 00007fdd6ac00000 RCX: 0000000000000079 [ 2560.200713][T31948] RDX: 0000000000000016 RSI: 00007fdd6acca2f9 RDI: 00007fdd6acd8cde [ 2560.208730][T31948] RBP: 0000000000000000 R08: 0000000000000010 R09: 00007fff7fbc30b0 [ 2560.216740][T31948] R10: 00007fff7fbc3080 R11: 0000000000079de8 R12: 00007fdd6a800060 [ 2560.224743][T31948] R13: 0000000000000fc1 R14: 00007fdd6a800000 R15: 00007fdd6a800068 [ 2560.232789][T31948] 13:36:35 executing program 0: bpf$BPF_LINK_CREATE_XDP(0x7, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) [ 2560.268705][T31948] memory: usage 307200kB, limit 307200kB, failcnt 36748 [ 2560.276290][T31948] memory+swap: usage 307744kB, limit 9007199254740988kB, failcnt 0 [ 2560.284404][T31948] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 13:36:35 executing program 0: socketpair(0x2, 0x0, 0xfff, &(0x7f0000000140)) [ 2560.315507][T31948] Memory cgroup stats for /syz4: [ 2560.315636][T31948] cache 0 [ 2560.347733][T31948] rss 12288 [ 2560.361308][T31948] rss_huge 0 13:36:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xe00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3a00}}]}]}}]}, 0x74}}, 0x0) [ 2560.374975][T31948] shmem 0 [ 2560.386054][T31948] mapped_file 0 [ 2560.393025][T22829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2560.417652][T31948] dirty 0 13:36:35 executing program 0: io_uring_setup(0x2fa8, &(0x7f0000000000)) io_uring_setup(0x2fa8, &(0x7f0000000000)) [ 2560.420845][T22829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2560.432960][T31948] writeback 0 [ 2560.440953][T22829] usb 4-1: Product: syz [ 2560.447790][T31948] workingset_refault_anon 14705 [ 2560.464482][T22829] usb 4-1: Manufacturer: syz [ 2560.469450][T31948] workingset_refault_file 0 [ 2560.474648][T22829] usb 4-1: SerialNumber: syz [ 2560.481771][T31948] swap 557056 [ 2560.492065][T31948] swapcached 8192 [ 2560.498116][T31948] pgpgin 384782 [ 2560.508784][T31948] pgpgout 384779 [ 2560.512942][T31948] pgfault 788458 [ 2560.516704][T31948] pgmajfault 12918 [ 2560.520625][T31948] inactive_anon 0 13:36:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3c00}}]}]}}]}, 0x74}}, 0x0) [ 2560.526359][T22829] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2560.536911][T31948] active_anon 12288 [ 2560.540985][T31948] inactive_file 0 [ 2560.550133][T31948] active_file 0 [ 2560.564122][T31948] unevictable 0 [ 2560.567886][T31948] hierarchical_memory_limit 314572800 13:36:35 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x80281) 13:36:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xf00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2560.574333][T31948] hierarchical_memsw_limit 9223372036854771712 [ 2560.591603][T31948] total_cache 0 [ 2560.599831][T31948] total_rss 12288 [ 2560.616892][T31948] total_rss_huge 0 [ 2560.638144][T31948] total_shmem 0 [ 2560.644201][T31948] total_mapped_file 0 [ 2560.649457][T31948] total_dirty 0 [ 2560.663173][T31948] total_writeback 0 [ 2560.668264][T31948] total_workingset_refault_anon 14705 [ 2560.681234][T31948] total_workingset_refault_file 0 13:36:35 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 13:36:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3c01}}]}]}}]}, 0x74}}, 0x0) [ 2560.692657][T31948] total_swap 557056 [ 2560.701884][T31948] total_swapcached 8192 [ 2560.713095][T31948] total_pgpgin 384782 [ 2560.724685][T31948] total_pgpgout 384779 [ 2560.729056][T31948] total_pgfault 788458 13:36:35 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) [ 2560.758851][T31948] total_pgmajfault 12918 [ 2560.773088][T31948] total_inactive_anon 0 [ 2560.781529][T31948] total_active_anon 12288 [ 2560.788133][T31948] total_inactive_file 0 [ 2560.796953][T31948] total_active_file 0 [ 2560.806243][T31948] total_unevictable 0 [ 2560.814950][T31948] anon_cost 0 [ 2560.820846][T31948] file_cost 0 [ 2560.826781][T31948] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=31948,uid=0 13:36:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1100}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:35 executing program 0: syz_open_dev$vcsn(&(0x7f0000002780), 0x1, 0x0) [ 2560.849073][T31948] Memory cgroup out of memory: Killed process 31948 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}]}]}}]}, 0x478}}, 0x0) [ 2561.092006][T31001] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2561.248780][T32016] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2561.261374][T32016] CPU: 1 PID: 32016 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2561.269736][T32016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2561.279822][T32016] Call Trace: [ 2561.283141][T32016] [ 2561.286085][T32016] dump_stack_lvl+0x1e7/0x2e0 [ 2561.290777][T32016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2561.295978][T32016] ? __pfx__printk+0x10/0x10 [ 2561.300586][T32016] ? ___ratelimit+0x4c4/0x670 [ 2561.305288][T32016] ? __pfx____ratelimit+0x10/0x10 [ 2561.310329][T32016] dump_header+0xda/0x6a0 [ 2561.314677][T32016] oom_kill_process+0x3a7/0x930 [ 2561.319533][T32016] out_of_memory+0xf67/0x1320 [ 2561.324235][T32016] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2561.329927][T32016] ? __pfx___mutex_lock+0x10/0x10 [ 2561.334967][T32016] ? __pfx_out_of_memory+0x10/0x10 [ 2561.340091][T32016] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2561.345648][T32016] ? __pfx_lock_release+0x10/0x10 [ 2561.350676][T32016] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2561.356748][T32016] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2561.361950][T32016] ? mem_cgroup_iter+0x3e9/0x560 [ 2561.366894][T32016] try_charge_memcg+0xda2/0x18a0 [ 2561.371911][T32016] ? mark_lock+0x9a/0x350 [ 2561.376284][T32016] ? __pfx_try_charge_memcg+0x10/0x10 [ 2561.381688][T32016] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2561.387863][T32016] charge_memcg+0xa2/0x160 [ 2561.392298][T32016] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2561.398456][T32016] __read_swap_cache_async+0x480/0x8b0 [ 2561.403922][T32016] ? mark_lock+0x9a/0x350 [ 2561.408276][T32016] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2561.414279][T32016] swap_cluster_readahead+0x67c/0x810 [ 2561.419671][T32016] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2561.425597][T32016] ? __pfx_lock_release+0x10/0x10 [ 2561.430643][T32016] ? xas_descend+0x37e/0x470 [ 2561.435258][T32016] swapin_readahead+0x1ea/0x1070 [ 2561.440205][T32016] ? filemap_get_entry+0x127/0x4e0 [ 2561.445353][T32016] ? __pfx_swapin_readahead+0x10/0x10 [ 2561.450763][T32016] ? __filemap_get_folio+0x935/0xbc0 [ 2561.456067][T32016] ? swap_cache_get_folio+0x9f/0x570 [ 2561.461372][T32016] do_swap_page+0x791/0x3f40 [ 2561.465966][T32016] ? rcu_is_watching+0x15/0xb0 [ 2561.470750][T32016] ? do_swap_page+0x154/0x3f40 [ 2561.475526][T32016] ? __pfx_do_swap_page+0x10/0x10 [ 2561.480562][T32016] ? pte_offset_map_nolock+0x137/0x1f0 [ 2561.486041][T32016] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2561.491881][T32016] __handle_mm_fault+0x15e8/0x72d0 [ 2561.497030][T32016] ? reacquire_held_locks+0x3eb/0x690 [ 2561.502414][T32016] ? __pfx___handle_mm_fault+0x10/0x10 [ 2561.507896][T32016] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2561.513640][T32016] ? mtree_range_walk+0x6fd/0x8e0 [ 2561.518676][T32016] ? lock_vma_under_rcu+0x18a/0x730 [ 2561.523883][T32016] ? __pfx_lock_release+0x10/0x10 [ 2561.528923][T32016] ? lock_vma_under_rcu+0x2f9/0x730 [ 2561.534146][T32016] ? lock_vma_under_rcu+0x18a/0x730 [ 2561.539348][T32016] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2561.544928][T32016] handle_mm_fault+0x3c1/0x8a0 [ 2561.549724][T32016] exc_page_fault+0x456/0x870 [ 2561.554417][T32016] asm_exc_page_fault+0x26/0x30 [ 2561.559268][T32016] RIP: 0033:0x7fdd6ac36c09 [ 2561.563687][T32016] Code: c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 bb 01 00 00 00 bd e7 03 00 00 e9 12 fe ff ff 90 80 3d ad ea c9 00 00 74 27 <80> 3d 00 25 14 00 00 49 8d bd 98 00 00 00 4c 89 e2 48 89 de 74 21 [ 2561.583305][T32016] RSP: 002b:00007fdd6aecfac0 EFLAGS: 00010202 [ 2561.589380][T32016] RAX: 0000001b32520020 RBX: 0000001b32520018 RCX: 0000001b32520000 [ 2561.597436][T32016] RDX: 0000001b32520024 RSI: 0000000000000001 RDI: 0000000000000000 [ 2561.605755][T32016] RBP: 0000001b32520020 R08: 0000001b32920000 R09: 00007fdd6adabf8c [ 2561.613729][T32016] R10: 0000000000000003 R11: 0000000000079f14 R12: 0000001b3252001c [ 2561.621714][T32016] R13: 00007fdd6adabf80 R14: 0000000000000000 R15: 00007fdd6adabf80 [ 2561.629699][T32016] [ 2561.639519][T32016] memory: usage 307200kB, limit 307200kB, failcnt 37297 [ 2561.646769][T32016] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 2561.654934][ C1] usb 4-1: ath9k_htc: invalid pkt_len (ce94) [ 2561.661479][T32016] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2561.668804][T32016] Memory cgroup stats for /syz4: [ 2561.668967][T32016] cache 0 [ 2561.677026][T32016] rss 12288 [ 2561.680510][T32016] rss_huge 0 [ 2561.683858][T32016] shmem 0 [ 2561.686810][T32016] mapped_file 0 [ 2561.690264][T32016] dirty 0 [ 2561.693968][T32016] writeback 0 [ 2561.697281][T32016] workingset_refault_anon 14928 [ 2561.702459][T32016] workingset_refault_file 0 [ 2561.706971][T32016] swap 552960 [ 2561.710252][T32016] swapcached 8192 [ 2561.714144][T32016] pgpgin 385021 [ 2561.717616][T32016] pgpgout 385018 [ 2561.721228][T32016] pgfault 788798 [ 2561.724794][T32016] pgmajfault 13129 [ 2561.728535][T32016] inactive_anon 0 [ 2561.732444][T32016] active_anon 12288 [ 2561.736288][T32016] inactive_file 0 [ 2561.739925][T32016] active_file 0 [ 2561.744494][T32016] unevictable 0 [ 2561.747964][T32016] hierarchical_memory_limit 314572800 [ 2561.753589][T32016] hierarchical_memsw_limit 9223372036854771712 [ 2561.759785][T32016] total_cache 0 [ 2561.763313][T32016] total_rss 12288 [ 2561.767047][T32016] total_rss_huge 0 [ 2561.770763][T32016] total_shmem 0 [ 2561.774462][T32016] total_mapped_file 0 [ 2561.778482][T32016] total_dirty 0 [ 2561.783074][T32016] total_writeback 0 [ 2561.786910][T32016] total_workingset_refault_anon 14928 [ 2561.793127][T32016] total_workingset_refault_file 0 [ 2561.798252][T32016] total_swap 552960 [ 2561.802141][T32016] total_swapcached 8192 [ 2561.806325][T32016] total_pgpgin 385021 [ 2561.810309][T32016] total_pgpgout 385018 [ 2561.814673][T32016] total_pgfault 788798 [ 2561.818757][T32016] total_pgmajfault 13129 [ 2561.823193][T32016] total_inactive_anon 0 [ 2561.827374][T32016] total_active_anon 12288 [ 2561.831947][T32016] total_inactive_file 0 [ 2561.836131][T32016] total_active_file 0 [ 2561.840163][T32016] total_unevictable 0 [ 2561.844551][T32016] anon_cost 0 [ 2561.847934][T32016] file_cost 0 [ 2561.851992][T32016] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32016,uid=0 [ 2561.868520][T32016] Memory cgroup out of memory: Killed process 32016 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2562.053065][T28640] usb 4-1: USB disconnect, device number 95 [ 2562.131507][T31001] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2562.138890][T31001] ath9k_htc: Failed to initialize the device [ 2562.146162][T28640] usb 4-1: ath9k_htc: USB layer deinitialized 13:36:37 executing program 3: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f00000012c0)={0xa8, 0x0, 0x22, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) (async) r1 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r2 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxselin\x05x\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc088cf2, 0x14c, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x10}) (rerun: 32) mq_timedsend(r2, 0x0, 0x0, 0x4a17, 0x0) (async) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) (async) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000000000)=0xe93) (async) mq_timedsend(r2, &(0x7f0000000280)="1f1640c4a61c56530e3530b385b6d7c3706b34b0473added06f476f122aa1e59", 0x20, 0x65, &(0x7f0000000600)={0x0, 0x3938700}) pread64(r2, &(0x7f00000003c0)=""/32, 0x20, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000004b00), 0x400, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000004b40), 0x0, 0x0) (async) r8 = gettid() (async) mq_timedsend(r2, &(0x7f0000000480)="d337cb81d6a086996c1279fb38ac31c600888a1231de1f9bdb018bb63a889b1f99d65ea750a7a48405448f6ea1a79d8cb9848312468e3ac166f853b23623333b2b8afd15bc22775d3dde1f8dab63ddb3faae6bd98b9f8e8b68266195269c52d4e7647acf688d9cc59cd1b8524f4107980ce9327206aea02333038dfbd9621bf1157dd9d1195dda3dcde88d5292c3816f005b4c00ec3890a1167482e6b866abda8961533e416f8118b0fe90051c4b1cacfe977129286db10d66a240fcb3acdbbce3de6510841a1f225d1a0094eff8a0d39f18a99c85b78c8dce2a3d57ceafe26d113b7fc1dca7f4b37c191ffd384a906f09cbcfc9f67ef986d148faf54f2cfc", 0xff, 0xd3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) r11 = syz_clone3(&(0x7f0000004e80)={0x20820000, &(0x7f0000004c40), &(0x7f0000004c80), &(0x7f0000004cc0)=0x0, {0x40}, &(0x7f0000004d00)=""/144, 0x90, &(0x7f0000004dc0)=""/82, &(0x7f0000004e40)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000f80)=ANY=[@ANYBLOB="0100000084da41dfcc01000000000000040d9b782c1ecec023e8f65c2b2279df5301107ceb590e9b6c95a5599bf48566", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=r10, @ANYBLOB='./file0\x00']) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000780)="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", 0xff}, {&(0x7f00000000c0)="e2c4bbf8705e246c688bc1d340ebabf8a31647a5da926150137be29ebc", 0x1d}, {&(0x7f0000000100)="8729b4ec5b291c63196cb9d9e49cad49a24552b5", 0x14}, {&(0x7f0000000880)="5a6cb7908a09d4634d325cb0beb2ca48a425beaf57c5c37e31687a3d28e0df187e74560da445ae0a3c48eef565662dd1f2b9f3d4f654ab922b5cf2d927b2c179b36ffb3b4c599ccf5f6b3a404027ad37f16bdb27bc16004d5c177c15d0cfcc600cf35486165b672a73e1e2f0bd468ee267c0b0bcb17f07d757aa0517a6b779fb4a7c0f243b45da7935b4bbb121de70fe7d002e92d68de049871966e266e185ce5f722789c6674568b5af37ba7c8d4aa22cbbf1009d47ef88a648ccbf78a9ac2c8addc36621b6b4f5ff8c44eaf0621e5868822d3a08842e6ea9025706849ff7b623923c02ad60bc7d95b7e1221b", 0xed}, {&(0x7f0000000140)}, {&(0x7f0000000340)="b47210c1acffc63b74fda5ca4f9b30c90163f50b0b61a7387852541434cb0bf17d03ea1a05c305fdff6108f6179e0e0fcd2b56861ccae70ded4e0af20fd7cf349c6eafc1d33558f1f6dbbdd111615317c8eeb7bf28f74cf8ae108981a4f006f3460e8e3e41b65e1a6e97ca2b6363c8c1f65be822a89e1ab288923a1381975d", 0x7f}, {&(0x7f0000000980)="5fbbbdb7ef43d6df8e8d040b48de978e7ee64219b5c01d499e2cd3f77aab57f75c06dcbc0a81222a99e9b8d21b24acca095fe90b0c5b674c8d9731c766ef4f2127a442b146f2622dcf7c33b7ae5f37e1f30b2661dafc2904a4cb9d19d9e7aa4d7bf5c6a4811a6a091d5dd283295f2b68bba8971e1dcb70ecddd5a0ae1a1c370e16b6894f294bb54c4e80b02a554c41d0a292ff3914d20688b8636c3336432500609062d250b0f473ada4740b72aa9cb7633138e788c0f56fc02d62802acfe20d16017ec0e12eb3c7e06c432352b2d259226cd55b5f0ddd5105d9352bce0df0ac8b6409cb3c9ead6ddd77dc10a7967d50e3f28b73120e", 0xf6}, {&(0x7f0000000a80)="12cf88227718bb1e6753101958db68715392f6ee6a2ce1a469f705a5e5a93c0c5f80bdfe1dd4ec3a10129e0c8ee8cf0b17df43f2b6f8b1942c6647f74ac149d7d0db24ae43e1c3cb57bc0188222c3618eda4241cec06aa895118239436b0a8bcb1e3", 0x62}, {&(0x7f0000000b00)="10b7e9cb62d067f2a3e07da0151a29fd22ef28f52b7b5f323c497a1cdad2b2bb36b849042fb18500325171ac3412d6a4e39f537f6c3886e4c84397f1ac6b1b56e989c02a384705d34aaf34e5ed49f69d65dcb45590ee173aa05792060df739acb321e5d1da3b3f8f459467", 0x6b}], 0x9, &(0x7f0000001080)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32, @ANYRES32=r13, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES64=r8, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000008551234eb1217e97c841ac154dc2c5245bac2f2996089c9281989ea8b437ebcb4180c698ed7ee7102d311252b2f1e37df3addd7b0d25ef9759aa48681c1e16f6b1b38609ecc7a7e641599751543933ddf9ca6c47e6ba22deaa77c86592b73c41", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x4000000}}, {{&(0x7f0000001d00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001d80)="e229ace02c4d340f116e5672c84c2d3b5f3195d1d3604b91d95c5833b3285d18c739d215a13eeac799fdda248966ce778e6a5f9c0f84ca33b2e3940de2cfbe8aa1cadb0ae4c398746185187628080da6321037bd896195915581af70c0d06a54a1e1c4c5b947694236c7", 0x6a}, {&(0x7f0000001e00)="1277eec8fa972b199f1297d03f107d0209fc5f7664e630d6e135e729f1467ebfaf1ae1bea9aaac51d60b0f3fefa79dbb5eb85b1cfcf21034f3deb0e4ca7d3360ff9a355352228bd0065e39ea67ba302342d2a44481e14ed41a91b9071d8c30656e01e8c4c2770cc8eebfd619cd465b8013499049e3fa8064df2757d353ebd46ff60e3e57cf4f12cf61420e8249cb33f5ba71d0269db18308f3b52aa542fec8d21af32754ec9193c2d06eac53b057414e241a680d00f4002162508c0da2120f0e7a9efd914d52d735d76ab3c5f5931dcba204daba5417a762c27eba8366d9bef3285e3cf09bac094bb2d7", 0xea}, {&(0x7f0000001f00)="dd7a647016dc0e5106cc732782dff086a971e2e61591ce784d4ab621d71b010d436de711287cf5bf747a1663b289a2f82e856706e1883ec35af9925f9ea4a33a484a3ee5547564a9b06d8ac3b119913d71262e4ae1cc22dce4f8138068ea646bd35afd319e109bd03592b8c0ae705ee6515e3c7d739718d76ccc4e30d2ae953ca81674e5f94a828ff2e635a01b4c6523498198d97c", 0x95}], 0x3, 0x0, 0x0, 0x40}}, {{&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000d80)="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", 0x200}, {&(0x7f0000001740)="eafbff0843ae8417fca0dbbb68c58ec6b7f42c3c44bd41af5a3c0dc104e05134990364fd08dccaf8c5096603fad0b538883a44e3c16c41af5c3b2513e3b4f20f7f3c663bfadad1b3de4dfe85f4caa30f94fa7b3bd43e4cf0ebb4653b4dbe98bf877fad2049df94bd4b1dbf000f942d6ddc9c6c8cb7f605f7c3a80e5687e99bd80a2abac78f38c446ee803748e0e299ffe72cf7303ea9c52c149a57cd56cae1fab97603a4453c7d4bc5fe4e595816c97105c8d7383d8f2a1d78c3c5f354ae65abf9fe6fd891440bfefcbe457d9b1bcb45f5f939b362811ffe2419f195bd0a95073515", 0xe2}, {&(0x7f00000014c0)="9ad98b69da6050ff468d44b290180c2a6efbfb0189453259bf1697c4acf573d3cf95f116277ead11b2e45482a74e79d35cb9de44ec3ecaa3d5f95e46a29162a3ac5d25ef5127a954b2056b4372511cf01ec1ead6178b3b2471add2d5bbf25e29a3e7bd480e4dab173dc6a68970f63070276e705317db48ed4e39dbeadbe81bef336b4ec327396750d31f2e000000000000000000", 0x94}], 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000100001800000000000000e20000000100fb645b430329fc0000785a554a8ffa1cc2ab77e33417f085a8f021dc04d7ff", @ANYRES32, @ANYRES32, @ANYRES64=r13, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r1], 0x58}}, {{&(0x7f0000002480)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000002500)="80e590143e5e861fffcb7deac5d407e97f58e60784407cf640522d27c7a8931a11e3a3a13ee866dfb58ef4450b96461de501205751060d17d419e3ec744af4d76a85ca3d40e0ca8d29a9b7517c6f935fa757f72da9ff84852cd1f7e34652e70eb2867d2181ce560e86760bf89b40e918f1d33f14ac055b28e16b61358457d966feb500f3ca07f67b4f561bfa70879b9593a98c8b2534778c8b74b82241a19e72e9e218ba0b004787badd91c36e7b59fef8d956c759df2ddf5cf30841ae3f6610ec95857f0cee2b08fc93", 0xca}, {&(0x7f0000002600)="06566e54247a0a1de0b830aa9d9ce55b362520840f62b19578f054cad1fa7014ba846b483866a892ec3f9a8aeb0b81842f0d832d8f74ab0072c64679841cd7d3a1f3d4fe5e103f0e4253203961052169524bf58144133d3ac3483a374ecd1e67b81bc6c1f4bcd6d0a7060673cd374a8cd5a77ed873bdc1d46aebcfa79e3ea3f657899fdd09c16ec5253a588882739aba19689422574b65128be975c9ef6223501bf602786cac77", 0xa7}, {&(0x7f00000026c0)="cdc536652775c9a2224bef19c6472be065e8a2713e1c7f3766613fc017fc304661c6c4118eaf0f223b401f424113a2e480b3cc8c94bf86bd0ae00ce98dcfc8b38d4f11772ff0561275cb26d1364285ec5c08308be5d7214873cc679152e83a26ccc43d1bf269cdafd9a103b7ac33f43c", 0x70}, {&(0x7f0000002740)="79ea39bd41f7fa12af993bee23617d78b30be2af547aa74a0d0aba6191d58d37aa98a2bc8e478411e1a4e01166d7f54dcbd51cecd6b3f7c770499a721ea0d34fb1973d641a809525cdc1d6cf112eecad3c605148f416101515b626", 0x5b}, {&(0x7f00000027c0)="c99d25d0a23b56142cd9442e458827449dd66c2f456f220a846e1d00cc4c443a24066d386fc202e7ed095fcfa58e812ac8f7172acbe33607e61b0eea6069bb265bba7c71bdbbe688236c466acd5542b47fcb8ee5881056a2eb2c7c01f8c6bd700b7e168efd436eca92374dec4097281152aaafd2e7a7946f915d2e6b5b25d63a045b091370d96f04480b3a7e3b9dadcec86a66103cb1874729cd5b5b59dfb57623df388b79046243822e8fdce0aa80c802237ebb8cd82f2bd913ccba9a8276279acc2522863cae4d53", 0xc9}, {&(0x7f00000028c0)="e9e840edc8967958d809cc7add0a90ed920b19636bf58073db735b2ad771d28e2a53a3c93e70340ccd63859f8ff7d7623ac723dbffe61e501bd6b43d4f77bea8a3652553b4d51eaaffafbe84a4a18445a00ccea0c8baad40d03844206895ad2c43206d7e9b29", 0x66}], 0x6, &(0x7f0000019640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYBLOB="1a86d120b54137faaca16d89919be983ac7aa51cf651bf73773f0f578cd7f1083ba346c308d26a027751078882c5606756333cd05e8392e350d1fc0585bac5b5aa9b79007deee88814edbc2adbe2a7ab3eff94d31ec92233cceab8fdd67e5b5d23f93e278f2acc7e6eb43f376b22c82f89eb3b235a23d0121310fbe953fbfd417923dc45a3dcc5", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="000000001000000000000000010000000100000034000000000000000100000001000000", @ANYRES32=r9, @ANYRESOCT=r12, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r14, @ANYRES32=0xee01, @ANYBLOB="03000000"], 0xa0, 0x1}}, {{&(0x7f0000005000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005440)=[{&(0x7f00000197c0)="3f0704ea57d0ced27a3c40059068e6244f1e655e7c600d295efbc5cdfc89f99097091425c2150388746f9f934f4f6840de27f5bdc7760dfe4f25c12c1a6ee530f5a2c5096527eda2f8a613154bef7e7da313393908a398043090dfe4138a346f052ea3befabef9d8f6374140f84beb7203b4486527787f42972ed57b6d4a66549d62f4519bf6b02a63bee934ab5309e9f47d0c409fa4536c62ce670982b4b9d09b14bd0c449febbcd4b65dd60aa4a7af2cbe32ec71afd73da9538a2764e52a4186aea77fb4bfadf4f290aa49a2290ff86c446ada3135db6fc67e8f3773", 0xdd}, {&(0x7f0000005180)="fc7592f44cc3e8bacecc541dccd4d8d3e16013b67e104f9344ee162c53e6ccaa1b179d97", 0x24}, {&(0x7f0000000640)="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", 0x110}, {&(0x7f0000005280)="61d06e6320064a1b8cdf62a72c0ff61d65b5283aa2231f9e285648398d07162eafa3149b36c8a32897", 0x29}, {&(0x7f00000052c0)="fafb4cedcb40b4b227caf100e3b219cd930f6c84b764b84f31e618ae1740991b9c1e7649fcbe35fc0dc6093a8f8e7ac91b6fb739b8c5bc4c3693056337ddfa3cb7a969a89475d665d2053918e58eace1dfe14c2e395fe561bb2431a0a41e81d5a9f87c5f4c784dd109788e6852c07e69b077e93d821597b5cb786737139acd171a17caaaf6e71dd1db5e0d28d78f64257598ef54d18758c14bff8bcf558bb8dec46509cb9965291c49f5bc41b64a", 0xae}, {&(0x7f0000005380)="89e515a4abf3a64d0ccb680d9a82558b83e742e3a797258e35f1f9ec60889788886e8017eb0f0d4cd7ac114615310944cc902fa4cf1ad5b7be693f6d27d612d190cee0511009322497a02bdfc7fa9ba6efd57e373157ce6bd1dc6134dcb9896bceb1a9c3d6e55c61548923ed5562f10b3d62f7ac1c4ae390b895c02eccff470f8eae21939fe845f47a0b7315c1c45538e2ed47712b3387703309985784a0e2f68575bdc5604aaf39b3654cce649ffc7423cf625b", 0xb4}], 0x6, 0x0, 0x0, 0x408d051}}], 0x5, 0x8000) getgroups(0x1, &(0x7f0000000000)=[r5, 0xee01, r4]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000054c0)=@filter={'filter\x00', 0x2, 0x4, 0x370, 0xffffffff, 0x1d0, 0xd0, 0x1d0, 0xfeffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x29}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x11, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'vxcan1\x00', {}, {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7ff, 0x391}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@frag={{}, {[0x7, 0xd96d], 0x1, 0x24}}, @common=@unspec=@owner={{}, {0x0, r3, r15, r16, 0x4, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff05) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) r18 = geteuid() (rerun: 32) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000013c0), 0x8000, &(0x7f0000003440)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r16}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xdd3}}], [{@euid_eq={'euid', 0x3d, r17}}, {@flag='nomand'}, {@audit}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r18}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@seclabel}]}}) (async, rerun: 64) r19 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 64) syz_usb_ep_write$ath9k_ep1(r19, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) (async) syz_usb_ep_write$ath9k_ep1(r19, 0x82, 0x1258, &(0x7f0000000140)={[{0x40, 0x4e00, "49204ec44934d1b2a6db3c0d37d127ba186a096565656ea48c9090428d908090737a5d7afb212af992219ad26775affbd272b60e6a73b116e4de8842d361aaf4"}, {0xde, 0x4e00, "3dafca4206eeab7ac4d0f380b277893b2654a942d692966117dc9c7e18983af9d6feed274fb99e9e539f3a96aae5dbfa30c2c1eda851f4a31c4539880216f8490a51720589c827a67fa9fbd52e2dc853637f3a0551b4e0f713dbeab0571fe1914c4681c143e4c49af10d6df280b8a8f1e3fc6fffeac41c7ba4ae2ae2b898608060043ac05779608096bcd0236551364e23525d848fef2f02eb8ff66c4f3d5b049785fdba3772b0cb55932d85dada602abef5f561c148e16b8d7e01e712923974b204f26ebdf32ad59703c1bf71102f310594a8df244bf4d27991334b0676"}, {0x5a, 0x4e00, "b61500ba28dfd2f76c54eaae319fb560b9404d4701ef0a1950430f3967cac3e351bc0295603bca84c4b7e416f5450808fe00cefcbefd5b139cf09ca68389c940d0593b237e24b0fd80338ffb076a60e5c1bb3b2cbd65ad035c2b"}, {0x1000, 0x4e00, "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"}, {0x56, 0x4e00, "8447c4449f11e2a460c83919c408de80c759a8e81f7a7e07aa78311b2a7c295e86f0f0bd2240170d586435c0d2011da5fac575742bf201114662f08f3ec42310bb853ef304ce26222a263fec08eff5dde4606733ecb8"}, {0x4, 0x4e00, "30f2842e"}, {0x5b, 0x4e00, "3edf15bd2e7b6cad58f1e9571a33cda911f2316745b9ccff3286c23b34b43f25236a9618028637e3d149d8b6607bb46b007352fceed73960282056c7b280c397ed9f4fd41dabfcff55e7778f3caa5efbf2d4ba1cbe7428b6047c78"}, {0x2, 0x4e00, ':-'}]}) 13:36:37 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 13:36:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x4000}}]}]}}]}, 0x74}}, 0x0) 13:36:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1200}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}]}]}}]}, 0x478}}, 0x0) [ 2562.629516][T32020] __nla_validate_parse: 40 callbacks suppressed [ 2562.629537][T32020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:37 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) [ 2562.727741][T32030] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:37 executing program 0: io_setup(0x4, &(0x7f0000003180)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003240), 0x8}) 13:36:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1400}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x4800}}]}]}}]}, 0x74}}, 0x0) [ 2562.878792][ T5117] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2562.906127][T32037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2562.913449][ T5117] CPU: 1 PID: 5117 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 13:36:37 executing program 0: bpf$BPF_LINK_CREATE_XDP(0x21, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) [ 2562.923814][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2562.933912][ T5117] Call Trace: [ 2562.937256][ T5117] [ 2562.940228][ T5117] dump_stack_lvl+0x1e7/0x2e0 [ 2562.944992][ T5117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2562.950255][ T5117] ? __pfx__printk+0x10/0x10 [ 2562.954898][ T5117] ? ___ratelimit+0x4c4/0x670 [ 2562.959629][ T5117] ? __pfx____ratelimit+0x10/0x10 [ 2562.964703][ T5117] dump_header+0xda/0x6a0 [ 2562.969077][ T5117] oom_kill_process+0x3a7/0x930 [ 2562.973985][ T5117] out_of_memory+0xf67/0x1320 [ 2562.978712][ T5117] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2562.984385][ T5117] ? __pfx___mutex_lock+0x10/0x10 [ 2562.989447][ T5117] ? __pfx_out_of_memory+0x10/0x10 [ 2562.990220][T32040] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2562.994591][ T5117] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2562.994626][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2562.994659][ T5117] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2562.994691][ T5117] ? do_raw_spin_unlock+0x13b/0x8b0 13:36:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1500}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2562.994719][ T5117] ? mem_cgroup_iter+0x3e9/0x560 [ 2562.994753][ T5117] try_charge_memcg+0xda2/0x18a0 [ 2562.994778][ T5117] ? mark_lock+0x9a/0x350 [ 2562.994822][ T5117] ? __pfx_try_charge_memcg+0x10/0x10 [ 2563.011399][T32043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2563.014864][ T5117] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2563.061420][ T5117] charge_memcg+0xa2/0x160 [ 2563.065877][ T5117] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2563.071982][ T5117] __read_swap_cache_async+0x480/0x8b0 [ 2563.077490][ T5117] ? mark_lock+0x9a/0x350 [ 2563.081869][ T5117] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2563.087911][ T5117] swap_cluster_readahead+0x67c/0x810 [ 2563.093373][ T5117] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2563.099320][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2563.104386][ T5117] ? xas_descend+0x37e/0x470 [ 2563.109032][ T5117] swapin_readahead+0x1ea/0x1070 [ 2563.114019][ T5117] ? filemap_get_entry+0x127/0x4e0 [ 2563.119194][ T5117] ? __pfx_swapin_readahead+0x10/0x10 [ 2563.124624][ T5117] ? __filemap_get_folio+0x935/0xbc0 13:36:38 executing program 0: fspick(0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00', 0x0) [ 2563.129971][ T5117] ? swap_cache_get_folio+0x9f/0x570 [ 2563.135301][ T5117] do_swap_page+0x791/0x3f40 [ 2563.139934][ T5117] ? rcu_is_watching+0x15/0xb0 [ 2563.144761][ T5117] ? do_swap_page+0x154/0x3f40 [ 2563.149565][ T5117] ? __pfx_do_swap_page+0x10/0x10 [ 2563.154796][ T5117] ? pte_offset_map_nolock+0x137/0x1f0 [ 2563.160298][ T5117] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2563.162402][T32045] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2563.166137][ T5117] __handle_mm_fault+0x15e8/0x72d0 [ 2563.166201][ T5117] ? reacquire_held_locks+0x3eb/0x690 [ 2563.186008][ T5117] ? __pfx___handle_mm_fault+0x10/0x10 [ 2563.191529][ T5117] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2563.197310][ T5117] ? mtree_range_walk+0x6fd/0x8e0 [ 2563.202379][ T5117] ? lock_vma_under_rcu+0x18a/0x730 [ 2563.207618][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2563.212686][ T5117] ? lock_vma_under_rcu+0x2f9/0x730 [ 2563.217961][ T5117] ? lock_vma_under_rcu+0x18a/0x730 [ 2563.223209][ T5117] ? __pfx_lock_vma_under_rcu+0x10/0x10 13:36:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f00000003c0)=[{0x9}]}) [ 2563.228804][ T5117] handle_mm_fault+0x3c1/0x8a0 [ 2563.233626][ T5117] exc_page_fault+0x456/0x870 [ 2563.238357][ T5117] asm_exc_page_fault+0x26/0x30 [ 2563.243245][ T5117] RIP: 0033:0x7fdd6aca4b90 [ 2563.247695][ T5117] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00 [ 2563.265126][T32045] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1800}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:38 executing program 3: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f00000012c0)={0xa8, 0x0, 0x22, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f00000012c0)={0xa8, 0x0, 0x22, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r1 = socket$key(0xf, 0x3, 0x2) r2 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxselin\x05x\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc088cf2, 0x14c, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x10}) mq_timedsend(r2, 0x0, 0x0, 0x4a17, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40047602, &(0x7f0000000000)=0xe93) mq_timedsend(r2, &(0x7f0000000280)="1f1640c4a61c56530e3530b385b6d7c3706b34b0473added06f476f122aa1e59", 0x20, 0x65, &(0x7f0000000600)={0x0, 0x3938700}) pread64(r2, &(0x7f00000003c0)=""/32, 0x20, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000004b00), 0x400, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000004b40), 0x0, 0x0) (async) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000004b40), 0x0, 0x0) r8 = gettid() mq_timedsend(r2, &(0x7f0000000480)="d337cb81d6a086996c1279fb38ac31c600888a1231de1f9bdb018bb63a889b1f99d65ea750a7a48405448f6ea1a79d8cb9848312468e3ac166f853b23623333b2b8afd15bc22775d3dde1f8dab63ddb3faae6bd98b9f8e8b68266195269c52d4e7647acf688d9cc59cd1b8524f4107980ce9327206aea02333038dfbd9621bf1157dd9d1195dda3dcde88d5292c3816f005b4c00ec3890a1167482e6b866abda8961533e416f8118b0fe90051c4b1cacfe977129286db10d66a240fcb3acdbbce3de6510841a1f225d1a0094eff8a0d39f18a99c85b78c8dce2a3d57ceafe26d113b7fc1dca7f4b37c191ffd384a906f09cbcfc9f67ef986d148faf54f2cfc", 0xff, 0xd3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) r11 = syz_clone3(&(0x7f0000004e80)={0x20820000, &(0x7f0000004c40), &(0x7f0000004c80), &(0x7f0000004cc0)=0x0, {0x40}, &(0x7f0000004d00)=""/144, 0x90, &(0x7f0000004dc0)=""/82, &(0x7f0000004e40)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000f80)=ANY=[@ANYBLOB="0100000084da41dfcc01000000000000040d9b782c1ecec023e8f65c2b2279df5301107ceb590e9b6c95a5599bf48566", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r10, @ANYBLOB='./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000f80)=ANY=[@ANYBLOB="0100000084da41dfcc01000000000000040d9b782c1ecec023e8f65c2b2279df5301107ceb590e9b6c95a5599bf48566", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=r10, @ANYBLOB='./file0\x00']) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000780)="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", 0xff}, {&(0x7f00000000c0)="e2c4bbf8705e246c688bc1d340ebabf8a31647a5da926150137be29ebc", 0x1d}, {&(0x7f0000000100)="8729b4ec5b291c63196cb9d9e49cad49a24552b5", 0x14}, {&(0x7f0000000880)="5a6cb7908a09d4634d325cb0beb2ca48a425beaf57c5c37e31687a3d28e0df187e74560da445ae0a3c48eef565662dd1f2b9f3d4f654ab922b5cf2d927b2c179b36ffb3b4c599ccf5f6b3a404027ad37f16bdb27bc16004d5c177c15d0cfcc600cf35486165b672a73e1e2f0bd468ee267c0b0bcb17f07d757aa0517a6b779fb4a7c0f243b45da7935b4bbb121de70fe7d002e92d68de049871966e266e185ce5f722789c6674568b5af37ba7c8d4aa22cbbf1009d47ef88a648ccbf78a9ac2c8addc36621b6b4f5ff8c44eaf0621e5868822d3a08842e6ea9025706849ff7b623923c02ad60bc7d95b7e1221b", 0xed}, {&(0x7f0000000140)}, {&(0x7f0000000340)="b47210c1acffc63b74fda5ca4f9b30c90163f50b0b61a7387852541434cb0bf17d03ea1a05c305fdff6108f6179e0e0fcd2b56861ccae70ded4e0af20fd7cf349c6eafc1d33558f1f6dbbdd111615317c8eeb7bf28f74cf8ae108981a4f006f3460e8e3e41b65e1a6e97ca2b6363c8c1f65be822a89e1ab288923a1381975d", 0x7f}, {&(0x7f0000000980)="5fbbbdb7ef43d6df8e8d040b48de978e7ee64219b5c01d499e2cd3f77aab57f75c06dcbc0a81222a99e9b8d21b24acca095fe90b0c5b674c8d9731c766ef4f2127a442b146f2622dcf7c33b7ae5f37e1f30b2661dafc2904a4cb9d19d9e7aa4d7bf5c6a4811a6a091d5dd283295f2b68bba8971e1dcb70ecddd5a0ae1a1c370e16b6894f294bb54c4e80b02a554c41d0a292ff3914d20688b8636c3336432500609062d250b0f473ada4740b72aa9cb7633138e788c0f56fc02d62802acfe20d16017ec0e12eb3c7e06c432352b2d259226cd55b5f0ddd5105d9352bce0df0ac8b6409cb3c9ead6ddd77dc10a7967d50e3f28b73120e", 0xf6}, {&(0x7f0000000a80)="12cf88227718bb1e6753101958db68715392f6ee6a2ce1a469f705a5e5a93c0c5f80bdfe1dd4ec3a10129e0c8ee8cf0b17df43f2b6f8b1942c6647f74ac149d7d0db24ae43e1c3cb57bc0188222c3618eda4241cec06aa895118239436b0a8bcb1e3", 0x62}, {&(0x7f0000000b00)="10b7e9cb62d067f2a3e07da0151a29fd22ef28f52b7b5f323c497a1cdad2b2bb36b849042fb18500325171ac3412d6a4e39f537f6c3886e4c84397f1ac6b1b56e989c02a384705d34aaf34e5ed49f69d65dcb45590ee173aa05792060df739acb321e5d1da3b3f8f459467", 0x6b}], 0x9, &(0x7f0000001080)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32, @ANYRES32=r13, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES64=r8, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000008551234eb1217e97c841ac154dc2c5245bac2f2996089c9281989ea8b437ebcb4180c698ed7ee7102d311252b2f1e37df3addd7b0d25ef9759aa48681c1e16f6b1b38609ecc7a7e641599751543933ddf9ca6c47e6ba22deaa77c86592b73c41", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x4000000}}, {{&(0x7f0000001d00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001d80)="e229ace02c4d340f116e5672c84c2d3b5f3195d1d3604b91d95c5833b3285d18c739d215a13eeac799fdda248966ce778e6a5f9c0f84ca33b2e3940de2cfbe8aa1cadb0ae4c398746185187628080da6321037bd896195915581af70c0d06a54a1e1c4c5b947694236c7", 0x6a}, {&(0x7f0000001e00)="1277eec8fa972b199f1297d03f107d0209fc5f7664e630d6e135e729f1467ebfaf1ae1bea9aaac51d60b0f3fefa79dbb5eb85b1cfcf21034f3deb0e4ca7d3360ff9a355352228bd0065e39ea67ba302342d2a44481e14ed41a91b9071d8c30656e01e8c4c2770cc8eebfd619cd465b8013499049e3fa8064df2757d353ebd46ff60e3e57cf4f12cf61420e8249cb33f5ba71d0269db18308f3b52aa542fec8d21af32754ec9193c2d06eac53b057414e241a680d00f4002162508c0da2120f0e7a9efd914d52d735d76ab3c5f5931dcba204daba5417a762c27eba8366d9bef3285e3cf09bac094bb2d7", 0xea}, {&(0x7f0000001f00)="dd7a647016dc0e5106cc732782dff086a971e2e61591ce784d4ab621d71b010d436de711287cf5bf747a1663b289a2f82e856706e1883ec35af9925f9ea4a33a484a3ee5547564a9b06d8ac3b119913d71262e4ae1cc22dce4f8138068ea646bd35afd319e109bd03592b8c0ae705ee6515e3c7d739718d76ccc4e30d2ae953ca81674e5f94a828ff2e635a01b4c6523498198d97c", 0x95}], 0x3, 0x0, 0x0, 0x40}}, {{&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000d80)="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", 0x200}, {&(0x7f0000001740)="eafbff0843ae8417fca0dbbb68c58ec6b7f42c3c44bd41af5a3c0dc104e05134990364fd08dccaf8c5096603fad0b538883a44e3c16c41af5c3b2513e3b4f20f7f3c663bfadad1b3de4dfe85f4caa30f94fa7b3bd43e4cf0ebb4653b4dbe98bf877fad2049df94bd4b1dbf000f942d6ddc9c6c8cb7f605f7c3a80e5687e99bd80a2abac78f38c446ee803748e0e299ffe72cf7303ea9c52c149a57cd56cae1fab97603a4453c7d4bc5fe4e595816c97105c8d7383d8f2a1d78c3c5f354ae65abf9fe6fd891440bfefcbe457d9b1bcb45f5f939b362811ffe2419f195bd0a95073515", 0xe2}, {&(0x7f00000014c0)="9ad98b69da6050ff468d44b290180c2a6efbfb0189453259bf1697c4acf573d3cf95f116277ead11b2e45482a74e79d35cb9de44ec3ecaa3d5f95e46a29162a3ac5d25ef5127a954b2056b4372511cf01ec1ead6178b3b2471add2d5bbf25e29a3e7bd480e4dab173dc6a68970f63070276e705317db48ed4e39dbeadbe81bef336b4ec327396750d31f2e000000000000000000", 0x94}], 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000100001800000000000000e20000000100fb645b430329fc0000785a554a8ffa1cc2ab77e33417f085a8f021dc04d7ff", @ANYRES32, @ANYRES32, @ANYRES64=r13, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r1], 0x58}}, {{&(0x7f0000002480)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000002500)="80e590143e5e861fffcb7deac5d407e97f58e60784407cf640522d27c7a8931a11e3a3a13ee866dfb58ef4450b96461de501205751060d17d419e3ec744af4d76a85ca3d40e0ca8d29a9b7517c6f935fa757f72da9ff84852cd1f7e34652e70eb2867d2181ce560e86760bf89b40e918f1d33f14ac055b28e16b61358457d966feb500f3ca07f67b4f561bfa70879b9593a98c8b2534778c8b74b82241a19e72e9e218ba0b004787badd91c36e7b59fef8d956c759df2ddf5cf30841ae3f6610ec95857f0cee2b08fc93", 0xca}, {&(0x7f0000002600)="06566e54247a0a1de0b830aa9d9ce55b362520840f62b19578f054cad1fa7014ba846b483866a892ec3f9a8aeb0b81842f0d832d8f74ab0072c64679841cd7d3a1f3d4fe5e103f0e4253203961052169524bf58144133d3ac3483a374ecd1e67b81bc6c1f4bcd6d0a7060673cd374a8cd5a77ed873bdc1d46aebcfa79e3ea3f657899fdd09c16ec5253a588882739aba19689422574b65128be975c9ef6223501bf602786cac77", 0xa7}, {&(0x7f00000026c0)="cdc536652775c9a2224bef19c6472be065e8a2713e1c7f3766613fc017fc304661c6c4118eaf0f223b401f424113a2e480b3cc8c94bf86bd0ae00ce98dcfc8b38d4f11772ff0561275cb26d1364285ec5c08308be5d7214873cc679152e83a26ccc43d1bf269cdafd9a103b7ac33f43c", 0x70}, {&(0x7f0000002740)="79ea39bd41f7fa12af993bee23617d78b30be2af547aa74a0d0aba6191d58d37aa98a2bc8e478411e1a4e01166d7f54dcbd51cecd6b3f7c770499a721ea0d34fb1973d641a809525cdc1d6cf112eecad3c605148f416101515b626", 0x5b}, {&(0x7f00000027c0)="c99d25d0a23b56142cd9442e458827449dd66c2f456f220a846e1d00cc4c443a24066d386fc202e7ed095fcfa58e812ac8f7172acbe33607e61b0eea6069bb265bba7c71bdbbe688236c466acd5542b47fcb8ee5881056a2eb2c7c01f8c6bd700b7e168efd436eca92374dec4097281152aaafd2e7a7946f915d2e6b5b25d63a045b091370d96f04480b3a7e3b9dadcec86a66103cb1874729cd5b5b59dfb57623df388b79046243822e8fdce0aa80c802237ebb8cd82f2bd913ccba9a8276279acc2522863cae4d53", 0xc9}, {&(0x7f00000028c0)="e9e840edc8967958d809cc7add0a90ed920b19636bf58073db735b2ad771d28e2a53a3c93e70340ccd63859f8ff7d7623ac723dbffe61e501bd6b43d4f77bea8a3652553b4d51eaaffafbe84a4a18445a00ccea0c8baad40d03844206895ad2c43206d7e9b29", 0x66}], 0x6, &(0x7f0000019640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYBLOB="1a86d120b54137faaca16d89919be983ac7aa51cf651bf73773f0f578cd7f1083ba346c308d26a027751078882c5606756333cd05e8392e350d1fc0585bac5b5aa9b79007deee88814edbc2adbe2a7ab3eff94d31ec92233cceab8fdd67e5b5d23f93e278f2acc7e6eb43f376b22c82f89eb3b235a23d0121310fbe953fbfd417923dc45a3dcc5", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="000000001000000000000000010000000100000034000000000000000100000001000000", @ANYRES32=r9, @ANYRESOCT=r12, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r14, @ANYRES32=0xee01, @ANYBLOB="03000000"], 0xa0, 0x1}}, {{&(0x7f0000005000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005440)=[{&(0x7f00000197c0)="3f0704ea57d0ced27a3c40059068e6244f1e655e7c600d295efbc5cdfc89f99097091425c2150388746f9f934f4f6840de27f5bdc7760dfe4f25c12c1a6ee530f5a2c5096527eda2f8a613154bef7e7da313393908a398043090dfe4138a346f052ea3befabef9d8f6374140f84beb7203b4486527787f42972ed57b6d4a66549d62f4519bf6b02a63bee934ab5309e9f47d0c409fa4536c62ce670982b4b9d09b14bd0c449febbcd4b65dd60aa4a7af2cbe32ec71afd73da9538a2764e52a4186aea77fb4bfadf4f290aa49a2290ff86c446ada3135db6fc67e8f3773", 0xdd}, {&(0x7f0000005180)="fc7592f44cc3e8bacecc541dccd4d8d3e16013b67e104f9344ee162c53e6ccaa1b179d97", 0x24}, {&(0x7f0000000640)="8beca00ea54bbb446a59b70ee82d846ea6ff841ec50f53593bd1a789b3f29f9034fd9b9e445c2bf431dde5b08ad8e0e308e756ec2af34a1805a4d3203d88ff207a082b3887636869ad9addfcadfd7c852ecea62849d1b51e6d0af0b8cee529eb93d74bc70314b2cc4f22ec237fb43e3808590b2163da97c441d0c616e30a6d4bba3718001a7cade584ba12903e018f600427cf69b72fd391debd87535763fe940cf11f2fc3552d66c99eaf91363fd6f2c322d9d4f8c8e1edb98901000000000022fd1722569469d8f40e63e57541c9a68657fe25d476ec8d7b92eabf3e0bd4d6831f091d6c398f7204f842b2b44a48b96e267eccaf94a91b266eb35d9632009f5568deb085c67360113060b8caa2b14a", 0x110}, {&(0x7f0000005280)="61d06e6320064a1b8cdf62a72c0ff61d65b5283aa2231f9e285648398d07162eafa3149b36c8a32897", 0x29}, {&(0x7f00000052c0)="fafb4cedcb40b4b227caf100e3b219cd930f6c84b764b84f31e618ae1740991b9c1e7649fcbe35fc0dc6093a8f8e7ac91b6fb739b8c5bc4c3693056337ddfa3cb7a969a89475d665d2053918e58eace1dfe14c2e395fe561bb2431a0a41e81d5a9f87c5f4c784dd109788e6852c07e69b077e93d821597b5cb786737139acd171a17caaaf6e71dd1db5e0d28d78f64257598ef54d18758c14bff8bcf558bb8dec46509cb9965291c49f5bc41b64a", 0xae}, {&(0x7f0000005380)="89e515a4abf3a64d0ccb680d9a82558b83e742e3a797258e35f1f9ec60889788886e8017eb0f0d4cd7ac114615310944cc902fa4cf1ad5b7be693f6d27d612d190cee0511009322497a02bdfc7fa9ba6efd57e373157ce6bd1dc6134dcb9896bceb1a9c3d6e55c61548923ed5562f10b3d62f7ac1c4ae390b895c02eccff470f8eae21939fe845f47a0b7315c1c45538e2ed47712b3387703309985784a0e2f68575bdc5604aaf39b3654cce649ffc7423cf625b", 0xb4}], 0x6, 0x0, 0x0, 0x408d051}}], 0x5, 0x8000) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000780)="c0594cb6a57211e11230bf51bf46610b7c252b1ba908e6576be490605dd41ac06a7d64209cbb3762cfe37753834bd342e4a4e6feaf34578903b52cd6551a332c0ba851be9a0b7c6944b4375094476f485f558d7b62f4efd0467528e11de7d1cc663a425d161732f7755afb302e47d321c10143d4cd6778770a48d39e247d3832d209c28541006926b6acf8067d2797603dfc4990432a7352eee81582a346e156c336d834b45d452b21f1ed4e09e7e75a3f12af818e261f2dfab32ac0dcfd2eb22469b074c818e65836a8f7f78afb0c6955cdd19493d32a33045278eaddc21c30813d8c150bca13babea2e39b135bfffd9b57c7ef09bbfb5b5060d7a69fab3a", 0xff}, {&(0x7f00000000c0)="e2c4bbf8705e246c688bc1d340ebabf8a31647a5da926150137be29ebc", 0x1d}, {&(0x7f0000000100)="8729b4ec5b291c63196cb9d9e49cad49a24552b5", 0x14}, {&(0x7f0000000880)="5a6cb7908a09d4634d325cb0beb2ca48a425beaf57c5c37e31687a3d28e0df187e74560da445ae0a3c48eef565662dd1f2b9f3d4f654ab922b5cf2d927b2c179b36ffb3b4c599ccf5f6b3a404027ad37f16bdb27bc16004d5c177c15d0cfcc600cf35486165b672a73e1e2f0bd468ee267c0b0bcb17f07d757aa0517a6b779fb4a7c0f243b45da7935b4bbb121de70fe7d002e92d68de049871966e266e185ce5f722789c6674568b5af37ba7c8d4aa22cbbf1009d47ef88a648ccbf78a9ac2c8addc36621b6b4f5ff8c44eaf0621e5868822d3a08842e6ea9025706849ff7b623923c02ad60bc7d95b7e1221b", 0xed}, {&(0x7f0000000140)}, {&(0x7f0000000340)="b47210c1acffc63b74fda5ca4f9b30c90163f50b0b61a7387852541434cb0bf17d03ea1a05c305fdff6108f6179e0e0fcd2b56861ccae70ded4e0af20fd7cf349c6eafc1d33558f1f6dbbdd111615317c8eeb7bf28f74cf8ae108981a4f006f3460e8e3e41b65e1a6e97ca2b6363c8c1f65be822a89e1ab288923a1381975d", 0x7f}, {&(0x7f0000000980)="5fbbbdb7ef43d6df8e8d040b48de978e7ee64219b5c01d499e2cd3f77aab57f75c06dcbc0a81222a99e9b8d21b24acca095fe90b0c5b674c8d9731c766ef4f2127a442b146f2622dcf7c33b7ae5f37e1f30b2661dafc2904a4cb9d19d9e7aa4d7bf5c6a4811a6a091d5dd283295f2b68bba8971e1dcb70ecddd5a0ae1a1c370e16b6894f294bb54c4e80b02a554c41d0a292ff3914d20688b8636c3336432500609062d250b0f473ada4740b72aa9cb7633138e788c0f56fc02d62802acfe20d16017ec0e12eb3c7e06c432352b2d259226cd55b5f0ddd5105d9352bce0df0ac8b6409cb3c9ead6ddd77dc10a7967d50e3f28b73120e", 0xf6}, {&(0x7f0000000a80)="12cf88227718bb1e6753101958db68715392f6ee6a2ce1a469f705a5e5a93c0c5f80bdfe1dd4ec3a10129e0c8ee8cf0b17df43f2b6f8b1942c6647f74ac149d7d0db24ae43e1c3cb57bc0188222c3618eda4241cec06aa895118239436b0a8bcb1e3", 0x62}, {&(0x7f0000000b00)="10b7e9cb62d067f2a3e07da0151a29fd22ef28f52b7b5f323c497a1cdad2b2bb36b849042fb18500325171ac3412d6a4e39f537f6c3886e4c84397f1ac6b1b56e989c02a384705d34aaf34e5ed49f69d65dcb45590ee173aa05792060df739acb321e5d1da3b3f8f459467", 0x6b}], 0x9, &(0x7f0000001080)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32, @ANYRES32=r13, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES64=r8, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000000000000001000000020000008551234eb1217e97c841ac154dc2c5245bac2f2996089c9281989ea8b437ebcb4180c698ed7ee7102d311252b2f1e37df3addd7b0d25ef9759aa48681c1e16f6b1b38609ecc7a7e641599751543933ddf9ca6c47e6ba22deaa77c86592b73c41", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x4000000}}, {{&(0x7f0000001d00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001d80)="e229ace02c4d340f116e5672c84c2d3b5f3195d1d3604b91d95c5833b3285d18c739d215a13eeac799fdda248966ce778e6a5f9c0f84ca33b2e3940de2cfbe8aa1cadb0ae4c398746185187628080da6321037bd896195915581af70c0d06a54a1e1c4c5b947694236c7", 0x6a}, {&(0x7f0000001e00)="1277eec8fa972b199f1297d03f107d0209fc5f7664e630d6e135e729f1467ebfaf1ae1bea9aaac51d60b0f3fefa79dbb5eb85b1cfcf21034f3deb0e4ca7d3360ff9a355352228bd0065e39ea67ba302342d2a44481e14ed41a91b9071d8c30656e01e8c4c2770cc8eebfd619cd465b8013499049e3fa8064df2757d353ebd46ff60e3e57cf4f12cf61420e8249cb33f5ba71d0269db18308f3b52aa542fec8d21af32754ec9193c2d06eac53b057414e241a680d00f4002162508c0da2120f0e7a9efd914d52d735d76ab3c5f5931dcba204daba5417a762c27eba8366d9bef3285e3cf09bac094bb2d7", 0xea}, {&(0x7f0000001f00)="dd7a647016dc0e5106cc732782dff086a971e2e61591ce784d4ab621d71b010d436de711287cf5bf747a1663b289a2f82e856706e1883ec35af9925f9ea4a33a484a3ee5547564a9b06d8ac3b119913d71262e4ae1cc22dce4f8138068ea646bd35afd319e109bd03592b8c0ae705ee6515e3c7d739718d76ccc4e30d2ae953ca81674e5f94a828ff2e635a01b4c6523498198d97c", 0x95}], 0x3, 0x0, 0x0, 0x40}}, {{&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000d80)="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", 0x200}, {&(0x7f0000001740)="eafbff0843ae8417fca0dbbb68c58ec6b7f42c3c44bd41af5a3c0dc104e05134990364fd08dccaf8c5096603fad0b538883a44e3c16c41af5c3b2513e3b4f20f7f3c663bfadad1b3de4dfe85f4caa30f94fa7b3bd43e4cf0ebb4653b4dbe98bf877fad2049df94bd4b1dbf000f942d6ddc9c6c8cb7f605f7c3a80e5687e99bd80a2abac78f38c446ee803748e0e299ffe72cf7303ea9c52c149a57cd56cae1fab97603a4453c7d4bc5fe4e595816c97105c8d7383d8f2a1d78c3c5f354ae65abf9fe6fd891440bfefcbe457d9b1bcb45f5f939b362811ffe2419f195bd0a95073515", 0xe2}, {&(0x7f00000014c0)="9ad98b69da6050ff468d44b290180c2a6efbfb0189453259bf1697c4acf573d3cf95f116277ead11b2e45482a74e79d35cb9de44ec3ecaa3d5f95e46a29162a3ac5d25ef5127a954b2056b4372511cf01ec1ead6178b3b2471add2d5bbf25e29a3e7bd480e4dab173dc6a68970f63070276e705317db48ed4e39dbeadbe81bef336b4ec327396750d31f2e000000000000000000", 0x94}], 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000100001800000000000000e20000000100fb645b430329fc0000785a554a8ffa1cc2ab77e33417f085a8f021dc04d7ff", @ANYRES32, @ANYRES32, @ANYRES64=r13, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r1], 0x58}}, {{&(0x7f0000002480)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000002500)="80e590143e5e861fffcb7deac5d407e97f58e60784407cf640522d27c7a8931a11e3a3a13ee866dfb58ef4450b96461de501205751060d17d419e3ec744af4d76a85ca3d40e0ca8d29a9b7517c6f935fa757f72da9ff84852cd1f7e34652e70eb2867d2181ce560e86760bf89b40e918f1d33f14ac055b28e16b61358457d966feb500f3ca07f67b4f561bfa70879b9593a98c8b2534778c8b74b82241a19e72e9e218ba0b004787badd91c36e7b59fef8d956c759df2ddf5cf30841ae3f6610ec95857f0cee2b08fc93", 0xca}, {&(0x7f0000002600)="06566e54247a0a1de0b830aa9d9ce55b362520840f62b19578f054cad1fa7014ba846b483866a892ec3f9a8aeb0b81842f0d832d8f74ab0072c64679841cd7d3a1f3d4fe5e103f0e4253203961052169524bf58144133d3ac3483a374ecd1e67b81bc6c1f4bcd6d0a7060673cd374a8cd5a77ed873bdc1d46aebcfa79e3ea3f657899fdd09c16ec5253a588882739aba19689422574b65128be975c9ef6223501bf602786cac77", 0xa7}, {&(0x7f00000026c0)="cdc536652775c9a2224bef19c6472be065e8a2713e1c7f3766613fc017fc304661c6c4118eaf0f223b401f424113a2e480b3cc8c94bf86bd0ae00ce98dcfc8b38d4f11772ff0561275cb26d1364285ec5c08308be5d7214873cc679152e83a26ccc43d1bf269cdafd9a103b7ac33f43c", 0x70}, {&(0x7f0000002740)="79ea39bd41f7fa12af993bee23617d78b30be2af547aa74a0d0aba6191d58d37aa98a2bc8e478411e1a4e01166d7f54dcbd51cecd6b3f7c770499a721ea0d34fb1973d641a809525cdc1d6cf112eecad3c605148f416101515b626", 0x5b}, {&(0x7f00000027c0)="c99d25d0a23b56142cd9442e458827449dd66c2f456f220a846e1d00cc4c443a24066d386fc202e7ed095fcfa58e812ac8f7172acbe33607e61b0eea6069bb265bba7c71bdbbe688236c466acd5542b47fcb8ee5881056a2eb2c7c01f8c6bd700b7e168efd436eca92374dec4097281152aaafd2e7a7946f915d2e6b5b25d63a045b091370d96f04480b3a7e3b9dadcec86a66103cb1874729cd5b5b59dfb57623df388b79046243822e8fdce0aa80c802237ebb8cd82f2bd913ccba9a8276279acc2522863cae4d53", 0xc9}, {&(0x7f00000028c0)="e9e840edc8967958d809cc7add0a90ed920b19636bf58073db735b2ad771d28e2a53a3c93e70340ccd63859f8ff7d7623ac723dbffe61e501bd6b43d4f77bea8a3652553b4d51eaaffafbe84a4a18445a00ccea0c8baad40d03844206895ad2c43206d7e9b29", 0x66}], 0x6, &(0x7f0000019640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYBLOB="1a86d120b54137faaca16d89919be983ac7aa51cf651bf73773f0f578cd7f1083ba346c308d26a027751078882c5606756333cd05e8392e350d1fc0585bac5b5aa9b79007deee88814edbc2adbe2a7ab3eff94d31ec92233cceab8fdd67e5b5d23f93e278f2acc7e6eb43f376b22c82f89eb3b235a23d0121310fbe953fbfd417923dc45a3dcc5", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="000000001000000000000000010000000100000034000000000000000100000001000000", @ANYRES32=r9, @ANYRESOCT=r12, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r14, @ANYRES32=0xee01, @ANYBLOB="03000000"], 0xa0, 0x1}}, {{&(0x7f0000005000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005440)=[{&(0x7f00000197c0)="3f0704ea57d0ced27a3c40059068e6244f1e655e7c600d295efbc5cdfc89f99097091425c2150388746f9f934f4f6840de27f5bdc7760dfe4f25c12c1a6ee530f5a2c5096527eda2f8a613154bef7e7da313393908a398043090dfe4138a346f052ea3befabef9d8f6374140f84beb7203b4486527787f42972ed57b6d4a66549d62f4519bf6b02a63bee934ab5309e9f47d0c409fa4536c62ce670982b4b9d09b14bd0c449febbcd4b65dd60aa4a7af2cbe32ec71afd73da9538a2764e52a4186aea77fb4bfadf4f290aa49a2290ff86c446ada3135db6fc67e8f3773", 0xdd}, {&(0x7f0000005180)="fc7592f44cc3e8bacecc541dccd4d8d3e16013b67e104f9344ee162c53e6ccaa1b179d97", 0x24}, {&(0x7f0000000640)="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", 0x110}, {&(0x7f0000005280)="61d06e6320064a1b8cdf62a72c0ff61d65b5283aa2231f9e285648398d07162eafa3149b36c8a32897", 0x29}, {&(0x7f00000052c0)="fafb4cedcb40b4b227caf100e3b219cd930f6c84b764b84f31e618ae1740991b9c1e7649fcbe35fc0dc6093a8f8e7ac91b6fb739b8c5bc4c3693056337ddfa3cb7a969a89475d665d2053918e58eace1dfe14c2e395fe561bb2431a0a41e81d5a9f87c5f4c784dd109788e6852c07e69b077e93d821597b5cb786737139acd171a17caaaf6e71dd1db5e0d28d78f64257598ef54d18758c14bff8bcf558bb8dec46509cb9965291c49f5bc41b64a", 0xae}, {&(0x7f0000005380)="89e515a4abf3a64d0ccb680d9a82558b83e742e3a797258e35f1f9ec60889788886e8017eb0f0d4cd7ac114615310944cc902fa4cf1ad5b7be693f6d27d612d190cee0511009322497a02bdfc7fa9ba6efd57e373157ce6bd1dc6134dcb9896bceb1a9c3d6e55c61548923ed5562f10b3d62f7ac1c4ae390b895c02eccff470f8eae21939fe845f47a0b7315c1c45538e2ed47712b3387703309985784a0e2f68575bdc5604aaf39b3654cce649ffc7423cf625b", 0xb4}], 0x6, 0x0, 0x0, 0x408d051}}], 0x5, 0x8000) getgroups(0x1, &(0x7f0000000000)=[r5, 0xee01, r4]) (async) getgroups(0x1, &(0x7f0000000000)=[r5, 0xee01, r4]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) (async) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000054c0)=@filter={'filter\x00', 0x2, 0x4, 0x370, 0xffffffff, 0x1d0, 0xd0, 0x1d0, 0xfeffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x29}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x11, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'vxcan1\x00', {}, {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7ff, 0x391}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@frag={{}, {[0x7, 0xd96d], 0x1, 0x24}}, @common=@unspec=@owner={{}, {0x0, r3, r15, r16, 0x4, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff05) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r18 = geteuid() mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000013c0), 0x8000, &(0x7f0000003440)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r16}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xdd3}}], [{@euid_eq={'euid', 0x3d, r17}}, {@flag='nomand'}, {@audit}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r18}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@seclabel}]}}) r19 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r19, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) syz_usb_ep_write$ath9k_ep1(r19, 0x82, 0x1258, &(0x7f0000000140)={[{0x40, 0x4e00, "49204ec44934d1b2a6db3c0d37d127ba186a096565656ea48c9090428d908090737a5d7afb212af992219ad26775affbd272b60e6a73b116e4de8842d361aaf4"}, {0xde, 0x4e00, "3dafca4206eeab7ac4d0f380b277893b2654a942d692966117dc9c7e18983af9d6feed274fb99e9e539f3a96aae5dbfa30c2c1eda851f4a31c4539880216f8490a51720589c827a67fa9fbd52e2dc853637f3a0551b4e0f713dbeab0571fe1914c4681c143e4c49af10d6df280b8a8f1e3fc6fffeac41c7ba4ae2ae2b898608060043ac05779608096bcd0236551364e23525d848fef2f02eb8ff66c4f3d5b049785fdba3772b0cb55932d85dada602abef5f561c148e16b8d7e01e712923974b204f26ebdf32ad59703c1bf71102f310594a8df244bf4d27991334b0676"}, {0x5a, 0x4e00, "b61500ba28dfd2f76c54eaae319fb560b9404d4701ef0a1950430f3967cac3e351bc0295603bca84c4b7e416f5450808fe00cefcbefd5b139cf09ca68389c940d0593b237e24b0fd80338ffb076a60e5c1bb3b2cbd65ad035c2b"}, {0x1000, 0x4e00, "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"}, {0x56, 0x4e00, "8447c4449f11e2a460c83919c408de80c759a8e81f7a7e07aa78311b2a7c295e86f0f0bd2240170d586435c0d2011da5fac575742bf201114662f08f3ec42310bb853ef304ce26222a263fec08eff5dde4606733ecb8"}, {0x4, 0x4e00, "30f2842e"}, {0x5b, 0x4e00, "3edf15bd2e7b6cad58f1e9571a33cda911f2316745b9ccff3286c23b34b43f25236a9618028637e3d149d8b6607bb46b007352fceed73960282056c7b280c397ed9f4fd41dabfcff55e7778f3caa5efbf2d4ba1cbe7428b6047c78"}, {0x2, 0x4e00, ':-'}]}) [ 2563.267308][ T5117] RSP: 002b:00007fdd6aecfce8 EFLAGS: 00010206 [ 2563.267335][ T5117] RAX: 00000000fffffffa RBX: 00000000000053d4 RCX: 0000000000000000 [ 2563.267351][ T5117] RDX: 00007fdd6aecfd30 RSI: 0000000000000000 RDI: 0000000000000000 [ 2563.298960][ T5117] RBP: 00007fdd6aecfdbc R08: 0000000000000000 R09: 00007fff7fbc30b0 [ 2563.307087][ T5117] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2563.315093][ T5117] R13: 0000000000271a34 R14: 0000000000271a34 R15: 0000000000000000 [ 2563.323119][ T5117] 13:36:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x4c00}}]}]}}]}, 0x74}}, 0x0) [ 2563.345063][ T5117] memory: usage 307180kB, limit 307200kB, failcnt 37537 [ 2563.368057][ T5117] memory+swap: usage 307716kB, limit 9007199254740988kB, failcnt 0 [ 2563.379178][T32051] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:38 executing program 0: r0 = io_uring_setup(0x2fa8, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r0], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x0, 0x1}, 0x20) [ 2563.401317][ T5117] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2563.439271][ T5117] Memory cgroup stats for /syz4: [ 2563.439767][ T5117] cache 0 [ 2563.448910][ T5117] rss 4096 [ 2563.464970][ T5117] rss_huge 0 [ 2563.472921][ T5117] shmem 0 [ 2563.478525][T32057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2563.482135][ T5117] mapped_file 0 [ 2563.504788][ T5117] dirty 0 [ 2563.507783][ T5117] writeback 0 13:36:38 executing program 0: clock_gettime(0x0, &(0x7f0000000fc0)={0x0}) select(0x40, &(0x7f0000000f00), &(0x7f0000000f40)={0x1}, &(0x7f0000000f80), &(0x7f0000001000)={r0}) [ 2563.511092][ T5117] workingset_refault_anon 14990 [ 2563.516620][ T5117] workingset_refault_file 0 [ 2563.527538][ T5117] swap 540672 [ 2563.535955][ T5117] swapcached 4096 [ 2563.540948][ T5117] pgpgin 385111 [ 2563.546958][ T5117] pgpgout 385109 [ 2563.554498][ T5117] pgfault 788925 13:36:38 executing program 0: bpf$BPF_LINK_CREATE_XDP(0x22, 0x0, 0x0) 13:36:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x4e00}}]}]}}]}, 0x74}}, 0x0) [ 2563.575239][T32057] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2563.589957][ T5117] pgmajfault 13185 [ 2563.595329][ T5117] inactive_anon 8192 [ 2563.599573][ T5117] active_anon 0 [ 2563.603827][ T5117] inactive_file 0 [ 2563.607494][ T5117] active_file 0 [ 2563.610972][ T5117] unevictable 0 [ 2563.615140][ T5117] hierarchical_memory_limit 314572800 13:36:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3800}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2563.620537][ T5117] hierarchical_memsw_limit 9223372036854771712 [ 2563.633815][ T5117] total_cache 0 [ 2563.637303][ T5117] total_rss 4096 [ 2563.640863][ T5117] total_rss_huge 0 [ 2563.660213][ T5117] total_shmem 0 13:36:38 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) [ 2563.672464][ T5117] total_mapped_file 0 [ 2563.676476][ T5117] total_dirty 0 [ 2563.688658][ T5117] total_writeback 0 [ 2563.701067][ T5117] total_workingset_refault_anon 14990 [ 2563.710575][ T5117] total_workingset_refault_file 0 [ 2563.718656][ T5117] total_swap 540672 13:36:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x5202}}]}]}}]}, 0x74}}, 0x0) [ 2563.727203][ T5117] total_swapcached 4096 [ 2563.739600][ T5117] total_pgpgin 385111 [ 2563.743940][ T5117] total_pgpgout 385109 [ 2563.761340][T15709] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2563.766237][ T5117] total_pgfault 788925 13:36:38 executing program 0: r0 = fsopen(&(0x7f0000000780)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) [ 2563.776923][ T5117] total_pgmajfault 13185 [ 2563.788630][ T5117] total_inactive_anon 8192 [ 2563.794140][ T5117] total_active_anon 0 [ 2563.798330][ T5117] total_inactive_file 0 [ 2563.806412][ T5117] total_active_file 0 [ 2563.810536][ T5117] total_unevictable 0 [ 2563.819941][ T5117] anon_cost 0 [ 2563.823427][ T5117] file_cost 0 13:36:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6602}}]}]}}]}, 0x74}}, 0x0) [ 2563.827380][ T5117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32022,uid=0 13:36:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f04}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2563.870425][ T5117] Memory cgroup out of memory: Killed process 32022 (syz-executor.4) total-vm:54508kB, anon-rss:456kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:38 executing program 0: r0 = io_uring_setup(0x43a7, &(0x7f0000000200)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x10000000) 13:36:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}]}]}}]}, 0x478}}, 0x0) 13:36:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6800}}]}]}}]}, 0x74}}, 0x0) 13:36:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) 13:36:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4000}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x5}, 0x48) 13:36:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6c00}}]}]}}]}, 0x74}}, 0x0) 13:36:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4404}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:39 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) [ 2564.293824][T15709] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2564.310936][T15709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2564.328714][T15709] usb 4-1: Product: syz [ 2564.339383][T15709] usb 4-1: Manufacturer: syz 13:36:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x7400}}]}]}}]}, 0x74}}, 0x0) [ 2564.352567][T15709] usb 4-1: SerialNumber: syz 13:36:39 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002a80)={@map, 0xffffffffffffffff, 0x0, 0x4, 0x0, @link_id}, 0x20) [ 2564.412805][T15709] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 13:36:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x7802}}]}]}}]}, 0x74}}, 0x0) 13:36:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4788}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:39 executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x9d72, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) 13:36:39 executing program 0: futex_waitv(&(0x7f0000004c80)=[{0x0, &(0x7f0000003280)=0x8, 0x82}, {0x0, &(0x7f00000032c0), 0x2}], 0x2, 0x0, &(0x7f0000005640), 0x1) 13:36:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x7a00}}]}]}}]}, 0x74}}, 0x0) 13:36:39 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4800}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:39 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000300), 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) 13:36:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x7c02}}]}]}}]}, 0x74}}, 0x0) 13:36:39 executing program 0: fsopen(&(0x7f0000000400)='overlay\x00', 0x0) [ 2564.979009][T32081] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2564.990906][T32081] CPU: 1 PID: 32081 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2564.991588][T28640] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2564.999245][T32081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2565.018230][T32081] Call Trace: [ 2565.021505][T32081] [ 2565.024429][T32081] dump_stack_lvl+0x1e7/0x2e0 [ 2565.029116][T32081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2565.034328][T32081] ? __pfx__printk+0x10/0x10 [ 2565.038939][T32081] ? ___ratelimit+0x4c4/0x670 [ 2565.043653][T32081] ? __pfx____ratelimit+0x10/0x10 [ 2565.048700][T32081] dump_header+0xda/0x6a0 [ 2565.053046][T32081] oom_kill_process+0x3a7/0x930 [ 2565.057918][T32081] out_of_memory+0xf67/0x1320 [ 2565.062619][T32081] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2565.068268][T32081] ? __pfx___mutex_lock+0x10/0x10 [ 2565.073303][T32081] ? __pfx_out_of_memory+0x10/0x10 [ 2565.078425][T32081] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2565.083993][T32081] ? __pfx_lock_release+0x10/0x10 [ 2565.089024][T32081] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2565.095113][T32081] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2565.100310][T32081] ? mem_cgroup_iter+0x3e9/0x560 [ 2565.105252][T32081] try_charge_memcg+0xda2/0x18a0 [ 2565.110180][T32081] ? mark_lock+0x9a/0x350 [ 2565.114515][T32081] ? __pfx_try_charge_memcg+0x10/0x10 [ 2565.119900][T32081] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2565.126050][T32081] charge_memcg+0xa2/0x160 [ 2565.130463][T32081] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2565.136527][T32081] __read_swap_cache_async+0x480/0x8b0 [ 2565.142008][T32081] ? mark_lock+0x9a/0x350 [ 2565.146342][T32081] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2565.152331][T32081] swap_cluster_readahead+0x67c/0x810 [ 2565.157711][T32081] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2565.163618][T32081] ? __pfx_lock_release+0x10/0x10 [ 2565.168666][T32081] ? xas_descend+0x37e/0x470 [ 2565.173277][T32081] swapin_readahead+0x1ea/0x1070 [ 2565.178225][T32081] ? filemap_get_entry+0x127/0x4e0 [ 2565.183368][T32081] ? __pfx_swapin_readahead+0x10/0x10 [ 2565.188761][T32081] ? __filemap_get_folio+0x935/0xbc0 [ 2565.194060][T32081] ? swap_cache_get_folio+0x9f/0x570 [ 2565.199370][T32081] do_swap_page+0x791/0x3f40 [ 2565.204003][T32081] ? __lock_acquire+0x1345/0x1fd0 [ 2565.209056][T32081] ? rcu_is_watching+0x15/0xb0 [ 2565.213855][T32081] ? do_swap_page+0x154/0x3f40 [ 2565.218633][T32081] ? __pfx_do_swap_page+0x10/0x10 [ 2565.221320][ C0] usb 4-1: ath9k_htc: invalid pkt_len (ce94) [ 2565.223646][T32081] ? pte_offset_map_nolock+0x137/0x1f0 [ 2565.235103][T32081] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2565.240930][T32081] ? __pfx_validate_chain+0x10/0x10 [ 2565.246137][T32081] __handle_mm_fault+0x15e8/0x72d0 [ 2565.251295][T32081] ? __pfx___handle_mm_fault+0x10/0x10 [ 2565.256794][T32081] ? mt_find+0x226/0x850 [ 2565.261050][T32081] ? __pfx_lock_release+0x10/0x10 [ 2565.266110][T32081] ? mt_find+0x62d/0x850 [ 2565.270360][T32081] ? mt_find+0x226/0x850 [ 2565.274620][T32081] ? find_vma+0x142/0x1c0 [ 2565.278958][T32081] ? __pfx_find_vma+0x10/0x10 [ 2565.283648][T32081] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2565.289645][T32081] handle_mm_fault+0x3c1/0x8a0 [ 2565.294416][T32081] exc_page_fault+0x2ad/0x870 [ 2565.299121][T32081] asm_exc_page_fault+0x26/0x30 [ 2565.303974][T32081] RIP: 0010:__get_user_8+0x11/0x20 [ 2565.309100][T32081] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2565.328702][T32081] RSP: 0018:ffffc9000426fd78 EFLAGS: 00050202 [ 2565.334767][T32081] RAX: 000055555742ada8 RBX: ffff8880a022b2f8 RCX: ffffc9000426fc03 [ 2565.342733][T32081] RDX: 0000000000000000 RSI: ffffffff8baac7a0 RDI: ffffffff8bfe6ca0 [ 2565.350721][T32081] RBP: ffffc9000426fec0 R08: ffffffff8f856cef R09: 1ffffffff1f0ad9d [ 2565.358712][T32081] R10: dffffc0000000000 R11: fffffbfff1f0ad9e R12: ffffc9000426fd80 [ 2565.366713][T32081] R13: ffffc9000426ffd8 R14: dffffc0000000000 R15: ffff8880a0229dc0 [ 2565.374712][T32081] __rseq_handle_notify_resume+0x158/0x1490 [ 2565.380629][T32081] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2565.386975][T32081] ? irqentry_exit_to_user_mode+0x52/0x270 [ 2565.392982][T32081] irqentry_exit_to_user_mode+0xbb/0x270 [ 2565.398638][T32081] exc_page_fault+0x587/0x870 [ 2565.403349][T32081] asm_exc_page_fault+0x26/0x30 [ 2565.408214][T32081] RIP: 0033:0x7fdd6ac86de0 [ 2565.412638][T32081] Code: 8b 7b f0 48 8b 3d 88 e9 c4 00 49 39 ff 0f 82 87 01 00 00 48 c7 44 24 18 00 00 00 00 4c 8b 2d 5f e9 c4 00 45 31 f6 0f 1f 40 00 <48> 8b 44 24 18 45 31 ff 48 85 c0 41 0f 94 c7 4d 3b 7d 00 0f 83 17 [ 2565.432245][T32081] RSP: 002b:00007fdd6aecf990 EFLAGS: 00010246 [ 2565.438320][T32081] RAX: 0000000000000000 RBX: 000055555742ba30 RCX: 000055555742ba10 [ 2565.446301][T32081] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001 [ 2565.454278][T32081] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 2565.462247][T32081] R10: 0000000000021000 R11: 0000000000000010 R12: 00007fdd6aecfc90 [ 2565.470216][T32081] R13: 00007fdd6b8d5b60 R14: 0000000000000000 R15: 000000000000000f [ 2565.478197][T32081] [ 2565.485958][T32081] memory: usage 307200kB, limit 307200kB, failcnt 38262 [ 2565.493705][T32081] memory+swap: usage 307736kB, limit 9007199254740988kB, failcnt 0 [ 2565.501853][T32081] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2565.509241][T32081] Memory cgroup stats for /syz4: [ 2565.509416][T32081] cache 0 [ 2565.517417][T32081] rss 12288 [ 2565.520566][T32081] rss_huge 0 [ 2565.524024][T32081] shmem 0 [ 2565.527077][T32081] mapped_file 0 [ 2565.530629][T32081] dirty 0 [ 2565.533774][T32081] writeback 0 [ 2565.537161][T32081] workingset_refault_anon 15253 [ 2565.542204][T32081] workingset_refault_file 0 [ 2565.546762][T32081] swap 548864 [ 2565.550094][T32081] swapcached 8192 [ 2565.553874][T32081] pgpgin 385401 [ 2565.557438][T32081] pgpgout 385398 [ 2565.561046][T32081] pgfault 789332 [ 2565.564798][T32081] pgmajfault 13435 [ 2565.568591][T32081] inactive_anon 8192 [ 2565.573528][T32081] active_anon 4096 [ 2565.577348][T32081] inactive_file 0 [ 2565.581037][T32081] active_file 0 [ 2565.584707][T32081] unevictable 0 [ 2565.588239][T32081] hierarchical_memory_limit 314572800 [ 2565.594857][T32081] hierarchical_memsw_limit 9223372036854771712 [ 2565.601070][T32081] total_cache 0 [ 2565.604738][T32081] total_rss 12288 [ 2565.608440][T32081] total_rss_huge 0 [ 2565.612358][T32081] total_shmem 0 [ 2565.615920][T32081] total_mapped_file 0 [ 2565.620002][T32081] total_dirty 0 [ 2565.623711][T32081] total_writeback 0 [ 2565.627638][T32081] total_workingset_refault_anon 15253 [ 2565.633210][T32081] total_workingset_refault_file 0 [ 2565.638095][T15709] usb 4-1: USB disconnect, device number 96 [ 2565.638317][T32081] total_swap 548864 [ 2565.648174][T32081] total_swapcached 8192 [ 2565.652500][T32081] total_pgpgin 385401 [ 2565.656584][T32081] total_pgpgout 385398 [ 2565.660755][T32081] total_pgfault 789332 [ 2565.665051][T32081] total_pgmajfault 13435 [ 2565.669368][T32081] total_inactive_anon 8192 [ 2565.674689][T32081] total_active_anon 4096 [ 2565.679012][T32081] total_inactive_file 0 [ 2565.683498][T32081] total_active_file 0 [ 2565.687564][T32081] total_unevictable 0 [ 2565.691912][T32081] anon_cost 0 [ 2565.695295][T32081] file_cost 0 [ 2565.698691][T32081] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32081,uid=0 [ 2565.715618][T32081] Memory cgroup out of memory: Killed process 32081 (syz-executor.4) total-vm:54640kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2566.051364][T28640] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2566.058565][T28640] ath9k_htc: Failed to initialize the device [ 2566.066584][T15709] usb 4-1: ath9k_htc: USB layer deinitialized 13:36:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8100}}]}]}}]}, 0x74}}, 0x0) 13:36:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4888}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:41 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x378, &(0x7f00000000c0)={[{0x38, 0x4e00, "22b26879399297ae42059d00d1ed3e3b7ba61bb1ac875a8b5487ba63b68ef9120e0923215fad98b4e40154e03a9ac975c3ebbbfb05c8606b"}, {0x3b, 0x4e00, "702ba09345b2c620ea2cb9cd6ecded4f2f0f90cdbd76268d8ebddc56a03e787ea0a8578c33faf101a75ec370bd4246a6be79b31e147284bd90717a"}, {0x9f, 0x4e00, "5e02f3e8191559b837f3cd6573ca731899fdf38b399a8cacaf65f51a5ccbeab89b233afd87218be4e0e8183f2487c7ec9992ffc7136b59f8543d2a2ac4bb492adc95eba5463896fe08397c64b8c3991135074acdf8705333ba489f4efd74da8b22f6c081d64d4981051814d3b703dfbbe3f3b8b33e54dcb32280b23398e8d68e3718ecfe0f32e2b1d400011bc160697ace8332ad5678b39d0a5e1b7856b038"}, {0xeb, 0x4e00, "8e4539509052bbfb32cf54db50f630195e9a86f1128fd61d746880af697e89b685290f21594bed83eb2bd8676d5be86152783577cb9a754b0a0660a1c5dd47bd6bd6d76dcd4cbd9ddd12a67f91636c05b410f82e3b8d952c4fbdca78a003cf77ab102f74eb4715acbdd67911c886107a67b60878fd58ab2a427eca0a95b5fcb873becad3619d944065d243bb8010be399a928377ac3d3a5494c4ad784777ea475ea093e918410f65bac6a51316217f14fff9175f678debc503cdeb111f5747a9ada9909b16007c671893bcf655a934595505806fd7a2f4b7247842a2e459ed48b92386618f15ba6e5b2bc9"}, {0x70, 0x4e00, "dde98d4b0e7de90a057ffc9feb90a8169f9755f6df9afb6fdb874ce56c28f749447d151fd4e873c0240a012be80b0c780b593d9129c9a0acb7f9caac61d35d876b8b09b6419f83862ee48832a6551d4c8c0e1119f9be887154d397fd737f99335d8c8ac308d6a85b0b883843f9c45206"}, {0xee, 0x4e00, "c18d6e73afbc359fa43672df2a2538b7b47900f06a0fb4bdd89879d17eda29f175b6d7e1a80c420b724a2cab83d70482e908a3ce5aa01f14bbcef38f2011204e36b73a3bda03df382b553b2371e904ba31ee1d1a47072db393224b371fc1b6808208e7122db820c5df926841b58538f0459d39e32a27c2afe15c33f088e10e455893538da1fbbb82dccf639cca6ad1f280478036f2ba8869f89985ef84869bb97f78f154b67f090db87903a3544127d49ea0c4d70b4fa396d0eb34699cd2d46673d5a1ab36bc41292316ff9f0eeb33ee4cf644671d7d5fd97a7ce0f9bc3415a3a4f6b551d1663802e58a4e67b686"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) 13:36:41 executing program 0: r0 = io_uring_setup(0x5e16, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000003bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 13:36:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000780)=""/125) 13:36:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8400}}]}]}}]}, 0x74}}, 0x0) 13:36:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4c00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:41 executing program 0: r0 = io_uring_setup(0x2fa8, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) 13:36:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8a03}}]}]}}]}, 0x74}}, 0x0) 13:36:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5601}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) 13:36:41 executing program 0: syz_open_dev$vcsn(&(0x7f0000000140), 0x2, 0x414102) [ 2566.581322][T15709] usb 4-1: new high-speed USB device number 97 using dummy_hcd 13:36:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xa203}}]}]}}]}, 0x74}}, 0x0) 13:36:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5865}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:41 executing program 0: io_setup(0x3aa, &(0x7f0000000000)=0x0) io_getevents(r0, 0x6, 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x0) 13:36:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xbe01}}]}]}}]}, 0x74}}, 0x0) 13:36:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6000}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2566.881385][T15709] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 2566.910217][T32125] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 13:36:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6558}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2566.930658][T32125] CPU: 1 PID: 32125 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2566.939040][T32125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2566.949116][T32125] Call Trace: [ 2566.952424][T32125] [ 2566.955386][T32125] dump_stack_lvl+0x1e7/0x2e0 [ 2566.960138][T32125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2566.965376][T32125] ? __pfx__printk+0x10/0x10 [ 2566.969995][T32125] ? ___ratelimit+0x4c4/0x670 [ 2566.974718][T32125] ? __pfx____ratelimit+0x10/0x10 13:36:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xde00}}]}]}}]}, 0x74}}, 0x0) [ 2566.979800][T32125] dump_header+0xda/0x6a0 [ 2566.984178][T32125] oom_kill_process+0x3a7/0x930 [ 2566.989071][T32125] out_of_memory+0xf67/0x1320 [ 2566.993787][T32125] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2566.999468][T32125] ? __pfx___mutex_lock+0x10/0x10 [ 2567.004531][T32125] ? __pfx_out_of_memory+0x10/0x10 [ 2567.009706][T32125] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2567.015300][T32125] ? __pfx_lock_release+0x10/0x10 [ 2567.020363][T32125] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2567.026476][T32125] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2567.031711][T32125] ? mem_cgroup_iter+0x3e9/0x560 [ 2567.036698][T32125] try_charge_memcg+0xda2/0x18a0 [ 2567.041675][T32125] ? mark_lock+0x9a/0x350 [ 2567.046066][T32125] ? __pfx_try_charge_memcg+0x10/0x10 [ 2567.051526][T32125] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2567.057725][T32125] charge_memcg+0xa2/0x160 [ 2567.062173][T32125] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2567.068283][T32125] __read_swap_cache_async+0x480/0x8b0 [ 2567.073793][T32125] ? mark_lock+0x9a/0x350 13:36:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xea01}}]}]}}]}, 0x74}}, 0x0) [ 2567.078160][T32125] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2567.084175][T32125] swap_cluster_readahead+0x67c/0x810 [ 2567.089597][T32125] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2567.095538][T32125] ? __pfx_lock_release+0x10/0x10 [ 2567.100592][T32125] ? xas_descend+0x37e/0x470 [ 2567.105236][T32125] swapin_readahead+0x1ea/0x1070 [ 2567.110212][T32125] ? filemap_get_entry+0x127/0x4e0 [ 2567.115388][T32125] ? __pfx_swapin_readahead+0x10/0x10 [ 2567.120817][T32125] ? __filemap_get_folio+0x935/0xbc0 [ 2567.126230][T32125] ? swap_cache_get_folio+0x9f/0x570 [ 2567.131742][T32125] do_swap_page+0x791/0x3f40 [ 2567.136375][T32125] ? rcu_is_watching+0x15/0xb0 [ 2567.141197][T32125] ? do_swap_page+0x154/0x3f40 [ 2567.146007][T32125] ? __pfx_do_swap_page+0x10/0x10 [ 2567.151152][T32125] ? pte_offset_map_nolock+0x137/0x1f0 [ 2567.156652][T32125] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2567.162514][T32125] __handle_mm_fault+0x15e8/0x72d0 [ 2567.167745][T32125] ? reacquire_held_locks+0x3eb/0x690 [ 2567.173165][T32125] ? __pfx___handle_mm_fault+0x10/0x10 13:36:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6800}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2567.178702][T32125] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2567.184567][T32125] ? mtree_range_walk+0x6fd/0x8e0 [ 2567.189627][T32125] ? lock_vma_under_rcu+0x18a/0x730 [ 2567.194861][T32125] ? __pfx_lock_release+0x10/0x10 [ 2567.199930][T32125] ? lock_vma_under_rcu+0x2f9/0x730 [ 2567.205191][T32125] ? lock_vma_under_rcu+0x18a/0x730 [ 2567.210452][T32125] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2567.216046][T32125] handle_mm_fault+0x3c1/0x8a0 [ 2567.220855][T32125] exc_page_fault+0x456/0x870 [ 2567.225605][T32125] asm_exc_page_fault+0x26/0x30 [ 2567.230494][T32125] RIP: 0033:0x7fdd6ac62509 [ 2567.234943][T32125] Code: 07 c5 fe 7f 44 17 e0 e9 88 00 00 00 c5 fe 7f 47 c0 c5 fe 7f 47 e0 eb 7c 66 0f 1f 84 00 00 00 00 00 48 3b 15 b9 c9 11 00 77 77 fe 7f 07 c5 fe 7f 47 20 48 01 d7 48 81 fa 80 00 00 00 76 cd c5 [ 2567.254664][T32125] RSP: 002b:00007fdd6aecf9c8 EFLAGS: 00010287 [ 2567.260757][T32125] RAX: 000055555742ba20 RBX: 00007fdd6ba8d6c0 RCX: 000055555742ba10 [ 2567.268758][T32125] RDX: 0000000000000118 RSI: 0000000000000000 RDI: 000055555742ba20 13:36:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6a03}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2567.276785][T32125] RBP: 000000000000000f R08: 00000000ffffffff R09: 0000000000000000 [ 2567.284779][T32125] R10: 0000000000021000 R11: 0000000000000010 R12: 00007fdd6aecfc90 [ 2567.292815][T32125] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 2567.300829][T32125] [ 2567.317337][T32125] memory: usage 307200kB, limit 307200kB, failcnt 38876 [ 2567.324595][T32125] memory+swap: usage 307744kB, limit 9007199254740988kB, failcnt 0 13:36:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xf002}}]}]}}]}, 0x74}}, 0x0) [ 2567.333237][T32125] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2567.340833][T32125] Memory cgroup stats for /syz4: [ 2567.340994][T32125] cache 0 [ 2567.350040][T32125] rss 12288 [ 2567.353713][T32125] rss_huge 0 [ 2567.357119][T32125] shmem 0 [ 2567.360231][T32125] mapped_file 0 [ 2567.365737][T32125] dirty 0 [ 2567.368919][T32125] writeback 0 [ 2567.373008][T32125] workingset_refault_anon 15468 [ 2567.378047][T32125] workingset_refault_file 0 [ 2567.383276][T32125] swap 557056 [ 2567.386759][T32125] swapcached 8192 [ 2567.390568][T32125] pgpgin 385656 [ 2567.399762][T32125] pgpgout 385653 [ 2567.415222][T32125] pgfault 789702 [ 2567.421681][T32125] pgmajfault 13668 [ 2567.425604][T32125] inactive_anon 12288 [ 2567.429787][T32125] active_anon 0 [ 2567.434129][T32125] inactive_file 0 [ 2567.437960][T32125] active_file 0 [ 2567.442226][T32125] unevictable 0 [ 2567.445887][T32125] hierarchical_memory_limit 314572800 [ 2567.455037][T32125] hierarchical_memsw_limit 9223372036854771712 [ 2567.461776][T32125] total_cache 0 [ 2567.465419][T32125] total_rss 12288 [ 2567.473070][T32125] total_rss_huge 0 [ 2567.480437][T32125] total_shmem 0 13:36:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6c00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xf2ff}}]}]}}]}, 0x74}}, 0x0) [ 2567.487770][T32125] total_mapped_file 0 [ 2567.495700][T32125] total_dirty 0 [ 2567.501044][T32125] total_writeback 0 [ 2567.505190][T32125] total_workingset_refault_anon 15468 [ 2567.510879][T32125] total_workingset_refault_file 0 [ 2567.531475][T32125] total_swap 557056 [ 2567.535329][T32125] total_swapcached 8192 [ 2567.539504][T32125] total_pgpgin 385656 [ 2567.552787][T32125] total_pgpgout 385653 [ 2567.557399][T32125] total_pgfault 789702 [ 2567.568082][T32125] total_pgmajfault 13668 [ 2567.573588][T32125] total_inactive_anon 12288 [ 2567.583861][T32125] total_active_anon 0 13:36:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7400}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2567.593567][T32125] total_inactive_file 0 [ 2567.604039][T32125] total_active_file 0 [ 2567.608392][T32125] total_unevictable 0 [ 2567.613293][T32125] anon_cost 0 [ 2567.616877][T32125] file_cost 0 [ 2567.624731][T32125] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32125,uid=0 13:36:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xfff2}}]}]}}]}, 0x74}}, 0x0) [ 2567.649539][T32125] Memory cgroup out of memory: Killed process 32125 (syz-executor.4) total-vm:54640kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2567.681980][T15709] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 13:36:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}]}]}}]}, 0x478}}, 0x0) [ 2567.699370][T15709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2567.709385][T15709] usb 4-1: Product: syz [ 2567.715320][T15709] usb 4-1: Manufacturer: syz [ 2567.720475][T15709] usb 4-1: SerialNumber: syz [ 2567.738496][T32184] __nla_validate_parse: 48 callbacks suppressed 13:36:42 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0x0, 0x0, 0x0, &(0x7f0000002cc0)='GPL\x00'}, 0x90) [ 2567.738514][T32184] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:42 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) [ 2567.802040][T32185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2567.802553][T15709] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 13:36:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x34000}}]}]}}]}, 0x74}}, 0x0) [ 2567.878141][T32185] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:42 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @dev, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @broadcast, "d250be9f", @broadcast, "d252a6ba"}}}}, 0x0) 13:36:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7a00}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2567.977641][T32195] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2568.036177][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2568.074695][T32199] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2568.369322][T32188] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2568.381396][T32188] CPU: 1 PID: 32188 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2568.381420][T17337] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2568.389743][T32188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2568.408755][T32188] Call Trace: [ 2568.412055][T32188] [ 2568.414990][T32188] dump_stack_lvl+0x1e7/0x2e0 [ 2568.419691][T32188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2568.424908][T32188] ? __pfx__printk+0x10/0x10 [ 2568.429511][T32188] ? ___ratelimit+0x4c4/0x670 [ 2568.434201][T32188] ? __pfx____ratelimit+0x10/0x10 [ 2568.439268][T32188] dump_header+0xda/0x6a0 [ 2568.443618][T32188] oom_kill_process+0x3a7/0x930 [ 2568.448485][T32188] out_of_memory+0xf67/0x1320 [ 2568.453185][T32188] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2568.458843][T32188] ? __pfx___mutex_lock+0x10/0x10 [ 2568.463881][T32188] ? __pfx_out_of_memory+0x10/0x10 [ 2568.469046][T32188] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2568.474598][T32188] ? __pfx_lock_release+0x10/0x10 [ 2568.479641][T32188] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2568.485720][T32188] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2568.490924][T32188] ? mem_cgroup_iter+0x3e9/0x560 [ 2568.495871][T32188] try_charge_memcg+0xda2/0x18a0 [ 2568.500812][T32188] ? mark_lock+0x9a/0x350 [ 2568.505163][T32188] ? __pfx_try_charge_memcg+0x10/0x10 [ 2568.510559][T32188] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2568.516713][T32188] charge_memcg+0xa2/0x160 [ 2568.521139][T32188] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2568.527215][T32188] __read_swap_cache_async+0x480/0x8b0 [ 2568.532700][T32188] ? mark_lock+0x9a/0x350 [ 2568.537058][T32188] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2568.543067][T32188] swap_cluster_readahead+0x67c/0x810 [ 2568.548462][T32188] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2568.554390][T32188] ? __pfx_lock_release+0x10/0x10 [ 2568.559431][T32188] ? xas_descend+0x37e/0x470 [ 2568.564041][T32188] swapin_readahead+0x1ea/0x1070 [ 2568.568986][T32188] ? filemap_get_entry+0x127/0x4e0 [ 2568.574117][T32188] ? __pfx_swapin_readahead+0x10/0x10 [ 2568.579507][T32188] ? __filemap_get_folio+0x935/0xbc0 [ 2568.584811][T32188] ? swap_cache_get_folio+0x9f/0x570 [ 2568.590103][T32188] do_swap_page+0x791/0x3f40 [ 2568.594696][T32188] ? __lock_acquire+0x1345/0x1fd0 [ 2568.599816][T32188] ? rcu_is_watching+0x15/0xb0 [ 2568.604605][T32188] ? do_swap_page+0x154/0x3f40 [ 2568.609368][T32188] ? __pfx_do_swap_page+0x10/0x10 [ 2568.614391][T32188] ? pte_offset_map_nolock+0x137/0x1f0 [ 2568.619847][T32188] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2568.625657][T32188] ? __pfx_validate_chain+0x10/0x10 [ 2568.630854][T32188] __handle_mm_fault+0x15e8/0x72d0 [ 2568.636007][T32188] ? __pfx___handle_mm_fault+0x10/0x10 [ 2568.641469][T32188] ? mt_find+0x226/0x850 [ 2568.645718][T32188] ? __pfx_lock_release+0x10/0x10 [ 2568.650759][T32188] ? mt_find+0x62d/0x850 [ 2568.655009][T32188] ? mt_find+0x226/0x850 [ 2568.659287][T32188] ? find_vma+0x142/0x1c0 [ 2568.663622][T32188] ? __pfx_find_vma+0x10/0x10 [ 2568.668306][T32188] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2568.674302][T32188] handle_mm_fault+0x3c1/0x8a0 [ 2568.679085][T32188] exc_page_fault+0x2ad/0x870 [ 2568.683777][T32188] asm_exc_page_fault+0x26/0x30 [ 2568.688641][T32188] RIP: 0010:__get_user_8+0x11/0x20 [ 2568.693773][T32188] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2568.713489][T32188] RSP: 0000:ffffc90004947d78 EFLAGS: 00050202 [ 2568.719561][T32188] RAX: 000055555742ada8 RBX: ffff888011eb6e78 RCX: ffffc90004947c03 [ 2568.727535][T32188] RDX: 0000000000000000 RSI: ffffffff8baac7a0 RDI: ffffffff8bfe6ca0 [ 2568.735526][T32188] RBP: ffffc90004947ec0 R08: ffffffff8f856cef R09: 1ffffffff1f0ad9d [ 2568.743503][T32188] R10: dffffc0000000000 R11: fffffbfff1f0ad9e R12: ffffc90004947d80 [ 2568.751484][T32188] R13: ffffc90004947fd8 R14: dffffc0000000000 R15: ffff888011eb5940 [ 2568.759475][T32188] __rseq_handle_notify_resume+0x158/0x1490 [ 2568.765395][T32188] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2568.771738][T32188] ? irqentry_exit_to_user_mode+0x52/0x270 [ 2568.777559][T32188] irqentry_exit_to_user_mode+0xbb/0x270 [ 2568.783202][T32188] exc_page_fault+0x587/0x870 [ 2568.787902][T32188] asm_exc_page_fault+0x26/0x30 [ 2568.792781][T32188] RIP: 0033:0x7fdd6ac870a2 [ 2568.797219][T32188] Code: 31 c0 e8 a1 f8 ff ff 90 55 53 48 83 ec 08 48 85 ff 74 45 48 89 fb 48 8b 3d b3 e6 c4 00 be 10 00 00 00 48 8d 6f 0e 48 83 c7 10 79 3f fd ff 48 85 c0 74 2e 48 89 28 48 83 c0 10 48 89 43 08 48 [ 2568.816827][T32188] RSP: 002b:00007fdd6aecf9d0 EFLAGS: 00010206 [ 2568.822900][T32188] RAX: 00007fdd6ba8d9d0 RBX: 00007fdd6ba8d6c0 RCX: 00007fdd6ac7de67 [ 2568.830876][T32188] RDX: 0000000000000003 RSI: 0000000000000010 RDI: 0000000000000011 [ 2568.838845][T32188] RBP: 000000000000000f R08: 00000000ffffffff R09: 0000000000000000 [ 2568.846816][T32188] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fdd6aecfc90 [ 2568.854792][T32188] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 2568.862818][T32188] [ 2568.880338][T32188] memory: usage 307200kB, limit 307200kB, failcnt 39670 [ 2568.888578][T32188] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 2568.896790][T32188] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2568.904404][T32188] Memory cgroup stats for /syz4: [ 2568.904555][T32188] cache 0 [ 2568.913662][T32188] rss 0 [ 2568.916738][T32188] rss_huge 0 [ 2568.920047][T32188] shmem 0 [ 2568.923509][T32188] mapped_file 0 [ 2568.927086][T32188] dirty 0 [ 2568.930089][T32188] writeback 0 [ 2568.933961][T32188] workingset_refault_anon 15753 [ 2568.938875][T32188] workingset_refault_file 0 [ 2568.944094][T32188] swap 520192 [ 2568.947594][T32188] swapcached 4096 [ 2568.952022][T32188] pgpgin 385992 [ 2568.955614][T32188] pgpgout 385991 [ 2568.959268][T32188] pgfault 790194 [ 2568.963065][T32188] pgmajfault 13959 [ 2568.966968][T32188] inactive_anon 0 [ 2568.970694][T32188] active_anon 0 [ 2568.974738][T32188] inactive_file 0 [ 2568.978438][T32188] active_file 0 [ 2568.982827][T32188] unevictable 0 [ 2568.986490][T32188] hierarchical_memory_limit 314572800 [ 2568.992299][T32188] hierarchical_memsw_limit 9223372036854771712 [ 2568.998598][T32188] total_cache 0 [ 2569.002348][T32188] total_rss 0 [ 2569.005750][T32188] total_rss_huge 0 [ 2569.009565][T32188] total_shmem 0 [ 2569.016847][T32188] total_mapped_file 0 [ 2569.020972][T32188] total_dirty 0 [ 2569.024732][T32188] total_writeback 0 [ 2569.028694][T32188] total_workingset_refault_anon 15753 [ 2569.034498][T32188] total_workingset_refault_file 0 [ 2569.039704][T32188] total_swap 520192 [ 2569.043856][T32188] total_swapcached 4096 [ 2569.048165][T32188] total_pgpgin 385992 [ 2569.052841][T32188] total_pgpgout 385991 [ 2569.057078][T32188] total_pgfault 790194 [ 2569.061370][T32188] total_pgmajfault 13959 [ 2569.065754][T32188] total_inactive_anon 0 [ 2569.070052][T32188] total_active_anon 0 [ 2569.074383][T32188] total_inactive_file 0 [ 2569.078650][T32188] total_active_file 0 [ 2569.083865][T32188] total_unevictable 0 [ 2569.087902][T32188] anon_cost 0 [ 2569.091651][T32188] file_cost 0 [ 2569.095119][T32188] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32188,uid=0 [ 2569.110832][ C0] usb 4-1: ath9k_htc: invalid pkt_len (ce94) [ 2569.117190][T32188] Memory cgroup out of memory: Killed process 32188 (syz-executor.4) total-vm:54640kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2569.296765][T28640] usb 4-1: USB disconnect, device number 97 13:36:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x400300}}]}]}}]}, 0x74}}, 0x0) 13:36:44 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @dev, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @broadcast, "d250be9f", @broadcast, "d252a6ba"}}}}, 0x0) 13:36:44 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8100}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:44 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x378, &(0x7f00000000c0)={[{0x38, 0x4e00, "22b26879399297ae42059d00d1ed3e3b7ba61bb1ac875a8b5487ba63b68ef9120e0923215fad98b4e40154e03a9ac975c3ebbbfb05c8606b"}, {0x3b, 0x4e00, "702ba09345b2c620ea2cb9cd6ecded4f2f0f90cdbd76268d8ebddc56a03e787ea0a8578c33faf101a75ec370bd4246a6be79b31e147284bd90717a"}, {0x9f, 0x4e00, "5e02f3e8191559b837f3cd6573ca731899fdf38b399a8cacaf65f51a5ccbeab89b233afd87218be4e0e8183f2487c7ec9992ffc7136b59f8543d2a2ac4bb492adc95eba5463896fe08397c64b8c3991135074acdf8705333ba489f4efd74da8b22f6c081d64d4981051814d3b703dfbbe3f3b8b33e54dcb32280b23398e8d68e3718ecfe0f32e2b1d400011bc160697ace8332ad5678b39d0a5e1b7856b038"}, {0xeb, 0x4e00, "8e4539509052bbfb32cf54db50f630195e9a86f1128fd61d746880af697e89b685290f21594bed83eb2bd8676d5be86152783577cb9a754b0a0660a1c5dd47bd6bd6d76dcd4cbd9ddd12a67f91636c05b410f82e3b8d952c4fbdca78a003cf77ab102f74eb4715acbdd67911c886107a67b60878fd58ab2a427eca0a95b5fcb873becad3619d944065d243bb8010be399a928377ac3d3a5494c4ad784777ea475ea093e918410f65bac6a51316217f14fff9175f678debc503cdeb111f5747a9ada9909b16007c671893bcf655a934595505806fd7a2f4b7247842a2e459ed48b92386618f15ba6e5b2bc9"}, {0x70, 0x4e00, "dde98d4b0e7de90a057ffc9feb90a8169f9755f6df9afb6fdb874ce56c28f749447d151fd4e873c0240a012be80b0c780b593d9129c9a0acb7f9caac61d35d876b8b09b6419f83862ee48832a6551d4c8c0e1119f9be887154d397fd737f99335d8c8ac308d6a85b0b883843f9c45206"}, {0xee, 0x4e00, "c18d6e73afbc359fa43672df2a2538b7b47900f06a0fb4bdd89879d17eda29f175b6d7e1a80c420b724a2cab83d70482e908a3ce5aa01f14bbcef38f2011204e36b73a3bda03df382b553b2371e904ba31ee1d1a47072db393224b371fc1b6808208e7122db820c5df926841b58538f0459d39e32a27c2afe15c33f088e10e455893538da1fbbb82dccf639cca6ad1f280478036f2ba8869f89985ef84869bb97f78f154b67f090db87903a3544127d49ea0c4d70b4fa396d0eb34699cd2d46673d5a1ab36bc41292316ff9f0eeb33ee4cf644671d7d5fd97a7ce0f9bc3415a3a4f6b551d1663802e58a4e67b686"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) 13:36:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}]}]}}]}, 0x478}}, 0x0) 13:36:44 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @dev, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @broadcast, "d250be9f", @broadcast, "d252a6ba"}}}}, 0x0) [ 2569.832989][T32203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2569.902516][T17337] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2569.920989][T32205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2569.921082][T17337] ath9k_htc: Failed to initialize the device [ 2569.950516][T28640] usb 4-1: ath9k_htc: USB layer deinitialized 13:36:44 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @dev, @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @broadcast, "d250be9f", @broadcast, "d252a6ba"}}}}, 0x0) 13:36:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1000000}}]}]}}]}, 0x74}}, 0x0) [ 2570.000951][T32205] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:44 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8847}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:45 executing program 0: io_setup(0xea, &(0x7f0000000a40)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0) [ 2570.106431][T32218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8848}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x2000000}}]}]}}]}, 0x74}}, 0x0) [ 2570.303829][T32206] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2570.324659][T32206] CPU: 1 PID: 32206 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2570.331429][T28640] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2570.333018][T32206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2570.333037][T32206] Call Trace: [ 2570.333048][T32206] [ 2570.333058][T32206] dump_stack_lvl+0x1e7/0x2e0 [ 2570.361633][T32206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2570.366853][T32206] ? __pfx__printk+0x10/0x10 [ 2570.371456][T32206] ? ___ratelimit+0x4c4/0x670 [ 2570.376151][T32206] ? __pfx____ratelimit+0x10/0x10 [ 2570.381211][T32206] dump_header+0xda/0x6a0 [ 2570.385557][T32206] oom_kill_process+0x3a7/0x930 [ 2570.390413][T32206] out_of_memory+0xf67/0x1320 [ 2570.395129][T32206] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2570.400764][T32206] ? __pfx___mutex_lock+0x10/0x10 [ 2570.405791][T32206] ? __pfx_out_of_memory+0x10/0x10 [ 2570.410931][T32206] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2570.416491][T32206] ? __pfx_lock_release+0x10/0x10 [ 2570.421529][T32206] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2570.427616][T32206] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2570.432870][T32206] ? mem_cgroup_iter+0x3e9/0x560 [ 2570.437820][T32206] try_charge_memcg+0xda2/0x18a0 [ 2570.442780][T32206] ? mark_lock+0x9a/0x350 [ 2570.447137][T32206] ? __pfx_try_charge_memcg+0x10/0x10 [ 2570.452539][T32206] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2570.458694][T32206] charge_memcg+0xa2/0x160 [ 2570.463119][T32206] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2570.469199][T32206] __read_swap_cache_async+0x480/0x8b0 [ 2570.474672][T32206] ? mark_lock+0x9a/0x350 [ 2570.479018][T32206] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2570.485017][T32206] swap_cluster_readahead+0x67c/0x810 [ 2570.490410][T32206] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2570.496314][T32206] ? __pfx_lock_release+0x10/0x10 [ 2570.501349][T32206] ? xas_descend+0x37e/0x470 [ 2570.505978][T32206] swapin_readahead+0x1ea/0x1070 [ 2570.510944][T32206] ? filemap_get_entry+0x127/0x4e0 [ 2570.516090][T32206] ? __pfx_swapin_readahead+0x10/0x10 [ 2570.521489][T32206] ? __filemap_get_folio+0x935/0xbc0 [ 2570.526793][T32206] ? swap_cache_get_folio+0x9f/0x570 [ 2570.532105][T32206] do_swap_page+0x791/0x3f40 [ 2570.536791][T32206] ? __lock_acquire+0x1345/0x1fd0 [ 2570.541835][T32206] ? rcu_is_watching+0x15/0xb0 [ 2570.546623][T32206] ? do_swap_page+0x154/0x3f40 [ 2570.551410][T32206] ? __pfx_do_swap_page+0x10/0x10 [ 2570.556446][T32206] ? pte_offset_map_nolock+0x137/0x1f0 [ 2570.561926][T32206] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2570.567749][T32206] ? __pfx_validate_chain+0x10/0x10 [ 2570.572972][T32206] __handle_mm_fault+0x15e8/0x72d0 [ 2570.578129][T32206] ? __pfx___handle_mm_fault+0x10/0x10 [ 2570.583611][T32206] ? mt_find+0x226/0x850 [ 2570.587881][T32206] ? __pfx_lock_release+0x10/0x10 [ 2570.592946][T32206] ? mt_find+0x62d/0x850 [ 2570.597218][T32206] ? mt_find+0x226/0x850 [ 2570.601492][T32206] ? find_vma+0x142/0x1c0 [ 2570.605829][T32206] ? __pfx_find_vma+0x10/0x10 [ 2570.610512][T32206] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2570.616502][T32206] handle_mm_fault+0x3c1/0x8a0 [ 2570.621273][T32206] exc_page_fault+0x2ad/0x870 [ 2570.625959][T32206] asm_exc_page_fault+0x26/0x30 [ 2570.630808][T32206] RIP: 0010:__get_user_8+0x11/0x20 [ 2570.635917][T32206] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2570.657441][T32206] RSP: 0018:ffffc9000513fd78 EFLAGS: 00050202 [ 2570.663512][T32206] RAX: 000055555742ada8 RBX: ffff8881549350b8 RCX: ffffc9000513fc03 [ 2570.671516][T32206] RDX: 0000000000000000 RSI: ffffffff8baac7a0 RDI: ffffffff8bfe6ca0 [ 2570.679505][T32206] RBP: ffffc9000513fec0 R08: ffffffff8f856cef R09: 1ffffffff1f0ad9d [ 2570.687478][T32206] R10: dffffc0000000000 R11: fffffbfff1f0ad9e R12: ffffc9000513fd80 [ 2570.695458][T32206] R13: ffffc9000513ffd8 R14: dffffc0000000000 R15: ffff888154933b80 [ 2570.703451][T32206] __rseq_handle_notify_resume+0x158/0x1490 [ 2570.709372][T32206] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2570.715713][T32206] ? irqentry_exit_to_user_mode+0x52/0x270 [ 2570.721529][T32206] irqentry_exit_to_user_mode+0xbb/0x270 [ 2570.727172][T32206] exc_page_fault+0x587/0x870 [ 2570.731870][T32206] asm_exc_page_fault+0x26/0x30 [ 2570.736725][T32206] RIP: 0033:0x7fdd6ac36d53 [ 2570.741150][T32206] Code: 22 48 81 fa e7 03 00 00 0f 87 ec 00 00 00 48 c1 e2 04 48 8d 0d 7e 13 17 00 48 01 ca c6 02 01 48 89 42 08 48 8b 0d 2d 6c 17 00 <48> 8b 53 10 4c 8d 81 00 00 40 00 4c 39 c2 0f 83 d1 00 00 00 4c 8d [ 2570.760862][T32206] RSP: 002b:00007fdd6aecfb00 EFLAGS: 00010206 [ 2570.766929][T32206] RAX: 0000000000000003 RBX: 00007fdd6adabf80 RCX: 00007fdd6a800000 [ 2570.774899][T32206] RDX: 00007fdd6ada80c0 RSI: 0000000000000080 RDI: 00007fdd6adabf80 [ 2570.782891][T32206] RBP: 0000000000000032 R08: 00007fdd6adabf8c R09: 00007fdd6adabf8c [ 2570.790864][T32206] R10: 00007fdd6aecfc60 R11: 0000000000000246 R12: 00007fdd6adabf80 13:36:45 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 13:36:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xb202}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2570.798842][T32206] R13: 000000000027378b R14: 00007fdd6aecfc80 R15: 00007fdd6adabf80 [ 2570.806827][T32206] [ 2570.815809][T32206] memory: usage 307200kB, limit 307200kB, failcnt 40053 [ 2570.824632][T32206] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 13:36:45 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000e80)) 13:36:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x2010000}}]}]}}]}, 0x74}}, 0x0) [ 2570.870016][T32206] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 13:36:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xd203}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2570.948928][T32206] Memory cgroup stats for /syz4: [ 2570.949070][T32206] cache 0 [ 2570.968930][T32206] rss 8192 [ 2570.977430][T32206] rss_huge 0 [ 2570.984377][T32206] shmem 0 [ 2570.989832][T32206] mapped_file 0 [ 2571.003480][T32206] dirty 0 [ 2571.014428][T32206] writeback 0 [ 2571.028397][T32206] workingset_refault_anon 15868 [ 2571.046230][T32206] workingset_refault_file 0 13:36:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00f\x00_'], 0x48}}, 0x0) 13:36:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3000000}}]}]}}]}, 0x74}}, 0x0) [ 2571.061039][T32206] swap 512000 [ 2571.091354][T32206] swapcached 12288 [ 2571.095418][T32206] pgpgin 386146 [ 2571.099004][T32206] pgpgout 386143 [ 2571.110987][T28640] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 2571.124622][T32206] pgfault 790425 13:36:46 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xda03}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:46 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000001e40)) [ 2571.145873][T32206] pgmajfault 14093 [ 2571.155689][T32206] inactive_anon 12288 [ 2571.173695][T32206] active_anon 0 [ 2571.181329][T32206] inactive_file 0 [ 2571.191305][T32206] active_file 0 13:36:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x4000000}}]}]}}]}, 0x74}}, 0x0) [ 2571.194798][T32206] unevictable 0 [ 2571.198274][T32206] hierarchical_memory_limit 314572800 13:36:46 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xf2ff}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2571.242855][T32206] hierarchical_memsw_limit 9223372036854771712 [ 2571.249074][T32206] total_cache 0 [ 2571.255519][T32206] total_rss 8192 [ 2571.259302][T32206] total_rss_huge 0 [ 2571.267557][T32206] total_shmem 0 [ 2571.279774][T32206] total_mapped_file 0 [ 2571.288593][T32206] total_dirty 0 [ 2571.301887][T32206] total_writeback 0 13:36:46 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, 0x0) [ 2571.327476][T32206] total_workingset_refault_anon 15868 [ 2571.333457][T32206] total_workingset_refault_file 0 [ 2571.350419][T32206] total_swap 512000 [ 2571.356820][T32206] total_swapcached 12288 [ 2571.366203][T32206] total_pgpgin 386146 [ 2571.373795][T32206] total_pgpgout 386143 13:36:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x18, r1, 0x100, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$inet(0x2, 0x4, 0x101) syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r0) [ 2571.379739][T32206] total_pgfault 790425 [ 2571.384571][T32206] total_pgmajfault 14093 [ 2571.393636][T32206] total_inactive_anon 12288 [ 2571.407029][T32206] total_active_anon 0 [ 2571.417065][T32206] total_inactive_file 0 13:36:46 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfff2}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x5000000}}]}]}}]}, 0x74}}, 0x0) [ 2571.428384][T32206] total_active_file 0 [ 2571.458953][T32206] total_unevictable 0 [ 2571.470415][T32206] anon_cost 0 [ 2571.475438][T32206] file_cost 0 [ 2571.490279][T32206] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32206,uid=0 [ 2571.517471][T32206] Memory cgroup out of memory: Killed process 32206 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}]}]}}]}, 0x478}}, 0x0) 13:36:46 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:46 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002480), 0x80, 0x0) syz_clone(0x0, &(0x7f0000002680), 0x0, 0x0, &(0x7f0000002740), 0x0) socket$nl_generic(0x10, 0x3, 0x10) shmctl$IPC_RMID(r0, 0x0) 13:36:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6000000}}]}]}}]}, 0x74}}, 0x0) 13:36:46 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:46 executing program 0: syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x70fa, &(0x7f00000002c0), &(0x7f0000000180), &(0x7f0000000240)) 13:36:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x624ffff}}]}]}}]}, 0x74}}, 0x0) 13:36:46 executing program 0: unshare(0x400) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x2122}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) [ 2571.941531][T28640] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2571.950634][T28640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2571.978401][T28640] usb 4-1: Product: syz [ 2571.982797][T28640] usb 4-1: Manufacturer: syz [ 2571.989529][T28640] usb 4-1: SerialNumber: syz [ 2572.042743][T28640] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2572.156120][T32266] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2572.167747][T32266] CPU: 0 PID: 32266 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2572.176093][T32266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2572.186158][T32266] Call Trace: [ 2572.189431][T32266] [ 2572.192360][T32266] dump_stack_lvl+0x1e7/0x2e0 [ 2572.197063][T32266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2572.202288][T32266] ? __pfx__printk+0x10/0x10 [ 2572.206907][T32266] ? ___ratelimit+0x4c4/0x670 [ 2572.211588][T32266] ? __pfx____ratelimit+0x10/0x10 [ 2572.216616][T32266] dump_header+0xda/0x6a0 [ 2572.220948][T32266] oom_kill_process+0x3a7/0x930 [ 2572.225823][T32266] out_of_memory+0xf67/0x1320 [ 2572.230517][T32266] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2572.236161][T32266] ? __pfx___mutex_lock+0x10/0x10 [ 2572.241201][T32266] ? __pfx_out_of_memory+0x10/0x10 [ 2572.246353][T32266] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2572.251898][T32266] ? __pfx_lock_release+0x10/0x10 [ 2572.257014][T32266] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2572.263091][T32266] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2572.268306][T32266] ? mem_cgroup_iter+0x3e9/0x560 [ 2572.273269][T32266] try_charge_memcg+0xda2/0x18a0 [ 2572.278323][T32266] ? mark_lock+0x9a/0x350 [ 2572.282677][T32266] ? __pfx_try_charge_memcg+0x10/0x10 [ 2572.288092][T32266] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2572.294251][T32266] charge_memcg+0xa2/0x160 [ 2572.298662][T32266] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2572.304725][T32266] __read_swap_cache_async+0x480/0x8b0 [ 2572.310185][T32266] ? mark_lock+0x9a/0x350 [ 2572.314540][T32266] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2572.320532][T32266] swap_cluster_readahead+0x67c/0x810 [ 2572.325921][T32266] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2572.331830][T32266] ? __pfx_lock_release+0x10/0x10 [ 2572.336868][T32266] ? xas_descend+0x37e/0x470 [ 2572.341474][T32266] swapin_readahead+0x1ea/0x1070 [ 2572.346418][T32266] ? filemap_get_entry+0x127/0x4e0 [ 2572.351548][T32266] ? __pfx_swapin_readahead+0x10/0x10 [ 2572.356942][T32266] ? __filemap_get_folio+0x935/0xbc0 [ 2572.362231][T32266] ? swap_cache_get_folio+0x9f/0x570 [ 2572.367527][T32266] do_swap_page+0x791/0x3f40 [ 2572.372135][T32266] ? rcu_is_watching+0x15/0xb0 [ 2572.376918][T32266] ? do_swap_page+0x154/0x3f40 [ 2572.381681][T32266] ? __pfx_do_swap_page+0x10/0x10 [ 2572.386703][T32266] ? pte_offset_map_nolock+0x137/0x1f0 [ 2572.392163][T32266] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2572.397972][T32266] __handle_mm_fault+0x15e8/0x72d0 [ 2572.403109][T32266] ? reacquire_held_locks+0x3eb/0x690 [ 2572.408484][T32266] ? __pfx___handle_mm_fault+0x10/0x10 [ 2572.413973][T32266] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2572.419719][T32266] ? mtree_range_walk+0x6fd/0x8e0 [ 2572.424755][T32266] ? lock_vma_under_rcu+0x18a/0x730 [ 2572.429957][T32266] ? __pfx_lock_release+0x10/0x10 [ 2572.434990][T32266] ? lock_vma_under_rcu+0x2f9/0x730 [ 2572.440214][T32266] ? lock_vma_under_rcu+0x18a/0x730 [ 2572.445428][T32266] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2572.450995][T32266] handle_mm_fault+0x3c1/0x8a0 [ 2572.455800][T32266] exc_page_fault+0x456/0x870 [ 2572.460519][T32266] asm_exc_page_fault+0x26/0x30 [ 2572.465379][T32266] RIP: 0033:0x7fdd6ac371b5 [ 2572.469790][T32266] Code: c0 0f 83 18 0d 00 00 49 89 ca 48 89 ce 48 89 cf 48 89 c8 49 c1 ea 08 48 c1 ee 10 4c 8d 42 18 0f b6 dd 48 c1 ef 18 48 c1 e8 20 <48> 0f af 05 cb e4 c9 00 48 03 42 10 41 81 e2 fe 00 00 00 4c 89 84 [ 2572.489401][T32266] RSP: 002b:00007fdd6aecfb30 EFLAGS: 00010246 [ 2572.495475][T32266] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000008 [ 2572.503451][T32266] RDX: 00007fdd6a800090 RSI: 0000000000000000 RDI: 0000000000000000 [ 2572.511429][T32266] RBP: 0000000000000000 R08: 00007fdd6a8000a8 R09: 00007fff7fbc30b0 [ 2572.519417][T32266] R10: 0000000000000000 R11: 000000000007a728 R12: 00007fdd6aecfcd8 [ 2572.527395][T32266] R13: 0000000000000fc1 R14: 00007fdd6aecfce8 R15: 00007fdd6aecfc38 [ 2572.535383][T32266] [ 2572.549751][T32266] memory: usage 307200kB, limit 307200kB, failcnt 40558 [ 2572.557240][T32266] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 2572.565275][T32266] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2572.573262][T32266] Memory cgroup stats for /syz4: [ 2572.573414][T32266] cache 0 [ 2572.581472][T32266] rss 12288 [ 2572.584660][T32266] rss_huge 0 [ 2572.587967][T32266] shmem 0 [ 2572.590985][T32266] mapped_file 0 [ 2572.594999][T32266] dirty 0 [ 2572.598033][T32266] writeback 0 [ 2572.601469][T32266] workingset_refault_anon 16031 [ 2572.606413][T32266] workingset_refault_file 0 [ 2572.611008][T32266] swap 536576 [ 2572.614860][T32266] swapcached 8192 [ 2572.618519][T32266] pgpgin 386344 [ 2572.626314][T32266] pgpgout 386341 [ 2572.629867][T32266] pgfault 790704 [ 2572.633643][T32266] pgmajfault 14259 [ 2572.638248][T32266] inactive_anon 4096 [ 2572.642557][T32266] active_anon 8192 [ 2572.646294][T32266] inactive_file 0 [ 2572.649927][T32266] active_file 0 [ 2572.653783][T32266] unevictable 0 [ 2572.657352][T32266] hierarchical_memory_limit 314572800 [ 2572.663006][T32266] hierarchical_memsw_limit 9223372036854771712 [ 2572.671375][T32266] total_cache 0 [ 2572.674951][T32266] total_rss 12288 [ 2572.678667][T32266] total_rss_huge 0 [ 2572.682550][T32266] total_shmem 0 [ 2572.686109][T32266] total_mapped_file 0 [ 2572.690141][T32266] total_dirty 0 [ 2572.693755][T32266] total_writeback 0 [ 2572.697581][T32266] total_workingset_refault_anon 16031 [ 2572.703382][T32266] total_workingset_refault_file 0 [ 2572.708519][T32266] total_swap 536576 [ 2572.712431][T32266] total_swapcached 8192 [ 2572.716584][T32266] total_pgpgin 386344 [ 2572.720590][T32266] total_pgpgout 386341 [ 2572.724735][T32266] total_pgfault 790704 [ 2572.728811][T32266] total_pgmajfault 14259 [ 2572.733241][T32266] total_inactive_anon 4096 [ 2572.737668][T32266] total_active_anon 8192 [ 2572.742697][T32266] total_inactive_file 0 [ 2572.746887][T32266] total_active_file 0 [ 2572.750869][T32266] total_unevictable 0 [ 2572.754970][T32266] anon_cost 0 [ 2572.758263][T32266] file_cost 0 [ 2572.762713][T32266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32266,uid=0 [ 2572.778406][T32266] Memory cgroup out of memory: Killed process 32266 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:47 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x378, &(0x7f00000000c0)={[{0x38, 0x4e00, "22b26879399297ae42059d00d1ed3e3b7ba61bb1ac875a8b5487ba63b68ef9120e0923215fad98b4e40154e03a9ac975c3ebbbfb05c8606b"}, {0x3b, 0x4e00, "702ba09345b2c620ea2cb9cd6ecded4f2f0f90cdbd76268d8ebddc56a03e787ea0a8578c33faf101a75ec370bd4246a6be79b31e147284bd90717a"}, {0x9f, 0x4e00, "5e02f3e8191559b837f3cd6573ca731899fdf38b399a8cacaf65f51a5ccbeab89b233afd87218be4e0e8183f2487c7ec9992ffc7136b59f8543d2a2ac4bb492adc95eba5463896fe08397c64b8c3991135074acdf8705333ba489f4efd74da8b22f6c081d64d4981051814d3b703dfbbe3f3b8b33e54dcb32280b23398e8d68e3718ecfe0f32e2b1d400011bc160697ace8332ad5678b39d0a5e1b7856b038"}, {0xeb, 0x4e00, "8e4539509052bbfb32cf54db50f630195e9a86f1128fd61d746880af697e89b685290f21594bed83eb2bd8676d5be86152783577cb9a754b0a0660a1c5dd47bd6bd6d76dcd4cbd9ddd12a67f91636c05b410f82e3b8d952c4fbdca78a003cf77ab102f74eb4715acbdd67911c886107a67b60878fd58ab2a427eca0a95b5fcb873becad3619d944065d243bb8010be399a928377ac3d3a5494c4ad784777ea475ea093e918410f65bac6a51316217f14fff9175f678debc503cdeb111f5747a9ada9909b16007c671893bcf655a934595505806fd7a2f4b7247842a2e459ed48b92386618f15ba6e5b2bc9"}, {0x70, 0x4e00, "dde98d4b0e7de90a057ffc9feb90a8169f9755f6df9afb6fdb874ce56c28f749447d151fd4e873c0240a012be80b0c780b593d9129c9a0acb7f9caac61d35d876b8b09b6419f83862ee48832a6551d4c8c0e1119f9be887154d397fd737f99335d8c8ac308d6a85b0b883843f9c45206"}, {0xee, 0x4e00, "c18d6e73afbc359fa43672df2a2538b7b47900f06a0fb4bdd89879d17eda29f175b6d7e1a80c420b724a2cab83d70482e908a3ce5aa01f14bbcef38f2011204e36b73a3bda03df382b553b2371e904ba31ee1d1a47072db393224b371fc1b6808208e7122db820c5df926841b58538f0459d39e32a27c2afe15c33f088e10e455893538da1fbbb82dccf639cca6ad1f280478036f2ba8869f89985ef84869bb97f78f154b67f090db87903a3544127d49ea0c4d70b4fa396d0eb34699cd2d46673d5a1ab36bc41292316ff9f0eeb33ee4cf644671d7d5fd97a7ce0f9bc3415a3a4f6b551d1663802e58a4e67b686"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) 13:36:47 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:47 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002480), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000029c0), 0xffffffffffffffff) 13:36:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x628ffff}}]}]}}]}, 0x74}}, 0x0) 13:36:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}]}]}}]}, 0x478}}, 0x0) [ 2572.874354][T17337] usb 4-1: USB disconnect, device number 98 [ 2572.891397][T15709] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 2572.914050][T17337] usb 4-1: ath9k_htc: USB layer deinitialized [ 2572.940328][T32288] __nla_validate_parse: 25 callbacks suppressed [ 2572.940345][T32288] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:47 executing program 0: syz_io_uring_setup(0x5534, &(0x7f0000000300), &(0x7f0000000140), 0x0) syz_io_uring_setup(0x100b7e, &(0x7f0000000040)={0x0, 0x0, 0x1810}, &(0x7f0000000000), 0x0) [ 2573.037306][T32295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6bcfeff}}]}]}}]}, 0x74}}, 0x0) [ 2573.094729][T32292] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2573.145845][T32287] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2573.176577][T32287] CPU: 1 PID: 32287 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2573.185056][T32287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2573.195144][T32287] Call Trace: [ 2573.198456][T32287] [ 2573.201405][T32287] dump_stack_lvl+0x1e7/0x2e0 [ 2573.206138][T32287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2573.211372][T32287] ? __pfx__printk+0x10/0x10 [ 2573.215999][T32287] ? ___ratelimit+0x4c4/0x670 [ 2573.220721][T32287] ? __pfx____ratelimit+0x10/0x10 [ 2573.225788][T32287] dump_header+0xda/0x6a0 [ 2573.228504][T32301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2573.230129][T32287] oom_kill_process+0x3a7/0x930 [ 2573.230164][T32287] out_of_memory+0xf67/0x1320 [ 2573.249049][T32287] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2573.254722][T32287] ? __pfx___mutex_lock+0x10/0x10 [ 2573.259749][T32287] ? __pfx_out_of_memory+0x10/0x10 [ 2573.264873][T32287] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2573.270436][T32287] ? __pfx_lock_release+0x10/0x10 [ 2573.275489][T32287] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2573.281579][T32287] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2573.286791][T32287] ? mem_cgroup_iter+0x3e9/0x560 [ 2573.291746][T32287] try_charge_memcg+0xda2/0x18a0 [ 2573.296709][T32287] ? __pfx_try_charge_memcg+0x10/0x10 [ 2573.302083][T32287] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2573.307810][T32287] ? __pfx_lock_release+0x10/0x10 [ 2573.312856][T32287] ? memcg_account_kmem+0x1e7/0x210 [ 2573.318066][T32287] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2573.323875][T32287] __memcg_kmem_charge_page+0xe1/0x250 [ 2573.329347][T32287] memcg_charge_kernel_stack+0x3f8/0x550 [ 2573.334985][T32287] dup_task_struct+0x40d/0x7d0 [ 2573.339754][T32287] copy_process+0x5d5/0x3fc0 [ 2573.344354][T32287] ? __might_fault+0xa9/0x120 [ 2573.349028][T32287] ? __pfx_lock_release+0x10/0x10 [ 2573.354072][T32287] ? __pfx_copy_process+0x10/0x10 [ 2573.359098][T32287] ? __might_fault+0xc5/0x120 [ 2573.363784][T32287] ? __asan_memset+0x23/0x50 [ 2573.368411][T32287] kernel_clone+0x21d/0x8d0 [ 2573.372945][T32287] ? __pfx_kernel_clone+0x10/0x10 [ 2573.377998][T32287] __se_sys_clone3+0x2cb/0x350 [ 2573.382789][T32287] ? __pfx___se_sys_clone3+0x10/0x10 [ 2573.388113][T32287] ? do_syscall_64+0x108/0x240 [ 2573.392896][T32287] ? do_syscall_64+0xb4/0x240 [ 2573.397589][T32287] do_syscall_64+0xf9/0x240 [ 2573.402114][T32287] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2573.408040][T32287] RIP: 0033:0x7fdd6aca9b99 [ 2573.412465][T32287] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2573.432083][T32287] RSP: 002b:00007fdd6aecf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 13:36:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2573.440499][T32287] RAX: ffffffffffffffda RBX: 00007fdd6ac52270 RCX: 00007fdd6aca9b99 [ 2573.448489][T32287] RDX: 00007fdd6ac52270 RSI: 0000000000000058 RDI: 00007fdd6aecf960 [ 2573.456468][T32287] RBP: 00007fdd6baae6c0 R08: 00007fdd6baae6c0 R09: 00007fdd6aecfa47 [ 2573.464440][T32287] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2573.472420][T32287] R13: 000000000000000b R14: 00007fdd6aecf960 R15: 00007fdd6aecfa48 [ 2573.480404][T32287] [ 2573.487503][T32287] memory: usage 307200kB, limit 307200kB, failcnt 40763 13:36:48 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)) [ 2573.496842][T32287] memory+swap: usage 307768kB, limit 9007199254740988kB, failcnt 0 [ 2573.510480][T32299] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2573.520146][T32287] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2573.520166][T32287] Memory cgroup stats for /syz4: [ 2573.539135][T32287] cache 0 13:36:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x890b, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) [ 2573.552337][T17337] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2573.560350][T32287] rss 0 [ 2573.564374][T32287] rss_huge 0 [ 2573.571087][T32287] shmem 0 [ 2573.576925][T32301] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2573.578708][T32287] mapped_file 0 [ 2573.590208][T32287] dirty 0 [ 2573.598675][T32287] writeback 0 [ 2573.603944][T32287] workingset_refault_anon 16073 [ 2573.608914][T32287] workingset_refault_file 0 13:36:48 executing program 0: timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) 13:36:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x7000000}}]}]}}]}, 0x74}}, 0x0) [ 2573.646686][T32287] swap 581632 [ 2573.650408][T32287] swapcached 0 [ 2573.655828][T32287] pgpgin 386414 [ 2573.659882][T32287] pgpgout 386414 [ 2573.670984][T32287] pgfault 790810 [ 2573.674873][T32287] pgmajfault 14313 [ 2573.678618][T32287] inactive_anon 0 [ 2573.688186][T32287] active_anon 0 [ 2573.692299][T32287] inactive_file 0 [ 2573.695959][T32287] active_file 0 [ 2573.699434][T32287] unevictable 0 [ 2573.719785][T32287] hierarchical_memory_limit 314572800 [ 2573.725019][T32314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2573.731234][T32287] hierarchical_memsw_limit 9223372036854771712 [ 2573.740873][T32287] total_cache 0 [ 2573.749959][T32287] total_rss 0 [ 2573.755169][T32287] total_rss_huge 0 [ 2573.759082][T32287] total_shmem 0 [ 2573.763409][T32314] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2573.769471][T32287] total_mapped_file 0 [ 2573.777849][T32287] total_dirty 0 [ 2573.778047][T32313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2573.787641][T32287] total_writeback 0 [ 2573.794947][T32287] total_workingset_refault_anon 16073 13:36:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2573.800432][T32287] total_workingset_refault_file 0 [ 2573.810405][T32287] total_swap 581632 [ 2573.827158][T32287] total_swapcached 0 [ 2573.831525][T17337] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 2573.836214][T32287] total_pgpgin 386414 13:36:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8000000}}]}]}}]}, 0x74}}, 0x0) [ 2573.850452][T32287] total_pgpgout 386414 [ 2573.876666][T32287] total_pgfault 790810 [ 2573.877313][T32316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2573.880773][T32287] total_pgmajfault 14313 [ 2573.880785][T32287] total_inactive_anon 0 [ 2573.880795][T32287] total_active_anon 0 [ 2573.880803][T32287] total_inactive_file 0 [ 2573.880812][T32287] total_active_file 0 [ 2573.880821][T32287] total_unevictable 0 [ 2573.880829][T32287] anon_cost 0 [ 2573.880837][T32287] file_cost 0 13:36:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2573.880847][T32287] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32287,uid=0 13:36:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x9000000}}]}]}}]}, 0x74}}, 0x0) 13:36:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000]}]}]}}]}, 0x478}}, 0x0) [ 2573.987149][T32287] Memory cgroup out of memory: Killed process 32287 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 13:36:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:49 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xa000000}}]}]}}]}, 0x74}}, 0x0) [ 2574.229358][T32325] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2574.251272][T32325] CPU: 1 PID: 32325 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2574.259649][T32325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2574.269726][T32325] Call Trace: [ 2574.273033][T32325] [ 2574.275994][T32325] dump_stack_lvl+0x1e7/0x2e0 [ 2574.280726][T32325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2574.285966][T32325] ? __pfx__printk+0x10/0x10 [ 2574.290578][T32325] ? ___ratelimit+0x4c4/0x670 [ 2574.295295][T32325] ? __pfx____ratelimit+0x10/0x10 [ 2574.300363][T32325] dump_header+0xda/0x6a0 [ 2574.304720][T32325] oom_kill_process+0x3a7/0x930 [ 2574.309589][T32325] out_of_memory+0xf67/0x1320 [ 2574.314309][T32325] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2574.319979][T32325] ? __pfx___mutex_lock+0x10/0x10 [ 2574.325051][T32325] ? __pfx_out_of_memory+0x10/0x10 [ 2574.330203][T32325] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2574.335789][T32325] ? __pfx_lock_release+0x10/0x10 [ 2574.340942][T32325] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2574.347069][T32325] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2574.352349][T32325] ? mem_cgroup_iter+0x3e9/0x560 [ 2574.357341][T32325] try_charge_memcg+0xda2/0x18a0 [ 2574.362331][T32325] ? __pfx_try_charge_memcg+0x10/0x10 [ 2574.367736][T32325] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2574.373512][T32325] ? __pfx_lock_release+0x10/0x10 [ 2574.378578][T32325] ? memcg_account_kmem+0x1e7/0x210 [ 2574.383833][T32325] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2574.389762][T32325] __memcg_kmem_charge_page+0xe1/0x250 [ 2574.395266][T32325] memcg_charge_kernel_stack+0x3f8/0x550 [ 2574.400938][T32325] dup_task_struct+0x15d/0x7d0 [ 2574.405735][T32325] copy_process+0x5d5/0x3fc0 [ 2574.410370][T32325] ? __might_fault+0xa9/0x120 [ 2574.415086][T32325] ? __pfx_lock_release+0x10/0x10 [ 2574.420157][T32325] ? __pfx_copy_process+0x10/0x10 [ 2574.425214][T32325] ? __might_fault+0xc5/0x120 13:36:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xb000000}}]}]}}]}, 0x74}}, 0x0) 13:36:49 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2574.429925][T32325] ? __asan_memset+0x23/0x50 [ 2574.434559][T32325] kernel_clone+0x21d/0x8d0 [ 2574.439101][T32325] ? __pfx_kernel_clone+0x10/0x10 [ 2574.444190][T32325] __se_sys_clone3+0x2cb/0x350 [ 2574.449007][T32325] ? __pfx___se_sys_clone3+0x10/0x10 [ 2574.454374][T32325] ? do_syscall_64+0x108/0x240 [ 2574.459194][T32325] ? do_syscall_64+0xb4/0x240 [ 2574.463923][T32325] do_syscall_64+0xf9/0x240 [ 2574.468480][T32325] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2574.474419][T32325] RIP: 0033:0x7fdd6aca9b99 [ 2574.478868][T32325] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2574.498506][T32325] RSP: 002b:00007fdd6aecf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2574.506981][T32325] RAX: ffffffffffffffda RBX: 00007fdd6ac52270 RCX: 00007fdd6aca9b99 [ 2574.515019][T32325] RDX: 00007fdd6ac52270 RSI: 0000000000000058 RDI: 00007fdd6aecf960 [ 2574.523025][T32325] RBP: 00007fdd6baae6c0 R08: 00007fdd6baae6c0 R09: 00007fdd6aecfa47 [ 2574.531032][T32325] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2574.539050][T32325] R13: 000000000000000b R14: 00007fdd6aecf960 R15: 00007fdd6aecfa48 [ 2574.547338][T32325] 13:36:49 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xc000000}}]}]}}]}, 0x74}}, 0x0) 13:36:49 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 2574.577948][T32325] memory: usage 307200kB, limit 307200kB, failcnt 40964 [ 2574.605058][T32325] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 13:36:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xd000000}}]}]}}]}, 0x74}}, 0x0) [ 2574.646281][T32325] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2574.664744][T32325] Memory cgroup stats for /syz4: [ 2574.664918][T32325] cache 0 [ 2574.678321][T32325] rss 12288 [ 2574.691311][T32325] rss_huge 0 [ 2574.694552][T32325] shmem 0 [ 2574.697558][T32325] mapped_file 0 [ 2574.701031][T32325] dirty 0 [ 2574.711691][T17337] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2574.714689][T32325] writeback 0 [ 2574.728834][T17337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 13:36:49 executing program 0: openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001700), 0xffffffffffffffff) [ 2574.742968][T32325] workingset_refault_anon 16143 [ 2574.747860][T32325] workingset_refault_file 0 [ 2574.754497][T17337] usb 4-1: Product: syz [ 2574.763512][T32325] swap 499712 [ 2574.766832][T32325] swapcached 8192 [ 2574.769208][T17337] usb 4-1: Manufacturer: syz [ 2574.774505][T32325] pgpgin 386501 [ 2574.779835][T32325] pgpgout 386498 [ 2574.781546][T17337] usb 4-1: SerialNumber: syz 13:36:49 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2574.794199][T32325] pgfault 790941 [ 2574.797874][T32325] pgmajfault 14383 [ 2574.816825][T32325] inactive_anon 0 [ 2574.820501][T32325] active_anon 12288 [ 2574.837025][T32325] inactive_file 0 13:36:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xe000000}}]}]}}]}, 0x74}}, 0x0) [ 2574.853367][T17337] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2574.859706][T32325] active_file 0 [ 2574.865273][T32325] unevictable 0 [ 2574.874936][T32325] hierarchical_memory_limit 314572800 [ 2574.880348][T32325] hierarchical_memsw_limit 9223372036854771712 13:36:49 executing program 0: syz_io_uring_setup(0xd48, &(0x7f0000000d00), 0x0, 0x0) syz_io_uring_setup(0x582d, &(0x7f0000000f80), &(0x7f0000001000), &(0x7f0000001040)) [ 2574.909955][T32325] total_cache 0 [ 2574.913587][T32325] total_rss 12288 [ 2574.917322][T32325] total_rss_huge 0 [ 2574.921050][T32325] total_shmem 0 [ 2574.934063][T32325] total_mapped_file 0 [ 2574.938174][T32325] total_dirty 0 [ 2574.942196][T32325] total_writeback 0 [ 2574.946150][T32325] total_workingset_refault_anon 16143 [ 2574.952087][T32325] total_workingset_refault_file 0 [ 2574.957476][T32325] total_swap 499712 [ 2574.967715][T32325] total_swapcached 8192 [ 2574.977537][T32325] total_pgpgin 386501 [ 2574.981928][T32325] total_pgpgout 386498 [ 2574.986027][T32325] total_pgfault 790941 [ 2574.990133][T32325] total_pgmajfault 14383 [ 2575.005708][T32325] total_inactive_anon 0 13:36:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x10000000}}]}]}}]}, 0x74}}, 0x0) [ 2575.009988][T32325] total_active_anon 12288 [ 2575.015028][T32325] total_inactive_file 0 [ 2575.019292][T32325] total_active_file 0 [ 2575.025864][T32325] total_unevictable 0 [ 2575.029975][T32325] anon_cost 0 [ 2575.033653][T32325] file_cost 0 [ 2575.037061][T32325] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32325,uid=0 [ 2575.060807][T32325] Memory cgroup out of memory: Killed process 32325 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2575.431281][T28640] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2575.871239][ C0] usb 4-1: ath9k_htc: invalid pkt_len (ce94) [ 2576.053046][T15709] usb 4-1: USB disconnect, device number 99 [ 2576.451410][T28640] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2576.458529][T28640] ath9k_htc: Failed to initialize the device [ 2576.466509][T15709] usb 4-1: ath9k_htc: USB layer deinitialized 13:36:51 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "67fb1707", {0x1, 0x7fff, 0x8, 0x8, 0x3}}) 13:36:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:51 executing program 0: openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) 13:36:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}]}]}}]}, 0x478}}, 0x0) 13:36:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x11000000}}]}]}}]}, 0x74}}, 0x0) 13:36:51 executing program 0: r0 = syz_io_uring_complete(0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbd5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x21) syz_io_uring_setup(0x1cc8, &(0x7f0000000140)={0x0, 0x7b83, 0x400, 0x1, 0x347, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000240)=0x6, 0x0, 0x4) syz_io_uring_setup(0x37f7, &(0x7f0000000280)={0x0, 0x19be, 0x9, 0x1, 0x212}, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r4, 0xe126adf586826561, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000680)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000012c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f00000008c0)={0x9b0, r5, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x86, 0x3e}}}}, [@NL80211_ATTR_NAN_FUNC={0x638, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x280, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3a0, 0xd, 0x0, 0x1, [{0xb3, 0x0, "b1576467de2b9092624493b38694668b9d79fb77e2fad6d9e825cd0af71d05c0505bd3f6735667bc054ee32377ca290bfaced6701666880eaac0456e1709167b85a9c2b222d8576744856fc17ed3ecf2db038df378dddc41bae216072ac0e9b72fafe34ff0e31284598750e322a084d43f3930f78a44fd65654696c5c03da6cbe80528b020f70476dd4adf0ae71058079d137d64a49818f236bda42b51e3c9eb951c25870e35fc129b4d1db7c3abec"}, {0xde, 0x0, "30b26e106fe1baae81f281abffd10f80fb8b543c7350204c9ad57c9bf4be73fde7cd982282509eca37a0f660bcca1e32bd492591590b1525661bf9b581d06f36bbcdaf7d1b8c0c0e3d722f3fd6a082141a92d688b08bd8d5e3953fa2fca802e19df3baddacd95671a18b7c12b469e69bee8a68ac68be9c8071110841b8cab6222eef045f1c835d173bc9cf1ee7e402c82923f607adab26e7033ed4a76768a4054f8d20ed4c2ec0964cd5394811df47dfafc17278e5900c41c775e8d758425e3517a6020dd67f390d2abbbdb93bd7e14561d535aa747723336dcc"}, {0xdc, 0x0, "4ed5422a0a0f7e07d99e2df75a12ccc0497ac23778701a9e20faab3456675257dce4055b982eea0e3621ff2d3802cc3ef6dd6f2449b7f280ef541416703965b7191621001039c136db7b6bd86c6adfb223cab8a90fdacd3e6df79ebeff2fbd289d8b9a23b2f1f30856b19d928119d8b5c68fd706ce3e361c59181b080a6403714a4d32572459014e2c6cd8528e4742e3a50aaf509a1b9f3101f3730ec1d547d5683aa8abcd2df77f678907954e43485f6b35371319eb682ecb7fe4daa5f270f8198c5fd5c3c27045e41d4eee86ffccd08330df1f8331dfe1"}, {0xda, 0x0, "c20c572ad9869a5a9db39b035fcc3639322b38d28b7f63085bbaa2b1d854c6b8871248f8abeae3df6abae53b3d834781e75ec8fa272daa6f907e4086ad8b1fd35d9fbf39265704f15a8721c9e0e46364054ba147bff78ab51f7ece31d6a5d36d7133c4c83adbd4898f4eb7402dfae0ff756216d7111a97dd5b18cc1debd472767fe74357bbe2aae0cc7ef88f50c189531b554536d388adbeff0fabcb029e8241d978b3e678fde876aff8e49d4c99c708db74836dd5a26eca74794ee902e973474dba40cb73a2d1d2ebba6a68a2e9d4ca8bf47a93b25f"}, {0x20, 0x0, "e58382bc161fb37f1a39e4b42fa5f7766c3daf24b146748413ab62e7"}, {0x2d, 0x0, "7a5df0ea2e01ad6e76ebbdcc5c875182d2a7c5153fa8a746b4423202183a330d15670def04e94d67c1"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "918a90a1e979"}]}, @NL80211_ATTR_NAN_FUNC={0x268, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x158, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "67c9e93ec9bbbca66481b9eec1046134598cf9ec945e0f445379269d6f854901b381250d29387c144eb0eb1a3b25a65c62f26b4ae32e85424030be19f25b1bfa6b9ff23b8518f1a573312a3c2e20dca80e45cccb30d6850e176e90559d479f6830e838b2620a016d938d9a8fd5b3a78caa55c954da55dd26ffdd0a831cb1ac9f2927610760e80487b392062ed5122cf8e19ace831604d5efd4790ef23fb2f265c1508e8746b988b5b7bed245028640889dc8b201cceb382d12a6b71ec685d86b8e8944f6e0699b5d1511e2ee600f60fa98a2bd14aab551386354829fd5a9c9e7ba8451c2554d641d95a267d0f166b402d075be3768972b7cba0f94f6a6ca4b"}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x26, 0xb, "8d4b2410814eef03e6efbea854aa1fdadc48d718c4aab5259ce89ff76ab78c240179"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x20, 0xb, "347fd79fe91e3d47bbf021c6e3405b77401c719e9d48b8d2dfa86c2a"}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0xb8, 0xb, "26b30fbf59c7419dc750d5c56a5799ed2efd7e2b98b9782391b30459cdea658edb93123ba4ad9c6d0658dd4ea2bbf20cdbb662eb4a5f9c284f4e95fd38259375b4ccfabad687ca9c751338f26edd1a59f0997193d5f72b2ecbabf590d8a8c3422865e8a4177e253fd0c0d404b77e8d6753044fc15d26c200e60693d9a2a94ecab877b55048f9ef1c2853c62c2928857fb47327d3280069e706d2fc3ee551849a28980ca8d12b7f90c36307d73547f89d17d1551a"}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0xbc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xa8, 0xb, "cf69d0d40494ab3ef3cf1f32ba47063a294486cb9b6a31a37174f1e607651d6d057348925b9082be01aab226271899e7702db1d0aee29b31f97d18f273288a6f457e3e6b0e75ce136e85dadacd0f72b1c41125cc4c9315f628718b494af7eaca8bf5fd3b8358778af72694aeb83c20817078cd448b66f4bc33108f547a1e93d48212ff3250bb288ad3b469285b59a5109fdca5f1533a38d07860370b9c399bba37fe8b17"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3f}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}]}, 0x9b0}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001400), 0x101800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001440)=@IORING_OP_POLL_ADD={0x6, 0x31, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x180}}) add_key$keyring(&(0x7f0000001540), &(0x7f0000001580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000015c0), 0x800, 0x0) syz_io_uring_complete(r3) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) 13:36:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x12000000}}]}]}}]}, 0x74}}, 0x0) 13:36:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x14000000}}]}]}}]}, 0x74}}, 0x0) 13:36:51 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)) 13:36:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:51 executing program 0: r0 = io_uring_setup(0x31e, &(0x7f0000000040)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 13:36:51 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0)) 13:36:51 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x15000000}}]}]}}]}, 0x74}}, 0x0) 13:36:51 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0)) [ 2577.031970][T15709] usb 4-1: new high-speed USB device number 100 using dummy_hcd 13:36:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x18000000}}]}]}}]}, 0x74}}, 0x0) 13:36:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 13:36:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:52 executing program 0: r0 = syz_io_uring_setup(0x6830, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 13:36:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1e020000}}]}]}}]}, 0x74}}, 0x0) 13:36:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2577.322282][T15709] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 2577.335792][ T5117] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2577.368457][ T5117] CPU: 1 PID: 5117 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2577.376750][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2577.386853][ T5117] Call Trace: [ 2577.390166][ T5117] [ 2577.393139][ T5117] dump_stack_lvl+0x1e7/0x2e0 [ 2577.397864][ T5117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2577.403107][ T5117] ? __pfx__printk+0x10/0x10 [ 2577.407831][ T5117] ? ___ratelimit+0x4c4/0x670 [ 2577.412553][ T5117] ? __pfx____ratelimit+0x10/0x10 [ 2577.417614][ T5117] dump_header+0xda/0x6a0 [ 2577.421977][ T5117] oom_kill_process+0x3a7/0x930 [ 2577.426887][ T5117] out_of_memory+0xf67/0x1320 [ 2577.431613][ T5117] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2577.437283][ T5117] ? __pfx___mutex_lock+0x10/0x10 [ 2577.442338][ T5117] ? __pfx_out_of_memory+0x10/0x10 [ 2577.447496][ T5117] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2577.453099][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2577.458178][ T5117] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2577.464269][ T5117] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2577.469472][ T5117] ? mem_cgroup_iter+0x3e9/0x560 [ 2577.474432][ T5117] try_charge_memcg+0xda2/0x18a0 [ 2577.479371][ T5117] ? mark_lock+0x9a/0x350 [ 2577.483730][ T5117] ? __pfx_try_charge_memcg+0x10/0x10 [ 2577.489137][ T5117] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2577.495300][ T5117] charge_memcg+0xa2/0x160 [ 2577.499725][ T5117] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2577.505886][ T5117] __read_swap_cache_async+0x480/0x8b0 [ 2577.511364][ T5117] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2577.517358][ T5117] ? blk_start_plug+0x6f/0x1b0 [ 2577.522132][ T5117] swap_cluster_readahead+0x398/0x810 [ 2577.527518][ T5117] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2577.533432][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2577.538604][ T5117] swapin_readahead+0x1ea/0x1070 [ 2577.543556][ T5117] ? filemap_get_entry+0x127/0x4e0 [ 2577.548696][ T5117] ? __pfx_swapin_readahead+0x10/0x10 [ 2577.554085][ T5117] ? __filemap_get_folio+0x935/0xbc0 [ 2577.559380][ T5117] ? swap_cache_get_folio+0x9f/0x570 [ 2577.564676][ T5117] do_swap_page+0x791/0x3f40 [ 2577.569268][ T5117] ? rcu_is_watching+0x15/0xb0 [ 2577.574061][ T5117] ? do_swap_page+0x154/0x3f40 [ 2577.578829][ T5117] ? __pfx_do_swap_page+0x10/0x10 [ 2577.583863][ T5117] ? pte_offset_map_nolock+0x137/0x1f0 [ 2577.589345][ T5117] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2577.595153][ T5117] ? __pfx_validate_chain+0x10/0x10 [ 2577.600358][ T5117] __handle_mm_fault+0x15e8/0x72d0 [ 2577.605493][ T5117] ? __pfx___handle_mm_fault+0x10/0x10 [ 2577.610982][ T5117] ? mt_find+0x226/0x850 [ 2577.615231][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2577.620270][ T5117] ? mt_find+0x62d/0x850 [ 2577.624516][ T5117] ? mt_find+0x226/0x850 [ 2577.628787][ T5117] ? find_vma+0x142/0x1c0 [ 2577.633124][ T5117] ? __pfx_find_vma+0x10/0x10 [ 2577.637807][ T5117] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2577.643797][ T5117] handle_mm_fault+0x3c1/0x8a0 [ 2577.648574][ T5117] exc_page_fault+0x2ad/0x870 [ 2577.653266][ T5117] asm_exc_page_fault+0x26/0x30 [ 2577.658121][ T5117] RIP: 0010:__get_user_8+0x11/0x20 [ 2577.663239][ T5117] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2577.682853][ T5117] RSP: 0018:ffffc9000429fd98 EFLAGS: 00050202 [ 2577.688928][ T5117] RAX: 000055555742ada8 RBX: ffff88801a32b2f8 RCX: ffffc9000429fc03 [ 2577.696921][ T5117] RDX: 0000000000000000 RSI: ffffffff8baac7a0 RDI: ffffffff8bfe6ca0 [ 2577.704890][ T5117] RBP: ffffc9000429fec8 R08: ffffffff8f856cef R09: 1ffffffff1f0ad9d [ 2577.712883][ T5117] R10: dffffc0000000000 R11: fffffbfff1f0ad9e R12: ffffc9000429fda0 [ 2577.720876][ T5117] R13: ffffc9000429ffd8 R14: dffffc0000000000 R15: ffff88801a329dc0 [ 2577.728861][ T5117] __rseq_handle_notify_resume+0x158/0x1490 [ 2577.734867][ T5117] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2577.741209][ T5117] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2577.746940][ T5117] syscall_exit_to_user_mode+0x113/0x360 [ 2577.752583][ T5117] do_syscall_64+0x108/0x240 [ 2577.757184][ T5117] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2577.763106][ T5117] RIP: 0033:0x7fdd6aca91b5 [ 2577.767528][ T5117] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2577.787229][ T5117] RSP: 002b:00007fdd6aecfcf0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2577.795669][ T5117] RAX: 0000000000000000 RBX: 00000000000053e4 RCX: 00007fdd6aca91b5 [ 2577.803644][ T5117] RDX: 00007fdd6aecfd30 RSI: 0000000000000000 RDI: 0000000000000000 [ 2577.811636][ T5117] RBP: 00007fdd6aecfdbc R08: 0000000000000000 R09: 00007fff7fbc30b0 13:36:52 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040), 0x0) [ 2577.819603][ T5117] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2577.827573][ T5117] R13: 00000000002750ad R14: 00000000002750ad R15: 0000000000000000 [ 2577.835563][ T5117] [ 2577.858825][ T5117] memory: usage 307200kB, limit 307200kB, failcnt 41448 13:36:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1e030000}}]}]}}]}, 0x74}}, 0x0) 13:36:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2577.871805][ T5117] memory+swap: usage 307716kB, limit 9007199254740988kB, failcnt 0 13:36:52 executing program 0: r0 = io_uring_setup(0x79cb, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0xfffff0ec], 0x2) [ 2577.924896][ T5117] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2577.937684][ T5117] Memory cgroup stats for /syz4: [ 2577.937819][ T5117] cache 0 [ 2577.952240][ T5117] rss 12288 [ 2577.955686][ T5117] rss_huge 0 [ 2577.959405][ T5117] shmem 0 [ 2577.967875][ T5117] mapped_file 0 [ 2577.976281][ T5117] dirty 0 [ 2577.979355][ T5117] writeback 0 [ 2577.983741][ T5117] workingset_refault_anon 16334 [ 2577.988897][ T5117] workingset_refault_file 0 [ 2577.994417][T32408] __nla_validate_parse: 40 callbacks suppressed [ 2577.994433][T32408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2578.006071][ T5117] swap 516096 [ 2578.021388][ T5117] swapcached 12288 13:36:52 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000), 0x100000000, 0x44000) 13:36:52 executing program 0: timer_delete(0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0)) [ 2578.025275][ T5117] pgpgin 386705 [ 2578.028892][ T5117] pgpgout 386702 [ 2578.032983][ T5117] pgfault 791237 [ 2578.036772][ T5117] pgmajfault 14561 [ 2578.047637][T32406] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2578.051771][ T5117] inactive_anon 12288 [ 2578.067262][ T5117] active_anon 0 13:36:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2578.087797][ T5117] inactive_file 0 [ 2578.099087][ T5117] active_file 0 [ 2578.107356][ T5117] unevictable 0 [ 2578.116493][ T5117] hierarchical_memory_limit 314572800 [ 2578.130934][ T5117] hierarchical_memsw_limit 9223372036854771712 13:36:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x38000000}}]}]}}]}, 0x74}}, 0x0) 13:36:53 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, 0x24) [ 2578.140063][ T5117] total_cache 0 [ 2578.157677][ T5117] total_rss 12288 [ 2578.157874][T32417] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2578.175507][ T5117] total_rss_huge 0 [ 2578.184062][ T5117] total_shmem 0 [ 2578.190036][ T5117] total_mapped_file 0 [ 2578.198200][ T5117] total_dirty 0 [ 2578.205515][ T5117] total_writeback 0 [ 2578.208686][T32417] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2578.211918][ T5117] total_workingset_refault_anon 16334 [ 2578.226815][ T5117] total_workingset_refault_file 0 [ 2578.232196][ T5117] total_swap 516096 [ 2578.236216][ T5117] total_swapcached 12288 13:36:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2578.240710][ T5117] total_pgpgin 386705 [ 2578.245348][ T5117] total_pgpgout 386702 [ 2578.249625][ T5117] total_pgfault 791237 [ 2578.252136][T32419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2578.254115][ T5117] total_pgmajfault 14561 [ 2578.291829][ T5117] total_inactive_anon 12288 [ 2578.304906][ T5117] total_active_anon 0 [ 2578.319875][ T5117] total_inactive_file 0 [ 2578.325610][ T5117] total_active_file 0 [ 2578.329705][ T5117] total_unevictable 0 [ 2578.334224][ T5117] anon_cost 0 [ 2578.337602][ T5117] file_cost 0 [ 2578.340974][ T5117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=32361,uid=0 [ 2578.358025][ T5117] Memory cgroup out of memory: Killed process 32361 (syz-executor.4) total-vm:54640kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2578.365304][T32424] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2578.426899][ T5117] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2578.440026][ T5117] CPU: 1 PID: 5117 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller #0 [ 2578.440538][T32424] netlink: 1027 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2578.448279][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2578.448295][ T5117] Call Trace: [ 2578.448305][ T5117] [ 2578.448313][ T5117] dump_stack_lvl+0x1e7/0x2e0 [ 2578.448352][ T5117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2578.448381][ T5117] ? __pfx__printk+0x10/0x10 [ 2578.448407][ T5117] ? ___ratelimit+0x4c4/0x670 [ 2578.448437][ T5117] ? __pfx____ratelimit+0x10/0x10 [ 2578.448475][ T5117] dump_header+0xda/0x6a0 [ 2578.448506][ T5117] oom_kill_process+0x3a7/0x930 [ 2578.448537][ T5117] out_of_memory+0xf67/0x1320 [ 2578.448566][ T5117] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2578.448591][ T5117] ? __pfx___mutex_lock+0x10/0x10 [ 2578.448615][ T5117] ? __pfx_out_of_memory+0x10/0x10 [ 2578.448647][ T5117] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2578.502834][T15709] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2578.502918][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2578.507771][T15709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.512425][ T5117] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2578.512458][ T5117] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2578.512483][ T5117] ? mem_cgroup_iter+0x3e9/0x560 [ 2578.512511][ T5117] try_charge_memcg+0xda2/0x18a0 [ 2578.512533][ T5117] ? mark_lock+0x9a/0x350 [ 2578.512575][ T5117] ? __pfx_try_charge_memcg+0x10/0x10 [ 2578.512624][ T5117] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2578.512644][ T5117] charge_memcg+0xa2/0x160 [ 2578.512665][ T5117] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2578.518513][T15709] usb 4-1: Product: syz [ 2578.523310][ T5117] __read_swap_cache_async+0x480/0x8b0 [ 2578.523362][ T5117] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2578.530483][T15709] usb 4-1: Manufacturer: syz [ 2578.534002][ T5117] ? blk_start_plug+0x6f/0x1b0 [ 2578.534036][ T5117] swap_cluster_readahead+0x398/0x810 [ 2578.534075][ T5117] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2578.534105][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2578.534147][ T5117] swapin_readahead+0x1ea/0x1070 [ 2578.534172][ T5117] ? filemap_get_entry+0x127/0x4e0 [ 2578.654665][ T5117] ? __pfx_swapin_readahead+0x10/0x10 [ 2578.660061][ T5117] ? __filemap_get_folio+0x935/0xbc0 [ 2578.666311][ T5117] ? swap_cache_get_folio+0x9f/0x570 [ 2578.671602][ T5117] do_swap_page+0x791/0x3f40 [ 2578.676192][ T5117] ? rcu_is_watching+0x15/0xb0 [ 2578.680971][ T5117] ? do_swap_page+0x154/0x3f40 [ 2578.685733][ T5117] ? __pfx_do_swap_page+0x10/0x10 [ 2578.690758][ T5117] ? pte_offset_map_nolock+0x137/0x1f0 [ 2578.696222][ T5117] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2578.702047][ T5117] ? __pfx_validate_chain+0x10/0x10 [ 2578.707251][ T5117] __handle_mm_fault+0x15e8/0x72d0 [ 2578.712402][ T5117] ? __pfx___handle_mm_fault+0x10/0x10 [ 2578.717868][ T5117] ? mt_find+0x226/0x850 [ 2578.722119][ T5117] ? __pfx_lock_release+0x10/0x10 [ 2578.727167][ T5117] ? mt_find+0x62d/0x850 [ 2578.731420][ T5117] ? mt_find+0x226/0x850 [ 2578.735685][ T5117] ? find_vma+0x142/0x1c0 [ 2578.740014][ T5117] ? __pfx_find_vma+0x10/0x10 [ 2578.744693][ T5117] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2578.750680][ T5117] handle_mm_fault+0x3c1/0x8a0 [ 2578.755461][ T5117] exc_page_fault+0x2ad/0x870 [ 2578.760234][ T5117] asm_exc_page_fault+0x26/0x30 [ 2578.765080][ T5117] RIP: 0010:__get_user_8+0x11/0x20 [ 2578.770190][ T5117] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2578.789798][ T5117] RSP: 0018:ffffc9000429fd98 EFLAGS: 00050202 [ 2578.795867][ T5117] RAX: 000055555742ada8 RBX: ffff88801a32b2f8 RCX: ffffc9000429fc03 [ 2578.803841][ T5117] RDX: 0000000000000000 RSI: ffffffff8baac7a0 RDI: ffffffff8bfe6ca0 [ 2578.811826][ T5117] RBP: ffffc9000429fec8 R08: ffffffff8f856cef R09: 1ffffffff1f0ad9d [ 2578.819793][ T5117] R10: dffffc0000000000 R11: fffffbfff1f0ad9e R12: ffffc9000429fda0 [ 2578.827767][ T5117] R13: ffffc9000429ffd8 R14: dffffc0000000000 R15: ffff88801a329dc0 [ 2578.835756][ T5117] __rseq_handle_notify_resume+0x158/0x1490 [ 2578.841669][ T5117] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2578.848005][ T5117] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2578.853734][ T5117] syscall_exit_to_user_mode+0x113/0x360 [ 2578.859384][ T5117] do_syscall_64+0x108/0x240 [ 2578.863997][ T5117] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2578.869896][ T5117] RIP: 0033:0x7fdd6aca91b5 [ 2578.874309][ T5117] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2578.893929][ T5117] RSP: 002b:00007fdd6aecfcf0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2578.902375][ T5117] RAX: 0000000000000000 RBX: 00000000000053e4 RCX: 00007fdd6aca91b5 [ 2578.910363][ T5117] RDX: 00007fdd6aecfd30 RSI: 0000000000000000 RDI: 0000000000000000 [ 2578.918331][ T5117] RBP: 00007fdd6aecfdbc R08: 0000000000000000 R09: 00007fff7fbc30b0 [ 2578.926313][ T5117] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2578.934290][ T5117] R13: 00000000002750ad R14: 00000000002750ad R15: 0000000000000000 [ 2578.942279][ T5117] [ 2578.946551][T15709] usb 4-1: SerialNumber: syz [ 2578.963356][ T5117] memory: usage 306996kB, limit 307200kB, failcnt 41514 [ 2578.970432][ T5117] memory+swap: usage 307500kB, limit 9007199254740988kB, failcnt 0 [ 2578.984294][ T5117] kmem: usage 306988kB, limit 9007199254740988kB, failcnt 0 [ 2578.992608][ T5117] Memory cgroup stats for /syz4: [ 2578.992747][ T5117] cache 0 [ 2579.000716][ T5117] rss 0 [ 2579.003206][T15709] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2579.004218][ T5117] rss_huge 0 [ 2579.014907][ T5117] shmem 0 [ 2579.017939][ T5117] mapped_file 0 [ 2579.022392][ T5117] dirty 0 [ 2579.025442][ T5117] writeback 0 [ 2579.028823][ T5117] workingset_refault_anon 16334 [ 2579.033820][ T5117] workingset_refault_file 0 [ 2579.038429][ T5117] swap 528384 [ 2579.041967][ T5117] swapcached 0 [ 2579.045452][ T5117] pgpgin 386705 [ 2579.048972][ T5117] pgpgout 386705 [ 2579.052687][ T5117] pgfault 791238 [ 2579.056341][ T5117] pgmajfault 14561 [ 2579.060126][ T5117] inactive_anon 0 [ 2579.064061][ T5117] active_anon 0 [ 2579.067599][ T5117] inactive_file 0 [ 2579.072424][ T5117] active_file 0 [ 2579.075911][ T5117] unevictable 0 [ 2579.079369][ T5117] hierarchical_memory_limit 314572800 [ 2579.084879][ T5117] hierarchical_memsw_limit 9223372036854771712 [ 2579.092223][ T5117] total_cache 0 [ 2579.095719][ T5117] total_rss 0 [ 2579.099010][ T5117] total_rss_huge 0 [ 2579.102995][ T5117] total_shmem 0 [ 2579.106477][ T5117] total_mapped_file 0 [ 2579.110460][ T5117] total_dirty 0 [ 2579.114038][ T5117] total_writeback 0 [ 2579.117858][ T5117] total_workingset_refault_anon 16334 [ 2579.123365][ T5117] total_workingset_refault_file 0 [ 2579.128397][ T5117] total_swap 528384 [ 2579.132334][ T5117] total_swapcached 0 [ 2579.136238][ T5117] total_pgpgin 386705 [ 2579.140218][ T5117] total_pgpgout 386705 [ 2579.144406][ T5117] total_pgfault 791238 [ 2579.148485][ T5117] total_pgmajfault 14561 [ 2579.152820][ T5117] total_inactive_anon 0 [ 2579.156992][ T5117] total_active_anon 0 [ 2579.160969][ T5117] total_inactive_file 0 [ 2579.165249][ T5117] total_active_file 0 [ 2579.169238][ T5117] total_unevictable 0 [ 2579.173397][ T5117] anon_cost 0 [ 2579.176705][ T5117] file_cost 0 [ 2579.179994][ T5117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5117,uid=0 [ 2579.197592][ T5117] Memory cgroup out of memory: Killed process 5117 (syz-executor.4) total-vm:50536kB, anon-rss:496kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 2579.508454][T32303] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2579.571416][T17337] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2579.598791][T32303] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 13:36:54 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "67fb1707", {0x1, 0x7fff, 0x8, 0x8, 0x3}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "67fb1707", {0x1, 0x7fff, 0x8, 0x8, 0x3}}) (async) 13:36:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x1}, 0x14}}, 0x0) 13:36:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3a000000}}]}]}}]}, 0x74}}, 0x0) 13:36:54 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19020000]}]}]}}]}, 0x478}}, 0x0) [ 2579.650796][T15709] usb 4-1: USB disconnect, device number 100 [ 2579.664100][T32303] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 13:36:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB=')'], 0x48}}, 0x0) [ 2579.759768][T32429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:54 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) [ 2579.844509][T32303] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2579.890026][T32434] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:54 executing program 0: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x7, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x0, r1+10000000}}, 0x0) 13:36:54 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3c000000}}]}]}}]}, 0x74}}, 0x0) 13:36:54 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000200), 0xc) [ 2580.111009][T32444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 13:36:55 executing program 0: socket(0x1d, 0x0, 0xed3) 13:36:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x3c010000}}]}]}}]}, 0x74}}, 0x0) 13:36:55 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x94}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 13:36:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:55 executing program 0: clock_gettime(0x1, &(0x7f00000001c0)) [ 2580.616267][T17337] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive 13:36:55 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) [ 2580.657029][T17337] ath9k_htc: Failed to initialize the device [ 2580.688007][T15709] usb 4-1: ath9k_htc: USB layer deinitialized 13:36:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x40000000}}]}]}}]}, 0x74}}, 0x0) 13:36:55 executing program 0: timer_create(0x2, &(0x7f0000000100)={0x0, 0x40, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000140)) [ 2581.071815][T15709] usb 4-1: new high-speed USB device number 101 using dummy_hcd 13:36:56 executing program 0: socket(0x11, 0xa, 0x8) 13:36:56 executing program 0: syz_emit_ethernet(0x70, 0x0, 0x0) 13:36:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x46760fc6}}]}]}}]}, 0x74}}, 0x0) 13:36:56 executing program 0: r0 = io_uring_setup(0x31e, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x3, 0x0, 0x1) [ 2581.351679][T15709] usb 4-1: too many configurations: 98, using maximum allowed: 8 13:36:56 executing program 0: r0 = io_uring_setup(0x3a65, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000016c0)=[{0x0}, {0x0}], 0x2) [ 2581.572734][T32303] bridge0: port 3(erspan0) entered disabled state 13:36:56 executing program 0: r0 = io_uring_setup(0x31e, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x2) [ 2581.616672][T32303] erspan0 (unregistering): left allmulticast mode [ 2581.639623][T32303] erspan0 (unregistering): left promiscuous mode [ 2581.654605][T32303] bridge0: port 3(erspan0) entered disabled state 13:36:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x48000000}}]}]}}]}, 0x74}}, 0x0) 13:36:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:56 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="6af222d5298dfcfe14b4248e6866f90c507fab0b4143cef744eb249bd25b9d60f2e41f14597c756231ded379f15f4365060cd6c6ef64debf0793dc1ca49fea7aff91a163e511747663575c2737425ed5c18dd66ce4908a78644b2ea30fd3792819434f62689a15805a43b3a6bca400f64239e8bf65464958f53774431059470e2de6b83668aff7855f5ebd3b6e7ce9273eee8a77ab80b21004919ebe548dc393300f4c3e9784a6789a2f093bd70c52d50bea347abac3c2baab03b86bbb8d41", 0xbf, 0xfffffffffffffffa) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="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", 0x1000, 0xfffffffffffffff9) r2 = add_key$user(&(0x7f00000011c0), &(0x7f0000001200)={'syz', 0x3}, &(0x7f0000001240)="2b93861e7975d90f0a2b551446c09f27a17db266a9c8e2a06a5d21fee39e3ea7a78473cc98cae3795e4757d9914372307877acc1eb12863e7675e97b5189c89404b280b20644626b30fb88b75dbfaa10e368ddfc581785159a4574824e20ae2ba84f00f4a9240273abb141d1bb11c467addf7fc02eb7740adf54b46665b9a19443d6a3c3afcbe55c569f2f202a6791895c986baaaff8597e3d48c3cb3b15a5cfc0f4f18f1d0f53a025efe7ce231fb36cc8fa7b15e603223bd8fc1ea7c31c59cf42b1901c7e814d2f338c6dd28b4a9235", 0xd0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000001340)={r0, r1, r2}, &(0x7f0000001380)=""/96, 0x60, &(0x7f0000001500)={&(0x7f0000001400)={'michael_mic\x00'}, &(0x7f0000001440)="b90f670f5c87580c62c4973ad3497912c71cfeaa4c273a0fdab0b3ea22745575f63541f983fe483f5bbc3f070c12a39fcf089f01568f7ef89030ebe040ed53788f3a2b4ab550e29af8fdf34957deeb9e93ccf023e7c409a829dc0a0850b14614c1f2db2043ca7f14d9502f89cf8f05c6a2ce3cbbca59b7ae533bcd5c7a5d59ef31f4dc0e1f3ce2edd191d2e37eac05d4f63c2f79f43423eff2f96a50d70f36ee23210e4968f20f1ddbc9f1d3c18459dbe4eaa471761ad94a", 0xb8}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001540), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{r3}, &(0x7f0000001580), &(0x7f00000015c0)='%pB \x00'}, 0x20) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000001640)={0x8, 0x3, 0xffffffff, 0x5, 0x80000000, 0x7, 0x9}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0x8001, 0x0, r3, 0x0, '\x00', 0x0, r3, 0x0, 0x5, 0x1}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001740)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001700)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000001780)={0x8, 0x120, 0xfa00, {0x0, {0x4, 0x57d, "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", 0x8, 0x2, 0x0, 0x15, 0x1f, 0x9, 0x66}, r4}}, 0x128) add_key$user(&(0x7f0000001dc0), &(0x7f0000001e00)={'syz', 0x3}, &(0x7f0000001e40)="0f29ec5f797a2ca5fe9d47d139f6f40e2fcb6879184f689725ef646b1214ef281a8c201ec77370aacf2d45903dae9a968a10d0dc386e904ab38b67ad5e7b56c1945551ed10768f14417ad0a1494281fe2481c6e056509e46c723d5c692b075720e8cec51112affbb1225d265ce12aecd328e5f087f6de66781bb442a0cabd3b59531be19cdd99b4e21ae4404b3917d646e188fc6ac8c986c58b2e2866a11b5ebefc63e2152945f1673eacabffc19c0af1a92db471f4e48eebe6c3ce9550a17700bda25180ecc40ab04cca16e7e536f7eac4e6be80fdfa538b8cc17bd0ddd2e7d", 0xe0, 0xfffffffffffffffa) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002000)={@ifindex, r3, 0x32, 0x0, r3, @prog_fd=r3}, 0x20) syz_clone(0x44100080, &(0x7f0000002500)="5c364c63446dbbf6a7bc6c5fe578e04cae5209eca5eea9ea81fa6c517de04ab38d080c0e44a119f0d48b8043cf7ff54df9db8acf20bd867adfae7ea26baca00014ef1ed715ff47a075efb41ba76529b8e4fdfc91a6e16aee5c89afa2c622093a420ce10cfe4b2f2a384bcfac2201d3930f34b0258427a234f1e917bf6261e5e8f6e8037e4380c698bd73be7b62e826e8269f6f1babd8d39af2a21ab7481ad595165fd01a84986fe89884671780e0d838579397d2f588b7d88e314c4e7fe5a68e0e131575abc13c5e7492a76e16fb30c726c9a716cb3bd3a65704f1a75b7b2519c621724f5aaa5ec1938b02b33cf07a28682bee0f34b63c5c", 0xf8, &(0x7f0000002600), &(0x7f0000002640), &(0x7f0000002680)="a1ae55dac2504f8085ef067de626d5dec77ce691cc3362c4079dced5bb1834682b3f4825cb385ce8196d600695fb1895ae59a28da4d2a28947054fb4d9312fb875cce04beaf7f69f02115c2a5247b8513ae09173b95665a4c92d9a3af7a92815b066c501a129ce07") 13:36:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x4c000000}}]}]}}]}, 0x74}}, 0x0) 13:36:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) [ 2582.015655][T32303] dvmrp0 (unregistering): left allmulticast mode [ 2582.201548][T15709] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2582.210640][T15709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2582.247820][T15709] usb 4-1: Product: syz [ 2582.269960][T15709] usb 4-1: Manufacturer: syz [ 2582.280149][T15709] usb 4-1: SerialNumber: syz [ 2582.342713][T15709] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 13:36:57 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="94ce004e"]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "67fb1707", {0x1, 0x7fff, 0x8, 0x8, 0x3}}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "67fb1707", {0x1, 0x7fff, 0x8, 0x8, 0x3}}) 13:36:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x4e000000}}]}]}}]}, 0x74}}, 0x0) 13:36:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:36:57 executing program 0: syz_io_uring_setup(0x6830, &(0x7f0000000200), &(0x7f0000000280), 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_setup(0x6830, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) [ 2582.807626][T22829] usb 4-1: USB disconnect, device number 101 [ 2582.811664][ T4339] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 2582.882205][T22829] usb 4-1: ath9k_htc: USB layer deinitialized 13:36:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 13:36:58 executing program 0: r0 = io_uring_setup(0x31e, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0xa, &(0x7f00000000c0), 0x1) 13:36:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030000000000000000000b00000020000180149d"], 0x34}}, 0x0) 13:36:58 executing program 0: prctl$PR_MCE_KILL(0x3b, 0x0, 0x0) [ 2583.250930][T32558] __nla_validate_parse: 15 callbacks suppressed [ 2583.250952][T32558] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2583.291197][T22829] usb 4-1: new high-speed USB device number 102 using dummy_hcd 13:36:58 executing program 0: mremap(&(0x7f0000cde000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000cd7000/0x3000)=nil) mremap(&(0x7f0000cdd000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000cde000/0x3000)=nil) 13:36:58 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000140)={0x48}) [ 2583.499796][ T6900] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2583.512659][ T6900] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2583.527579][ T6900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2583.536396][ T6900] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2583.557687][ T6900] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2583.565358][ T6900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 13:36:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x4, 0x8}) [ 2583.601310][T22829] usb 4-1: too many configurations: 98, using maximum allowed: 8 13:36:58 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000040)=[@enter_looper, @release], 0x1, 0x0, &(0x7f0000000080)="be"}) 13:36:58 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0xd, 0x0, 0x0, 0x0}) 13:36:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000002e80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002cc0)={0x14}, 0x14}}, 0x0) 13:36:58 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 13:36:58 executing program 0: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001ec0)) socketpair(0x1a, 0x0, 0x0, &(0x7f0000002ec0)) 13:36:58 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 13:36:58 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x1}) 13:36:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1c) 13:36:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x1b4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x195, 0xe, {{{}, {}, @device_b}, 0x0, @random, 0x0, @val, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x30, {0x0, 0x0, 0x0, "dc27df4de3d211c5f94c21956d94456e91bc80c9a12a47cd39e2ed090e1a30fa3619f3686d55ac4b3dc017a432"}}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0x3f, "f32fe6d392c824183e1ce472a3a77c768c920d6e669d26a1c6289d3831629505e0212399fb6c802535abf564db1857d1291cbfa3f6216ad73cb54b1930025d"}, {0xdd, 0x16, "4e4a34882c66bab7ded41143ce65ceda66bedb82dc08"}, {0xdd, 0xca, "fcdfc213a58a1253849eeb40b81da2216f7de84d04085102082d1e1c6c9e5e1c9dc63054c01a54cb48fe1df4f233c4eb89e64e186e086b4bed5fd3de8debe5ed2be53f817f69253456d45c166e0fc442daff87e0f658e54e789da25cc49b8b4a73b1ae6eac6d204a7c96d0ed45f8117dec67bf54e62c6c26986159b45bf7d38492727eaefb9e841a0a2a4a3c37748ecc8a8f4884d53930fbd26ee535fa8ce41640cbcf107ad8b08565b7fdf6ee5f8f83faf0b3a4ca42aaeb65afb1ca365c4884fb5a78f7fbf033c257c2"}]}}]}, 0x1b4}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 2584.491374][T22829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2584.500930][T22829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.510334][T22829] usb 4-1: Product: syz [ 2584.519059][T22829] usb 4-1: Manufacturer: syz [ 2584.528196][T22829] usb 4-1: SerialNumber: syz [ 2584.593351][T22829] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2585.201451][ T5153] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2585.411306][ C1] usb 4-1: ath9k_htc: invalid pkt_len (ce94) [ 2585.661742][ T5115] Bluetooth: hci4: command 0x0409 tx timeout [ 2585.825607][ T4339] usb 4-1: USB disconnect, device number 102 13:37:01 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x33, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xc3, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r0]) [ 2586.691843][ T5153] usb 4-1: Service connection timeout for: 256 [ 2586.698077][ T5153] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2586.720427][ T5153] ath9k_htc: Failed to initialize the device [ 2586.727371][ T4339] usb 4-1: ath9k_htc: USB layer deinitialized [ 2587.091293][ T4339] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2587.382679][ T4339] usb 4-1: too many configurations: 195, using maximum allowed: 8 [ 2587.461445][ T4339] usb 4-1: config index 0 descriptor too short (expected 72, got 33) [ 2587.469605][ T4339] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2587.502761][ T4339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2587.611441][ T4339] usb 4-1: config index 1 descriptor too short (expected 72, got 33) [ 2587.619673][ T4339] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2587.646934][ T4339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2587.731538][ T5115] Bluetooth: hci4: command 0x041b tx timeout [ 2587.751749][ T4339] usb 4-1: config index 2 descriptor too short (expected 72, got 33) [ 2587.759957][ T4339] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2587.770721][ T4339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2587.871731][ T4339] usb 4-1: config index 3 descriptor too short (expected 72, got 33) [ 2587.879878][ T4339] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2587.896882][ T4339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2587.981535][ T4339] usb 4-1: config index 4 descriptor too short (expected 72, got 33) [ 2587.989671][ T4339] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2588.002414][ T4339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2588.092247][ T4339] usb 4-1: config index 5 descriptor too short (expected 72, got 33) [ 2588.100349][ T4339] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2588.122942][ T4339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2588.211316][ T4339] usb 4-1: config index 6 descriptor too short (expected 72, got 33) [ 2588.219549][ T4339] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2588.230197][ T4339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2588.321451][ T4339] usb 4-1: config index 7 descriptor too short (expected 72, got 33) [ 2588.329728][ T4339] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2588.340876][ T4339] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2588.511488][ T4339] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2588.520556][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.529521][ T4339] usb 4-1: Product: syz [ 2588.539323][ T4339] usb 4-1: Manufacturer: syz [ 2588.545174][ T4339] usb 4-1: SerialNumber: syz [ 2588.600541][ T4339] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 2589.286496][T32303] hsr_slave_0: left promiscuous mode [ 2589.293644][T32303] hsr_slave_1: left promiscuous mode [ 2589.300462][T32303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2589.309207][T32303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2589.320271][T32303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2589.328537][T32303] batman_adv: batadv0: Removing interface: batadv_slave_1 13:37:04 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x33, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xc3, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r0]) syz_usb_connect_ath9k(0x3, 0x33, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xc3, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r0]) (async) [ 2589.339260][T32303] bridge_slave_1: left allmulticast mode [ 2589.345337][T32303] bridge_slave_1: left promiscuous mode [ 2589.351081][T32303] bridge0: port 2(bridge_slave_1) entered disabled state [ 2589.360902][T32303] bridge_slave_0: left allmulticast mode [ 2589.367743][T32303] bridge_slave_0: left promiscuous mode [ 2589.373860][T32303] bridge0: port 1(bridge_slave_0) entered disabled state [ 2589.379748][T22829] usb 4-1: USB disconnect, device number 103 [ 2589.427621][T32303] veth1_macvtap: left promiscuous mode [ 2589.440502][T32303] veth0_macvtap: left promiscuous mode [ 2589.447475][T32303] veth1_vlan: left promiscuous mode [ 2589.453933][T32303] veth0_vlan: left promiscuous mode [ 2589.811276][ T5115] Bluetooth: hci4: command 0x040f tx timeout [ 2589.817503][T22829] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2590.161660][T22829] usb 4-1: too many configurations: 195, using maximum allowed: 8 [ 2590.241503][T22829] usb 4-1: config index 0 descriptor too short (expected 72, got 33) [ 2590.250201][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2590.263312][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2590.375262][T22829] usb 4-1: config index 1 descriptor too short (expected 72, got 33) [ 2590.383450][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2590.394100][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2590.481381][T22829] usb 4-1: config index 2 descriptor too short (expected 72, got 33) [ 2590.489535][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2590.504324][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2590.611687][T22829] usb 4-1: config index 3 descriptor too short (expected 72, got 33) [ 2590.619795][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2590.635848][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2590.694570][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.700927][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.731571][T22829] usb 4-1: config index 4 descriptor too short (expected 72, got 33) [ 2590.739702][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2590.750096][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2590.845349][T22829] usb 4-1: config index 5 descriptor too short (expected 72, got 33) [ 2590.854908][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2590.868171][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2590.962927][T22829] usb 4-1: config index 6 descriptor too short (expected 72, got 33) [ 2590.971825][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2590.982755][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2591.081513][T22829] usb 4-1: config index 7 descriptor too short (expected 72, got 33) [ 2591.089627][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2591.110558][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2591.291378][T22829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2591.300473][T22829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2591.313134][T22829] usb 4-1: Product: syz [ 2591.317322][T22829] usb 4-1: Manufacturer: syz [ 2591.331164][T22829] usb 4-1: SerialNumber: syz [ 2591.395959][T22829] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 2591.901381][ T5115] Bluetooth: hci4: command 0x0419 tx timeout 13:37:07 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x33, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xc3, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r0]) syz_usb_connect_ath9k(0x3, 0x33, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xc3, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r0]) (async) [ 2592.433292][T22829] usb 4-1: USB disconnect, device number 104 [ 2592.876512][T22829] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2593.181506][T22829] usb 4-1: too many configurations: 195, using maximum allowed: 8 [ 2593.261376][T22829] usb 4-1: config index 0 descriptor too short (expected 72, got 33) [ 2593.269619][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2593.280157][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2593.381512][T22829] usb 4-1: config index 1 descriptor too short (expected 72, got 33) [ 2593.389757][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2593.400076][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2593.506787][T22829] usb 4-1: config index 2 descriptor too short (expected 72, got 33) [ 2593.515068][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2593.525403][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2593.621547][T22829] usb 4-1: config index 3 descriptor too short (expected 72, got 33) [ 2593.634103][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2593.645495][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2593.751415][T22829] usb 4-1: config index 4 descriptor too short (expected 72, got 33) [ 2593.764206][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2593.774623][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2593.876498][T22829] usb 4-1: config index 5 descriptor too short (expected 72, got 33) [ 2593.885061][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2593.896363][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2593.981435][T22829] usb 4-1: config index 6 descriptor too short (expected 72, got 33) [ 2593.989576][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2594.000026][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2594.105053][T22829] usb 4-1: config index 7 descriptor too short (expected 72, got 33) [ 2594.113206][T22829] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2594.123561][T22829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2594.301509][T22829] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2594.316528][T22829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.324893][T22829] usb 4-1: Product: syz [ 2594.329079][T22829] usb 4-1: Manufacturer: syz [ 2594.337733][T22829] usb 4-1: SerialNumber: syz [ 2594.386272][T22829] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones 13:37:10 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x234, &(0x7f0000000140)={[{0x9b, 0x4e00, "58a28467d97ca8707da5f63337ce35a6461d6a991ea3efb2739e5bd7e535a2d01bf67e551e1d5272dfc2c012c45b449ddb6e1375505469efb8701a8b061933a313a44d20a374977624b40c3d385dfe75e114a9b533b8a47e7d0ca8789a85694e598d2dcce9d5a43dab73bf0116188a89f84402cfeda984f696896da72e97ffea91c8790d723fb272ba5f25ac073e43f9c94ad9fb2d6df5663188a1"}, {0x4b, 0x4e00, "f571ea3b1a38299747e7be1ab96c5291d695340ae04adbed6bf907d2c1ae63dc77d10844c00091e6d6001a26f1cf1a17626452c4eec5e8fb85086e3a22707ce65e0f6ff55e5bbc2689b8a0"}, {0xbc, 0x4e00, "09dd084b6179c81a9bfb9cce6ebb2b5b87b0baad67e154300cce8b5fc01006f80d3d5a8ec8b138220c565a59c429a66f607e9c2f67bb95caa305539d1be007291e65e59eaea5746f37a52abcbe164aea1263a8954678077740e7dcc4290a9aee2d5bb4292f32432190810ff06bdbdd42316c16b3dadf6f9d49be59d8ae59d04f72e07b7f10b7b60f14f5277b196b8de2b0ce5f48cb01532817411807798150fd8484aee99f97bfa611b013bf9ac6d2409eb9ff1b4bfa1b12f387ea6a"}, {0x7e, 0x4e00, "887c3e9ef1f4f9e2ca7bf5fbb3da35d20dc7fcede0a74e40027c416a9ddb2bd9186e680c20ce44467a65447eb7ea1db0839e5968269e4b850687637e6462c726003fb18d5558c8abcdf5032dee0dc2c8009b426d2810a9bdeb9f851ced00d2d5c9702343b3cf6108d0c5c8ac166b4ad7db41d7434d712f458d1c646170ab"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="305fee94eb16cbab22360f1699c6004e7767990c6223e955d2b98e4f33caed24be3e9906a606"]) [ 2595.475865][T28640] usb 4-1: USB disconnect, device number 105 [ 2595.904863][T28640] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2596.431401][T28640] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2596.440483][T28640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2596.449282][T28640] usb 4-1: Product: syz [ 2596.458434][T28640] usb 4-1: Manufacturer: syz [ 2596.463818][T28640] usb 4-1: SerialNumber: syz [ 2596.502422][T28640] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2597.071501][T15709] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2597.696055][T28640] usb 4-1: USB disconnect, device number 106 [ 2598.131467][T15709] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2598.138803][T15709] ath9k_htc: Failed to initialize the device [ 2598.146831][T28640] usb 4-1: ath9k_htc: USB layer deinitialized 13:37:13 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x234, &(0x7f0000000140)={[{0x9b, 0x4e00, "58a28467d97ca8707da5f63337ce35a6461d6a991ea3efb2739e5bd7e535a2d01bf67e551e1d5272dfc2c012c45b449ddb6e1375505469efb8701a8b061933a313a44d20a374977624b40c3d385dfe75e114a9b533b8a47e7d0ca8789a85694e598d2dcce9d5a43dab73bf0116188a89f84402cfeda984f696896da72e97ffea91c8790d723fb272ba5f25ac073e43f9c94ad9fb2d6df5663188a1"}, {0x4b, 0x4e00, "f571ea3b1a38299747e7be1ab96c5291d695340ae04adbed6bf907d2c1ae63dc77d10844c00091e6d6001a26f1cf1a17626452c4eec5e8fb85086e3a22707ce65e0f6ff55e5bbc2689b8a0"}, {0xbc, 0x4e00, "09dd084b6179c81a9bfb9cce6ebb2b5b87b0baad67e154300cce8b5fc01006f80d3d5a8ec8b138220c565a59c429a66f607e9c2f67bb95caa305539d1be007291e65e59eaea5746f37a52abcbe164aea1263a8954678077740e7dcc4290a9aee2d5bb4292f32432190810ff06bdbdd42316c16b3dadf6f9d49be59d8ae59d04f72e07b7f10b7b60f14f5277b196b8de2b0ce5f48cb01532817411807798150fd8484aee99f97bfa611b013bf9ac6d2409eb9ff1b4bfa1b12f387ea6a"}, {0x7e, 0x4e00, "887c3e9ef1f4f9e2ca7bf5fbb3da35d20dc7fcede0a74e40027c416a9ddb2bd9186e680c20ce44467a65447eb7ea1db0839e5968269e4b850687637e6462c726003fb18d5558c8abcdf5032dee0dc2c8009b426d2810a9bdeb9f851ced00d2d5c9702343b3cf6108d0c5c8ac166b4ad7db41d7434d712f458d1c646170ab"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="305fee94eb16cbab22360f1699c6004e7767990c6223e955d2b98e4f33caed24be3e9906a606"]) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x234, &(0x7f0000000140)={[{0x9b, 0x4e00, "58a28467d97ca8707da5f63337ce35a6461d6a991ea3efb2739e5bd7e535a2d01bf67e551e1d5272dfc2c012c45b449ddb6e1375505469efb8701a8b061933a313a44d20a374977624b40c3d385dfe75e114a9b533b8a47e7d0ca8789a85694e598d2dcce9d5a43dab73bf0116188a89f84402cfeda984f696896da72e97ffea91c8790d723fb272ba5f25ac073e43f9c94ad9fb2d6df5663188a1"}, {0x4b, 0x4e00, "f571ea3b1a38299747e7be1ab96c5291d695340ae04adbed6bf907d2c1ae63dc77d10844c00091e6d6001a26f1cf1a17626452c4eec5e8fb85086e3a22707ce65e0f6ff55e5bbc2689b8a0"}, {0xbc, 0x4e00, "09dd084b6179c81a9bfb9cce6ebb2b5b87b0baad67e154300cce8b5fc01006f80d3d5a8ec8b138220c565a59c429a66f607e9c2f67bb95caa305539d1be007291e65e59eaea5746f37a52abcbe164aea1263a8954678077740e7dcc4290a9aee2d5bb4292f32432190810ff06bdbdd42316c16b3dadf6f9d49be59d8ae59d04f72e07b7f10b7b60f14f5277b196b8de2b0ce5f48cb01532817411807798150fd8484aee99f97bfa611b013bf9ac6d2409eb9ff1b4bfa1b12f387ea6a"}, {0x7e, 0x4e00, "887c3e9ef1f4f9e2ca7bf5fbb3da35d20dc7fcede0a74e40027c416a9ddb2bd9186e680c20ce44467a65447eb7ea1db0839e5968269e4b850687637e6462c726003fb18d5558c8abcdf5032dee0dc2c8009b426d2810a9bdeb9f851ced00d2d5c9702343b3cf6108d0c5c8ac166b4ad7db41d7434d712f458d1c646170ab"}]}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="305fee94eb16cbab22360f1699c6004e7767990c6223e955d2b98e4f33caed24be3e9906a606"]) (async) [ 2598.611256][T28640] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2599.135353][T28640] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2599.144541][T28640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2599.153590][T28640] usb 4-1: Product: syz [ 2599.157807][T28640] usb 4-1: Manufacturer: syz [ 2599.163345][T28640] usb 4-1: SerialNumber: syz [ 2599.202971][T28640] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2599.771682][T17346] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2600.384566][T32600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2600.394121][T32600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2600.625559][T28640] usb 4-1: USB disconnect, device number 107 [ 2600.851225][T17346] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2600.858327][T17346] ath9k_htc: Failed to initialize the device [ 2600.869362][T28640] usb 4-1: ath9k_htc: USB layer deinitialized 13:37:16 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x234, &(0x7f0000000140)={[{0x9b, 0x4e00, "58a28467d97ca8707da5f63337ce35a6461d6a991ea3efb2739e5bd7e535a2d01bf67e551e1d5272dfc2c012c45b449ddb6e1375505469efb8701a8b061933a313a44d20a374977624b40c3d385dfe75e114a9b533b8a47e7d0ca8789a85694e598d2dcce9d5a43dab73bf0116188a89f84402cfeda984f696896da72e97ffea91c8790d723fb272ba5f25ac073e43f9c94ad9fb2d6df5663188a1"}, {0x4b, 0x4e00, "f571ea3b1a38299747e7be1ab96c5291d695340ae04adbed6bf907d2c1ae63dc77d10844c00091e6d6001a26f1cf1a17626452c4eec5e8fb85086e3a22707ce65e0f6ff55e5bbc2689b8a0"}, {0xbc, 0x4e00, "09dd084b6179c81a9bfb9cce6ebb2b5b87b0baad67e154300cce8b5fc01006f80d3d5a8ec8b138220c565a59c429a66f607e9c2f67bb95caa305539d1be007291e65e59eaea5746f37a52abcbe164aea1263a8954678077740e7dcc4290a9aee2d5bb4292f32432190810ff06bdbdd42316c16b3dadf6f9d49be59d8ae59d04f72e07b7f10b7b60f14f5277b196b8de2b0ce5f48cb01532817411807798150fd8484aee99f97bfa611b013bf9ac6d2409eb9ff1b4bfa1b12f387ea6a"}, {0x7e, 0x4e00, "887c3e9ef1f4f9e2ca7bf5fbb3da35d20dc7fcede0a74e40027c416a9ddb2bd9186e680c20ce44467a65447eb7ea1db0839e5968269e4b850687637e6462c726003fb18d5558c8abcdf5032dee0dc2c8009b426d2810a9bdeb9f851ced00d2d5c9702343b3cf6108d0c5c8ac166b4ad7db41d7434d712f458d1c646170ab"}]}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="305fee94eb16cbab22360f1699c6004e7767990c6223e955d2b98e4f33caed24be3e9906a606"]) [ 2601.471415][T31001] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2601.991577][T31001] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2602.000769][T31001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2602.018801][T31001] usb 4-1: Product: syz [ 2602.024840][T31001] usb 4-1: Manufacturer: syz [ 2602.030028][T31001] usb 4-1: SerialNumber: syz [ 2602.074685][T31001] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2602.641379][T15704] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2603.063500][T31001] usb 4-1: USB disconnect, device number 108 13:37:18 executing program 3: getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001640)={0x0, 0x7fff, 0x6, [0x101, 0x8001, 0x7, 0x9, 0x40, 0x5]}, &(0x7f0000001680)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000016c0)={0x0, 0x3}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001a40)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}, [0x7fff, 0x67, 0x7, 0x1, 0x6, 0x9, 0x100000000, 0xd67e, 0x1, 0x4, 0xffffffffffffffff, 0x5, 0x401, 0x7, 0x6]}, &(0x7f0000001b40)=0x100) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002f40)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000100)="43bd1579ef09d0e4a937d4f85526999a97be781a4648a22765d3fae0bd4f563cccfe7f26b6fd8000849310c380829e42db5970903cc14f26d78161458d769e8ca1b2f933febe4775d0b7546bf81122415fc11a17ad4bb12b09d3ab55745beee134740fbc2016d369eedc35b90401b4ecfd8ed68978e671e6367d5d398bc71e234636d2f985fa7ccf775c", 0x8a}, {&(0x7f0000000080)="fdf1bc5af191742c3b2ed086bb158cd777129494f5758488dabaab3e4f", 0x1d}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="60e6c272e073b8e2e6572ec7879ef01e9e8c764776661e2255a6d50f74818436be02a30d45844c79dd70f888c737f76557f0def6104dbec98310d0274fa44d8924d8b63abfac717e80d584a95c73030df535ec62df8977a44cfe06d904b5a9585daeee22a46453de5422dcd1ca55e2ce5b895a27", 0x74}, {&(0x7f0000001240)="0f692ece7c465e8210033538d9247bd4c8e4dc4189bceb193347ba01e0b00a46b06f007e1dc55e7e58273b6c8e914ee6bb999039a97aafc687cffbae7a238dad3be0d3266435b3f934df18b41233415f478cc0e627b1e54b69bddbb74ab6a39aba77644d548b9a0553a7f2c83906a00dae7ec4473dbc2f93159c5b925713230fef376b00048d5969f61b8532b13db9935c6142c1de4a2d8eec258b60e971c0c916dc16937ee2427f1fe7ea910a2d228767d2b3cc25169e76a709524bc0a5b255c40e7e6d2cf5976b1b118ba89ec218784c6e89c01848fe1f876f27f11cda8665be66925cd890e93913d2937a84bb", 0xee}, {&(0x7f0000001340)="c13cb002afc89838fbf75bb395ad6b4b3341e60a68c113a089c2c087f25dc98f6262f841d47b8f226ee93de9527a1b833809a865f90d9de4c91625f244aa86b480da618726b13729640dfeb20922fcaf7eeafc297f102bde5d282425ff4e66e453f371d9c2becf4b57b41f19a559595bdb8ba23a89ddc96b29f990137a68b7234d140104e97dbb9a48940c0a7be3b24e1a5c9c2f9086f95d", 0x98}, {&(0x7f0000001400)="086762a1ec6ae11c2dcfca59557e6aabd5fdee5509ac847b464e4685e0847bf91826529e30cc2e23bd64e81a7bb91672534af989c036f8f4a04fd02fcf81d206d640369b278ed44c4dbdf44b11d8d4c547b9915c0d7cee1b10c7f072806d3299d19093694b", 0x65}, {&(0x7f0000001480)="e4768008d79f48daf0ebdae14a3e964b258333ff563b9e04a138e12648bc2bc9ae425f266b9068b8d1d4b0264d9f328947e62105b4fb2523fc96c3f99b58bcb204d8fc1b931ab678047cbc4fd2b387b4653dd00a94d8522fa216", 0x5a}, {&(0x7f0000001500)="d25abcc67e61de8667b750a6e6ee5ed0122170b83844cfd380908d449579213e371d155e25a21011252bd9411dc0182623cc32c66268d5e2d6b5229d59619f4bde530617df560ec959a73d8895159e82", 0x50}], 0x9, &(0x7f0000001740)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x9, 0x1, 0x0, 0x81, 0x3, 0x2c6, 0x0, r0}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x2, 0x40, 0x9164, r1}}], 0x80, 0x8004}, {&(0x7f00000017c0)=@in6={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001800), 0x0, &(0x7f0000001840)=[@authinfo={0x18, 0x84, 0x6, {0x2}}], 0x18, 0x10}, {&(0x7f0000001880)=@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c, &(0x7f0000001a00)=[{&(0x7f00000018c0)="913af0d4672cbf56111d35db7d85270a356bf17ecd3cd7fcfaf176316a0811b01457ed8d4c233771b9116d6ccc360af504d93c4c4e401873e35a29961e6c2c120484567a8dca5ca5a5c26421acc637ca40e08f901c917d9b3c91b5afbca9a4ff7b69d242e083f155569a43cb851bacc337611305e6415e318a7673856677264171590534849c019c3277abf1ac0b32f3c95cdbaf5ca0e1efb534", 0x9a}, {&(0x7f0000001980)="15b391bf530cbc7fc00d465a7a84f27113c2b88517a675bed391ec4796f388990bc3f6e9b0350086250ea3bc93a75b880d972d2d44a491d43da776ca655f5a67a883affd92d000f914f32afd1df3bc534866397c6363e1ba0fa3b84c5516fae45a0c8757a190a04f9ada3b762821b5ea9129822e6a8c20", 0x77}], 0x2, &(0x7f0000001b80)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @authinfo={0x18, 0x84, 0x6, {0x3ff}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8001, 0x3, 0x5, r2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x40}}, @init={0x18, 0x84, 0x0, {0x9, 0xd7, 0x5, 0x40}}], 0x80, 0x24000004}, {&(0x7f0000001c00)=@in6={0xa, 0x4e24, 0x8, @mcast2, 0x9e7}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001c40)="25177a0bab3dd36c1c747d", 0xb}], 0x1, &(0x7f0000001cc0)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x70, 0x4000}, {&(0x7f0000001d40)=@in={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000002ec0)=[{&(0x7f0000001d80)="b51f4153605a919299b2f7d1b09236b660f52d752334790f76cb9c8c7bb5d51b663de6afa2a6d83d3d18265f93f0609752b084185509f0ada10d942f8d04134d87fa2576e97358699b39a58df92602a6b8364340ec19cd16e5c571b6ae6362d0e5e75a5a6920091c9a6b", 0x6a}, {&(0x7f0000001e00)="a9da462ef94f838d9647f22d9978f77f8b911db808cb993f16b1d6639649753e6c0573a2026396cc03df82b8b1a52fa67deb0273bdebdf66250935cbc802ab4b6fef40d1d0118627a41c188081b3a606cdcd3e1552f3b04b97892abb6b44c5ef525151d32754ce0e78712a52bc0b02a5b701ca55cda97ebdf1e3b5c8c2f4e114b9b14695762d4c72d08d3ccc98559304869ad98b7c3fd9bd76785361c5e9bc6bbe", 0xa1}, {&(0x7f0000001ec0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x40000}], 0x5, 0x44000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3}, 0x14) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'team_slave_1\x00', 0x3}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000011180)={r7, 0x8}, &(0x7f0000011140)=0xfffffffffffffff4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000002a00)={r7, @in6={{0xa, 0x4e22, 0xd40, @local, 0x8}}, 0x80, 0x7, 0x0, 0x7d, 0x80, 0xa19, 0x8}, &(0x7f0000002ac0)=0x9c) sendmmsg$inet_sctp(r6, &(0x7f0000002c40)=[{&(0x7f0000001900)=@in6={0xa, 0x4e21, 0x1, @remote, 0x645f}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000001c40)="252933f5fe1bdec66df618c700d5734a662938dc2334a2c7f10d1f084103603ce30d3f508607903e437c78700846cee1d4a47d58203e665e6f8ca11c080c142cfd03533b5ad2a007b0efcfd7c366392fdd2f7ad3fe61ab5feec76849a500553f801f58cb0eae1efde8fb1cbbe72eccf0c29d04b21537", 0x76}], 0x1, &(0x7f00000111c0)=ANY=[@ANYBLOB="20000000000000008400000002000000090004000100000000000000", @ANYRES32=r8, @ANYBLOB="1800000000000000840000000000000089f0550efcff010030000000000000008400000001000000fbffffff0200000096000000000000c0010000000400000001000000", @ANYRES32=r7, @ANYBLOB="180000000000000084000000066337f04600000000000000180000000008030000000000000000001f000000e000e700f013d27db4e8dc0da3e69f966a242ede2eaec5f683052190606cec737c85a1f106a6c032026351ada7e1cd45e9d100dc79c5304c5b36f9eab1abea33fd973638c989810ba47d3226417cf2d7a97ff7d66955e0fe3767020be444450a5097b4de64f6529be668abfb86"], 0x98, 0x40800a0}, {&(0x7f0000001e00)=@in={0x2, 0x4e20, @rand_addr=0x64010105}, 0x10, &(0x7f0000002980)=[{&(0x7f0000002300)="c67f7891085f8b3cb5fc", 0xa}, {&(0x7f0000002340)="aa6f98a824895dc4429b5537cb225eadd28c", 0x12}, {&(0x7f0000002700)="cb28df5a5f1875303d8a6a93e494d3f9bbeca124d85b4525c6f71590a95240629444c88f71327521debd37c04f9e2b1ce7052431e5b0bd871116d2bf3148d39547733655924eae7e0a1615", 0x4b}, {&(0x7f0000002780)="4adf4bc66e3b9dc25c85d43ed7afb2afd1b6997c2e347f0ae6e1dafd18ad59afdaebc88bdd16ef178c23a398b3fc48374e32eb66e69f2236232b1898d289c98f8e4cfbd25a7af5d938b5c8d9bbf312bac9abed9c27b1923313d727e953ea4f3c10a5da4a9857d19b5b4a92dcbe1150ac7bf2f1a12ee2963f371ec7b80b2bc6fae6b0a72966e9aa397773dadaed0cd2b64e4d728c760fe00d7fa23e7241560acccc3ca4a2c5fe5ea61a7b690faad9ab440bf38bb295a065cff8febd2f7eb6139020312ed86730e066a9b374b902db9c2a62b5cd606af94517c1a395", 0xdb}, {&(0x7f0000002880)="99b6676d60989703ea43d27dd1ce8c0e84b5d85af91680f830465c1c76d87f1b65319d121567cb0263416dab660533d19c", 0x31}, {&(0x7f00000028c0)="a2e9ca2151d486d88a7501ab809e06a42e2619a49b75d23267a5c517ab9d14061a27727787d546d099068aa1e4a7d73faeef5e654566b4ece571ea", 0x3b}, {&(0x7f0000002900)="f3d4ed664ca54584845b05ceaf1cb3495ab77b56430a0ebc80f45f3a7156a6718b857814b6c65177adad971c81ddd56996544abb1d485d8c612d6268b5312c3e7b5009cf13b01382c14e41e332f3bd91ff1370bc7ea9bc4363c06fdbb42733277fef851c5d7111dd24cb5b2c783c", 0x6e}], 0x7, &(0x7f0000002b00)=[@dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x6, 0x4, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8, 0x800, 0x1, r7}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x7, 0x8002, 0xffffffff, 0x8, 0x8, 0x9, 0x3, r7}}], 0x120, 0x24004850}], 0x2, 0x48800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x1b, &(0x7f0000000500)={r7}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={r7, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x7, 0x5, 0x9, 0xcc, 0x5, 0x8e}, 0x9c) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000001cc0)={0x0, 0x7, 0x81, 0xfffc, 0x8000, 0x75, 0x8, 0x7, {r7, @in6={{0xa, 0x4e21, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8001}}, 0x80, 0x7ff, 0x5, 0x6, 0x1}}, &(0x7f0000001d80)=0xb0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000005140)={r9, 0xbc}, &(0x7f0000005180)=0x8) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x5c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x0, 0xb00}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000002380)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001e40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{r4}, r11, 0x33, @unused=[0x7, 0xb55e, 0x72, 0x5], @devid=r12}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000b00)={0x0, 0x8b, 0x1, [0x9, 0x8, 0x1, 0x4, 0x6], [0x7f, 0x5, 0xfc48, 0x5, 0xff, 0x5, 0x0, 0x3, 0x0, 0x5000, 0x7, 0x7, 0x7, 0x100000001, 0x7, 0x4, 0x2, 0x5, 0x401, 0x0, 0x2, 0x101, 0x6, 0x1, 0x8, 0x717, 0xfc00000000000, 0x80, 0x4, 0x5, 0x7fffffffffffffff, 0x2, 0x4, 0x0, 0x3ff, 0x1, 0x0, 0xffffffffffffff7f, 0x6, 0x1, 0x10000000000000, 0x5, 0x1ff, 0x8000000000000000, 0x3, 0x5, 0x5, 0x7fffffffffffffff, 0x100000000, 0x4, 0x7, 0x3f, 0x9, 0x0, 0xfffffffffffffff7, 0x3, 0x3, 0x0, 0x1, 0xffffffffffffff66, 0x6, 0x5, 0x80000000, 0x609a, 0x2157, 0x2162, 0x170, 0x7f, 0x3, 0x3, 0xfffffffffffff801, 0x5, 0x200, 0x80000000, 0x0, 0x7fff, 0xdb7, 0x401, 0x2, 0xfffffffeffffffff, 0xe83, 0x3, 0x80000000, 0xf, 0x7, 0x3, 0xfff, 0x0, 0xffff, 0x9, 0x6, 0x0, 0x9, 0x8, 0x8, 0x506, 0x0, 0x4, 0x8, 0x0, 0xff, 0x8c7d, 0x0, 0x8, 0x8, 0x9, 0x6, 0x3, 0x9, 0x8001, 0x10001, 0x2, 0x401, 0x81, 0x0, 0x8, 0xdce9, 0x8, 0x1f, 0x5, 0x9]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000f40)={0x5, 0x4, {0x0, @usage=0x1, r12, 0xffffffff, 0x4, 0x9, 0x2, 0xb4, 0x2, @usage=0xff, 0x7f, 0x8, [0x3, 0x3ff, 0x1, 0x0, 0x1, 0x1f]}, {0x2, @usage=0xfaf6, r13, 0x400, 0x7fff, 0x0, 0x5, 0x8000, 0x6, @usage, 0x5c, 0x6d, [0xa69, 0x6, 0x9, 0x6, 0x6, 0x1]}, {0x7, @struct={0x7ff}, r14, 0x80, 0x9, 0xf7, 0x6, 0x61d, 0x1, @struct={0x7, 0x7}, 0xfffffffb, 0x7fffffff, [0x7, 0x8, 0x0, 0x80, 0x1, 0x1]}, {0x101, 0x6, 0x6}}) r15 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r15, &(0x7f0000000600)=[{{&(0x7f00000000c0)=@caif, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/119, 0x77}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f00000004c0)}], 0x6, &(0x7f0000000580)=""/128, 0x80}, 0xf3a7}], 0x1, 0x0, &(0x7f0000000640)={0x77359400}) r16 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r16, 0x82, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="06fd4df57429a4e5a76f679d44cd31f26a898b9de18db23c0dc7b525aa36bf7ade7dd617fe902c0ec4c827408fe9c88b31f4d8245a435370f847ded05718e046cdc813066b304685044b2e1421d2c163851596a420b8d6"]) [ 2603.731437][T15704] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2603.738527][T15704] ath9k_htc: Failed to initialize the device [ 2603.745990][T31001] usb 4-1: ath9k_htc: USB layer deinitialized [ 2604.116388][T31001] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2604.401362][T31001] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 2605.203806][T31001] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2605.213083][T31001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.221259][T31001] usb 4-1: Product: syz [ 2605.226080][T31001] usb 4-1: Manufacturer: syz [ 2605.230707][T31001] usb 4-1: SerialNumber: syz [ 2605.273256][T31001] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2605.841257][T32610] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2606.931204][T32610] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2606.938268][T32610] ath9k_htc: Failed to initialize the device [ 2608.485979][T32610] usb 4-1: ath9k_htc: USB layer deinitialized 13:37:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x52020000}}]}]}}]}, 0x74}}, 0x0) 13:37:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r4, {0x2}, {}, {0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x443, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x156}}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf000000]}]}]}}]}, 0x478}}, 0x0) 13:37:29 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000011c0)={0x21, 0x37, 0x1, {0x0, 0x0, 0x7, r1, 0x3, '!\x00['}}, 0x21) write$P9_RSYMLINK(r0, &(0x7f0000001340)={0x14, 0x11, 0x1, {0x1, 0x3, 0x4}}, 0x14) [ 2614.740129][ T6900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2614.751986][ T6900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2614.760270][ T6900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2614.772671][ T6900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2614.785591][ T6900] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2614.797529][ T6900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2614.971671][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2614.979909][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2614.989181][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2615.000654][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2615.008772][ T5115] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2615.016202][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2615.923782][ T5115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2615.934215][ T5115] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2615.943122][ T5115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2615.955984][ T5115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2615.965077][ T5115] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2615.973417][ T5115] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2616.853532][ T5115] Bluetooth: hci5: command 0x0409 tx timeout [ 2617.091580][ T5115] Bluetooth: hci6: command 0x0409 tx timeout [ 2618.051718][ T5115] Bluetooth: hci7: command 0x0409 tx timeout [ 2618.931392][ T5115] Bluetooth: hci5: command 0x041b tx timeout [ 2619.171363][ T5115] Bluetooth: hci6: command 0x041b tx timeout [ 2620.131616][ T5115] Bluetooth: hci7: command 0x041b tx timeout [ 2621.011295][ T5115] Bluetooth: hci5: command 0x040f tx timeout [ 2621.261283][ T5115] Bluetooth: hci6: command 0x040f tx timeout [ 2622.211193][ T5115] Bluetooth: hci7: command 0x040f tx timeout [ 2623.091524][ T5115] Bluetooth: hci5: command 0x0419 tx timeout [ 2623.342093][ T5115] Bluetooth: hci6: command 0x0419 tx timeout [ 2624.291363][ T5115] Bluetooth: hci7: command 0x0419 tx timeout 13:37:48 executing program 3: getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001640)={0x0, 0x7fff, 0x6, [0x101, 0x8001, 0x7, 0x9, 0x40, 0x5]}, &(0x7f0000001680)=0x14) (async) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000016c0)={0x0, 0x3}, &(0x7f0000001700)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001a40)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}, [0x7fff, 0x67, 0x7, 0x1, 0x6, 0x9, 0x100000000, 0xd67e, 0x1, 0x4, 0xffffffffffffffff, 0x5, 0x401, 0x7, 0x6]}, &(0x7f0000001b40)=0x100) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002f40)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000100)="43bd1579ef09d0e4a937d4f85526999a97be781a4648a22765d3fae0bd4f563cccfe7f26b6fd8000849310c380829e42db5970903cc14f26d78161458d769e8ca1b2f933febe4775d0b7546bf81122415fc11a17ad4bb12b09d3ab55745beee134740fbc2016d369eedc35b90401b4ecfd8ed68978e671e6367d5d398bc71e234636d2f985fa7ccf775c", 0x8a}, {&(0x7f0000000080)="fdf1bc5af191742c3b2ed086bb158cd777129494f5758488dabaab3e4f", 0x1d}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="60e6c272e073b8e2e6572ec7879ef01e9e8c764776661e2255a6d50f74818436be02a30d45844c79dd70f888c737f76557f0def6104dbec98310d0274fa44d8924d8b63abfac717e80d584a95c73030df535ec62df8977a44cfe06d904b5a9585daeee22a46453de5422dcd1ca55e2ce5b895a27", 0x74}, {&(0x7f0000001240)="0f692ece7c465e8210033538d9247bd4c8e4dc4189bceb193347ba01e0b00a46b06f007e1dc55e7e58273b6c8e914ee6bb999039a97aafc687cffbae7a238dad3be0d3266435b3f934df18b41233415f478cc0e627b1e54b69bddbb74ab6a39aba77644d548b9a0553a7f2c83906a00dae7ec4473dbc2f93159c5b925713230fef376b00048d5969f61b8532b13db9935c6142c1de4a2d8eec258b60e971c0c916dc16937ee2427f1fe7ea910a2d228767d2b3cc25169e76a709524bc0a5b255c40e7e6d2cf5976b1b118ba89ec218784c6e89c01848fe1f876f27f11cda8665be66925cd890e93913d2937a84bb", 0xee}, {&(0x7f0000001340)="c13cb002afc89838fbf75bb395ad6b4b3341e60a68c113a089c2c087f25dc98f6262f841d47b8f226ee93de9527a1b833809a865f90d9de4c91625f244aa86b480da618726b13729640dfeb20922fcaf7eeafc297f102bde5d282425ff4e66e453f371d9c2becf4b57b41f19a559595bdb8ba23a89ddc96b29f990137a68b7234d140104e97dbb9a48940c0a7be3b24e1a5c9c2f9086f95d", 0x98}, {&(0x7f0000001400)="086762a1ec6ae11c2dcfca59557e6aabd5fdee5509ac847b464e4685e0847bf91826529e30cc2e23bd64e81a7bb91672534af989c036f8f4a04fd02fcf81d206d640369b278ed44c4dbdf44b11d8d4c547b9915c0d7cee1b10c7f072806d3299d19093694b", 0x65}, {&(0x7f0000001480)="e4768008d79f48daf0ebdae14a3e964b258333ff563b9e04a138e12648bc2bc9ae425f266b9068b8d1d4b0264d9f328947e62105b4fb2523fc96c3f99b58bcb204d8fc1b931ab678047cbc4fd2b387b4653dd00a94d8522fa216", 0x5a}, {&(0x7f0000001500)="d25abcc67e61de8667b750a6e6ee5ed0122170b83844cfd380908d449579213e371d155e25a21011252bd9411dc0182623cc32c66268d5e2d6b5229d59619f4bde530617df560ec959a73d8895159e82", 0x50}], 0x9, &(0x7f0000001740)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x9, 0x1, 0x0, 0x81, 0x3, 0x2c6, 0x0, r0}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x2, 0x40, 0x9164, r1}}], 0x80, 0x8004}, {&(0x7f00000017c0)=@in6={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001800), 0x0, &(0x7f0000001840)=[@authinfo={0x18, 0x84, 0x6, {0x2}}], 0x18, 0x10}, {&(0x7f0000001880)=@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c, &(0x7f0000001a00)=[{&(0x7f00000018c0)="913af0d4672cbf56111d35db7d85270a356bf17ecd3cd7fcfaf176316a0811b01457ed8d4c233771b9116d6ccc360af504d93c4c4e401873e35a29961e6c2c120484567a8dca5ca5a5c26421acc637ca40e08f901c917d9b3c91b5afbca9a4ff7b69d242e083f155569a43cb851bacc337611305e6415e318a7673856677264171590534849c019c3277abf1ac0b32f3c95cdbaf5ca0e1efb534", 0x9a}, {&(0x7f0000001980)="15b391bf530cbc7fc00d465a7a84f27113c2b88517a675bed391ec4796f388990bc3f6e9b0350086250ea3bc93a75b880d972d2d44a491d43da776ca655f5a67a883affd92d000f914f32afd1df3bc534866397c6363e1ba0fa3b84c5516fae45a0c8757a190a04f9ada3b762821b5ea9129822e6a8c20", 0x77}], 0x2, &(0x7f0000001b80)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @authinfo={0x18, 0x84, 0x6, {0x3ff}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x8001, 0x3, 0x5, r2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x40}}, @init={0x18, 0x84, 0x0, {0x9, 0xd7, 0x5, 0x40}}], 0x80, 0x24000004}, {&(0x7f0000001c00)=@in6={0xa, 0x4e24, 0x8, @mcast2, 0x9e7}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001c40)="25177a0bab3dd36c1c747d", 0xb}], 0x1, &(0x7f0000001cc0)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x70, 0x4000}, {&(0x7f0000001d40)=@in={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000002ec0)=[{&(0x7f0000001d80)="b51f4153605a919299b2f7d1b09236b660f52d752334790f76cb9c8c7bb5d51b663de6afa2a6d83d3d18265f93f0609752b084185509f0ada10d942f8d04134d87fa2576e97358699b39a58df92602a6b8364340ec19cd16e5c571b6ae6362d0e5e75a5a6920091c9a6b", 0x6a}, {&(0x7f0000001e00)="a9da462ef94f838d9647f22d9978f77f8b911db808cb993f16b1d6639649753e6c0573a2026396cc03df82b8b1a52fa67deb0273bdebdf66250935cbc802ab4b6fef40d1d0118627a41c188081b3a606cdcd3e1552f3b04b97892abb6b44c5ef525151d32754ce0e78712a52bc0b02a5b701ca55cda97ebdf1e3b5c8c2f4e114b9b14695762d4c72d08d3ccc98559304869ad98b7c3fd9bd76785361c5e9bc6bbe", 0xa1}, {&(0x7f0000001ec0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x40000}], 0x5, 0x44000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r3}, 0x14) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet(0x2, 0x80001, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'team_slave_1\x00', 0x3}, 0x18) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000011180)={r7, 0x8}, &(0x7f0000011140)=0xfffffffffffffff4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000002a00)={r7, @in6={{0xa, 0x4e22, 0xd40, @local, 0x8}}, 0x80, 0x7, 0x0, 0x7d, 0x80, 0xa19, 0x8}, &(0x7f0000002ac0)=0x9c) sendmmsg$inet_sctp(r6, &(0x7f0000002c40)=[{&(0x7f0000001900)=@in6={0xa, 0x4e21, 0x1, @remote, 0x645f}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000001c40)="252933f5fe1bdec66df618c700d5734a662938dc2334a2c7f10d1f084103603ce30d3f508607903e437c78700846cee1d4a47d58203e665e6f8ca11c080c142cfd03533b5ad2a007b0efcfd7c366392fdd2f7ad3fe61ab5feec76849a500553f801f58cb0eae1efde8fb1cbbe72eccf0c29d04b21537", 0x76}], 0x1, &(0x7f00000111c0)=ANY=[@ANYBLOB="20000000000000008400000002000000090004000100000000000000", @ANYRES32=r8, @ANYBLOB="1800000000000000840000000000000089f0550efcff010030000000000000008400000001000000fbffffff0200000096000000000000c0010000000400000001000000", @ANYRES32=r7, @ANYBLOB="180000000000000084000000066337f04600000000000000180000000008030000000000000000001f000000e000e700f013d27db4e8dc0da3e69f966a242ede2eaec5f683052190606cec737c85a1f106a6c032026351ada7e1cd45e9d100dc79c5304c5b36f9eab1abea33fd973638c989810ba47d3226417cf2d7a97ff7d66955e0fe3767020be444450a5097b4de64f6529be668abfb86"], 0x98, 0x40800a0}, {&(0x7f0000001e00)=@in={0x2, 0x4e20, @rand_addr=0x64010105}, 0x10, &(0x7f0000002980)=[{&(0x7f0000002300)="c67f7891085f8b3cb5fc", 0xa}, {&(0x7f0000002340)="aa6f98a824895dc4429b5537cb225eadd28c", 0x12}, {&(0x7f0000002700)="cb28df5a5f1875303d8a6a93e494d3f9bbeca124d85b4525c6f71590a95240629444c88f71327521debd37c04f9e2b1ce7052431e5b0bd871116d2bf3148d39547733655924eae7e0a1615", 0x4b}, {&(0x7f0000002780)="4adf4bc66e3b9dc25c85d43ed7afb2afd1b6997c2e347f0ae6e1dafd18ad59afdaebc88bdd16ef178c23a398b3fc48374e32eb66e69f2236232b1898d289c98f8e4cfbd25a7af5d938b5c8d9bbf312bac9abed9c27b1923313d727e953ea4f3c10a5da4a9857d19b5b4a92dcbe1150ac7bf2f1a12ee2963f371ec7b80b2bc6fae6b0a72966e9aa397773dadaed0cd2b64e4d728c760fe00d7fa23e7241560acccc3ca4a2c5fe5ea61a7b690faad9ab440bf38bb295a065cff8febd2f7eb6139020312ed86730e066a9b374b902db9c2a62b5cd606af94517c1a395", 0xdb}, {&(0x7f0000002880)="99b6676d60989703ea43d27dd1ce8c0e84b5d85af91680f830465c1c76d87f1b65319d121567cb0263416dab660533d19c", 0x31}, {&(0x7f00000028c0)="a2e9ca2151d486d88a7501ab809e06a42e2619a49b75d23267a5c517ab9d14061a27727787d546d099068aa1e4a7d73faeef5e654566b4ece571ea", 0x3b}, {&(0x7f0000002900)="f3d4ed664ca54584845b05ceaf1cb3495ab77b56430a0ebc80f45f3a7156a6718b857814b6c65177adad971c81ddd56996544abb1d485d8c612d6268b5312c3e7b5009cf13b01382c14e41e332f3bd91ff1370bc7ea9bc4363c06fdbb42733277fef851c5d7111dd24cb5b2c783c", 0x6e}], 0x7, &(0x7f0000002b00)=[@dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x6, 0x4, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8, 0x800, 0x1, r7}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x7, 0x8002, 0xffffffff, 0x8, 0x8, 0x9, 0x3, r7}}], 0x120, 0x24004850}], 0x2, 0x48800) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x1b, &(0x7f0000000500)={r7}, &(0x7f0000000540)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={r7, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x7, 0x5, 0x9, 0xcc, 0x5, 0x8e}, 0x9c) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000001cc0)={0x0, 0x7, 0x81, 0xfffc, 0x8000, 0x75, 0x8, 0x7, {r7, @in6={{0xa, 0x4e21, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8001}}, 0x80, 0x7ff, 0x5, 0x6, 0x1}}, &(0x7f0000001d80)=0xb0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000005140)={r9, 0xbc}, &(0x7f0000005180)=0x8) (async) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x5c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x0, 0xb00}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000002380)={0x0, ""/256, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001e40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{r4}, r11, 0x33, @unused=[0x7, 0xb55e, 0x72, 0x5], @devid=r12}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000b00)={0x0, 0x8b, 0x1, [0x9, 0x8, 0x1, 0x4, 0x6], [0x7f, 0x5, 0xfc48, 0x5, 0xff, 0x5, 0x0, 0x3, 0x0, 0x5000, 0x7, 0x7, 0x7, 0x100000001, 0x7, 0x4, 0x2, 0x5, 0x401, 0x0, 0x2, 0x101, 0x6, 0x1, 0x8, 0x717, 0xfc00000000000, 0x80, 0x4, 0x5, 0x7fffffffffffffff, 0x2, 0x4, 0x0, 0x3ff, 0x1, 0x0, 0xffffffffffffff7f, 0x6, 0x1, 0x10000000000000, 0x5, 0x1ff, 0x8000000000000000, 0x3, 0x5, 0x5, 0x7fffffffffffffff, 0x100000000, 0x4, 0x7, 0x3f, 0x9, 0x0, 0xfffffffffffffff7, 0x3, 0x3, 0x0, 0x1, 0xffffffffffffff66, 0x6, 0x5, 0x80000000, 0x609a, 0x2157, 0x2162, 0x170, 0x7f, 0x3, 0x3, 0xfffffffffffff801, 0x5, 0x200, 0x80000000, 0x0, 0x7fff, 0xdb7, 0x401, 0x2, 0xfffffffeffffffff, 0xe83, 0x3, 0x80000000, 0xf, 0x7, 0x3, 0xfff, 0x0, 0xffff, 0x9, 0x6, 0x0, 0x9, 0x8, 0x8, 0x506, 0x0, 0x4, 0x8, 0x0, 0xff, 0x8c7d, 0x0, 0x8, 0x8, 0x9, 0x6, 0x3, 0x9, 0x8001, 0x10001, 0x2, 0x401, 0x81, 0x0, 0x8, 0xdce9, 0x8, 0x1f, 0x5, 0x9]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000f40)={0x5, 0x4, {0x0, @usage=0x1, r12, 0xffffffff, 0x4, 0x9, 0x2, 0xb4, 0x2, @usage=0xff, 0x7f, 0x8, [0x3, 0x3ff, 0x1, 0x0, 0x1, 0x1f]}, {0x2, @usage=0xfaf6, r13, 0x400, 0x7fff, 0x0, 0x5, 0x8000, 0x6, @usage, 0x5c, 0x6d, [0xa69, 0x6, 0x9, 0x6, 0x6, 0x1]}, {0x7, @struct={0x7ff}, r14, 0x80, 0x9, 0xf7, 0x6, 0x61d, 0x1, @struct={0x7, 0x7}, 0xfffffffb, 0x7fffffff, [0x7, 0x8, 0x0, 0x80, 0x1, 0x1]}, {0x101, 0x6, 0x6}}) r15 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r15, &(0x7f0000000600)=[{{&(0x7f00000000c0)=@caif, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/119, 0x77}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f00000004c0)}], 0x6, &(0x7f0000000580)=""/128, 0x80}, 0xf3a7}], 0x1, 0x0, &(0x7f0000000640)={0x77359400}) (async) r16 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r16, 0x82, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="06fd4df57429a4e5a76f679d44cd31f26a898b9de18db23c0dc7b525aa36bf7ade7dd617fe902c0ec4c827408fe9c88b31f4d8245a435370f847ded05718e046cdc813066b304685044b2e1421d2c163851596a420b8d6"]) [ 2635.197645][ T6900] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2635.210896][ T6900] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2635.219693][ T6900] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2635.228978][ T6900] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2635.236966][ T6900] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2635.244341][ T6900] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2637.341561][ T6900] Bluetooth: hci8: command 0x0409 tx timeout [ 2639.411352][ T6900] Bluetooth: hci8: command 0x041b tx timeout [ 2641.491424][ T6900] Bluetooth: hci8: command 0x040f tx timeout [ 2643.573472][ T6900] Bluetooth: hci8: command 0x0419 tx timeout [ 2649.566566][ T5115] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2649.580203][ T5115] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2649.589973][ T5115] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2649.599702][ T5115] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2649.608387][ T5115] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2649.616117][ T5115] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2651.651314][ T5115] Bluetooth: hci9: command 0x0409 tx timeout [ 2652.134445][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.140856][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.731543][ T5115] Bluetooth: hci9: command 0x041b tx timeout [ 2655.816042][ T5115] Bluetooth: hci9: command 0x040f tx timeout [ 2657.891300][ T5115] Bluetooth: hci9: command 0x0419 tx timeout [ 2680.835457][ T6900] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2680.848709][ T6900] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2680.857116][ T6900] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2680.865395][ T6900] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2680.877977][ T6900] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2680.885613][ T6900] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2681.356183][ T6900] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2681.367895][ T6900] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2681.376542][ T6900] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2681.393179][ T6900] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2681.400872][ T6900] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2681.408281][ T6900] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2682.546543][ T6900] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2682.556343][ T6900] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2682.564549][ T6900] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2682.576469][ T6900] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2682.584743][ T6900] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2682.592289][ T6900] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2682.931235][ T5115] Bluetooth: hci10: command 0x0409 tx timeout [ 2683.491487][ T5115] Bluetooth: hci11: command 0x0409 tx timeout [ 2684.611444][ T5115] Bluetooth: hci12: command 0x0409 tx timeout [ 2685.011399][ T5115] Bluetooth: hci10: command 0x041b tx timeout [ 2685.571570][ T5115] Bluetooth: hci11: command 0x041b tx timeout [ 2686.691370][ T5115] Bluetooth: hci12: command 0x041b tx timeout [ 2687.091350][ T5115] Bluetooth: hci10: command 0x040f tx timeout [ 2687.651498][ T5115] Bluetooth: hci11: command 0x040f tx timeout [ 2688.771368][ T5115] Bluetooth: hci12: command 0x040f tx timeout [ 2689.181462][ T5115] Bluetooth: hci10: command 0x0419 tx timeout [ 2689.734241][ T5115] Bluetooth: hci11: command 0x0419 tx timeout [ 2690.851314][ T5115] Bluetooth: hci12: command 0x0419 tx timeout [ 2701.533324][ T6900] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2701.548826][ T6900] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2701.559510][ T6900] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2701.568154][ T6900] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2701.576539][ T6900] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 2701.584086][ T6900] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2703.651464][ T6900] Bluetooth: hci13: command 0x0409 tx timeout [ 2705.731262][ T6900] Bluetooth: hci13: command 0x041b tx timeout [ 2707.811427][ T6900] Bluetooth: hci13: command 0x040f tx timeout [ 2709.901327][ T5115] Bluetooth: hci13: command 0x0419 tx timeout [ 2710.538098][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 2713.575120][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.581620][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 2715.941240][ T6900] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2715.952536][ T6900] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2715.961705][ T6900] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2715.971138][ T6900] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2715.979577][ T6900] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 2715.988361][ T6900] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2718.051347][ T5115] Bluetooth: hci14: command 0x0409 tx timeout [ 2720.131465][ T5115] Bluetooth: hci14: command 0x041b tx timeout [ 2722.211231][ T5115] Bluetooth: hci14: command 0x040f tx timeout [ 2724.301339][ T5115] Bluetooth: hci14: command 0x0419 tx timeout [ 2730.221640][ T29] INFO: task dhcpcd:4733 blocked for more than 143 seconds. [ 2730.229089][ T29] Not tainted 6.8.0-syzkaller #0 [ 2730.235935][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2730.245154][ T29] task:dhcpcd state:D stack:20952 pid:4733 tgid:4733 ppid:4732 flags:0x00004002 [ 2730.255735][ T29] Call Trace: [ 2730.259048][ T29] [ 2730.262491][ T29] __schedule+0x17d1/0x49f0 [ 2730.267297][ T29] ? __pfx___schedule+0x10/0x10 [ 2730.272264][ T29] ? __pfx_lock_release+0x10/0x10 [ 2730.277341][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2730.282917][ T29] ? schedule+0x8e/0x260 [ 2730.287200][ T29] schedule+0x149/0x260 [ 2730.291568][ T29] schedule_preempt_disabled+0x13/0x30 [ 2730.297078][ T29] __mutex_lock+0x6a3/0xd70 [ 2730.301740][ T29] ? __mutex_lock+0x526/0xd70 [ 2730.306448][ T29] ? devinet_ioctl+0x2ce/0x1bc0 [ 2730.311549][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2730.316708][ T29] ? bpf_lsm_capable+0x9/0x10 [ 2730.321459][ T29] ? security_capable+0x90/0xb0 [ 2730.326344][ T29] devinet_ioctl+0x2ce/0x1bc0 [ 2730.331102][ T29] ? get_user_ifreq+0x1ba/0x200 [ 2730.336328][ T29] inet_ioctl+0x3d7/0x4f0 [ 2730.340694][ T29] ? __pfx_inet_ioctl+0x10/0x10 [ 2730.345645][ T29] sock_do_ioctl+0x158/0x460 [ 2730.350278][ T29] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2730.355508][ T29] ? __pfx_lock_release+0x10/0x10 [ 2730.360572][ T29] sock_ioctl+0x629/0x8e0 [ 2730.364986][ T29] ? __pfx_sock_ioctl+0x10/0x10 [ 2730.369871][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2730.375924][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2730.380886][ T29] ? security_file_ioctl+0x87/0xb0 [ 2730.386102][ T29] ? __pfx_sock_ioctl+0x10/0x10 [ 2730.391002][ T29] __se_sys_ioctl+0xfc/0x170 [ 2730.395703][ T29] do_syscall_64+0xf9/0x240 [ 2730.400254][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2730.406371][ T29] RIP: 0033:0x7fa258b37d49 [ 2730.410811][ T29] RSP: 002b:00007ffc0d53b088 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2730.419311][ T29] RAX: ffffffffffffffda RBX: 00007fa258a696c0 RCX: 00007fa258b37d49 [ 2730.427352][ T29] RDX: 00007ffc0d54b278 RSI: 0000000000008914 RDI: 0000000000000018 [ 2730.435950][ T29] RBP: 00007ffc0d55b438 R08: 00007ffc0d54b238 R09: 00007ffc0d54b1e8 [ 2730.444018][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2730.452136][ T29] R13: 00007ffc0d54b278 R14: 0000000000000028 R15: 0000000000008914 [ 2730.460161][ T29] [ 2730.463342][ T29] INFO: task kworker/0:0:17337 blocked for more than 143 seconds. [ 2730.471280][ T29] Not tainted 6.8.0-syzkaller #0 [ 2730.476758][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2730.485495][ T29] task:kworker/0:0 state:D stack:21744 pid:17337 tgid:17337 ppid:2 flags:0x00004000 [ 2730.495732][ T29] Workqueue: events linkwatch_event [ 2730.500944][ T29] Call Trace: [ 2730.504291][ T29] [ 2730.507266][ T29] __schedule+0x17d1/0x49f0 [ 2730.512037][ T29] ? __pfx___schedule+0x10/0x10 [ 2730.516946][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2730.523062][ T29] ? __pfx_lock_release+0x10/0x10 [ 2730.528131][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2730.533523][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 2730.539120][ T29] ? schedule+0x8e/0x260 [ 2730.543493][ T29] schedule+0x149/0x260 [ 2730.547692][ T29] schedule_preempt_disabled+0x13/0x30 [ 2730.553234][ T29] __mutex_lock+0x6a3/0xd70 [ 2730.557767][ T29] ? __mutex_lock+0x526/0xd70 [ 2730.562519][ T29] ? linkwatch_event+0xe/0x60 [ 2730.567253][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2730.572364][ T29] ? process_scheduled_works+0x825/0x1420 [ 2730.578123][ T29] linkwatch_event+0xe/0x60 [ 2730.582718][ T29] process_scheduled_works+0x913/0x1420 [ 2730.588319][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 2730.594436][ T29] ? assign_work+0x364/0x3d0 [ 2730.599067][ T29] worker_thread+0xa5f/0x1000 [ 2730.603832][ T29] ? __pfx_worker_thread+0x10/0x10 [ 2730.609015][ T29] kthread+0x2ef/0x390 [ 2730.613377][ T29] ? __pfx_worker_thread+0x10/0x10 [ 2730.618552][ T29] ? __pfx_kthread+0x10/0x10 [ 2730.623372][ T29] ret_from_fork+0x4b/0x80 [ 2730.627836][ T29] ? __pfx_kthread+0x10/0x10 [ 2730.632495][ T29] ret_from_fork_asm+0x1b/0x30 [ 2730.637353][ T29] [ 2730.640806][ T29] INFO: task kworker/0:2:15708 blocked for more than 143 seconds. [ 2730.648724][ T29] Not tainted 6.8.0-syzkaller #0 [ 2730.654314][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2730.663071][ T29] task:kworker/0:2 state:D stack:21360 pid:15708 tgid:15708 ppid:2 flags:0x00004000 [ 2730.673410][ T29] Workqueue: ipv6_addrconf addrconf_verify_work [ 2730.679692][ T29] Call Trace: [ 2730.683026][ T29] [ 2730.685982][ T29] __schedule+0x17d1/0x49f0 [ 2730.690520][ T29] ? __pfx___schedule+0x10/0x10 [ 2730.695566][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2730.701625][ T29] ? __pfx_lock_release+0x10/0x10 [ 2730.706713][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2730.712040][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 2730.717280][ T29] ? schedule+0x8e/0x260 [ 2730.721597][ T29] schedule+0x149/0x260 [ 2730.725763][ T29] schedule_preempt_disabled+0x13/0x30 [ 2730.731442][ T29] __mutex_lock+0x6a3/0xd70 [ 2730.735987][ T29] ? __mutex_lock+0x526/0xd70 [ 2730.740691][ T29] ? addrconf_verify_work+0x19/0x30 [ 2730.746575][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2730.751752][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2730.757781][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2730.764205][ T29] ? process_scheduled_works+0x825/0x1420 [ 2730.769954][ T29] addrconf_verify_work+0x19/0x30 [ 2730.775109][ T29] process_scheduled_works+0x913/0x1420 [ 2730.780718][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 2730.786771][ T29] ? assign_work+0x364/0x3d0 [ 2730.791535][ T29] worker_thread+0xa5f/0x1000 [ 2730.796345][ T29] ? __pfx_worker_thread+0x10/0x10 [ 2730.801565][ T29] kthread+0x2ef/0x390 [ 2730.805677][ T29] ? __pfx_worker_thread+0x10/0x10 [ 2730.810810][ T29] ? __pfx_kthread+0x10/0x10 [ 2730.815534][ T29] ret_from_fork+0x4b/0x80 [ 2730.820017][ T29] ? __pfx_kthread+0x10/0x10 [ 2730.824706][ T29] ret_from_fork_asm+0x1b/0x30 [ 2730.829512][ T29] [ 2730.832729][ T29] INFO: task syz-executor.1:32541 blocked for more than 143 seconds. [ 2730.840813][ T29] Not tainted 6.8.0-syzkaller #0 [ 2730.846879][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2730.855655][ T29] task:syz-executor.1 state:D stack:26960 pid:32541 tgid:32536 ppid:5116 flags:0x00004006 [ 2730.865963][ T29] Call Trace: [ 2730.869307][ T29] [ 2730.872308][ T29] __schedule+0x17d1/0x49f0 [ 2730.877059][ T29] ? __pfx___schedule+0x10/0x10 [ 2730.882009][ T29] ? __pfx_lock_release+0x10/0x10 [ 2730.887094][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2730.892663][ T29] ? schedule+0x8e/0x260 [ 2730.896945][ T29] schedule+0x149/0x260 [ 2730.901188][ T29] schedule_preempt_disabled+0x13/0x30 [ 2730.906684][ T29] __mutex_lock+0x6a3/0xd70 [ 2730.911278][ T29] ? __mutex_lock+0x526/0xd70 [ 2730.915992][ T29] ? rtnetlink_rcv_msg+0x82c/0x1040 [ 2730.921274][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2730.926331][ T29] rtnetlink_rcv_msg+0x82c/0x1040 [ 2730.931550][ T29] ? rtnetlink_rcv_msg+0x208/0x1040 [ 2730.936789][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2730.942333][ T29] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2730.948875][ T29] ? __pfx_validate_chain+0x10/0x10 [ 2730.954299][ T29] ? __pfx_validate_chain+0x10/0x10 [ 2730.959542][ T29] ? mark_lock+0x9a/0x350 [ 2730.963927][ T29] ? __pfx_validate_chain+0x10/0x10 [ 2730.969150][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 2730.974326][ T29] ? mark_lock+0x9a/0x350 [ 2730.978683][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 2730.983795][ T29] netlink_rcv_skb+0x1e3/0x430 [ 2730.988588][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2730.994137][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2730.999493][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 2731.004817][ T29] netlink_unicast+0x7ea/0x980 [ 2731.009634][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 2731.015001][ T29] ? __virt_addr_valid+0x44e/0x520 [ 2731.020145][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 2731.025268][ T29] ? __check_object_size+0x4bb/0xa00 [ 2731.030582][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 2731.035801][ T29] netlink_sendmsg+0xa3b/0xd70 [ 2731.040700][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2731.046100][ T29] ? __fget_files+0x28/0x470 [ 2731.051112][ T29] ? aa_sock_msg_perm+0x91/0x160 [ 2731.056097][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2731.061705][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 2731.067219][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2731.072607][ T29] __sock_sendmsg+0x221/0x270 [ 2731.077322][ T29] __sys_sendto+0x3a4/0x4f0 [ 2731.081905][ T29] ? __pfx___sys_sendto+0x10/0x10 [ 2731.086995][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2731.093288][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2731.099660][ T29] ? exc_page_fault+0x587/0x870 [ 2731.104633][ T29] __x64_sys_sendto+0xde/0x100 [ 2731.109439][ T29] do_syscall_64+0xf9/0x240 [ 2731.114027][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2731.119959][ T29] RIP: 0033:0x7f9ce0c7fa9c [ 2731.124504][ T29] RSP: 002b:00007f9ce197bf60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2731.133018][ T29] RAX: ffffffffffffffda RBX: 00007f9ce197c050 RCX: 00007f9ce0c7fa9c [ 2731.141091][ T29] RDX: 0000000000000020 RSI: 00007f9ce197c0a0 RDI: 0000000000000006 [ 2731.149098][ T29] RBP: 0000000000000000 R08: 00007f9ce197bfb4 R09: 000000000000000c [ 2731.157583][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2731.165795][ T29] R13: 00007f9ce197c008 R14: 00007f9ce197c0a0 R15: 0000000000000000 [ 2731.174327][ T29] [ 2731.177542][ T29] INFO: task syz-executor.1:32545 blocked for more than 144 seconds. [ 2731.190544][ T29] Not tainted 6.8.0-syzkaller #0 [ 2731.196152][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2731.205062][ T29] task:syz-executor.1 state:D stack:26768 pid:32545 tgid:32536 ppid:5116 flags:0x00004006 [ 2731.215451][ T29] Call Trace: [ 2731.218762][ T29] [ 2731.221931][ T29] __schedule+0x17d1/0x49f0 [ 2731.226508][ T29] ? __pfx___schedule+0x10/0x10 [ 2731.231532][ T29] ? __pfx_lock_release+0x10/0x10 [ 2731.236596][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2731.243782][ T29] ? schedule+0x8e/0x260 [ 2731.248073][ T29] schedule+0x149/0x260 [ 2731.252572][ T29] schedule_preempt_disabled+0x13/0x30 [ 2731.258083][ T29] __mutex_lock+0x6a3/0xd70 [ 2731.262805][ T29] ? __mutex_lock+0x526/0xd70 [ 2731.267534][ T29] ? rtnetlink_rcv_msg+0x82c/0x1040 [ 2731.272913][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2731.277996][ T29] rtnetlink_rcv_msg+0x82c/0x1040 [ 2731.283246][ T29] ? rtnetlink_rcv_msg+0x208/0x1040 [ 2731.288488][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2731.294256][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2731.300277][ T29] ? __pfx_validate_chain+0x10/0x10 [ 2731.305665][ T29] ? __pfx_validate_chain+0x10/0x10 [ 2731.310896][ T29] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2731.316234][ T29] ? finish_task_switch+0x1e5/0x850 [ 2731.321612][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 2731.326838][ T29] ? finish_task_switch+0x1e5/0x850 [ 2731.332417][ T29] ? __schedule+0x17d9/0x49f0 [ 2731.337133][ T29] ? mark_lock+0x9a/0x350 [ 2731.341683][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 2731.346759][ T29] netlink_rcv_skb+0x1e3/0x430 [ 2731.353206][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2731.358718][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2731.364205][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 2731.369434][ T29] netlink_unicast+0x7ea/0x980 [ 2731.374427][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 2731.379757][ T29] ? __virt_addr_valid+0x44e/0x520 [ 2731.385081][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 2731.390141][ T29] ? __check_object_size+0x4bb/0xa00 [ 2731.395548][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 2731.400693][ T29] netlink_sendmsg+0xa3b/0xd70 [ 2731.405661][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2731.410990][ T29] ? __import_iovec+0x536/0x820 [ 2731.416031][ T29] ? aa_sock_msg_perm+0x91/0x160 [ 2731.421008][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2731.426502][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 2731.432123][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2731.437445][ T29] __sock_sendmsg+0x221/0x270 [ 2731.442328][ T29] ____sys_sendmsg+0x525/0x7d0 [ 2731.447133][ T29] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2731.452692][ T29] __sys_sendmsg+0x2b0/0x3a0 [ 2731.457321][ T29] ? __pfx___sys_sendmsg+0x10/0x10 [ 2731.463747][ T29] ? restore_fpregs_from_fpstate+0x100/0x250 [ 2731.469774][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2731.476214][ T29] ? do_syscall_64+0x108/0x240 [ 2731.481008][ T29] ? do_syscall_64+0xb4/0x240 [ 2731.485858][ T29] do_syscall_64+0xf9/0x240 [ 2731.490389][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2731.496570][ T29] RIP: 0033:0x7f9ce0c7dda9 [ 2731.501016][ T29] RSP: 002b:00007f9ce195c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2731.509616][ T29] RAX: ffffffffffffffda RBX: 00007f9ce0dac050 RCX: 00007f9ce0c7dda9 [ 2731.517708][ T29] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2731.525823][ T29] RBP: 00007f9ce0cca47a R08: 0000000000000000 R09: 0000000000000000 [ 2731.533959][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2731.542132][ T29] R13: 000000000000006e R14: 00007f9ce0dac050 R15: 00007f9ce0ecfa48 [ 2731.550152][ T29] [ 2731.555005][ T29] INFO: task syz-executor.1:32550 blocked for more than 144 seconds. [ 2731.563488][ T29] Not tainted 6.8.0-syzkaller #0 [ 2731.569051][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2731.578841][ T29] task:syz-executor.1 state:D stack:26768 pid:32550 tgid:32536 ppid:5116 flags:0x00004006 [ 2731.589224][ T29] Call Trace: [ 2731.592568][ T29] [ 2731.595547][ T29] __schedule+0x17d1/0x49f0 [ 2731.600097][ T29] ? __pfx___schedule+0x10/0x10 [ 2731.605156][ T29] ? __pfx_lock_release+0x10/0x10 [ 2731.610223][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2731.615829][ T29] ? schedule+0x8e/0x260 [ 2731.620096][ T29] schedule+0x149/0x260 [ 2731.624456][ T29] schedule_preempt_disabled+0x13/0x30 [ 2731.629945][ T29] __mutex_lock+0x6a3/0xd70 [ 2731.634558][ T29] ? __mutex_lock+0x526/0xd70 [ 2731.639271][ T29] ? rtnetlink_rcv_msg+0x82c/0x1040 [ 2731.644724][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2731.649885][ T29] rtnetlink_rcv_msg+0x82c/0x1040 [ 2731.655168][ T29] ? rtnetlink_rcv_msg+0x208/0x1040 [ 2731.660404][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2731.666134][ T29] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2731.672449][ T29] ? __pfx_validate_chain+0x10/0x10 [ 2731.677687][ T29] ? __pfx_validate_chain+0x10/0x10 [ 2731.684562][ T29] ? mark_lock+0x9a/0x350 [ 2731.688947][ T29] ? __pfx_validate_chain+0x10/0x10 [ 2731.697489][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 2731.702625][ T29] ? mark_lock+0x9a/0x350 [ 2731.706960][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 2731.712201][ T29] netlink_rcv_skb+0x1e3/0x430 [ 2731.717004][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2731.722665][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2731.728011][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 2731.733391][ T29] netlink_unicast+0x7ea/0x980 [ 2731.738202][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 2731.743633][ T29] ? __virt_addr_valid+0x44e/0x520 [ 2731.748798][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 2731.753946][ T29] ? __check_object_size+0x4bb/0xa00 [ 2731.759267][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 2731.764454][ T29] netlink_sendmsg+0xa3b/0xd70 [ 2731.769637][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2731.775064][ T29] ? __import_iovec+0x536/0x820 [ 2731.779939][ T29] ? aa_sock_msg_perm+0x91/0x160 [ 2731.784994][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2731.790323][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 2731.795873][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2731.801227][ T29] __sock_sendmsg+0x221/0x270 [ 2731.805957][ T29] ____sys_sendmsg+0x525/0x7d0 [ 2731.810778][ T29] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2731.816172][ T29] __sys_sendmsg+0x2b0/0x3a0 [ 2731.820801][ T29] ? __pfx___sys_sendmsg+0x10/0x10 [ 2731.826029][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2731.832007][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2731.838348][ T29] ? do_syscall_64+0x108/0x240 [ 2731.843200][ T29] ? do_syscall_64+0xb4/0x240 [ 2731.847917][ T29] do_syscall_64+0xf9/0x240 [ 2731.852644][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2731.858583][ T29] RIP: 0033:0x7f9ce0c7dda9 [ 2731.863060][ T29] RSP: 002b:00007f9ce193b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2731.871878][ T29] RAX: ffffffffffffffda RBX: 00007f9ce0dac120 RCX: 00007f9ce0c7dda9 [ 2731.880013][ T29] RDX: 0000000000000000 RSI: 0000000020005840 RDI: 0000000000000003 [ 2731.888083][ T29] RBP: 00007f9ce0cca47a R08: 0000000000000000 R09: 0000000000000000 [ 2731.896104][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2731.904147][ T29] R13: 000000000000006e R14: 00007f9ce0dac120 R15: 00007f9ce0ecfa48 [ 2731.912274][ T29] [ 2731.915347][ T29] INFO: task syz-executor.2:32540 blocked for more than 145 seconds. [ 2731.923497][ T29] Not tainted 6.8.0-syzkaller #0 [ 2731.929016][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2731.937748][ T29] task:syz-executor.2 state:D stack:27184 pid:32540 tgid:32537 ppid:5113 flags:0x00004006 [ 2731.947979][ T29] Call Trace: [ 2731.951354][ T29] [ 2731.954318][ T29] __schedule+0x17d1/0x49f0 [ 2731.958877][ T29] ? __pfx___schedule+0x10/0x10 [ 2731.963999][ T29] ? __pfx_lock_release+0x10/0x10 [ 2731.969065][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2731.975167][ T29] ? schedule+0x8e/0x260 [ 2731.979454][ T29] schedule+0x149/0x260 [ 2731.983689][ T29] schedule_preempt_disabled+0x13/0x30 [ 2731.989184][ T29] __mutex_lock+0x6a3/0xd70 [ 2731.993871][ T29] ? __mutex_lock+0x526/0xd70 [ 2731.998572][ T29] ? rtnetlink_rcv_msg+0x82c/0x1040 [ 2732.003840][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2732.008902][ T29] rtnetlink_rcv_msg+0x82c/0x1040 [ 2732.014033][ T29] ? rtnetlink_rcv_msg+0x208/0x1040 [ 2732.019270][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2732.024809][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2732.030823][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2732.037223][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 2732.042720][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 2732.047953][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 2732.053443][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2732.058604][ T29] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2732.064429][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2732.069584][ T29] ? __dev_queue_xmit+0x15fd/0x3b10 [ 2732.075424][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2732.080589][ T29] ? ref_tracker_free+0x643/0x7e0 [ 2732.085731][ T29] netlink_rcv_skb+0x1e3/0x430 [ 2732.090523][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2732.096047][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2732.101474][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 2732.106707][ T29] netlink_unicast+0x7ea/0x980 [ 2732.111563][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 2732.116876][ T29] ? __virt_addr_valid+0x44e/0x520 [ 2732.122148][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 2732.127217][ T29] ? __check_object_size+0x4bb/0xa00 [ 2732.132767][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 2732.137939][ T29] netlink_sendmsg+0xa3b/0xd70 [ 2732.142798][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2732.148111][ T29] ? __fget_files+0x28/0x470 [ 2732.152789][ T29] ? aa_sock_msg_perm+0x91/0x160 [ 2732.157777][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2732.163155][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 2732.168646][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2732.174041][ T29] __sock_sendmsg+0x221/0x270 [ 2732.179220][ T29] __sys_sendto+0x3a4/0x4f0 [ 2732.183948][ T29] ? __pfx___sys_sendto+0x10/0x10 [ 2732.189025][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2732.195074][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2732.201494][ T29] ? exc_page_fault+0x587/0x870 [ 2732.206380][ T29] __x64_sys_sendto+0xde/0x100 [ 2732.211888][ T29] do_syscall_64+0xf9/0x240 [ 2732.216461][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2732.222482][ T29] RIP: 0033:0x7ff2bc47fa9c [ 2732.226918][ T29] RSP: 002b:00007ff2bd27af60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2732.235414][ T29] RAX: ffffffffffffffda RBX: 00007ff2bd27b050 RCX: 00007ff2bc47fa9c [ 2732.243489][ T29] RDX: 0000000000000020 RSI: 00007ff2bd27b0a0 RDI: 0000000000000006 [ 2732.251582][ T29] RBP: 0000000000000000 R08: 00007ff2bd27afb4 R09: 000000000000000c [ 2732.259621][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2732.267673][ T29] R13: 00007ff2bd27b008 R14: 00007ff2bd27b0a0 R15: 0000000000000000 [ 2732.275739][ T29] [ 2732.279129][ T29] INFO: task syz-executor.2:32546 blocked for more than 145 seconds. [ 2732.287311][ T29] Not tainted 6.8.0-syzkaller #0 [ 2732.293060][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2732.302335][ T29] task:syz-executor.2 state:D stack:26768 pid:32546 tgid:32537 ppid:5113 flags:0x00004006 [ 2732.313095][ T29] Call Trace: [ 2732.316431][ T29] [ 2732.319383][ T29] __schedule+0x17d1/0x49f0 [ 2732.324499][ T29] ? __pfx___schedule+0x10/0x10 [ 2732.329379][ T29] ? __pfx_lock_release+0x10/0x10 [ 2732.334645][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2732.340156][ T29] ? schedule+0x8e/0x260 [ 2732.344623][ T29] schedule+0x149/0x260 [ 2732.348832][ T29] schedule_preempt_disabled+0x13/0x30 [ 2732.354447][ T29] __mutex_lock+0x6a3/0xd70 [ 2732.359068][ T29] ? __mutex_lock+0x526/0xd70 [ 2732.363818][ T29] ? rtnetlink_rcv_msg+0x82c/0x1040 [ 2732.369053][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2732.374435][ T29] rtnetlink_rcv_msg+0x82c/0x1040 [ 2732.379504][ T29] ? rtnetlink_rcv_msg+0x208/0x1040 [ 2732.385200][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2732.390700][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2732.396738][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2732.403294][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 2732.408699][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 2732.413988][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 2732.419416][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2732.424670][ T29] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2732.430497][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2732.435759][ T29] ? __dev_queue_xmit+0x15fd/0x3b10 [ 2732.440999][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2732.446307][ T29] ? ref_tracker_free+0x643/0x7e0 [ 2732.451490][ T29] netlink_rcv_skb+0x1e3/0x430 [ 2732.456293][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2732.461887][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2732.467222][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 2732.472525][ T29] netlink_unicast+0x7ea/0x980 [ 2732.477520][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 2732.485237][ T29] ? __virt_addr_valid+0x44e/0x520 [ 2732.490411][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 2732.495922][ T29] ? __check_object_size+0x4bb/0xa00 [ 2732.501312][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 2732.506434][ T29] netlink_sendmsg+0xa3b/0xd70 [ 2732.511424][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2732.516754][ T29] ? __import_iovec+0x536/0x820 [ 2732.521679][ T29] ? aa_sock_msg_perm+0x91/0x160 [ 2732.526634][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2732.532220][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 2732.537734][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2732.543747][ T29] __sock_sendmsg+0x221/0x270 [ 2732.548491][ T29] ____sys_sendmsg+0x525/0x7d0 [ 2732.553640][ T29] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2732.558956][ T29] __sys_sendmsg+0x2b0/0x3a0 [ 2732.564048][ T29] ? __pfx___sys_sendmsg+0x10/0x10 [ 2732.569216][ T29] ? restore_fpregs_from_fpstate+0x100/0x250 [ 2732.575574][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2732.582236][ T29] ? do_syscall_64+0x108/0x240 [ 2732.587640][ T29] ? do_syscall_64+0xb4/0x240 [ 2732.592699][ T29] do_syscall_64+0xf9/0x240 [ 2732.597231][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2732.603651][ T29] RIP: 0033:0x7ff2bc47dda9 [ 2732.608111][ T29] RSP: 002b:00007ff2bd25b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2732.616955][ T29] RAX: ffffffffffffffda RBX: 00007ff2bc5ac050 RCX: 00007ff2bc47dda9 [ 2732.625361][ T29] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2732.633664][ T29] RBP: 00007ff2bc4ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2732.641990][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2732.649990][ T29] R13: 000000000000006e R14: 00007ff2bc5ac050 R15: 00007ff2bc6cfa48 [ 2732.658365][ T29] [ 2732.663729][ T29] INFO: task syz-executor.2:32549 blocked for more than 145 seconds. [ 2732.672129][ T29] Not tainted 6.8.0-syzkaller #0 [ 2732.677612][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2732.686551][ T29] task:syz-executor.2 state:D stack:26768 pid:32549 tgid:32537 ppid:5113 flags:0x00004006 [ 2732.696964][ T29] Call Trace: [ 2732.700245][ T29] [ 2732.703300][ T29] __schedule+0x17d1/0x49f0 [ 2732.707864][ T29] ? __pfx___schedule+0x10/0x10 [ 2732.712901][ T29] ? __pfx_lock_release+0x10/0x10 [ 2732.717964][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2732.723564][ T29] ? schedule+0x8e/0x260 [ 2732.727846][ T29] schedule+0x149/0x260 [ 2732.732246][ T29] schedule_preempt_disabled+0x13/0x30 [ 2732.737736][ T29] __mutex_lock+0x6a3/0xd70 [ 2732.742337][ T29] ? __mutex_lock+0x526/0xd70 [ 2732.747034][ T29] ? rtnetlink_rcv_msg+0x82c/0x1040 [ 2732.752413][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2732.757473][ T29] rtnetlink_rcv_msg+0x82c/0x1040 [ 2732.762610][ T29] ? rtnetlink_rcv_msg+0x208/0x1040 [ 2732.767841][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2732.773953][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2732.779989][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2732.788078][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 2732.793637][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 2732.798885][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 2732.804375][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2732.809515][ T29] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2732.815467][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2732.820620][ T29] ? __dev_queue_xmit+0x15fd/0x3b10 [ 2732.825933][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2732.831247][ T29] ? ref_tracker_free+0x643/0x7e0 [ 2732.836321][ T29] netlink_rcv_skb+0x1e3/0x430 [ 2732.841203][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2732.846695][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2732.852276][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 2732.857531][ T29] netlink_unicast+0x7ea/0x980 [ 2732.862401][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 2732.867722][ T29] ? __virt_addr_valid+0x44e/0x520 [ 2732.873038][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 2732.878100][ T29] ? __check_object_size+0x4bb/0xa00 [ 2732.883495][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 2732.888637][ T29] netlink_sendmsg+0xa3b/0xd70 [ 2732.895184][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2732.900538][ T29] ? __import_iovec+0x536/0x820 [ 2732.905484][ T29] ? aa_sock_msg_perm+0x91/0x160 [ 2732.910465][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2732.915911][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 2732.921466][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2732.926784][ T29] __sock_sendmsg+0x221/0x270 [ 2732.931789][ T29] ____sys_sendmsg+0x525/0x7d0 [ 2732.936611][ T29] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2732.942022][ T29] __sys_sendmsg+0x2b0/0x3a0 [ 2732.946642][ T29] ? __pfx___sys_sendmsg+0x10/0x10 [ 2732.952035][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2732.957990][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2732.964436][ T29] ? do_syscall_64+0x108/0x240 [ 2732.969325][ T29] ? do_syscall_64+0xb4/0x240 [ 2732.974220][ T29] do_syscall_64+0xf9/0x240 [ 2732.978767][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2732.984835][ T29] RIP: 0033:0x7ff2bc47dda9 [ 2732.989275][ T29] RSP: 002b:00007ff2bd23a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2732.997889][ T29] RAX: ffffffffffffffda RBX: 00007ff2bc5ac120 RCX: 00007ff2bc47dda9 [ 2733.007042][ T29] RDX: 0000000000000000 RSI: 0000000020005840 RDI: 0000000000000003 [ 2733.015229][ T29] RBP: 00007ff2bc4ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2733.023326][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2733.031483][ T29] R13: 000000000000006e R14: 00007ff2bc5ac120 R15: 00007ff2bc6cfa48 [ 2733.039497][ T29] [ 2733.042723][ T29] INFO: task syz-executor.4:32567 blocked for more than 146 seconds. [ 2733.050822][ T29] Not tainted 6.8.0-syzkaller #0 [ 2733.056803][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2733.065574][ T29] task:syz-executor.4 state:D stack:26480 pid:32567 tgid:32567 ppid:1 flags:0x00004006 [ 2733.075932][ T29] Call Trace: [ 2733.079235][ T29] [ 2733.082269][ T29] __schedule+0x17d1/0x49f0 [ 2733.086828][ T29] ? __pfx___schedule+0x10/0x10 [ 2733.091969][ T29] ? __pfx_lock_release+0x10/0x10 [ 2733.097033][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2733.102624][ T29] ? schedule+0x8e/0x260 [ 2733.106896][ T29] schedule+0x149/0x260 [ 2733.112647][ T29] schedule_preempt_disabled+0x13/0x30 [ 2733.118139][ T29] __mutex_lock+0x6a3/0xd70 [ 2733.122716][ T29] ? __mutex_lock+0x526/0xd70 [ 2733.127412][ T29] ? smc_pnet_net_init+0x10a/0x1e0 [ 2733.132796][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2733.137844][ T29] ? __register_sysctl_table+0x1383/0x1440 [ 2733.143828][ T29] ? __raw_spin_lock_init+0x45/0x100 [ 2733.149182][ T29] smc_pnet_net_init+0x10a/0x1e0 [ 2733.154215][ T29] ops_init+0x352/0x610 [ 2733.158418][ T29] setup_net+0x4d1/0xbc0 [ 2733.162931][ T29] ? __pfx_setup_net+0x10/0x10 [ 2733.167860][ T29] copy_net_ns+0x4e3/0x7b0 [ 2733.179938][ T29] create_new_namespaces+0x425/0x7b0 [ 2733.185663][ T29] ? bpf_lsm_capable+0x9/0x10 [ 2733.190376][ T29] unshare_nsproxy_namespaces+0x122/0x180 [ 2733.197611][ T29] ksys_unshare+0x616/0xc00 [ 2733.202924][ T29] ? __pfx_ksys_unshare+0x10/0x10 [ 2733.207987][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2733.214059][ T29] ? do_syscall_64+0x108/0x240 [ 2733.218924][ T29] __x64_sys_unshare+0x38/0x40 [ 2733.223796][ T29] do_syscall_64+0xf9/0x240 [ 2733.228365][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2733.234405][ T29] RIP: 0033:0x7fe4b667f507 [ 2733.238845][ T29] RSP: 002b:00007fe4b68cff88 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 2733.247322][ T29] RAX: ffffffffffffffda RBX: 00007fe4b66ca5f7 RCX: 00007fe4b667f507 [ 2733.255680][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2733.263930][ T29] RBP: 0000000000000000 R08: 00007fe4b72db660 R09: 0000000000000000 [ 2733.272012][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc73087728 [ 2733.280010][ T29] R13: 0000000000000003 R14: 00007fe4b67ac9d8 R15: 000000000000000c [ 2733.288062][ T29] [ 2733.291143][ T29] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 2733.300227][ T29] [ 2733.300227][ T29] Showing all locks held in the system: [ 2733.311620][ T29] 1 lock held by khungtaskd/29: [ 2733.316513][ T29] #0: ffffffff8e130be0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2733.326851][ T29] 1 lock held by dhcpcd/4733: [ 2733.333224][ T29] #0: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 2733.342823][ T29] 2 locks held by getty/4827: [ 2733.347515][ T29] #0: ffff88802a8c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2733.357447][ T29] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 2733.367757][ T29] 3 locks held by kworker/0:0/17337: [ 2733.373187][ T29] #0: ffff888014c78938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.384297][ T29] #1: ffffc90004bcfd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.395417][ T29] #2: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 2733.404550][ T29] 3 locks held by kworker/u4:5/23082: [ 2733.409946][ T29] #0: ffff8880b953c958 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2733.420274][ T29] #1: ffff8880b9528988 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 2733.431914][ T29] #2: ffff8880b9529898 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 2733.442798][ T29] 3 locks held by kworker/0:5/4339: [ 2733.448047][ T29] #0: ffff888014c78938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.459252][ T29] #1: ffffc90014defd20 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.470434][ T29] #2: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 2733.481079][ T29] 3 locks held by kworker/0:2/15708: [ 2733.486400][ T29] #0: ffff888029a76938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.498146][ T29] #1: ffffc9001350fd20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.512056][ T29] #2: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 2733.521651][ T29] 3 locks held by kworker/1:0/22829: [ 2733.526953][ T29] #0: ffff888029a76938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.538741][ T29] #1: ffffc9000cf67d20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.553703][ T29] #2: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 2733.563305][ T29] 2 locks held by kworker/0:1/28640: [ 2733.568610][ T29] #0: ffff888014c7a538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.580008][ T29] #1: ffffc900097bfd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.592211][ T29] 5 locks held by kworker/u4:1/32303: [ 2733.597574][ T29] #0: ffff888015ea4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.608512][ T29] #1: ffffc900095d7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2733.619265][ T29] #2: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf5/0xb90 [ 2733.628702][ T29] #3: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe8/0x9d0 [ 2733.638893][ T29] #4: ffffffff8e136578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a3/0x890 [ 2733.649899][ T29] 1 lock held by syz-executor.1/32541: [ 2733.655545][ T29] #0: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 2733.666667][ T29] 1 lock held by syz-executor.1/32545: [ 2733.672246][ T29] #0: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 2733.681861][ T29] 1 lock held by syz-executor.1/32550: [ 2733.687342][ T29] #0: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 2733.697026][ T29] 1 lock held by syz-executor.2/32540: [ 2733.702560][ T29] #0: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 2733.712269][ T29] 1 lock held by syz-executor.2/32546: [ 2733.717742][ T29] #0: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 2733.727318][ T29] 1 lock held by syz-executor.2/32549: [ 2733.732992][ T29] #0: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 2733.742590][ T29] 2 locks held by syz-executor.4/32567: [ 2733.748143][ T29] #0: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2733.757740][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2733.767237][ T29] 2 locks held by syz-executor.0/32587: [ 2733.774556][ T29] #0: ffffffff8f3d99b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2733.782933][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 2733.792456][ T29] 1 lock held by syz-executor.3/32608: [ 2733.797926][ T29] #0: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: ip_rt_ioctl+0xea/0x1750 [ 2733.807027][ T29] 2 locks held by syz-executor.1/32616: [ 2733.813472][ T29] #0: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2733.822961][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2733.832606][ T29] 2 locks held by syz-executor.2/32618: [ 2733.838197][ T29] #0: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2733.847659][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2733.857262][ T29] 2 locks held by syz-executor.0/32621: [ 2733.862926][ T29] #0: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2733.872500][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2733.882630][ T29] 2 locks held by syz-executor.3/32625: [ 2733.888216][ T29] #0: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2733.897832][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2733.910534][ T29] 2 locks held by syz-executor.4/32629: [ 2733.916222][ T29] #0: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2733.925772][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2733.935347][ T29] 2 locks held by syz-executor.1/32634: [ 2733.940914][ T29] #0: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2733.950489][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2733.960011][ T29] 2 locks held by syz-executor.2/32637: [ 2733.965660][ T29] #0: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2733.975251][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2733.984809][ T29] 2 locks held by syz-executor.0/32640: [ 2733.990368][ T29] #0: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2734.000093][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2734.011272][ T29] 2 locks held by syz-executor.3/32644: [ 2734.016858][ T29] #0: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2734.026350][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2734.035879][ T29] 2 locks held by syz-executor.4/32650: [ 2734.041544][ T29] #0: ffffffff8f3698d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2734.051213][ T29] #1: ffffffff8f375e48 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2734.060930][ T29] [ 2734.064619][ T29] ============================================= [ 2734.064619][ T29] [ 2734.075161][ T29] NMI backtrace for cpu 0 [ 2734.079517][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-syzkaller #0 [ 2734.087224][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2734.097273][ T29] Call Trace: [ 2734.100544][ T29] [ 2734.103495][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 2734.108183][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2734.113399][ T29] ? __pfx__printk+0x10/0x10 [ 2734.118015][ T29] ? vprintk_emit+0x607/0x720 [ 2734.122708][ T29] ? __pfx_vprintk_emit+0x10/0x10 [ 2734.127755][ T29] nmi_cpu_backtrace+0x49c/0x4d0 [ 2734.132710][ T29] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2734.138185][ T29] ? _printk+0xd5/0x120 [ 2734.142348][ T29] ? __pfx__printk+0x10/0x10 [ 2734.146936][ T29] ? __wake_up_klogd+0xcc/0x110 [ 2734.151792][ T29] ? __pfx__printk+0x10/0x10 [ 2734.156402][ T29] ? __rcu_read_unlock+0xa0/0x110 [ 2734.161427][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2734.167417][ T29] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2734.173541][ T29] watchdog+0xfaf/0xff0 [ 2734.177730][ T29] ? watchdog+0x1e9/0xff0 [ 2734.182092][ T29] ? __pfx_watchdog+0x10/0x10 [ 2734.186790][ T29] kthread+0x2ef/0x390 [ 2734.190874][ T29] ? __pfx_watchdog+0x10/0x10 [ 2734.195568][ T29] ? __pfx_kthread+0x10/0x10 [ 2734.200253][ T29] ret_from_fork+0x4b/0x80 [ 2734.204686][ T29] ? __pfx_kthread+0x10/0x10 [ 2734.209283][ T29] ret_from_fork_asm+0x1b/0x30 [ 2734.214071][ T29] [ 2734.217818][ T29] Sending NMI from CPU 0 to CPUs 1: [ 2734.223102][ C1] NMI backtrace for cpu 1 [ 2734.223114][ C1] CPU: 1 PID: 23082 Comm: kworker/u4:5 Not tainted 6.8.0-syzkaller #0 [ 2734.223132][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2734.223142][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 2734.223244][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 2734.223275][ C1] Code: aa 8b 48 c7 c6 e0 d8 aa 8b e8 ec 53 f0 f5 90 0f 0b 90 90 90 eb c6 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 31 c0 83 3d 7b 48 1e 04 00 74 1d 83 3d a6 7a 1e 04 00 [ 2734.223289][ C1] RSP: 0018:ffffc900138f79f8 EFLAGS: 00000296 [ 2734.223302][ C1] RAX: 5d08717d8e202700 RBX: 000000000000008a RCX: 0000000000000001 [ 2734.223314][ C1] RDX: dffffc0000000000 RSI: ffffffff8baac7a0 RDI: ffffffff8bfe6ca0 [ 2734.223327][ C1] RBP: ffffc900138f7b38 R08: ffffffff92c8f427 R09: 1ffffffff2591e84 [ 2734.223346][ C1] R10: dffffc0000000000 R11: fffffbfff2591e85 R12: ffff8880110b8000 [ 2734.223359][ C1] R13: ffff88802da57a40 R14: dffffc0000000000 R15: ffff888031a40450 [ 2734.223372][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 2734.223386][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2734.223398][ C1] CR2: 0000558416d2c030 CR3: 000000000df32000 CR4: 00000000003506f0 [ 2734.223413][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2734.223423][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2734.223434][ C1] Call Trace: [ 2734.223441][ C1] [ 2734.223448][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2734.223468][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2734.223495][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2734.223514][ C1] ? nmi_handle+0x2a/0x580 [ 2734.223546][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2734.223566][ C1] ? nmi_handle+0x14f/0x580 [ 2734.223581][ C1] ? nmi_handle+0x2a/0x580 [ 2734.223597][ C1] ? __pfx_debug_lockdep_rcu_enabled+0x10/0x10 [ 2734.223622][ C1] ? default_do_nmi+0x63/0x160 [ 2734.223642][ C1] ? exc_nmi+0x123/0x1f0 [ 2734.223660][ C1] ? end_repeat_nmi+0xf/0x60 [ 2734.223684][ C1] ? __pfx_debug_lockdep_rcu_enabled+0x10/0x10 [ 2734.223710][ C1] ? __pfx_debug_lockdep_rcu_enabled+0x10/0x10 [ 2734.223737][ C1] ? __pfx_debug_lockdep_rcu_enabled+0x10/0x10 [ 2734.223762][ C1] [ 2734.223767][ C1] [ 2734.223772][ C1] batadv_iv_ogm_schedule+0x448/0x1090 [ 2734.223801][ C1] ? batadv_iv_ogm_schedule+0x41e/0x1090 [ 2734.223828][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 2734.223856][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2734.223883][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810 [ 2734.223918][ C1] ? process_scheduled_works+0x825/0x1420 [ 2734.223945][ C1] process_scheduled_works+0x913/0x1420 [ 2734.223986][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2734.224016][ C1] ? assign_work+0x364/0x3d0 [ 2734.224045][ C1] worker_thread+0xa5f/0x1000 [ 2734.224082][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2734.224108][ C1] kthread+0x2ef/0x390 [ 2734.224125][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2734.224150][ C1] ? __pfx_kthread+0x10/0x10 [ 2734.224168][ C1] ret_from_fork+0x4b/0x80 [ 2734.224191][ C1] ? __pfx_kthread+0x10/0x10 [ 2734.224209][ C1] ret_from_fork_asm+0x1b/0x30 [ 2734.224254][ C1] [ 2734.558838][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2734.565746][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-syzkaller #0 [ 2734.573487][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 2734.583553][ T29] Call Trace: [ 2734.586838][ T29] [ 2734.589775][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 2734.594474][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2734.599685][ T29] ? __pfx__printk+0x10/0x10 [ 2734.604291][ T29] ? vscnprintf+0x5d/0x90 [ 2734.608630][ T29] panic+0x349/0x860 [ 2734.612537][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2734.618700][ T29] ? __pfx_panic+0x10/0x10 [ 2734.623131][ T29] ? tick_nohz_tick_stopped+0x7b/0xc0 [ 2734.628527][ T29] ? __irq_work_queue_local+0x137/0x3e0 [ 2734.634088][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 2734.639470][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2734.645631][ T29] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2734.651795][ T29] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2734.657954][ T29] watchdog+0xfee/0xff0 [ 2734.662136][ T29] ? watchdog+0x1e9/0xff0 [ 2734.666483][ T29] ? __pfx_watchdog+0x10/0x10 [ 2734.671170][ T29] kthread+0x2ef/0x390 [ 2734.675239][ T29] ? __pfx_watchdog+0x10/0x10 [ 2734.679944][ T29] ? __pfx_kthread+0x10/0x10 [ 2734.684537][ T29] ret_from_fork+0x4b/0x80 [ 2734.688959][ T29] ? __pfx_kthread+0x10/0x10 [ 2734.693554][ T29] ret_from_fork_asm+0x1b/0x30 [ 2734.698346][ T29] [ 2734.701675][ T29] Kernel Offset: disabled [ 2734.706004][ T29] Rebooting in 86400 seconds..