Warning: Permanently added '[localhost]:8015' (ECDSA) to the list of known hosts. 2022/05/31 04:28:27 fuzzer started 2022/05/31 04:28:27 dialing manager at localhost:42047 syzkaller login: [ 46.270806] cgroup: Unknown subsys name 'net' [ 46.337693] cgroup: Unknown subsys name 'rlimit' 2022/05/31 04:28:43 syscalls: 209 2022/05/31 04:28:43 code coverage: enabled 2022/05/31 04:28:43 comparison tracing: enabled 2022/05/31 04:28:43 extra coverage: enabled 2022/05/31 04:28:43 setuid sandbox: enabled 2022/05/31 04:28:43 namespace sandbox: enabled 2022/05/31 04:28:43 Android sandbox: enabled 2022/05/31 04:28:43 fault injection: enabled 2022/05/31 04:28:43 leak checking: enabled 2022/05/31 04:28:43 net packet injection: enabled 2022/05/31 04:28:43 net device setup: enabled 2022/05/31 04:28:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/05/31 04:28:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/05/31 04:28:43 USB emulation: enabled 2022/05/31 04:28:43 hci packet injection: enabled 2022/05/31 04:28:43 wifi device emulation: enabled 2022/05/31 04:28:43 802.15.4 emulation: enabled 2022/05/31 04:28:43 fetching corpus: 0, signal 0/0 (executing program) 2022/05/31 04:28:44 starting 8 fuzzer processes 04:28:44 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) r4 = msgget(0x2, 0x100) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000600)=""/222) msgget$private(0x0, 0x200) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x81) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000840)=""/4096) 04:28:44 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}}, 0x800) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) mount_setattr(r9, &(0x7f0000000580)='./file1\x00', 0x100, &(0x7f00000005c0)={0x84, 0x81, 0x0, {r4}}, 0x20) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9077}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf001}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x69, 0xbe, "e6512625a2c481835b10e9356e781f5c50c0ad9760b3f3809afdce228a8e408c79537f82d97b0951130182858965501c949365fcf007e93d6c4e9dd5551b3396f23d0084906d25b4414dc5af1aacc3ab9d8d92a8f69ff69fa168764d039f1298f366236ec3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000000780), 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000008c0)={0x0, 0x5}) 04:28:44 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r8, {0xffff}}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r10, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 04:28:44 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000480)={0xd76, 0x7}) clock_nanosleep(0x3, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) sendmsg$802154_raw(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000680)={&(0x7f0000000580)="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", 0xff}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000700)=0x6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:28:44 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = fork() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb0, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_IE={0x85, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0xe2}, @random={0x8b, 0x74, "dbd14177eaca46b391bb415a69a5a6c3aa50c803285e861b74a1529bd0619fb5f5add2b6db493d574f5d7448e0f99f6c873889b031e286e7e03e35556c82f6b59e4352016e1781112c1e14375a605b8b9aa36c2289abd71556fcb750675191f0f96d76b05cdfe153dd6c840dfdde64f667d5f6c7"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000041) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r9, {0x6e52}}, './file0\x00'}) 04:28:44 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0x6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r10, {0x9, 0x3}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000880)={{0x1, 0x1, 0x18, r10, {0x8}}, './file1\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r12, &(0x7f0000002100)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000940)={0x174c, r13, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x48, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x158, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x13c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xf4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe3, 0xb, "4e6cbb30bd61000a83288681b217f7f0ad4a8ea624cc39e12842fa407b6f10c2e6f52cedcd7f1ec9582761bb47dd49438c426455889198f0e1e962f4b3bcccd44b0b13c007ac48764f3924f52de66c8fad915278dfbdd2c2211d3ccaf5c5da20762858e753331bd6c8239542829e8b3f63bb2594a23b2eff3b1972092bb3e790b6af8e510e60b98d1e615686c1513c61393d890ccab859c4af01adca40866082d6169b7d23c1966eec1325e75e4b6fa8a86acfe414a779ab9fa995437ae2c9fb63d2e400968f324b56e684ed65fb270d45b9001af025dc3f14ba777f951b0c"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x132c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x148, 0xe, 0x0, 0x1, [{0xe1, 0x0, "1d40d771f25ce4f65bfc715a0f1aa32a1f11dca11b0b95fca88f185d036bf85b61bd76837706ad9c0315bcbb4db90d20f0de1fcf4a4beacf702663cc8e505110d29cffa4c549b2a94203ecfebaa8858e49522e9bc018b0043ebfc872c8ff515710d36ac0f3583abd8247393d6305aa9d0ba09d9f4b0de5acf4016bc247cc447a12f142287633d0dd3d97f67c8c0cea1222c3acf5d8d75f207fd94e119ff72865941cdcb9cf3dd76a7f77fe824caf9b65075cc2febadea88a139e628ccc5b197c7c7fd3ed7334a0c34e9853ad80cc3ae683ccc932515da1fa3edf82d9c5"}, {0x60, 0x0, "0edb83e7da8f441dd7a49e54b68b7a6a18a34490e26d21ab25e02b6995020f1a88f9e860dcd8ebefee6ccf4e990c1a9658a8b915b13ca138f08fe45e1a823d1b35ff1f9b743dad5c69492ef06d941564771a312a7b8ab2faa5faf1dd"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x11dc, 0xd, 0x0, 0x1, [{0x1004, 0x0, "f10706b2394a800e71d3a682cd4bca64c03af49a49494ea95b833456deba582b734f81ae68f4ed1ed62f9dc3e75414829bcc8ac680c85b322fa3917e88ad019969c1d6b7cd5b8c4b275a6792629b29fec4aa26a30edf84c9cff485cd1215a154e559fac539f8de7c99aff2a5dd65805a080bb7613e72443da1365bfd172de8d33efb2f183c5bad27dd360df14fc9ba62148af98deb0ad9059edc907934ff28e2809e6259f0606a52881dcafbefa8ce38dab3c67f0e6d38ca33f316b84cd9d35d4feba789b3106a2b914266dfe06d4d41d412fc3425cf698a32f7d56c6230954757adb0b722148da9b2029eb6ff77cd3dd468f0a62acb0359d74d739fe7d7d7a46ceebdda78ac7657b6c6b4d3403d770fefc8a12243f8289d4e494499dfb1422660329403b4ed746ebb37254f6174b600bb8bac841a614f4edc4db315c994f017975787d87f8ee84b114e73dbca737d72c0cd8d65071e6c5fe826ff2cdb14446c02b0a9e14c936dce1cfd9045e5c219e013aeccc3c48a4fee4f036fe5fd182302a142481b67e80f4fde3ed5a70bfdd9ddd5aabd76e480d5bf18205e842520a6f8f90b068699d51cfbc84bd26950931fa7bccfb0025018c6ff6f65d69a38c7124db0d836122fa9d33f27f5f2d197f464e6fbb27774e4cc8de6ab652fd91380319bd928c07d0160b5ec56fc2927c9042ad327da8775a551db1405c1de219dd906115bab0c8efbe0567ec4f0f1b82fca45f85092cfe9440daf86723ec09c331c1662fede357071dd054234a6f2fdae90ede35e50c27962ce70b18af03744ebd5b1645d24d5db7587f665b25367e43f451fa2113c5178b638cb8d6a6e8cc0768d216e7ac680c7af882cdd328ea9cc78a67805a6f64bf32b9a3cc95150536eff3eee8d2f945d34b7b2a9261eedc6573a119abece2c08c8e3c21b3ef36fbc5e540d97439eab618ad271cbfd197fb2c0204f1f6ba320af14651d9febef4d19e57ef2e80500b694eafa2e955fae620bb400b8211a59683a748573e7747682f30afe80c8a3e22acab3cf92f46a1db9577fa2cde34626d3b5ab87da6554c9e6755e26f1e7ab72893377d510a36431d0bcceca6c12e1c4212a1bfc33aa8971dba83e92032795e3f81c82f9ae3941c8d81ea00a815eea74fb125a40da6737390913552d44d845910f08e58def7722b328a736bcb81386cd4ecaffa678e1cdb326f34fbb17e98b91cf17c9252c8f82541f41ccfeee9c10371be9c3bfd7267b277728887ebacdd9383bf9ffe19f08f70076a0b5e2b63fa919dc18779607008573d10290eb2b29311655048756cc0e2c8d674b87d1d27f57102c1068a93ed1b42319ac8ed565bc211c4c02fba8d3ebbbe97f92ffa798d3fbb3cc7a59754a1de5631e4708cc23bbc25da183a15d94c3c5b34c29fe08d85d9e4d9fa1af33a5510d8a7b3e7c9f49c6dc512c5a4e80a3d52da09b4fc6f24698a37b228c84909b0f13ca086bf595dcbac3bafb345ac4d073d17f64ac4033f6ea23475b6c014e8694e5a6f8b131213b1d3812347813baf6c7bd346330dc5a5817ff201884ae3668037de4914a4510c3c96e31daddc5dffcf6a6bda4de231a010f3a1e60b85bd7d5b202c114bc75e814509aee6d8c5ba1c51a5a221974d6196c9d2c2afab45cce515093e837bb8b8a941a9dceeeb88dff8c6db3d8dbb641d50bcd3b6e67cebbbf2259799a1928c214f341f91e91f3c0f1d51c0342cce524354e6b631767402d96e49c3d0c3dee923e9625028f1101320b1e703bd22975821a66e28aef656a676478d3b6356faa7e0b9f1cfc4aae2a7321ffa26a8d3c3c5eccbeb469fc0041bf6b208fc57bba80ceb8da4b995a100c87b225fbbe75d5bc6baeb6f7132bf46fb9cdab45e954726eabc0fb9acc4e110e3c9343f0b19efd7754ff0481430bc7e0ffee204b90a4aac257cd41048989548f5abedacd354ea15f14b123a48e905cf5daf98a86688166e370264296f3323ae2b10910167bdadfb4c6f747ffc49601c7cd3508fc5363356ea21bf1b12e3b32df424c467404bb906e77449d1ae7eb99ed5e06e05921d9cb2b7258bf965f0a8531f4e74fa5ad98dce526b0b00478150854b2971751437b6b5564df0227a39e116721cc9edc9db4acf2d0497d403edfa88897390ca3e40dd4ba61ad4498f8e0f4edc13372a5601e80f77c518bf72c285a17d3b1f2b3c68339cb12c389e0d0b6fefbe99357db78450eb928678bd6ff65d46981d1d00a5edcbdde888f697954b5ae96cd4e9071f8367e7176831e9ae86cefc141e1e4517a2ddc7a179dc5e0d370661561a3c44eec2bf470b59d66e47fab15d81ff6cded973db997f5f16be75e89c4b6b9ab6c5c05cc2da616671066dd4e9f3b31389ef6bc738c11d502147f11f90e1582c3fcc631b79411c8fb32f1d246c0e016aa50c3589605d57f3b0d0c4bc1c95fcd5bfd8617c6b8ef457368fab5bfc3e109c99a5166c15452ce3b004bf2e6a263f677b271735def426fd07c2f519e536e35721d31c5d46f387d64631b0e2d98368723a7bf7cbfc416906c7b7f0760aeafade48dec3f7a46430b6f928515be1b1b08a9cdf5f693695e00602eecf838f62c91ce3094e8b633a0f7bf8c8e65116706759f420cdc88523ff8ef71f468ba1f15fa452147a668e0fd7d159f1ae4979663e240844fdeb76a3b47d6512fddd3b2268181328ac9a6acc32990e9ff3f8fb89d8b45f18b626df92445abe97e1252f87e8365f056b1783bd8671202ddb4ef5cdbce75285094baebe011d984588bd8d90e03a20f8d6bdb79ebdf0affbc7a26d61a9ff1788512faf61a87a3df9b9ca8b6a45858e265087ea9281588095c2cefa275eb1adf152c45761b49153ac5e1f4ad6f98fe7405d5a8cc925d6082ab6b847e95ba7be622ed5543e77d1a7e4b07a71bf73c687dc89848ea366e4f03da8a8d92a397fc893b841c5f6cf3bc730b9a1d13cdb31ffa117161e8cd3d0387d28a0a9f18f930abcd4895a803ea75ffcb6e0e99ff408143261ab042b4ec3c886ad45ca7e1496dea8265275f5d4e080ccc423fae6915d4f44ad318827cffd0b622e5dccf9cb9d95dabcfd760d42ab566e96514f9396f5b4f50681f4b82b4af243d33c1e9c6cc14d6e98c30eab15c85acea49a4b09ebdb3c6a37e7135037dd6ba57c8f1ee3ab1c7f1fbb85f4b2f8945ef7f6890fef5116dde0fc3cb91eb0bf28a3d25615e704fc5b5e8323525c09026eee6abcc2bd4ad89109c89b8574b1e5e954bbef009303395c5a5bd6aba958d8f5154f12b6595400a3f3fb8f32bc3228a27ca0dd006e9533aef958f503730a9d749b99a4d6e9b6c314eeffdd96f2ea7f40766f13c81094565916d6e61a3579eba32d971dd78d48b166271a2b8ce25684e900ef807442122e840bfe5dec6d22168bc8fcb820c54c5d6592afcab6a6bcde18e228b5d5ab712e3caeadd3c7683dd2ebcaf5adb08616ae96d456103785793b644cbfacc1a6fd9b1682cd8bb5e437126a38cf853d6e30cee5c7c516d2d67c7fca09081df0893df4102a45be8ad7cd9cf05982b7a1770bce452baa2652275bf72452e0f202d893a03f8417dbdf0d796f4719c901edfe2d63f1b66616d0e8cd29203a2d607a8fa49d6daa55774996825a2b6202498fe0dd34323308137569a9f8d4bcc7ac7460486b88f5139ae0db2660126c373c4745f4135a0f71338794cb8b33376a93dc259b54c477b3573f5b844e1b9e95b9fac1a07ba6b67163bf300b820659e5def733250713950c7e69f4b40e79997b514fe818aa0b0d907d01435222442461c5d25a3514e11de475c185e2741ec28409e2b0dd70df43b4cc60ab487640147b9faf4029216b7b6da0a0762cd9382b2d993cb5bf01cd882dd1b6f4b80f99077e99f342051f671c1a3b1cb7c70d4c9e2d030491d67d38bd5bddd65ac4c90f2ea74fb16d0491990219202394c2a255caa4209599de58a536160c83fa486ba32a55d79e4abf7ac29a8964b1f6b127f7d4c4786a665ad0f7a58168c77173ee0fa7f1113d3b0d5c43fdc90cd66dfe08e0db35c78bd577164c8521dcb9918a5f03f4b24d135c324f61ed22d38f80973a69ade43d4116fe3c5e8d0348cbf1316d92d77d964cfdfafcd6028d1d1d081900a7457c9c285b33c8fb1f143f2a9c2d667b2a767bcfd51bb7935402a3f00be0d6cdddd938af992d59f3e0eb8b68ac0522ea7dd65c1a77173687b639cef1ea86fb93d722531ce7f19f588596fa8306fb15da17bb91eb5ee4331dbbe60a3ee91b33c885cfaf5f3faf6aa216d6d0e1c985dfef754402ae85c0032be6912346142db093f4dc67d5d81bab75ef2240b5acd036ef156775d78334f4eb62c1dbf0bb1cb2a472af8345df09a53297b15c4b3e668b210fe2b4f1a85a6afb4d541c40851e7447825fa29838f95277fe141b342255225bd1dd48a02f85b6aa545100da2300c168dd06904b40b033f5d7f403cc4cb9c764970e6ebcf5b46bd6a3f45cdf4e4b5cdf95110d872a223d2fde15f286b6f0fdbd6ef1f10c70b6bcce1eb9f50a50fc4fd2b256cdc1b3e875b714878a48cb87241e3861a55e4aede1c1a7382ad6fcea10c18037c12dbaf2bded0929e90f0d6c9d5589b6298641ff152464f3f0ff471574bf4578fb89f3f8ff30ae38e75d911b5f682a5b920994548088969ca856c44d94a2737f26b38bf69f56e0a2f1ce8e8a6dc50f947ba7ff098726d39fd2b6e27618621cbea43b8684f27d093488c0b8bab5ba230ca2d54aee70b14cd2ce14123bb3195e02f756c8159318571b3a67155e2d92fed2111facca8254811e47b006d4aaed0ff262e28e882aecc060d4fb129ea3fbceb4a4eafabb72ce7f4ca5fa8d74a19c290f78d507d6ac01581cbbde433c4af4d0b65e388476762ae8daec5074bfe1c8f3368dc67386f331ffeb639694a00044950f7a1a03f35a52e9f8071adff5f0c20265b2bc5c774c6ed4e0041c086a8cf83f1674cf28b7c8b07a2636f1180e13e2c215de74ba1aea2438942e9d1cad809f25c148c095ab9c43434228f34e77e93d3152fb2b26ee4871742205445bf7281278df999dcab28e4590afa4ec558a2e44e762b163999e520cbdde22d9b1f840201dbe99f32fb992be63137371dbfc834b89c26bd274b59087882db49799f22b285d50a17d16db4189b97a514e84c5e2226f66a7e93b58307186d1c3e4803db3c04475c9f61773639dbe9c619017d543269b420a73e4affe0a8fdb97d46108a5a18eedf1113f62c1f955645d40fcb783dd54735e8721e6ee643f040f1ea5a71bb3a63be6ad5c2a315782f0c596976618dd4b354abaca47f93256fdb453c4a75a87d07122a860b85df06331cf4267653a22194c9daee155e7a6c67cacfdf215bb82d4b3125f2b66e908ee3dae7f896c8042e5e392fcb91b62b0dadd9af48a628611aee6b1461908bfffa9aef8f23e7cb8a84a4a0d549088af876f89bea248f2dfa80b00e90352beb2c700becd69ef26a795a919388dfc1efa40f75a71148d3b54ad971bdbf037054e2724307488d53e94aea784143d73a622223cab48efc8f28af1b6eb1ea6e2b27f14015998a65aa8afd07ee8b1508b09f07cd2376d1a5acd9f66333e27456255513aed4defaa102411f3a48634c936d28b29149fdb629f1a5a82af6592fb41b44b7f7276b405e350941bb6092e65358716f1c867fbd8354b51d791e01045764d16787efcf831d87633839749462a7f1cc9b61d2f00128ea26a1ae8677522156770d081b2cd11bdd3debec9528995d62ea8e8f451d4332f89a11542500"}, {0xe9, 0x0, "ca8e1e87aea7b24888761a30dbd657784efadbb015ccb74f7cecf09261c593929ada67ad6a06cd591bde985a31e4cd2fb5b2f4bea177fb5cd66e1e9de3998623d93104dbf8c667896008246f2ee7f76c2492984d0700d511d8e4111eefff1fbc2c1d1979e79f7477254784eb83544cf3ce234335aaeaad8bd8f08ebd10a2dc8539045a94916de0919389f10ac0af2ece95891e589ac4b4c7f5455f34b94785c449375de5038813cc9e9574ece438235c251466b44439710d891800f35e8a914c58e39f803ad7871fd299c63f4e56457965406d1693a7e17c261886a759d41162f2a6a7ffcd"}, {0xe7, 0x0, "6eea71903cbbfd490c172c8c99774faa00fe5c017863bd9b9e86ba93866ec4a9d1ad7eee945c54a6d45bd12350304f9ba1a13c60b55eab6bef0127696ed8e346c6dfa7bf4000f964aa47cec6befba54d038a11a0755c129099ed54697c2abb0f9dea2f9ac494d0b2e04c8120288278cb1d8600b9e7f2061421bb35d28b59b678ba5b267af896b4c8073e091499f42834d7ba166f80bcfebbfae2271464071c6b796e7fff46ebfae016a36747b8b9035049f47b1592a0119dd1acab840f9f3f3689376f1c69a88ffdc65a742c372f3a4f7fe3180b2a6372bf9fcc5ece3678fc142d08a4"}]}]}, @NL80211_ATTR_NAN_FUNC={0x118, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x20, 0xb, "64a46af34e433b0f18d5c71cc489641a158287a3abef5dd1f0724852"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x4c, 0xb, "34e3688a6a4d35ce55d8e1915356ce7095e93d5921db6fb0ff8dc5ad29114f551c4c2429f1e2355b89a5e4fd499309fb16319c6c17ec4d0a1c5e5a99e8351fcd481c2636c5250bb2"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_INFO={0x79, 0xb, "7244d66eb5d2c08e099ee49e366ef3799b5a23713a763a095d070623201cffbb0e6acfd118c227c077dc7382b633a9ebd8ac8095e784515478378ed896c5a877adf9e9a35c76bf3b033764fef887b5f449b60b5a0f698bd23eaa8083cb63ca6246b20da5617445bfcecb9372007c6c9cd6d4cd9cbc"}]}, @NL80211_ATTR_NAN_FUNC={0x40, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "1dcea4bf4358"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8428}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x174c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) 04:28:44 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xefdc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan4\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:28:44 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) ptrace$getregs(0xe, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=""/151) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x18108000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x51}}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c1}, 0x800) r7 = syz_open_dev$vcsu(&(0x7f0000000540), 0x80000000, 0x80000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, r8, 0xee01, r9, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) [ 61.281374] audit: type=1400 audit(1653971324.075:6): avc: denied { execmem } for pid=289 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 62.361690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.362198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.362564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.372103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.372777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.375933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.418020] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.423247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.424597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.433809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.435760] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.438346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.484854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.506826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.507188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.513571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.516139] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.516511] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.518740] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.519417] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.522097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.522726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.533586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.533943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.538432] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.538630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.547624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.547863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.548021] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.553362] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 62.555136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 62.555823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 62.558611] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 62.561009] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 62.561471] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 62.605069] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.639356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.639500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.642462] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.643030] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.654818] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 62.656790] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 62.656878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 62.659853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.660190] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.660375] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.666034] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.688861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.449942] Bluetooth: hci0: command 0x0409 tx timeout [ 64.513030] Bluetooth: hci1: command 0x0409 tx timeout [ 64.576710] Bluetooth: hci3: command 0x0409 tx timeout [ 64.640703] Bluetooth: hci7: command 0x0409 tx timeout [ 64.704768] Bluetooth: hci5: command 0x0409 tx timeout [ 64.768752] Bluetooth: hci6: command 0x0409 tx timeout [ 64.768770] Bluetooth: hci4: command 0x0409 tx timeout [ 64.832727] Bluetooth: hci2: command 0x0409 tx timeout [ 66.498562] Bluetooth: hci0: command 0x041b tx timeout [ 66.561691] Bluetooth: hci1: command 0x041b tx timeout [ 66.625675] Bluetooth: hci3: command 0x041b tx timeout [ 66.689680] Bluetooth: hci7: command 0x041b tx timeout [ 66.752692] Bluetooth: hci5: command 0x041b tx timeout [ 66.817703] Bluetooth: hci4: command 0x041b tx timeout [ 66.817785] Bluetooth: hci6: command 0x041b tx timeout [ 66.880912] Bluetooth: hci2: command 0x041b tx timeout [ 68.544713] Bluetooth: hci0: command 0x040f tx timeout [ 68.609699] Bluetooth: hci1: command 0x040f tx timeout [ 68.673725] Bluetooth: hci3: command 0x040f tx timeout [ 68.737677] Bluetooth: hci7: command 0x040f tx timeout [ 68.801734] Bluetooth: hci5: command 0x040f tx timeout [ 68.866151] Bluetooth: hci6: command 0x040f tx timeout [ 68.866223] Bluetooth: hci4: command 0x040f tx timeout [ 68.929735] Bluetooth: hci2: command 0x040f tx timeout [ 70.593845] Bluetooth: hci0: command 0x0419 tx timeout [ 70.657680] Bluetooth: hci1: command 0x0419 tx timeout [ 70.720742] Bluetooth: hci3: command 0x0419 tx timeout [ 70.785747] Bluetooth: hci7: command 0x0419 tx timeout [ 70.848675] Bluetooth: hci5: command 0x0419 tx timeout [ 70.913695] Bluetooth: hci4: command 0x0419 tx timeout [ 70.913745] Bluetooth: hci6: command 0x0419 tx timeout [ 70.976752] Bluetooth: hci2: command 0x0419 tx timeout [ 84.390990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.391009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.392806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.645799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.645818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.648108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.660972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.660990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.662223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.786415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.786435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.788260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.908811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.908829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.910622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.960541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.960553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.962582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.006535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.006547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.008338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.232083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.232130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.234407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.274218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.274237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.307741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.441235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.441253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.442874] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 04:29:08 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000480)={0xd76, 0x7}) clock_nanosleep(0x3, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) sendmsg$802154_raw(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000680)={&(0x7f0000000580)="23327084719f74a0a1be53a4f890ca080090f3ff7645d5d122f6457339d320bdafc79d3b558c8c504db025f0db8c862f42672ebaef041e06bb70f8f9354dff7516b3c79c83afe6b0cfad01cb297f2bef17d57008b3d32b74dac7a5d0ff7a00191e074d5900f47ec9c753409f63732bc5095c8af4bdc87cff262edd5eff33acc6d77a0b37034962f6a0a9d18fcdcaf7d79e71047f7e20778e007acaadee47f16c6464862afed36484f30ef7c3bd25887b57fa5d065c95323009982188bc99b237917b7f7e25d5e96962784ecf311f126b465f2b5425d39af9f11c2da928fb1c9175e1f3846975a0ff276fd9616eae2698ac5645c183080dd96cc269a288b303", 0xff}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000700)=0x6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:29:08 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000480)={0xd76, 0x7}) clock_nanosleep(0x3, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) sendmsg$802154_raw(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000680)={&(0x7f0000000580)="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", 0xff}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000700)=0x6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:29:08 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000480)={0xd76, 0x7}) clock_nanosleep(0x3, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) sendmsg$802154_raw(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000680)={&(0x7f0000000580)="23327084719f74a0a1be53a4f890ca080090f3ff7645d5d122f6457339d320bdafc79d3b558c8c504db025f0db8c862f42672ebaef041e06bb70f8f9354dff7516b3c79c83afe6b0cfad01cb297f2bef17d57008b3d32b74dac7a5d0ff7a00191e074d5900f47ec9c753409f63732bc5095c8af4bdc87cff262edd5eff33acc6d77a0b37034962f6a0a9d18fcdcaf7d79e71047f7e20778e007acaadee47f16c6464862afed36484f30ef7c3bd25887b57fa5d065c95323009982188bc99b237917b7f7e25d5e96962784ecf311f126b465f2b5425d39af9f11c2da928fb1c9175e1f3846975a0ff276fd9616eae2698ac5645c183080dd96cc269a288b303", 0xff}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000700)=0x6) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) [ 85.570563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.570577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.572390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.615889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.615909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.617214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.629160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.629171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.631267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 04:29:08 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0x6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r10, {0x9, 0x3}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000880)={{0x1, 0x1, 0x18, r10, {0x8}}, './file1\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r12, &(0x7f0000002100)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000940)={0x174c, r13, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x48, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x158, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x13c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xf4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe3, 0xb, "4e6cbb30bd61000a83288681b217f7f0ad4a8ea624cc39e12842fa407b6f10c2e6f52cedcd7f1ec9582761bb47dd49438c426455889198f0e1e962f4b3bcccd44b0b13c007ac48764f3924f52de66c8fad915278dfbdd2c2211d3ccaf5c5da20762858e753331bd6c8239542829e8b3f63bb2594a23b2eff3b1972092bb3e790b6af8e510e60b98d1e615686c1513c61393d890ccab859c4af01adca40866082d6169b7d23c1966eec1325e75e4b6fa8a86acfe414a779ab9fa995437ae2c9fb63d2e400968f324b56e684ed65fb270d45b9001af025dc3f14ba777f951b0c"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x132c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x148, 0xe, 0x0, 0x1, [{0xe1, 0x0, "1d40d771f25ce4f65bfc715a0f1aa32a1f11dca11b0b95fca88f185d036bf85b61bd76837706ad9c0315bcbb4db90d20f0de1fcf4a4beacf702663cc8e505110d29cffa4c549b2a94203ecfebaa8858e49522e9bc018b0043ebfc872c8ff515710d36ac0f3583abd8247393d6305aa9d0ba09d9f4b0de5acf4016bc247cc447a12f142287633d0dd3d97f67c8c0cea1222c3acf5d8d75f207fd94e119ff72865941cdcb9cf3dd76a7f77fe824caf9b65075cc2febadea88a139e628ccc5b197c7c7fd3ed7334a0c34e9853ad80cc3ae683ccc932515da1fa3edf82d9c5"}, {0x60, 0x0, "0edb83e7da8f441dd7a49e54b68b7a6a18a34490e26d21ab25e02b6995020f1a88f9e860dcd8ebefee6ccf4e990c1a9658a8b915b13ca138f08fe45e1a823d1b35ff1f9b743dad5c69492ef06d941564771a312a7b8ab2faa5faf1dd"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x11dc, 0xd, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0xe9, 0x0, "ca8e1e87aea7b24888761a30dbd657784efadbb015ccb74f7cecf09261c593929ada67ad6a06cd591bde985a31e4cd2fb5b2f4bea177fb5cd66e1e9de3998623d93104dbf8c667896008246f2ee7f76c2492984d0700d511d8e4111eefff1fbc2c1d1979e79f7477254784eb83544cf3ce234335aaeaad8bd8f08ebd10a2dc8539045a94916de0919389f10ac0af2ece95891e589ac4b4c7f5455f34b94785c449375de5038813cc9e9574ece438235c251466b44439710d891800f35e8a914c58e39f803ad7871fd299c63f4e56457965406d1693a7e17c261886a759d41162f2a6a7ffcd"}, {0xe7, 0x0, "6eea71903cbbfd490c172c8c99774faa00fe5c017863bd9b9e86ba93866ec4a9d1ad7eee945c54a6d45bd12350304f9ba1a13c60b55eab6bef0127696ed8e346c6dfa7bf4000f964aa47cec6befba54d038a11a0755c129099ed54697c2abb0f9dea2f9ac494d0b2e04c8120288278cb1d8600b9e7f2061421bb35d28b59b678ba5b267af896b4c8073e091499f42834d7ba166f80bcfebbfae2271464071c6b796e7fff46ebfae016a36747b8b9035049f47b1592a0119dd1acab840f9f3f3689376f1c69a88ffdc65a742c372f3a4f7fe3180b2a6372bf9fcc5ece3678fc142d08a4"}]}]}, @NL80211_ATTR_NAN_FUNC={0x118, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x20, 0xb, "64a46af34e433b0f18d5c71cc489641a158287a3abef5dd1f0724852"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x4c, 0xb, "34e3688a6a4d35ce55d8e1915356ce7095e93d5921db6fb0ff8dc5ad29114f551c4c2429f1e2355b89a5e4fd499309fb16319c6c17ec4d0a1c5e5a99e8351fcd481c2636c5250bb2"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_INFO={0x79, 0xb, "7244d66eb5d2c08e099ee49e366ef3799b5a23713a763a095d070623201cffbb0e6acfd118c227c077dc7382b633a9ebd8ac8095e784515478378ed896c5a877adf9e9a35c76bf3b033764fef887b5f449b60b5a0f698bd23eaa8083cb63ca6246b20da5617445bfcecb9372007c6c9cd6d4cd9cbc"}]}, @NL80211_ATTR_NAN_FUNC={0x40, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "1dcea4bf4358"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8428}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x174c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) 04:29:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}}, 0x800) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) mount_setattr(r9, &(0x7f0000000580)='./file1\x00', 0x100, &(0x7f00000005c0)={0x84, 0x81, 0x0, {r4}}, 0x20) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9077}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf001}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x69, 0xbe, "e6512625a2c481835b10e9356e781f5c50c0ad9760b3f3809afdce228a8e408c79537f82d97b0951130182858965501c949365fcf007e93d6c4e9dd5551b3396f23d0084906d25b4414dc5af1aacc3ab9d8d92a8f69ff69fa168764d039f1298f366236ec3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000000780), 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000008c0)={0x0, 0x5}) 04:29:08 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000480)={0xd76, 0x7}) clock_nanosleep(0x3, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) sendmsg$802154_raw(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000680)={&(0x7f0000000580)="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", 0xff}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000700)=0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) [ 85.730761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.730773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.731886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 04:29:08 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000480)={0xd76, 0x7}) clock_nanosleep(0x3, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) sendmsg$802154_raw(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000680)={&(0x7f0000000580)="23327084719f74a0a1be53a4f890ca080090f3ff7645d5d122f6457339d320bdafc79d3b558c8c504db025f0db8c862f42672ebaef041e06bb70f8f9354dff7516b3c79c83afe6b0cfad01cb297f2bef17d57008b3d32b74dac7a5d0ff7a00191e074d5900f47ec9c753409f63732bc5095c8af4bdc87cff262edd5eff33acc6d77a0b37034962f6a0a9d18fcdcaf7d79e71047f7e20778e007acaadee47f16c6464862afed36484f30ef7c3bd25887b57fa5d065c95323009982188bc99b237917b7f7e25d5e96962784ecf311f126b465f2b5425d39af9f11c2da928fb1c9175e1f3846975a0ff276fd9616eae2698ac5645c183080dd96cc269a288b303", 0xff}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000700)=0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:29:08 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000480)={0xd76, 0x7}) clock_nanosleep(0x3, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) sendmsg$802154_raw(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000680)={&(0x7f0000000580)="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", 0xff}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000700)=0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) [ 85.821329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.821342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.840857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.892652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.892665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.893280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 04:29:25 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}}, 0x800) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) mount_setattr(r9, &(0x7f0000000580)='./file1\x00', 0x100, &(0x7f00000005c0)={0x84, 0x81, 0x0, {r4}}, 0x20) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9077}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf001}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x69, 0xbe, "e6512625a2c481835b10e9356e781f5c50c0ad9760b3f3809afdce228a8e408c79537f82d97b0951130182858965501c949365fcf007e93d6c4e9dd5551b3396f23d0084906d25b4414dc5af1aacc3ab9d8d92a8f69ff69fa168764d039f1298f366236ec3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000000780), 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000008c0)={0x0, 0x5}) 04:29:25 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000480)={0xd76, 0x7}) clock_nanosleep(0x3, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) sendmsg$802154_raw(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000680)={&(0x7f0000000580)="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", 0xff}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:29:25 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r8, {0xffff}}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r10, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 04:29:25 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0x6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r10, {0x9, 0x3}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000880)={{0x1, 0x1, 0x18, r10, {0x8}}, './file1\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r12, &(0x7f0000002100)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000940)={0x174c, r13, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x48, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x158, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x13c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xf4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe3, 0xb, "4e6cbb30bd61000a83288681b217f7f0ad4a8ea624cc39e12842fa407b6f10c2e6f52cedcd7f1ec9582761bb47dd49438c426455889198f0e1e962f4b3bcccd44b0b13c007ac48764f3924f52de66c8fad915278dfbdd2c2211d3ccaf5c5da20762858e753331bd6c8239542829e8b3f63bb2594a23b2eff3b1972092bb3e790b6af8e510e60b98d1e615686c1513c61393d890ccab859c4af01adca40866082d6169b7d23c1966eec1325e75e4b6fa8a86acfe414a779ab9fa995437ae2c9fb63d2e400968f324b56e684ed65fb270d45b9001af025dc3f14ba777f951b0c"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x132c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x148, 0xe, 0x0, 0x1, [{0xe1, 0x0, "1d40d771f25ce4f65bfc715a0f1aa32a1f11dca11b0b95fca88f185d036bf85b61bd76837706ad9c0315bcbb4db90d20f0de1fcf4a4beacf702663cc8e505110d29cffa4c549b2a94203ecfebaa8858e49522e9bc018b0043ebfc872c8ff515710d36ac0f3583abd8247393d6305aa9d0ba09d9f4b0de5acf4016bc247cc447a12f142287633d0dd3d97f67c8c0cea1222c3acf5d8d75f207fd94e119ff72865941cdcb9cf3dd76a7f77fe824caf9b65075cc2febadea88a139e628ccc5b197c7c7fd3ed7334a0c34e9853ad80cc3ae683ccc932515da1fa3edf82d9c5"}, {0x60, 0x0, "0edb83e7da8f441dd7a49e54b68b7a6a18a34490e26d21ab25e02b6995020f1a88f9e860dcd8ebefee6ccf4e990c1a9658a8b915b13ca138f08fe45e1a823d1b35ff1f9b743dad5c69492ef06d941564771a312a7b8ab2faa5faf1dd"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x11dc, 0xd, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0xe9, 0x0, "ca8e1e87aea7b24888761a30dbd657784efadbb015ccb74f7cecf09261c593929ada67ad6a06cd591bde985a31e4cd2fb5b2f4bea177fb5cd66e1e9de3998623d93104dbf8c667896008246f2ee7f76c2492984d0700d511d8e4111eefff1fbc2c1d1979e79f7477254784eb83544cf3ce234335aaeaad8bd8f08ebd10a2dc8539045a94916de0919389f10ac0af2ece95891e589ac4b4c7f5455f34b94785c449375de5038813cc9e9574ece438235c251466b44439710d891800f35e8a914c58e39f803ad7871fd299c63f4e56457965406d1693a7e17c261886a759d41162f2a6a7ffcd"}, {0xe7, 0x0, "6eea71903cbbfd490c172c8c99774faa00fe5c017863bd9b9e86ba93866ec4a9d1ad7eee945c54a6d45bd12350304f9ba1a13c60b55eab6bef0127696ed8e346c6dfa7bf4000f964aa47cec6befba54d038a11a0755c129099ed54697c2abb0f9dea2f9ac494d0b2e04c8120288278cb1d8600b9e7f2061421bb35d28b59b678ba5b267af896b4c8073e091499f42834d7ba166f80bcfebbfae2271464071c6b796e7fff46ebfae016a36747b8b9035049f47b1592a0119dd1acab840f9f3f3689376f1c69a88ffdc65a742c372f3a4f7fe3180b2a6372bf9fcc5ece3678fc142d08a4"}]}]}, @NL80211_ATTR_NAN_FUNC={0x118, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x20, 0xb, "64a46af34e433b0f18d5c71cc489641a158287a3abef5dd1f0724852"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x4c, 0xb, "34e3688a6a4d35ce55d8e1915356ce7095e93d5921db6fb0ff8dc5ad29114f551c4c2429f1e2355b89a5e4fd499309fb16319c6c17ec4d0a1c5e5a99e8351fcd481c2636c5250bb2"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_INFO={0x79, 0xb, "7244d66eb5d2c08e099ee49e366ef3799b5a23713a763a095d070623201cffbb0e6acfd118c227c077dc7382b633a9ebd8ac8095e784515478378ed896c5a877adf9e9a35c76bf3b033764fef887b5f449b60b5a0f698bd23eaa8083cb63ca6246b20da5617445bfcecb9372007c6c9cd6d4cd9cbc"}]}, @NL80211_ATTR_NAN_FUNC={0x40, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "1dcea4bf4358"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8428}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x174c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) 04:29:25 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xefdc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan4\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:29:25 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = fork() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb0, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_IE={0x85, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0xe2}, @random={0x8b, 0x74, "dbd14177eaca46b391bb415a69a5a6c3aa50c803285e861b74a1529bd0619fb5f5add2b6db493d574f5d7448e0f99f6c873889b031e286e7e03e35556c82f6b59e4352016e1781112c1e14375a605b8b9aa36c2289abd71556fcb750675191f0f96d76b05cdfe153dd6c840dfdde64f667d5f6c7"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000041) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r9, {0x6e52}}, './file0\x00'}) 04:29:25 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) ptrace$getregs(0xe, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=""/151) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x18108000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x51}}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c1}, 0x800) r7 = syz_open_dev$vcsu(&(0x7f0000000540), 0x80000000, 0x80000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, r8, 0xee01, r9, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:29:25 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) r4 = msgget(0x2, 0x100) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000600)=""/222) msgget$private(0x0, 0x200) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x81) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000840)=""/4096) 04:29:25 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) r4 = msgget(0x2, 0x100) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000600)=""/222) msgget$private(0x0, 0x200) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x81) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000840)=""/4096) 04:29:25 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000480)={0xd76, 0x7}) clock_nanosleep(0x3, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:29:38 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}}, 0x800) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) mount_setattr(r9, &(0x7f0000000580)='./file1\x00', 0x100, &(0x7f00000005c0)={0x84, 0x81, 0x0, {r4}}, 0x20) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9077}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf001}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x69, 0xbe, "e6512625a2c481835b10e9356e781f5c50c0ad9760b3f3809afdce228a8e408c79537f82d97b0951130182858965501c949365fcf007e93d6c4e9dd5551b3396f23d0084906d25b4414dc5af1aacc3ab9d8d92a8f69ff69fa168764d039f1298f366236ec3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000000780), 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000008c0)={0x0, 0x5}) 04:29:38 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) ptrace$getregs(0xe, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=""/151) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x18108000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x51}}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c1}, 0x800) r7 = syz_open_dev$vcsu(&(0x7f0000000540), 0x80000000, 0x80000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, r8, 0xee01, r9, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:29:38 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xefdc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan4\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:29:38 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = fork() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb0, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_IE={0x85, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0xe2}, @random={0x8b, 0x74, "dbd14177eaca46b391bb415a69a5a6c3aa50c803285e861b74a1529bd0619fb5f5add2b6db493d574f5d7448e0f99f6c873889b031e286e7e03e35556c82f6b59e4352016e1781112c1e14375a605b8b9aa36c2289abd71556fcb750675191f0f96d76b05cdfe153dd6c840dfdde64f667d5f6c7"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000041) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r9, {0x6e52}}, './file0\x00'}) 04:29:38 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0x6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r10, {0x9, 0x3}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000880)={{0x1, 0x1, 0x18, r10, {0x8}}, './file1\x00'}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r12, &(0x7f0000002100)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000000940)={0x174c, r13, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x48, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x158, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x13c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0xf4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe3, 0xb, "4e6cbb30bd61000a83288681b217f7f0ad4a8ea624cc39e12842fa407b6f10c2e6f52cedcd7f1ec9582761bb47dd49438c426455889198f0e1e962f4b3bcccd44b0b13c007ac48764f3924f52de66c8fad915278dfbdd2c2211d3ccaf5c5da20762858e753331bd6c8239542829e8b3f63bb2594a23b2eff3b1972092bb3e790b6af8e510e60b98d1e615686c1513c61393d890ccab859c4af01adca40866082d6169b7d23c1966eec1325e75e4b6fa8a86acfe414a779ab9fa995437ae2c9fb63d2e400968f324b56e684ed65fb270d45b9001af025dc3f14ba777f951b0c"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x132c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x148, 0xe, 0x0, 0x1, [{0xe1, 0x0, "1d40d771f25ce4f65bfc715a0f1aa32a1f11dca11b0b95fca88f185d036bf85b61bd76837706ad9c0315bcbb4db90d20f0de1fcf4a4beacf702663cc8e505110d29cffa4c549b2a94203ecfebaa8858e49522e9bc018b0043ebfc872c8ff515710d36ac0f3583abd8247393d6305aa9d0ba09d9f4b0de5acf4016bc247cc447a12f142287633d0dd3d97f67c8c0cea1222c3acf5d8d75f207fd94e119ff72865941cdcb9cf3dd76a7f77fe824caf9b65075cc2febadea88a139e628ccc5b197c7c7fd3ed7334a0c34e9853ad80cc3ae683ccc932515da1fa3edf82d9c5"}, {0x60, 0x0, "0edb83e7da8f441dd7a49e54b68b7a6a18a34490e26d21ab25e02b6995020f1a88f9e860dcd8ebefee6ccf4e990c1a9658a8b915b13ca138f08fe45e1a823d1b35ff1f9b743dad5c69492ef06d941564771a312a7b8ab2faa5faf1dd"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x11dc, 0xd, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0xe9, 0x0, "ca8e1e87aea7b24888761a30dbd657784efadbb015ccb74f7cecf09261c593929ada67ad6a06cd591bde985a31e4cd2fb5b2f4bea177fb5cd66e1e9de3998623d93104dbf8c667896008246f2ee7f76c2492984d0700d511d8e4111eefff1fbc2c1d1979e79f7477254784eb83544cf3ce234335aaeaad8bd8f08ebd10a2dc8539045a94916de0919389f10ac0af2ece95891e589ac4b4c7f5455f34b94785c449375de5038813cc9e9574ece438235c251466b44439710d891800f35e8a914c58e39f803ad7871fd299c63f4e56457965406d1693a7e17c261886a759d41162f2a6a7ffcd"}, {0xe7, 0x0, "6eea71903cbbfd490c172c8c99774faa00fe5c017863bd9b9e86ba93866ec4a9d1ad7eee945c54a6d45bd12350304f9ba1a13c60b55eab6bef0127696ed8e346c6dfa7bf4000f964aa47cec6befba54d038a11a0755c129099ed54697c2abb0f9dea2f9ac494d0b2e04c8120288278cb1d8600b9e7f2061421bb35d28b59b678ba5b267af896b4c8073e091499f42834d7ba166f80bcfebbfae2271464071c6b796e7fff46ebfae016a36747b8b9035049f47b1592a0119dd1acab840f9f3f3689376f1c69a88ffdc65a742c372f3a4f7fe3180b2a6372bf9fcc5ece3678fc142d08a4"}]}]}, @NL80211_ATTR_NAN_FUNC={0x118, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x20, 0xb, "64a46af34e433b0f18d5c71cc489641a158287a3abef5dd1f0724852"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x4c, 0xb, "34e3688a6a4d35ce55d8e1915356ce7095e93d5921db6fb0ff8dc5ad29114f551c4c2429f1e2355b89a5e4fd499309fb16319c6c17ec4d0a1c5e5a99e8351fcd481c2636c5250bb2"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_INFO={0x79, 0xb, "7244d66eb5d2c08e099ee49e366ef3799b5a23713a763a095d070623201cffbb0e6acfd118c227c077dc7382b633a9ebd8ac8095e784515478378ed896c5a877adf9e9a35c76bf3b033764fef887b5f449b60b5a0f698bd23eaa8083cb63ca6246b20da5617445bfcecb9372007c6c9cd6d4cd9cbc"}]}, @NL80211_ATTR_NAN_FUNC={0x40, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "1dcea4bf4358"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8428}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x174c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) 04:29:38 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) r4 = msgget(0x2, 0x100) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000600)=""/222) msgget$private(0x0, 0x200) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x81) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000840)=""/4096) 04:29:38 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r8, {0xffff}}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r10, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 04:29:38 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000480)={0xd76, 0x7}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:29:38 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) r4 = msgget(0x2, 0x100) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000600)=""/222) msgget$private(0x0, 0x200) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x81) 04:29:38 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:29:38 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) r4 = msgget(0x2, 0x100) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000600)=""/222) msgget$private(0x0, 0x200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:29:38 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) r4 = msgget(0x2, 0x100) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000600)=""/222) msgget$private(0x0, 0x200) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:29:38 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}}, 0x800) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) mount_setattr(r9, &(0x7f0000000580)='./file1\x00', 0x100, &(0x7f00000005c0)={0x84, 0x81, 0x0, {r4}}, 0x20) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9077}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf001}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x69, 0xbe, "e6512625a2c481835b10e9356e781f5c50c0ad9760b3f3809afdce228a8e408c79537f82d97b0951130182858965501c949365fcf007e93d6c4e9dd5551b3396f23d0084906d25b4414dc5af1aacc3ab9d8d92a8f69ff69fa168764d039f1298f366236ec3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) setsockopt$inet6_icmp_ICMP_FILTER(r8, 0x1, 0x1, &(0x7f0000000780), 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:29:38 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = fork() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb0, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_IE={0x85, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0xe2}, @random={0x8b, 0x74, "dbd14177eaca46b391bb415a69a5a6c3aa50c803285e861b74a1529bd0619fb5f5add2b6db493d574f5d7448e0f99f6c873889b031e286e7e03e35556c82f6b59e4352016e1781112c1e14375a605b8b9aa36c2289abd71556fcb750675191f0f96d76b05cdfe153dd6c840dfdde64f667d5f6c7"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000041) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r9, {0x6e52}}, './file0\x00'}) 04:29:38 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:29:38 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) r4 = msgget(0x2, 0x100) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000600)=""/222) msgget$private(0x0, 0x200) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:29:38 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}}, 0x800) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) mount_setattr(r9, &(0x7f0000000580)='./file1\x00', 0x100, &(0x7f00000005c0)={0x84, 0x81, 0x0, {r4}}, 0x20) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9077}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf001}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x69, 0xbe, "e6512625a2c481835b10e9356e781f5c50c0ad9760b3f3809afdce228a8e408c79537f82d97b0951130182858965501c949365fcf007e93d6c4e9dd5551b3396f23d0084906d25b4414dc5af1aacc3ab9d8d92a8f69ff69fa168764d039f1298f366236ec3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:29:51 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r8, {0xffff}}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r10, 0x600, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 04:29:51 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = fork() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb0, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_IE={0x85, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0xe2}, @random={0x8b, 0x74, "dbd14177eaca46b391bb415a69a5a6c3aa50c803285e861b74a1529bd0619fb5f5add2b6db493d574f5d7448e0f99f6c873889b031e286e7e03e35556c82f6b59e4352016e1781112c1e14375a605b8b9aa36c2289abd71556fcb750675191f0f96d76b05cdfe153dd6c840dfdde64f667d5f6c7"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000041) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0xee01}}, './file0\x00'}) 04:29:51 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0x6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r10, {0x9, 0x3}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000880)={{0x1, 0x1, 0x18, r10, {0x8}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:29:51 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) ptrace$getregs(0xe, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=""/151) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x18108000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x51}}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c1}, 0x800) r7 = syz_open_dev$vcsu(&(0x7f0000000540), 0x80000000, 0x80000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, r8, 0xee01, r9, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:29:51 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xefdc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan4\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:29:51 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) r4 = msgget(0x2, 0x100) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000600)=""/222) msgget$private(0x0, 0x200) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:29:51 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:29:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}}, 0x800) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) mount_setattr(r9, &(0x7f0000000580)='./file1\x00', 0x100, &(0x7f00000005c0)={0x84, 0x81, 0x0, {r4}}, 0x20) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:29:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}}, 0x800) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:29:51 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) r4 = msgget(0x2, 0x100) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000600)=""/222) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:29:51 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x200000) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:29:51 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = fork() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb0, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_IE={0x85, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @challenge={0x10, 0x1, 0xe2}, @random={0x8b, 0x74, "dbd14177eaca46b391bb415a69a5a6c3aa50c803285e861b74a1529bd0619fb5f5add2b6db493d574f5d7448e0f99f6c873889b031e286e7e03e35556c82f6b59e4352016e1781112c1e14375a605b8b9aa36c2289abd71556fcb750675191f0f96d76b05cdfe153dd6c840dfdde64f667d5f6c7"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000041) 04:29:51 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0x6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r10, {0x9, 0x3}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000880)={{0x1, 0x1, 0x18, r10, {0x8}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:29:51 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) msgget(0x2, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:29:51 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r8, {0xffff}}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:29:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}}, 0x800) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:29:51 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000003c0)={0x7, 0xa8}) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:29:51 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xefdc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan4\x00'}) 04:29:51 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) r3 = msgget(0x2, 0x10) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:29:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}}, 0x800) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:29:51 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:30:05 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) msgget(0x2, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:30:05 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) ptrace$getregs(0xe, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=""/151) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x18108000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x51}}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c1}, 0x800) r7 = syz_open_dev$vcsu(&(0x7f0000000540), 0x80000000, 0x80000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7, {0xee01, 0xee01}}, './file0\x00'}) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, r8, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:30:05 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x7}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}}, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:30:05 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0x6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r9, {0x9, 0x3}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:30:05 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r8, {0xffff}}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:30:05 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = fork() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a00)={'wlan1\x00'}) 04:30:05 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xefdc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x24000000) 04:30:05 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:30:05 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000004c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:20 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) msgget(0x2, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:30:20 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:20 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) ptrace$getregs(0xe, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=""/151) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x18108000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x51}}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c1}, 0x800) syz_open_dev$vcsu(&(0x7f0000000540), 0x80000000, 0x80000) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:30:20 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:30:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:30:20 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = fork() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 04:30:20 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0x6}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:30:20 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r8, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:30:20 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) msgget(0x2, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:30:20 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000380)=0xb3) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:30:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:30:20 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:20 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x4, 0x100}}, './file0\x00'}) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:30:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) write$cgroup_freezer_state(r0, &(0x7f0000000340)='FREEZING\x00', 0x9) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:30:34 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) ptrace$getregs(0xe, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=""/151) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x18108000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x51}}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c1}, 0x800) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:30:34 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc5) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:30:34 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:30:34 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = fork() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:30:34 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r3, {0x6}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:30:34 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x7, 0x6}}, './file0\x00'}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:30:34 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:34 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x1}) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:30:34 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:30:34 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:34 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000002c0)) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:30:34 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000500)=""/151) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:30:47 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) ptrace$getregs(0xe, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=""/151) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:30:47 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc5) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:30:47 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) r2 = msgget(0x2, 0x582) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:30:47 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000440)=0x286) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r4}}, './file0\x00'}) 04:30:47 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_dev$vcsu(&(0x7f00000002c0), 0x4, 0x601) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:30:47 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = fork() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:30:47 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x7fff}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:30:47 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:47 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10800104}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:47 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:47 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) msgget(0x2, 0x582) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:30:47 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:30:47 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000240)=r2) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000440)=0x286) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:30:47 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"db4d7871df740da9c1d0dbb9b57b7852", r0, r1, {0x1ff, 0x1}, {0x1, 0x10001}, 0x76a, [0x9, 0xb5a, 0xac63, 0x5, 0x3f2, 0x8000, 0x7, 0x1f, 0xbd, 0x93f1dbe, 0x8, 0xfff, 0x2ad, 0x0, 0x1, 0x2]}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000440)=0x286) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:30:47 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x4, 0x40, 0xfffffffd}, {0x1000, 0xfc, 0xff, 0xfffffff8}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:47 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) fork() sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) [ 185.093394] syz-executor.7 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 185.093418] CPU: 0 PID: 4386 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 185.093431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 185.093439] Call Trace: [ 185.093442] [ 185.093447] dump_stack_lvl+0x8b/0xb3 [ 185.093471] dump_header+0x10b/0x7e4 [ 185.093489] oom_kill_process.cold+0x10/0x15 [ 185.093505] out_of_memory+0x358/0x14b0 [ 185.093526] ? find_held_lock+0x2c/0x110 [ 185.093542] ? oom_killer_disable+0x270/0x270 [ 185.093558] ? lock_is_held_type+0xd7/0x130 [ 185.093576] mem_cgroup_out_of_memory+0x1e5/0x250 [ 185.093600] ? mem_cgroup_margin+0x130/0x130 [ 185.093623] ? mem_cgroup_iter+0x28d/0x6e0 [ 185.093645] try_charge_memcg+0xed1/0x1360 [ 185.093664] ? mem_cgroup_handle_over_high+0x480/0x480 [ 185.093678] ? lock_release+0x3b2/0x750 [ 185.093694] ? lock_downgrade+0x6d0/0x6d0 [ 185.093723] charge_memcg+0x233/0x370 [ 185.093738] __mem_cgroup_charge+0x24/0x80 [ 185.093753] __filemap_add_folio+0x550/0xf60 [ 185.093779] ? filemap_map_pages+0x1350/0x1350 [ 185.093795] ? rcu_read_lock_sched_held+0x3a/0x70 [ 185.093815] ? memcg_list_lru_alloc+0xb30/0xb30 [ 185.093839] filemap_add_folio+0x9b/0x1b0 [ 185.093857] ? add_to_page_cache_locked+0x160/0x160 [ 185.093879] ? alloc_pages+0x1a8/0x2f0 [ 185.093898] __filemap_get_folio+0x437/0xfe0 [ 185.093924] ? filemap_read+0xba0/0xba0 [ 185.093957] filemap_fault+0x156a/0x2140 [ 185.093989] ? __filemap_get_folio+0xfe0/0xfe0 [ 185.094022] __do_fault+0x113/0x5a0 [ 185.094041] __handle_mm_fault+0x13bc/0x3670 [ 185.094061] ? lock_is_held_type+0xd7/0x130 [ 185.094072] ? __pmd_alloc+0x680/0x680 [ 185.094109] handle_mm_fault+0x2e6/0xa20 [ 185.094129] __get_user_pages+0x50d/0x1100 [ 185.094151] ? follow_page_mask+0x1a40/0x1a40 [ 185.094180] populate_vma_page_range+0x23d/0x320 [ 185.094198] __mm_populate+0x1ea/0x3e0 [ 185.094215] ? faultin_vma_page_range+0x300/0x300 [ 185.094232] ? up_write+0x148/0x460 [ 185.094249] __do_sys_mlockall+0x41f/0x4b0 [ 185.094269] do_syscall_64+0x3b/0x90 [ 185.094286] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 185.094306] RIP: 0033:0x7feee2155b19 [ 185.094316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.094327] RSP: 002b:00007feedf6cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 185.094339] RAX: ffffffffffffffda RBX: 00007feee2268f60 RCX: 00007feee2155b19 [ 185.094347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 185.094353] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 185.094360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.094367] R13: 00007ffcb9eaa3af R14: 00007feedf6cb300 R15: 0000000000022000 [ 185.094389] [ 185.094447] memory: usage 307200kB, limit 307200kB, failcnt 259 [ 185.094455] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 185.094461] Memory cgroup stats for /syz7: [ 185.109835] anon 297926656 [ 185.109835] file 11403264 [ 185.109835] kernel 5242880 [ 185.109835] kernel_stack 688128 [ 185.109835] pagetables 3244032 [ 185.109835] percpu 0 [ 185.109835] sock 0 [ 185.109835] vmalloc 0 [ 185.109835] shmem 0 [ 185.109835] file_mapped 11399168 [ 185.109835] file_dirty 0 [ 185.109835] file_writeback 0 [ 185.109835] swapcached 0 [ 185.109835] inactive_anon 281034752 [ 185.109835] active_anon 0 [ 185.109835] inactive_file 0 [ 185.109835] active_file 4096 [ 185.109835] unevictable 28291072 [ 185.109835] slab_reclaimable 133648 [ 185.109835] slab_unreclaimable 778648 [ 185.109835] slab 912296 [ 185.109835] workingset_refault_anon 0 [ 185.109835] workingset_refault_file 2944 [ 185.109835] workingset_activate_anon 0 [ 185.109835] workingset_activate_file 8 [ 185.109835] workingset_restore_anon 0 [ 185.109835] workingset_restore_file 0 [ 185.109835] workingset_nodereclaim 0 [ 185.109835] pgfault 76164 [ 185.109835] pgmajfault 12 [ 185.109893] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4278,uid=0 [ 185.110516] Memory cgroup out of memory: Killed process 4278 (syz-executor.7) total-vm:93676kB, anon-rss:37048kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 185.213692] syz-executor.7 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 185.213709] CPU: 0 PID: 4386 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 185.213720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 185.213728] Call Trace: [ 185.213731] [ 185.213735] dump_stack_lvl+0x8b/0xb3 [ 185.213752] dump_header+0x10b/0x7e4 [ 185.213768] oom_kill_process.cold+0x10/0x15 [ 185.213784] out_of_memory+0x358/0x14b0 [ 185.213803] ? find_held_lock+0x2c/0x110 [ 185.213817] ? oom_killer_disable+0x270/0x270 [ 185.213832] ? lock_is_held_type+0xd7/0x130 [ 185.213849] mem_cgroup_out_of_memory+0x1e5/0x250 [ 185.213869] ? mem_cgroup_margin+0x130/0x130 [ 185.213892] ? mem_cgroup_iter+0x28d/0x6e0 [ 185.213913] try_charge_memcg+0xed1/0x1360 [ 185.213932] ? mem_cgroup_handle_over_high+0x480/0x480 [ 185.213946] ? lock_release+0x3b2/0x750 [ 185.213962] ? lock_downgrade+0x6d0/0x6d0 [ 185.213996] charge_memcg+0x233/0x370 [ 185.214012] __mem_cgroup_charge+0x24/0x80 [ 185.214027] __filemap_add_folio+0x550/0xf60 [ 185.214052] ? filemap_map_pages+0x1350/0x1350 [ 185.214069] ? rcu_read_lock_sched_held+0x3a/0x70 [ 185.214087] ? memcg_list_lru_alloc+0xb30/0xb30 [ 185.214111] filemap_add_folio+0x9b/0x1b0 [ 185.214129] ? add_to_page_cache_locked+0x160/0x160 [ 185.214151] ? alloc_pages+0x1a8/0x2f0 [ 185.214170] __filemap_get_folio+0x437/0xfe0 [ 185.214197] ? filemap_read+0xba0/0xba0 [ 185.214229] filemap_fault+0x156a/0x2140 [ 185.214256] ? __filemap_get_folio+0xfe0/0xfe0 [ 185.214290] __do_fault+0x113/0x5a0 [ 185.214308] __handle_mm_fault+0x13bc/0x3670 [ 185.214328] ? lock_is_held_type+0xd7/0x130 [ 185.214339] ? __pmd_alloc+0x680/0x680 [ 185.214376] handle_mm_fault+0x2e6/0xa20 [ 185.214396] __get_user_pages+0x50d/0x1100 [ 185.214418] ? follow_page_mask+0x1a40/0x1a40 [ 185.214447] populate_vma_page_range+0x23d/0x320 [ 185.214465] __mm_populate+0x1ea/0x3e0 [ 185.214482] ? faultin_vma_page_range+0x300/0x300 [ 185.214499] ? up_write+0x148/0x460 [ 185.214516] __do_sys_mlockall+0x41f/0x4b0 [ 185.214536] do_syscall_64+0x3b/0x90 [ 185.214553] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 185.214571] RIP: 0033:0x7feee2155b19 [ 185.214580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.214590] RSP: 002b:00007feedf6cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 185.214601] RAX: ffffffffffffffda RBX: 00007feee2268f60 RCX: 00007feee2155b19 [ 185.214609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 185.214615] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 185.214622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.214628] R13: 00007ffcb9eaa3af R14: 00007feedf6cb300 R15: 0000000000022000 [ 185.214651] [ 185.215298] memory: usage 307200kB, limit 307200kB, failcnt 636 [ 185.215307] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 185.215314] Memory cgroup stats for /syz7: [ 185.227788] anon 297824256 [ 185.227788] file 11730944 [ 185.227788] kernel 5005312 [ 185.227788] kernel_stack 655360 [ 185.227788] pagetables 3067904 [ 185.227788] percpu 0 [ 185.227788] sock 0 [ 185.227788] vmalloc 0 [ 185.227788] shmem 0 [ 185.227788] file_mapped 11726848 [ 185.227788] file_dirty 0 [ 185.227788] file_writeback 0 [ 185.227788] swapcached 0 [ 185.227788] inactive_anon 280932352 [ 185.227788] active_anon 0 [ 185.227788] inactive_file 0 [ 185.227788] active_file 4096 [ 185.227788] unevictable 28618752 [ 185.227788] slab_reclaimable 129920 [ 185.227788] slab_unreclaimable 764560 [ 185.227788] slab 894480 [ 185.227788] workingset_refault_anon 0 [ 185.227788] workingset_refault_file 3142 [ 185.227788] workingset_activate_anon 0 [ 185.227788] workingset_activate_file 8 [ 185.227788] workingset_restore_anon 0 [ 185.227788] workingset_restore_file 0 [ 185.227788] workingset_nodereclaim 0 [ 185.227788] pgfault 76189 [ 185.227788] pgmajfault 19 [ 185.227827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4228,uid=0 [ 185.227916] Memory cgroup out of memory: Killed process 4228 (syz-executor.7) total-vm:93676kB, anon-rss:37048kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 185.300548] syz-executor.7 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 185.300563] CPU: 0 PID: 4386 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 185.300575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 185.300582] Call Trace: [ 185.300585] [ 185.300589] dump_stack_lvl+0x8b/0xb3 [ 185.300609] dump_header+0x10b/0x7e4 [ 185.300624] oom_kill_process.cold+0x10/0x15 [ 185.300640] out_of_memory+0x358/0x14b0 [ 185.300659] ? find_held_lock+0x2c/0x110 [ 185.300673] ? oom_killer_disable+0x270/0x270 [ 185.300688] ? lock_is_held_type+0xd7/0x130 [ 185.300705] mem_cgroup_out_of_memory+0x1e5/0x250 [ 185.300725] ? mem_cgroup_margin+0x130/0x130 [ 185.300749] ? mem_cgroup_iter+0x28d/0x6e0 [ 185.300769] try_charge_memcg+0xed1/0x1360 [ 185.300788] ? mem_cgroup_handle_over_high+0x480/0x480 [ 185.300802] ? lock_release+0x3b2/0x750 [ 185.300818] ? lock_downgrade+0x6d0/0x6d0 [ 185.300846] charge_memcg+0x233/0x370 [ 185.300862] __mem_cgroup_charge+0x24/0x80 [ 185.300876] __filemap_add_folio+0x550/0xf60 [ 185.300902] ? filemap_map_pages+0x1350/0x1350 [ 185.300918] ? rcu_read_lock_sched_held+0x3a/0x70 [ 185.300937] ? memcg_list_lru_alloc+0xb30/0xb30 [ 185.300960] filemap_add_folio+0x9b/0x1b0 [ 185.300978] ? add_to_page_cache_locked+0x160/0x160 [ 185.301000] ? alloc_pages+0x1a8/0x2f0 [ 185.301017] __filemap_get_folio+0x437/0xfe0 [ 185.301043] ? filemap_read+0xba0/0xba0 [ 185.301075] filemap_fault+0x156a/0x2140 [ 185.301102] ? __filemap_get_folio+0xfe0/0xfe0 [ 185.301135] __do_fault+0x113/0x5a0 [ 185.301153] __handle_mm_fault+0x13bc/0x3670 [ 185.301173] ? lock_is_held_type+0xd7/0x130 [ 185.301184] ? __pmd_alloc+0x680/0x680 [ 185.301220] handle_mm_fault+0x2e6/0xa20 [ 185.301240] __get_user_pages+0x50d/0x1100 [ 185.301262] ? follow_page_mask+0x1a40/0x1a40 [ 185.301291] populate_vma_page_range+0x23d/0x320 [ 185.301309] __mm_populate+0x1ea/0x3e0 [ 185.301326] ? faultin_vma_page_range+0x300/0x300 [ 185.301343] ? up_write+0x148/0x460 [ 185.301360] __do_sys_mlockall+0x41f/0x4b0 [ 185.301380] do_syscall_64+0x3b/0x90 [ 185.301396] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 185.301415] RIP: 0033:0x7feee2155b19 [ 185.301423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.301433] RSP: 002b:00007feedf6cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 185.301444] RAX: ffffffffffffffda RBX: 00007feee2268f60 RCX: 00007feee2155b19 [ 185.301452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 185.301458] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 185.301465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.301471] R13: 00007ffcb9eaa3af R14: 00007feedf6cb300 R15: 0000000000022000 [ 185.301493] [ 185.301544] memory: usage 307200kB, limit 307200kB, failcnt 975 [ 185.301552] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 185.301558] Memory cgroup stats for /syz7: [ 185.310824] anon 297717760 [ 185.310824] file 11849728 [ 185.310824] kernel 5001216 [ 185.310824] kernel_stack 655360 [ 185.310824] pagetables 3022848 [ 185.310824] percpu 0 [ 185.310824] sock 0 [ 185.310824] vmalloc 0 [ 185.310824] shmem 0 [ 185.310824] file_mapped 11845632 [ 185.310824] file_dirty 0 [ 185.310824] file_writeback 0 [ 185.310824] swapcached 0 [ 185.310824] inactive_anon 280825856 [ 185.310824] active_anon 0 [ 185.310824] inactive_file 0 [ 185.310824] active_file 4096 [ 185.310824] unevictable 28737536 [ 185.310824] slab_reclaimable 129920 [ 185.310824] slab_unreclaimable 762184 [ 185.310824] slab 892104 [ 185.310824] workingset_refault_anon 0 [ 185.310824] workingset_refault_file 3281 [ 185.310824] workingset_activate_anon 0 [ 185.310824] workingset_activate_file 8 [ 185.310824] workingset_restore_anon 0 [ 185.310824] workingset_restore_file 0 [ 185.310824] workingset_nodereclaim 0 [ 185.310824] pgfault 76213 [ 185.310824] pgmajfault 30 [ 185.310862] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4137,uid=0 [ 185.310918] Memory cgroup out of memory: Killed process 4137 (syz-executor.7) total-vm:93676kB, anon-rss:37048kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 187.840682] Bluetooth: hci3: command 0x0406 tx timeout [ 187.840720] Bluetooth: hci1: command 0x0406 tx timeout [ 187.840731] Bluetooth: hci7: command 0x0406 tx timeout [ 187.840742] Bluetooth: hci4: command 0x0406 tx timeout [ 187.841759] Bluetooth: hci0: command 0x0406 tx timeout [ 187.841849] Bluetooth: hci5: command 0x0406 tx timeout [ 187.841910] Bluetooth: hci2: command 0x0406 tx timeout [ 187.841973] Bluetooth: hci6: command 0x0406 tx timeout 04:30:59 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:30:59 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000440)=0x286) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:30:59 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) msgget(0x2, 0x582) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:30:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000180)={"7407791736f49f5a49aaab141e81ccc2", 0x0, r2, {0x6, 0x3ac00000}, {0x100000000, 0x5}, 0x195be807, [0x0, 0x8, 0xd1, 0x1, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0xb74, 0x2, 0xfffffffffffffbff, 0x5, 0x101, 0xffffffffffffeaa3, 0x8]}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:30:59 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc5) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:30:59 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) ptrace$getregs(0xe, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=""/151) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:30:59 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x302092a0e4fec829}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:30:59 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:59 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"fb23e461653c785705f0274419e017d6", 0x0, 0x0, {0x2, 0x3}, {0x5736, 0x80000001}, 0x1000, [0x3, 0x68, 0x5, 0x2, 0x1, 0xffffffffffffff14, 0x3, 0x1, 0x4, 0x3, 0x6d, 0x2, 0x1, 0x4fc1, 0x1, 0xfffffffffffffffd]}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:30:59 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r2, 0x8000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:30:59 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"c0044b2774c3549146c21dcd80003851", 0x0, 0x0, {0x3, 0x1}, {0x955a, 0x8425}, 0x0, [0x4d7, 0x6, 0x7, 0x3, 0x2, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x1, 0x200, 0x100, 0x1, 0x4c, 0x100000000]}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000440)=0x286) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:30:59 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) msgget(0x2, 0x582) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:30:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:30:59 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:30:59 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000440)=0x286) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:30:59 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:30:59 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) syz_open_dev$vcsu(&(0x7f0000000140), 0x167, 0x80081) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) [ 196.756449] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 196.756472] CPU: 0 PID: 4465 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 196.756484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 196.756492] Call Trace: [ 196.756495] [ 196.756500] dump_stack_lvl+0x8b/0xb3 [ 196.756526] dump_header+0x10b/0x7e4 [ 196.756544] oom_kill_process.cold+0x10/0x15 [ 196.756560] out_of_memory+0x358/0x14b0 [ 196.756582] ? find_held_lock+0x2c/0x110 [ 196.756601] ? oom_killer_disable+0x270/0x270 [ 196.756617] ? lock_is_held_type+0xd7/0x130 [ 196.756635] mem_cgroup_out_of_memory+0x1e5/0x250 [ 196.756656] ? mem_cgroup_margin+0x130/0x130 [ 196.756680] ? mem_cgroup_iter+0x28d/0x6e0 [ 196.756701] try_charge_memcg+0xed1/0x1360 [ 196.756720] ? mem_cgroup_handle_over_high+0x480/0x480 [ 196.756734] ? lock_release+0x3b2/0x750 [ 196.756751] ? lock_downgrade+0x6d0/0x6d0 [ 196.756779] charge_memcg+0x233/0x370 [ 196.756794] __mem_cgroup_charge+0x24/0x80 [ 196.756809] __handle_mm_fault+0x1103/0x3670 [ 196.756830] ? lock_is_held_type+0xd7/0x130 [ 196.756841] ? __pmd_alloc+0x680/0x680 [ 196.756877] handle_mm_fault+0x2e6/0xa20 [ 196.756898] __get_user_pages+0x50d/0x1100 [ 196.756920] ? follow_page_mask+0x1a40/0x1a40 [ 196.756937] ? lru_add_drain_cpu+0x415/0x840 [ 196.756965] populate_vma_page_range+0x23d/0x320 [ 196.756983] __mm_populate+0x1ea/0x3e0 [ 196.757000] ? faultin_vma_page_range+0x300/0x300 [ 196.757017] ? up_write+0x148/0x460 [ 196.757034] __do_sys_mlockall+0x41f/0x4b0 [ 196.757054] do_syscall_64+0x3b/0x90 [ 196.757071] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 196.757091] RIP: 0033:0x7feee2155b19 [ 196.757101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 196.757112] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 196.757124] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 196.757132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 196.757139] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 196.757145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.757152] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 196.757175] [ 196.757273] memory: usage 307200kB, limit 307200kB, failcnt 1198 [ 196.757282] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 196.757293] Memory cgroup stats for /syz7: [ 196.768553] anon 309989376 [ 196.768553] file 4096 [ 196.768553] kernel 4579328 [ 196.768553] kernel_stack 622592 [ 196.768553] pagetables 2682880 [ 196.768553] percpu 0 [ 196.768553] sock 0 [ 196.768553] vmalloc 0 [ 196.768553] shmem 0 [ 196.768553] file_mapped 0 [ 196.768553] file_dirty 0 [ 196.768553] file_writeback 0 [ 196.768553] swapcached 0 [ 196.768553] inactive_anon 297521152 [ 196.768553] active_anon 0 [ 196.768553] inactive_file 4096 [ 196.768553] active_file 0 [ 196.768553] unevictable 12468224 [ 196.768553] slab_reclaimable 144840 [ 196.768553] slab_unreclaimable 782464 [ 196.768553] slab 927304 [ 196.768553] workingset_refault_anon 0 [ 196.768553] workingset_refault_file 3572 [ 196.768553] workingset_activate_anon 0 [ 196.768553] workingset_activate_file 9 [ 196.768553] workingset_restore_anon 0 [ 196.768553] workingset_restore_file 0 [ 196.768553] workingset_nodereclaim 0 [ 196.768553] pgfault 79317 [ 196.768553] pgmajfault 38 [ 196.768553] pgrefill 247 [ 196.768648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4073,uid=0 [ 196.768889] Memory cgroup out of memory: Killed process 4073 (syz-executor.7) total-vm:93676kB, anon-rss:37048kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 196.838539] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 196.838559] CPU: 0 PID: 4465 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 196.838572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 196.838580] Call Trace: [ 196.838584] [ 196.838588] dump_stack_lvl+0x8b/0xb3 [ 196.838616] dump_header+0x10b/0x7e4 [ 196.838634] oom_kill_process.cold+0x10/0x15 [ 196.838650] out_of_memory+0x358/0x14b0 [ 196.838671] ? find_held_lock+0x2c/0x110 [ 196.838687] ? oom_killer_disable+0x270/0x270 [ 196.838702] ? lock_is_held_type+0xd7/0x130 [ 196.838720] mem_cgroup_out_of_memory+0x1e5/0x250 [ 196.838741] ? mem_cgroup_margin+0x130/0x130 [ 196.838765] ? mem_cgroup_iter+0x28d/0x6e0 [ 196.838786] try_charge_memcg+0xed1/0x1360 [ 196.838806] ? mem_cgroup_handle_over_high+0x480/0x480 [ 196.838819] ? lock_release+0x3b2/0x750 [ 196.838836] ? lock_downgrade+0x6d0/0x6d0 [ 196.838864] charge_memcg+0x233/0x370 [ 196.838879] __mem_cgroup_charge+0x24/0x80 [ 196.838894] __handle_mm_fault+0x1103/0x3670 [ 196.838915] ? lock_is_held_type+0xd7/0x130 [ 196.838926] ? __pmd_alloc+0x680/0x680 [ 196.838962] handle_mm_fault+0x2e6/0xa20 [ 196.838982] __get_user_pages+0x50d/0x1100 [ 196.839005] ? follow_page_mask+0x1a40/0x1a40 [ 196.839022] ? lru_add_drain_cpu+0x415/0x840 [ 196.839050] populate_vma_page_range+0x23d/0x320 [ 196.839068] __mm_populate+0x1ea/0x3e0 [ 196.839084] ? faultin_vma_page_range+0x300/0x300 [ 196.839102] ? up_write+0x148/0x460 [ 196.839118] __do_sys_mlockall+0x41f/0x4b0 [ 196.839138] do_syscall_64+0x3b/0x90 [ 196.839156] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 196.839175] RIP: 0033:0x7feee2155b19 [ 196.839185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 196.839197] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 196.839208] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 196.839216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 196.839223] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 196.839230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.839237] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 196.839259] [ 196.839299] memory: usage 307200kB, limit 307200kB, failcnt 1254 [ 196.839307] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 196.839313] Memory cgroup stats for /syz7: [ 196.850360] anon 309989376 [ 196.850360] file 4096 [ 196.850360] kernel 4579328 [ 196.850360] kernel_stack 622592 [ 196.850360] pagetables 2682880 [ 196.850360] percpu 0 [ 196.850360] sock 0 [ 196.850360] vmalloc 0 [ 196.850360] shmem 0 [ 196.850360] file_mapped 0 [ 196.850360] file_dirty 0 [ 196.850360] file_writeback 0 [ 196.850360] swapcached 0 [ 196.850360] inactive_anon 297414656 [ 196.850360] active_anon 0 [ 196.850360] inactive_file 0 [ 196.850360] active_file 4096 [ 196.850360] unevictable 12574720 [ 196.850360] slab_reclaimable 144840 [ 196.850360] slab_unreclaimable 782464 [ 196.850360] slab 927304 [ 196.850360] workingset_refault_anon 0 [ 196.850360] workingset_refault_file 3572 [ 196.850360] workingset_activate_anon 0 [ 196.850360] workingset_activate_file 9 [ 196.850360] workingset_restore_anon 0 [ 196.850360] workingset_restore_file 0 [ 196.850360] workingset_nodereclaim 0 [ 196.850360] pgfault 79343 [ 196.850360] pgmajfault 38 [ 196.850360] pgrefill 262 [ 196.850397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4024,uid=0 [ 196.850912] Memory cgroup out of memory: Killed process 4024 (syz-executor.7) total-vm:93676kB, anon-rss:37048kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 196.904001] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 196.904020] CPU: 0 PID: 4465 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 196.904032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 196.904040] Call Trace: [ 196.904044] [ 196.904048] dump_stack_lvl+0x8b/0xb3 [ 196.904071] dump_header+0x10b/0x7e4 [ 196.904088] oom_kill_process.cold+0x10/0x15 [ 196.904107] out_of_memory+0x358/0x14b0 [ 196.904130] ? find_held_lock+0x2c/0x110 [ 196.904147] ? oom_killer_disable+0x270/0x270 [ 196.904163] ? lock_is_held_type+0xd7/0x130 [ 196.904181] mem_cgroup_out_of_memory+0x1e5/0x250 [ 196.904202] ? mem_cgroup_margin+0x130/0x130 [ 196.904226] ? mem_cgroup_iter+0x28d/0x6e0 [ 196.904247] try_charge_memcg+0xed1/0x1360 [ 196.904266] ? mem_cgroup_handle_over_high+0x480/0x480 [ 196.904280] ? lock_release+0x3b2/0x750 [ 196.904296] ? lock_downgrade+0x6d0/0x6d0 [ 196.904324] charge_memcg+0x233/0x370 [ 196.904339] __mem_cgroup_charge+0x24/0x80 [ 196.904354] __handle_mm_fault+0x1103/0x3670 [ 196.904375] ? lock_is_held_type+0xd7/0x130 [ 196.904386] ? __pmd_alloc+0x680/0x680 [ 196.904422] handle_mm_fault+0x2e6/0xa20 [ 196.904442] __get_user_pages+0x50d/0x1100 [ 196.904465] ? follow_page_mask+0x1a40/0x1a40 [ 196.904482] ? lru_add_drain_cpu+0x415/0x840 [ 196.904509] populate_vma_page_range+0x23d/0x320 [ 196.904527] __mm_populate+0x1ea/0x3e0 [ 196.904544] ? faultin_vma_page_range+0x300/0x300 [ 196.904561] ? up_write+0x148/0x460 [ 196.904578] __do_sys_mlockall+0x41f/0x4b0 [ 196.904598] do_syscall_64+0x3b/0x90 [ 196.904615] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 196.904634] RIP: 0033:0x7feee2155b19 [ 196.904644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 196.904655] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 196.904667] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 196.904675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 196.904681] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 196.904688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.904695] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 196.904717] [ 196.904803] memory: usage 307200kB, limit 307200kB, failcnt 1327 [ 196.904811] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 196.904818] Memory cgroup stats for /syz7: [ 196.914095] anon 310214656 [ 196.914095] file 4096 [ 196.914095] kernel 4132864 [ 196.914095] kernel_stack 557056 [ 196.914095] pagetables 2334720 [ 196.914095] percpu 0 [ 196.914095] sock 0 [ 196.914095] vmalloc 0 [ 196.914095] shmem 0 [ 196.914095] file_mapped 0 [ 196.914095] file_dirty 0 [ 196.914095] file_writeback 0 [ 196.914095] swapcached 0 [ 196.914095] inactive_anon 297369600 [ 196.914095] active_anon 0 [ 196.914095] inactive_file 0 [ 196.914095] active_file 4096 [ 196.914095] unevictable 12845056 [ 196.914095] slab_reclaimable 144840 [ 196.914095] slab_unreclaimable 771640 [ 196.914095] slab 916480 [ 196.914095] workingset_refault_anon 0 [ 196.914095] workingset_refault_file 3572 [ 196.914095] workingset_activate_anon 0 [ 196.914095] workingset_activate_file 9 [ 196.914095] workingset_restore_anon 0 [ 196.914095] workingset_restore_file 0 [ 196.914095] workingset_nodereclaim 0 [ 196.914095] pgfault 79409 [ 196.914095] pgmajfault 38 [ 196.914095] pgrefill 285 [ 196.914132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4023,uid=0 [ 196.914201] Memory cgroup out of memory: Killed process 4023 (syz-executor.7) total-vm:93676kB, anon-rss:37048kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 197.123490] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 197.123512] CPU: 0 PID: 4465 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 197.123525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 197.123533] Call Trace: [ 197.123536] [ 197.123541] dump_stack_lvl+0x8b/0xb3 [ 197.123567] dump_header+0x10b/0x7e4 [ 197.123585] oom_kill_process.cold+0x10/0x15 [ 197.123604] out_of_memory+0x358/0x14b0 [ 197.123626] ? find_held_lock+0x2c/0x110 [ 197.123642] ? oom_killer_disable+0x270/0x270 [ 197.123658] ? lock_is_held_type+0xd7/0x130 [ 197.123676] mem_cgroup_out_of_memory+0x1e5/0x250 [ 197.123697] ? mem_cgroup_margin+0x130/0x130 [ 197.123721] ? mem_cgroup_iter+0x28d/0x6e0 [ 197.123743] try_charge_memcg+0xed1/0x1360 [ 197.123762] ? mem_cgroup_handle_over_high+0x480/0x480 [ 197.123775] ? lock_release+0x3b2/0x750 [ 197.123792] ? lock_downgrade+0x6d0/0x6d0 [ 197.123820] charge_memcg+0x233/0x370 [ 197.123836] __mem_cgroup_charge+0x24/0x80 [ 197.123851] __handle_mm_fault+0x1103/0x3670 [ 197.123872] ? lock_is_held_type+0xd7/0x130 [ 197.123883] ? __pmd_alloc+0x680/0x680 [ 197.123919] handle_mm_fault+0x2e6/0xa20 [ 197.123939] __get_user_pages+0x50d/0x1100 [ 197.123962] ? follow_page_mask+0x1a40/0x1a40 [ 197.123991] populate_vma_page_range+0x23d/0x320 [ 197.124010] __mm_populate+0x1ea/0x3e0 [ 197.124026] ? faultin_vma_page_range+0x300/0x300 [ 197.124043] ? up_write+0x148/0x460 [ 197.124060] __do_sys_mlockall+0x41f/0x4b0 [ 197.124080] do_syscall_64+0x3b/0x90 [ 197.124098] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 197.124118] RIP: 0033:0x7feee2155b19 [ 197.124127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 197.124138] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 197.124150] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 197.124158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 197.124165] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 197.124172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.124178] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 197.124201] [ 197.124256] memory: usage 307200kB, limit 307200kB, failcnt 1361 [ 197.124264] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 197.124271] Memory cgroup stats for /syz7: [ 197.131509] anon 289447936 [ 197.131509] file 20713472 [ 197.131509] kernel 4411392 [ 197.131509] kernel_stack 589824 [ 197.131509] pagetables 2510848 [ 197.131509] percpu 0 [ 197.131509] sock 0 [ 197.131509] vmalloc 0 [ 197.131509] shmem 0 [ 197.131509] file_mapped 20709376 [ 197.131509] file_dirty 0 [ 197.131509] file_writeback 0 [ 197.131509] swapcached 0 [ 197.131509] inactive_anon 260055040 [ 197.131509] active_anon 0 [ 197.131509] inactive_file 4096 [ 197.131509] active_file 0 [ 197.131509] unevictable 50102272 [ 197.131509] slab_reclaimable 142976 [ 197.131509] slab_unreclaimable 826760 [ 197.131509] slab 969736 [ 197.131509] workingset_refault_anon 0 [ 197.131509] workingset_refault_file 8628 [ 197.131509] workingset_activate_anon 0 [ 197.131509] workingset_activate_file 9 [ 197.131509] workingset_restore_anon 0 [ 197.131509] workingset_restore_file 0 [ 197.131509] workingset_nodereclaim 0 [ 197.131509] pgfault 84073 [ 197.131509] pgmajfault 40 [ 197.131547] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4448,uid=0 [ 197.131691] Memory cgroup out of memory: Killed process 4448 (syz-executor.7) total-vm:93676kB, anon-rss:28900kB, file-rss:56460kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:31:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x6, 0x80000}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:31:13 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) ptrace$getregs(0xe, 0xffffffffffffffff, 0x4, &(0x7f0000000300)=""/151) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:31:13 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51579c7c, 0x8d9}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:31:13 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000300)=""/242) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:13 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000440)=0x286) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:31:13 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r5}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040004) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:31:13 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:31:13 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:31:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, r0, 0xa08a8000) 04:31:13 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x14102) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:31:13 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:31:13 executing program 2: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xc220317296d88955, 0xffffffffffffffff, 0xa08a8000) 04:31:13 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='f'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4713112802a4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x19, 0x2a, [@challenge={0x10, 0x1, 0xf}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb0, 0x12}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="3883a3810821a1de142d5f97f0b6d5092a4035a7c08c933b3bc6b2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8080) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:13 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x100}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:31:13 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) [ 211.265697] syz-executor.7 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 211.265734] CPU: 1 PID: 4529 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 211.265756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 211.265770] Call Trace: [ 211.265776] [ 211.265785] dump_stack_lvl+0x8b/0xb3 [ 211.265821] dump_header+0x10b/0x7e4 [ 211.265851] oom_kill_process.cold+0x10/0x15 [ 211.265880] out_of_memory+0x358/0x14b0 [ 211.265916] ? find_held_lock+0x2c/0x110 [ 211.265943] ? oom_killer_disable+0x270/0x270 [ 211.265972] ? lock_is_held_type+0xd7/0x130 [ 211.266004] mem_cgroup_out_of_memory+0x1e5/0x250 [ 211.266041] ? mem_cgroup_margin+0x130/0x130 [ 211.266085] ? mem_cgroup_iter+0x28d/0x6e0 [ 211.266124] try_charge_memcg+0xed1/0x1360 [ 211.266159] ? mem_cgroup_handle_over_high+0x480/0x480 [ 211.266184] ? lock_release+0x3b2/0x750 [ 211.266215] ? lock_downgrade+0x6d0/0x6d0 [ 211.266267] charge_memcg+0x233/0x370 [ 211.266295] __mem_cgroup_charge+0x24/0x80 [ 211.266322] __filemap_add_folio+0x550/0xf60 [ 211.266378] ? filemap_map_pages+0x1350/0x1350 [ 211.266409] ? rcu_read_lock_sched_held+0x3a/0x70 [ 211.266444] ? memcg_list_lru_alloc+0xb30/0xb30 [ 211.266488] filemap_add_folio+0x9b/0x1b0 [ 211.266521] ? add_to_page_cache_locked+0x160/0x160 [ 211.266562] ? alloc_pages+0x1a8/0x2f0 [ 211.266598] __filemap_get_folio+0x437/0xfe0 [ 211.266647] ? filemap_read+0xba0/0xba0 [ 211.266707] filemap_fault+0x156a/0x2140 [ 211.266757] ? __filemap_get_folio+0xfe0/0xfe0 [ 211.266819] __do_fault+0x113/0x5a0 [ 211.266852] __handle_mm_fault+0x13bc/0x3670 [ 211.266889] ? lock_is_held_type+0xd7/0x130 [ 211.266911] ? __pmd_alloc+0x680/0x680 [ 211.266978] handle_mm_fault+0x2e6/0xa20 [ 211.267015] __get_user_pages+0x50d/0x1100 [ 211.267056] ? follow_page_mask+0x1a40/0x1a40 [ 211.267110] populate_vma_page_range+0x23d/0x320 [ 211.267144] __mm_populate+0x1ea/0x3e0 [ 211.267174] ? faultin_vma_page_range+0x300/0x300 [ 211.267207] ? up_write+0x148/0x460 [ 211.267238] __do_sys_mlockall+0x41f/0x4b0 [ 211.267274] do_syscall_64+0x3b/0x90 [ 211.267305] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 211.267341] RIP: 0033:0x7feee2155b19 [ 211.267358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 211.267378] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 211.267399] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 211.267414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 211.267425] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 211.267438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.267450] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 211.267491] [ 211.267567] memory: usage 307200kB, limit 307200kB, failcnt 1659 [ 211.267582] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 211.267622] Memory cgroup stats for /syz7: [ 211.279175] anon 293773312 [ 211.279175] file 16146432 [ 211.279175] kernel 4653056 [ 211.279175] kernel_stack 655360 [ 211.279175] pagetables 2785280 [ 211.279175] percpu 0 [ 211.279175] sock 0 [ 211.279175] vmalloc 0 [ 211.279175] shmem 0 [ 211.279175] file_mapped 16138240 [ 211.279175] file_dirty 0 [ 211.279175] file_writeback 0 [ 211.279175] swapcached 0 [ 211.279175] inactive_anon 276873216 [ 211.279175] active_anon 0 [ 211.279175] inactive_file 4096 [ 211.279175] active_file 4096 [ 211.279175] unevictable 33038336 [ 211.279175] slab_reclaimable 133208 [ 211.279175] slab_unreclaimable 719080 [ 211.279175] slab 852288 [ 211.279175] workingset_refault_anon 0 [ 211.279175] workingset_refault_file 12784 [ 211.279175] workingset_activate_anon 0 [ 211.279175] workingset_activate_file 14 [ 211.279175] workingset_restore_anon 0 [ 211.279175] workingset_restore_file 0 [ 211.279175] workingset_nodereclaim 0 [ 211.279175] pgfault 88693 [ 211.279175] pgmajfault 52 [ 211.279245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4276,uid=0 [ 211.279351] Memory cgroup out of memory: Killed process 4276 (syz-executor.7) total-vm:93544kB, anon-rss:37044kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 04:31:29 executing program 2: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xc220317296d88955, 0xffffffffffffffff, 0xa08a8000) 04:31:29 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:31:29 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socket(0x26, 0x2, 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x9ff, 0x1}}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:31:29 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:29 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:31:29 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000852) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:31:29 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:31:29 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:31:29 executing program 5: r0 = io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10010, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:31:29 executing program 5: io_uring_setup(0x137f, &(0x7f0000000000)={0x0, 0x8e8, 0x8, 0x3, 0x30b}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:31:29 executing program 2: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xa08a8000) 04:31:29 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:31:29 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000000c0)=""/218) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:31:29 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40840, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:31:29 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:31:29 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:31:29 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 226.933219] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 226.933259] CPU: 1 PID: 4601 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 226.933272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 226.933280] Call Trace: [ 226.933283] [ 226.933288] dump_stack_lvl+0x8b/0xb3 [ 226.933311] dump_header+0x10b/0x7e4 [ 226.933327] oom_kill_process.cold+0x10/0x15 [ 226.933343] out_of_memory+0x358/0x14b0 [ 226.933364] ? find_held_lock+0x2c/0x110 [ 226.933379] ? oom_killer_disable+0x270/0x270 [ 226.933395] ? lock_is_held_type+0xd7/0x130 [ 226.933413] mem_cgroup_out_of_memory+0x1e5/0x250 [ 226.933434] ? mem_cgroup_margin+0x130/0x130 [ 226.933458] ? mem_cgroup_iter+0x28d/0x6e0 [ 226.933479] try_charge_memcg+0xed1/0x1360 [ 226.933498] ? mem_cgroup_handle_over_high+0x480/0x480 [ 226.933512] ? lock_release+0x3b2/0x750 [ 226.933529] ? lock_downgrade+0x6d0/0x6d0 [ 226.933557] charge_memcg+0x233/0x370 [ 226.933572] __mem_cgroup_charge+0x24/0x80 [ 226.933589] __handle_mm_fault+0x1103/0x3670 [ 226.933610] ? lock_is_held_type+0xd7/0x130 [ 226.933621] ? __pmd_alloc+0x680/0x680 [ 226.933657] handle_mm_fault+0x2e6/0xa20 [ 226.933677] __get_user_pages+0x50d/0x1100 [ 226.933700] ? follow_page_mask+0x1a40/0x1a40 [ 226.933729] populate_vma_page_range+0x23d/0x320 [ 226.933747] __mm_populate+0x1ea/0x3e0 [ 226.933763] ? faultin_vma_page_range+0x300/0x300 [ 226.933781] ? up_write+0x148/0x460 [ 226.933797] __do_sys_mlockall+0x41f/0x4b0 [ 226.933817] do_syscall_64+0x3b/0x90 [ 226.933834] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 226.933854] RIP: 0033:0x7feee2155b19 [ 226.933863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 226.933874] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 226.933886] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 226.933894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 226.933900] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 226.933907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.933913] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 226.933936] [ 226.934008] memory: usage 307200kB, limit 307200kB, failcnt 1712 [ 226.934017] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 226.934023] Memory cgroup stats for /syz7: [ 226.934836] anon 289177600 [ 226.934836] file 20717568 [ 226.934836] kernel 4677632 [ 226.934836] kernel_stack 622592 [ 226.934836] pagetables 2797568 [ 226.934836] percpu 0 [ 226.934836] sock 0 [ 226.934836] vmalloc 0 [ 226.934836] shmem 0 [ 226.934836] file_mapped 20709376 [ 226.934836] file_dirty 0 [ 226.934836] file_writeback 0 [ 226.934836] swapcached 0 [ 226.934836] inactive_anon 256073728 [ 226.934836] active_anon 0 [ 226.934836] inactive_file 4096 [ 226.934836] active_file 4096 [ 226.934836] unevictable 53800960 [ 226.934836] slab_reclaimable 148128 [ 226.934836] slab_unreclaimable 750680 [ 226.934836] slab 898808 [ 226.934836] workingset_refault_anon 0 [ 226.934836] workingset_refault_file 13900 [ 226.934836] workingset_activate_anon 0 [ 226.934836] workingset_activate_file 14 [ 226.934836] workingset_restore_anon 0 [ 226.934836] workingset_restore_file 0 [ 226.934836] workingset_nodereclaim 0 [ 226.934836] pgfault 99500 [ 226.934836] pgmajfault 54 [ 226.934874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4558,uid=0 [ 226.934935] Memory cgroup out of memory: Killed process 4558 (syz-executor.7) total-vm:93676kB, anon-rss:32540kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:224kB oom_score_adj:1000 04:31:43 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:43 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x501c2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:31:43 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:31:43 executing program 2: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 04:31:43 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socket(0x26, 0x2, 0x3) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:31:43 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:31:43 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:31:43 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:31:43 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:44 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:44 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:31:44 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 04:31:44 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:31:44 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:44 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:31:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 04:31:44 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) [ 241.850552] syz-executor.7 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 241.850600] CPU: 0 PID: 4646 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 241.850613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 241.850621] Call Trace: [ 241.850625] [ 241.850630] dump_stack_lvl+0x8b/0xb3 [ 241.850656] dump_header+0x10b/0x7e4 [ 241.850674] oom_kill_process.cold+0x10/0x15 [ 241.850690] out_of_memory+0x358/0x14b0 [ 241.850712] ? find_held_lock+0x2c/0x110 [ 241.850728] ? oom_killer_disable+0x270/0x270 [ 241.850743] ? lock_is_held_type+0xd7/0x130 [ 241.850762] mem_cgroup_out_of_memory+0x1e5/0x250 [ 241.850799] ? mem_cgroup_margin+0x130/0x130 [ 241.850823] ? mem_cgroup_iter+0x28d/0x6e0 [ 241.850844] try_charge_memcg+0xed1/0x1360 [ 241.850863] ? mem_cgroup_handle_over_high+0x480/0x480 [ 241.850877] ? lock_release+0x3b2/0x750 [ 241.850894] ? lock_downgrade+0x6d0/0x6d0 [ 241.850922] charge_memcg+0x233/0x370 [ 241.850938] __mem_cgroup_charge+0x24/0x80 [ 241.850953] __filemap_add_folio+0x550/0xf60 [ 241.850979] ? filemap_map_pages+0x1350/0x1350 [ 241.850996] ? rcu_read_lock_sched_held+0x3a/0x70 [ 241.851016] ? memcg_list_lru_alloc+0xb30/0xb30 [ 241.851040] filemap_add_folio+0x9b/0x1b0 [ 241.851058] ? add_to_page_cache_locked+0x160/0x160 [ 241.851081] ? alloc_pages+0x1a8/0x2f0 [ 241.851099] __filemap_get_folio+0x437/0xfe0 [ 241.851126] ? filemap_read+0xba0/0xba0 [ 241.851158] filemap_fault+0x156a/0x2140 [ 241.851185] ? __filemap_get_folio+0xfe0/0xfe0 [ 241.851218] __do_fault+0x113/0x5a0 [ 241.851237] __handle_mm_fault+0x13bc/0x3670 [ 241.851257] ? lock_is_held_type+0xd7/0x130 [ 241.851269] ? __pmd_alloc+0x680/0x680 [ 241.851305] handle_mm_fault+0x2e6/0xa20 [ 241.851325] __get_user_pages+0x50d/0x1100 [ 241.851347] ? follow_page_mask+0x1a40/0x1a40 [ 241.851376] populate_vma_page_range+0x23d/0x320 [ 241.851395] __mm_populate+0x1ea/0x3e0 [ 241.851411] ? faultin_vma_page_range+0x300/0x300 [ 241.851429] ? up_write+0x148/0x460 [ 241.851446] __do_sys_mlockall+0x41f/0x4b0 [ 241.851466] do_syscall_64+0x3b/0x90 [ 241.851483] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 241.851503] RIP: 0033:0x7feee2155b19 [ 241.851516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 241.851527] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 241.851539] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 241.851547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 241.851553] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 241.851560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.851567] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 241.851592] [ 241.851690] memory: usage 307200kB, limit 307200kB, failcnt 2023 [ 241.851699] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 241.851705] Memory cgroup stats for /syz7: [ 241.851792] anon 298876928 [ 241.851792] file 10657792 [ 241.851792] kernel 5038080 [ 241.851792] kernel_stack 720896 [ 241.851792] pagetables 3051520 [ 241.851792] percpu 0 [ 241.851792] sock 0 [ 241.851792] vmalloc 0 [ 241.851792] shmem 0 [ 241.851792] file_mapped 10653696 [ 241.851792] file_dirty 0 [ 241.851792] file_writeback 0 [ 241.851792] swapcached 0 [ 241.851792] inactive_anon 281980928 [ 241.851792] active_anon 0 [ 241.851792] inactive_file 0 [ 241.851792] active_file 4096 [ 241.851792] unevictable 27549696 [ 241.851792] slab_reclaimable 113472 [ 241.851792] slab_unreclaimable 752160 [ 241.851792] slab 865632 [ 241.851792] workingset_refault_anon 0 [ 241.851792] workingset_refault_file 16790 [ 241.851792] workingset_activate_anon 0 [ 241.851792] workingset_activate_file 18 [ 241.851792] workingset_restore_anon 0 [ 241.851792] workingset_restore_file 0 [ 241.851792] workingset_nodereclaim 0 [ 241.851792] pgfault 104001 [ 241.851792] pgmajfault 67 [ 241.851830] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4227,uid=0 [ 241.851892] Memory cgroup out of memory: Killed process 4227 (syz-executor.7) total-vm:93544kB, anon-rss:37044kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 04:31:56 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:31:56 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:31:56 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:31:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 04:31:56 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:31:56 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) 04:31:56 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:56 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:56 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:31:56 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 04:31:56 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:56 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:31:56 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 04:31:56 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:31:56 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) [ 254.064651] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 254.064688] CPU: 0 PID: 4710 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 254.064710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 254.064728] Call Trace: [ 254.064734] [ 254.064743] dump_stack_lvl+0x8b/0xb3 [ 254.064780] dump_header+0x10b/0x7e4 [ 254.064809] oom_kill_process.cold+0x10/0x15 [ 254.064839] out_of_memory+0x358/0x14b0 [ 254.064875] ? find_held_lock+0x2c/0x110 [ 254.064902] ? oom_killer_disable+0x270/0x270 [ 254.064931] ? lock_is_held_type+0xd7/0x130 [ 254.064963] mem_cgroup_out_of_memory+0x1e5/0x250 [ 254.065001] ? mem_cgroup_margin+0x130/0x130 [ 254.065045] ? mem_cgroup_iter+0x28d/0x6e0 [ 254.065083] try_charge_memcg+0xed1/0x1360 [ 254.065119] ? mem_cgroup_handle_over_high+0x480/0x480 [ 254.065144] ? lock_release+0x3b2/0x750 [ 254.065175] ? lock_downgrade+0x6d0/0x6d0 [ 254.065227] charge_memcg+0x233/0x370 [ 254.065255] __mem_cgroup_charge+0x24/0x80 [ 254.065283] __handle_mm_fault+0x1103/0x3670 [ 254.065320] ? lock_is_held_type+0xd7/0x130 [ 254.065342] ? __pmd_alloc+0x680/0x680 [ 254.065408] handle_mm_fault+0x2e6/0xa20 [ 254.065446] __get_user_pages+0x50d/0x1100 [ 254.065487] ? follow_page_mask+0x1a40/0x1a40 [ 254.065540] populate_vma_page_range+0x23d/0x320 [ 254.065574] __mm_populate+0x1ea/0x3e0 [ 254.065605] ? faultin_vma_page_range+0x300/0x300 [ 254.065637] ? up_write+0x148/0x460 [ 254.065668] __do_sys_mlockall+0x41f/0x4b0 [ 254.065705] do_syscall_64+0x3b/0x90 [ 254.065735] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 254.065770] RIP: 0033:0x7feee2155b19 [ 254.065786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 254.065806] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 254.065828] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 254.065842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 254.065854] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 254.065866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.065878] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 254.065919] [ 254.066001] memory: usage 307200kB, limit 307200kB, failcnt 2057 [ 254.066016] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 254.066028] Memory cgroup stats for /syz7: [ 254.070828] anon 288927744 [ 254.070828] file 20709376 [ 254.070828] kernel 4935680 [ 254.070828] kernel_stack 688128 [ 254.070828] pagetables 2908160 [ 254.070828] percpu 0 [ 254.070828] sock 0 [ 254.070828] vmalloc 0 [ 254.070828] shmem 0 [ 254.070828] file_mapped 20709376 [ 254.070828] file_dirty 0 [ 254.070828] file_writeback 0 [ 254.070828] swapcached 0 [ 254.070828] inactive_anon 261160960 [ 254.070828] active_anon 0 [ 254.070828] inactive_file 0 [ 254.070828] active_file 0 [ 254.070828] unevictable 48386048 [ 254.070828] slab_reclaimable 148960 [ 254.070828] slab_unreclaimable 802416 [ 254.070828] slab 951376 [ 254.070828] workingset_refault_anon 0 [ 254.070828] workingset_refault_file 19245 [ 254.070828] workingset_activate_anon 0 [ 254.070828] workingset_activate_file 18 [ 254.070828] workingset_restore_anon 0 [ 254.070828] workingset_restore_file 0 [ 254.070828] workingset_nodereclaim 0 [ 254.070828] pgfault 116581 [ 254.070828] pgmajfault 70 [ 254.070899] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4683,uid=0 [ 254.071092] Memory cgroup out of memory: Killed process 4683 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:32:11 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:32:11 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:32:11 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 04:32:11 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) msgget(0x3, 0x480) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:32:11 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:32:11 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:32:11 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 04:32:11 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:32:11 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) msgget(0x3, 0x480) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:32:11 executing program 1: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:32:11 executing program 0: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 04:32:11 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:32:11 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:32:11 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:32:11 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) [ 269.105728] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 269.105762] CPU: 0 PID: 4777 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 269.105784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 269.105798] Call Trace: [ 269.105804] [ 269.105812] dump_stack_lvl+0x8b/0xb3 [ 269.105850] dump_header+0x10b/0x7e4 [ 269.105880] oom_kill_process.cold+0x10/0x15 [ 269.105910] out_of_memory+0x358/0x14b0 [ 269.105946] ? find_held_lock+0x2c/0x110 [ 269.105973] ? oom_killer_disable+0x270/0x270 [ 269.106002] ? lock_is_held_type+0xd7/0x130 [ 269.106035] mem_cgroup_out_of_memory+0x1e5/0x250 [ 269.106072] ? mem_cgroup_margin+0x130/0x130 [ 269.106116] ? mem_cgroup_iter+0x28d/0x6e0 [ 269.106154] try_charge_memcg+0xed1/0x1360 [ 269.106190] ? mem_cgroup_handle_over_high+0x480/0x480 [ 269.106215] ? lock_release+0x3b2/0x750 [ 269.106246] ? lock_downgrade+0x6d0/0x6d0 [ 269.106298] charge_memcg+0x233/0x370 [ 269.106326] __mem_cgroup_charge+0x24/0x80 [ 269.106353] __handle_mm_fault+0x1103/0x3670 [ 269.106391] ? lock_is_held_type+0xd7/0x130 [ 269.106413] ? __pmd_alloc+0x680/0x680 [ 269.106479] handle_mm_fault+0x2e6/0xa20 [ 269.106516] __get_user_pages+0x50d/0x1100 [ 269.106558] ? follow_page_mask+0x1a40/0x1a40 [ 269.106615] populate_vma_page_range+0x23d/0x320 [ 269.106649] __mm_populate+0x1ea/0x3e0 [ 269.106680] ? faultin_vma_page_range+0x300/0x300 [ 269.106712] ? up_write+0x148/0x460 [ 269.106743] __do_sys_mlockall+0x41f/0x4b0 [ 269.106780] do_syscall_64+0x3b/0x90 [ 269.106811] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 269.106847] RIP: 0033:0x7feee2155b19 [ 269.106863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 269.106882] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 269.106903] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 269.106917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 269.106930] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 269.106942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.106954] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 269.106996] [ 269.107072] memory: usage 307200kB, limit 307200kB, failcnt 2097 [ 269.107086] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 269.107098] Memory cgroup stats for /syz7: [ 269.109152] anon 289017856 [ 269.109152] file 20709376 [ 269.109152] kernel 4845568 [ 269.109152] kernel_stack 688128 [ 269.109152] pagetables 2908160 [ 269.109152] percpu 0 [ 269.109152] sock 0 [ 269.109152] vmalloc 0 [ 269.109152] shmem 0 [ 269.109152] file_mapped 20709376 [ 269.109152] file_dirty 0 [ 269.109152] file_writeback 0 [ 269.109152] swapcached 0 [ 269.109152] inactive_anon 261160960 [ 269.109152] active_anon 0 [ 269.109152] inactive_file 0 [ 269.109152] active_file 0 [ 269.109152] unevictable 48562176 [ 269.109152] slab_reclaimable 132496 [ 269.109152] slab_unreclaimable 731152 [ 269.109152] slab 863648 [ 269.109152] workingset_refault_anon 0 [ 269.109152] workingset_refault_file 19245 [ 269.109152] workingset_activate_anon 0 [ 269.109152] workingset_activate_file 18 [ 269.109152] workingset_restore_anon 0 [ 269.109152] workingset_restore_file 0 [ 269.109152] workingset_nodereclaim 0 [ 269.109152] pgfault 123745 [ 269.109152] pgmajfault 70 [ 269.109220] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4747,uid=0 [ 269.109324] Memory cgroup out of memory: Killed process 4747 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:32:24 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:32:24 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 04:32:24 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) 04:32:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:32:24 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:32:24 executing program 4: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:32:24 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:32:24 executing program 1: msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:32:24 executing program 1: msgget$private(0x0, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:32:24 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:32:24 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:32:24 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:32:24 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) 04:32:24 executing program 4: syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:32:25 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:32:25 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) [ 282.593879] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 282.593946] CPU: 0 PID: 4800 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 282.593972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 282.593988] Call Trace: [ 282.593995] [ 282.594004] dump_stack_lvl+0x8b/0xb3 [ 282.594047] dump_header+0x10b/0x7e4 [ 282.594081] oom_kill_process.cold+0x10/0x15 [ 282.594115] out_of_memory+0x358/0x14b0 [ 282.594157] ? find_held_lock+0x2c/0x110 [ 282.594188] ? oom_killer_disable+0x270/0x270 [ 282.594221] ? lock_is_held_type+0xd7/0x130 [ 282.594257] mem_cgroup_out_of_memory+0x1e5/0x250 [ 282.594300] ? mem_cgroup_margin+0x130/0x130 [ 282.594350] ? mem_cgroup_iter+0x28d/0x6e0 [ 282.594394] try_charge_memcg+0xed1/0x1360 [ 282.594435] ? mem_cgroup_handle_over_high+0x480/0x480 [ 282.594464] ? lock_release+0x3b2/0x750 [ 282.594499] ? lock_downgrade+0x6d0/0x6d0 [ 282.594562] charge_memcg+0x233/0x370 [ 282.594595] __mem_cgroup_charge+0x24/0x80 [ 282.594627] __handle_mm_fault+0x1103/0x3670 [ 282.594670] ? lock_is_held_type+0xd7/0x130 [ 282.594694] ? __pmd_alloc+0x680/0x680 [ 282.594771] handle_mm_fault+0x2e6/0xa20 [ 282.594813] __get_user_pages+0x50d/0x1100 [ 282.594860] ? follow_page_mask+0x1a40/0x1a40 [ 282.594921] populate_vma_page_range+0x23d/0x320 [ 282.594960] __mm_populate+0x1ea/0x3e0 [ 282.594995] ? faultin_vma_page_range+0x300/0x300 [ 282.595029] ? __do_sys_mlockall+0x296/0x4b0 [ 282.595079] __do_sys_mlockall+0x41f/0x4b0 [ 282.595120] do_syscall_64+0x3b/0x90 [ 282.595156] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 282.595200] RIP: 0033:0x7feee2155b19 [ 282.595219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 282.595241] RSP: 002b:00007feedf6cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 282.595265] RAX: ffffffffffffffda RBX: 00007feee2268f60 RCX: 00007feee2155b19 [ 282.595281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 282.595295] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 282.595309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.595323] R13: 00007ffcb9eaa3af R14: 00007feedf6cb300 R15: 0000000000022000 [ 282.595402] [ 282.595633] memory: usage 307200kB, limit 307200kB, failcnt 2162 [ 282.595651] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 282.595666] Memory cgroup stats for /syz7: [ 282.609319] anon 289140736 [ 282.609319] file 20709376 [ 282.609319] kernel 4722688 [ 282.609319] kernel_stack 622592 [ 282.609319] pagetables 2908160 [ 282.609319] percpu 0 [ 282.609319] sock 0 [ 282.609319] vmalloc 0 [ 282.609319] shmem 0 [ 282.609319] file_mapped 20709376 [ 282.609319] file_dirty 0 [ 282.609319] file_writeback 0 [ 282.609319] swapcached 0 [ 282.609319] inactive_anon 261160960 [ 282.609319] active_anon 0 [ 282.609319] inactive_file 0 [ 282.609319] active_file 0 [ 282.609319] unevictable 48676864 [ 282.609319] slab_reclaimable 111512 [ 282.609319] slab_unreclaimable 700344 [ 282.609319] slab 811856 [ 282.609319] workingset_refault_anon 0 [ 282.609319] workingset_refault_file 19245 [ 282.609319] workingset_activate_anon 0 [ 282.609319] workingset_activate_file 18 [ 282.609319] workingset_restore_anon 0 [ 282.609319] workingset_restore_file 0 [ 282.609319] workingset_nodereclaim 0 [ 282.609319] pgfault 130939 [ 282.609319] pgmajfault 70 [ 282.609399] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4792,uid=0 [ 282.609524] Memory cgroup out of memory: Killed process 4792 (syz-executor.7) total-vm:93412kB, anon-rss:27528kB, file-rss:55624kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:32:37 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 04:32:37 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgget$private(0x0, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:32:37 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r1 = fork() setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r1, r1}) 04:32:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:32:37 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:32:37 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000005c0)=""/29) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:32:37 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:32:37 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 04:32:37 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:32:37 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:32:37 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:32:37 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), 0xffffffffffffffff) 04:32:37 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$IPC_RMID(r0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:32:37 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 04:32:37 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:32:37 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 04:32:37 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:32:37 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) [ 295.223236] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 295.223262] CPU: 1 PID: 4887 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 295.223277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 295.223287] Call Trace: [ 295.223291] [ 295.223297] dump_stack_lvl+0x8b/0xb3 [ 295.223323] dump_header+0x10b/0x7e4 [ 295.223343] oom_kill_process.cold+0x10/0x15 [ 295.223363] out_of_memory+0x358/0x14b0 [ 295.223388] ? find_held_lock+0x2c/0x110 [ 295.223406] ? oom_killer_disable+0x270/0x270 [ 295.223425] ? lock_is_held_type+0xd7/0x130 [ 295.223446] mem_cgroup_out_of_memory+0x1e5/0x250 [ 295.223471] ? mem_cgroup_margin+0x130/0x130 [ 295.223500] ? mem_cgroup_iter+0x28d/0x6e0 [ 295.223534] try_charge_memcg+0xed1/0x1360 [ 295.223560] ? mem_cgroup_handle_over_high+0x480/0x480 [ 295.223577] ? lock_release+0x3b2/0x750 [ 295.223597] ? lock_downgrade+0x6d0/0x6d0 [ 295.223632] charge_memcg+0x233/0x370 [ 295.223650] __mem_cgroup_charge+0x24/0x80 [ 295.223668] __handle_mm_fault+0x1103/0x3670 [ 295.223693] ? lock_is_held_type+0xd7/0x130 [ 295.223707] ? __pmd_alloc+0x680/0x680 [ 295.223751] handle_mm_fault+0x2e6/0xa20 [ 295.223776] __get_user_pages+0x50d/0x1100 [ 295.223803] ? follow_page_mask+0x1a40/0x1a40 [ 295.223838] populate_vma_page_range+0x23d/0x320 [ 295.223860] __mm_populate+0x1ea/0x3e0 [ 295.223880] ? faultin_vma_page_range+0x300/0x300 [ 295.223901] ? up_write+0x148/0x460 [ 295.223921] __do_sys_mlockall+0x41f/0x4b0 [ 295.223946] do_syscall_64+0x3b/0x90 [ 295.223966] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 295.223989] RIP: 0033:0x7feee2155b19 [ 295.224001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 295.224014] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 295.224028] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 295.224037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 295.224045] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 295.224053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.224061] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 295.224088] [ 295.224157] memory: usage 307200kB, limit 307200kB, failcnt 2218 [ 295.224170] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 295.224177] Memory cgroup stats for /syz7: [ 295.236787] anon 288972800 [ 295.236787] file 20709376 [ 295.236787] kernel 4890624 [ 295.236787] kernel_stack 688128 [ 295.236787] pagetables 2908160 [ 295.236787] percpu 0 [ 295.236787] sock 0 [ 295.236787] vmalloc 0 [ 295.236787] shmem 0 [ 295.236787] file_mapped 20709376 [ 295.236787] file_dirty 0 [ 295.236787] file_writeback 0 [ 295.236787] swapcached 0 [ 295.236787] inactive_anon 261160960 [ 295.236787] active_anon 0 [ 295.236787] inactive_file 0 [ 295.236787] active_file 0 [ 295.236787] unevictable 48500736 [ 295.236787] slab_reclaimable 148864 [ 295.236787] slab_unreclaimable 756528 [ 295.236787] slab 905392 [ 295.236787] workingset_refault_anon 0 [ 295.236787] workingset_refault_file 19245 [ 295.236787] workingset_activate_anon 0 [ 295.236787] workingset_activate_file 18 [ 295.236787] workingset_restore_anon 0 [ 295.236787] workingset_restore_file 0 [ 295.236787] workingset_nodereclaim 0 [ 295.236787] pgfault 138092 [ 295.236787] pgmajfault 70 [ 295.236833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4859,uid=0 [ 295.237384] Memory cgroup out of memory: Killed process 4859 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:32:50 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r1 = fork() setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r1, r1}) 04:32:50 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:32:50 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) 04:32:50 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:32:50 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) r0 = msgget(0x3, 0x480) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/21) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:32:50 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:32:50 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:32:50 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 04:32:50 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:32:50 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:32:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, 0x0, 0x20000881) [ 308.015943] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 308.015966] CPU: 1 PID: 4946 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 308.015978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 308.015987] Call Trace: [ 308.015990] [ 308.015995] dump_stack_lvl+0x8b/0xb3 [ 308.016021] dump_header+0x10b/0x7e4 [ 308.016039] oom_kill_process.cold+0x10/0x15 [ 308.016055] out_of_memory+0x358/0x14b0 [ 308.016077] ? find_held_lock+0x2c/0x110 [ 308.016093] ? oom_killer_disable+0x270/0x270 [ 308.016109] ? lock_is_held_type+0xd7/0x130 [ 308.016127] mem_cgroup_out_of_memory+0x1e5/0x250 [ 308.016148] ? mem_cgroup_margin+0x130/0x130 [ 308.016172] ? mem_cgroup_iter+0x28d/0x6e0 [ 308.016194] try_charge_memcg+0xed1/0x1360 [ 308.016213] ? mem_cgroup_handle_over_high+0x480/0x480 [ 308.016227] ? lock_release+0x3b2/0x750 [ 308.016244] ? lock_downgrade+0x6d0/0x6d0 [ 308.016272] charge_memcg+0x233/0x370 [ 308.016287] __mem_cgroup_charge+0x24/0x80 [ 308.016302] __handle_mm_fault+0x1103/0x3670 [ 308.016323] ? lock_is_held_type+0xd7/0x130 [ 308.016335] ? __pmd_alloc+0x680/0x680 [ 308.016371] handle_mm_fault+0x2e6/0xa20 [ 308.016391] __get_user_pages+0x50d/0x1100 [ 308.016414] ? follow_page_mask+0x1a40/0x1a40 [ 308.016443] populate_vma_page_range+0x23d/0x320 [ 308.016461] __mm_populate+0x1ea/0x3e0 [ 308.016478] ? faultin_vma_page_range+0x300/0x300 [ 308.016495] ? up_write+0x148/0x460 [ 308.016512] __do_sys_mlockall+0x41f/0x4b0 [ 308.016532] do_syscall_64+0x3b/0x90 [ 308.016553] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 308.016573] RIP: 0033:0x7feee2155b19 [ 308.016582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 308.016593] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 308.016605] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 308.016613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 308.016620] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 308.016626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.016633] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 308.016656] [ 308.016756] memory: usage 307200kB, limit 307200kB, failcnt 2238 [ 308.016764] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 308.016770] Memory cgroup stats for /syz7: [ 308.026877] anon 288952320 [ 308.026877] file 20709376 [ 308.026877] kernel 4911104 [ 308.026877] kernel_stack 688128 [ 308.026877] pagetables 2908160 [ 308.026877] percpu 0 [ 308.026877] sock 0 [ 308.026877] vmalloc 0 [ 308.026877] shmem 0 [ 308.026877] file_mapped 20709376 [ 308.026877] file_dirty 0 [ 308.026877] file_writeback 0 [ 308.026877] swapcached 0 [ 308.026877] inactive_anon 261160960 [ 308.026877] active_anon 0 [ 308.026877] inactive_file 0 [ 308.026877] active_file 0 [ 308.026877] unevictable 48500736 [ 308.026877] slab_reclaimable 148864 [ 308.026877] slab_unreclaimable 780808 [ 308.026877] slab 929672 [ 308.026877] workingset_refault_anon 0 [ 308.026877] workingset_refault_file 19245 [ 308.026877] workingset_activate_anon 0 [ 308.026877] workingset_activate_file 18 [ 308.026877] workingset_restore_anon 0 [ 308.026877] workingset_restore_file 0 [ 308.026877] workingset_nodereclaim 0 [ 308.026877] pgfault 145240 [ 308.026877] pgmajfault 70 [ 308.026917] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4932,uid=0 [ 308.026987] Memory cgroup out of memory: Killed process 4932 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:33:03 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r1 = fork() setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r1, r1}) 04:33:03 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) 04:33:03 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:33:03 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:03 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) msgget(0x3, 0x480) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:33:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, 0x0, 0x20000881) 04:33:03 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 04:33:03 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:33:03 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:33:04 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:33:04 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, 0x0, 0x20000881) 04:33:04 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:33:04 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:33:04 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 04:33:04 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, '\x00'}) [ 321.641986] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 321.642022] CPU: 1 PID: 4980 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 321.642045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 321.642058] Call Trace: [ 321.642064] [ 321.642072] dump_stack_lvl+0x8b/0xb3 [ 321.642108] dump_header+0x10b/0x7e4 [ 321.642137] oom_kill_process.cold+0x10/0x15 [ 321.642167] out_of_memory+0x358/0x14b0 [ 321.642203] ? find_held_lock+0x2c/0x110 [ 321.642230] ? oom_killer_disable+0x270/0x270 [ 321.642259] ? lock_is_held_type+0xd7/0x130 [ 321.642290] mem_cgroup_out_of_memory+0x1e5/0x250 [ 321.642327] ? mem_cgroup_margin+0x130/0x130 [ 321.642371] ? mem_cgroup_iter+0x28d/0x6e0 [ 321.642410] try_charge_memcg+0xed1/0x1360 [ 321.642445] ? mem_cgroup_handle_over_high+0x480/0x480 [ 321.642470] ? lock_release+0x3b2/0x750 [ 321.642501] ? lock_downgrade+0x6d0/0x6d0 [ 321.642559] charge_memcg+0x233/0x370 [ 321.642587] __mem_cgroup_charge+0x24/0x80 [ 321.642615] __handle_mm_fault+0x1103/0x3670 [ 321.642653] ? lock_is_held_type+0xd7/0x130 [ 321.642674] ? __pmd_alloc+0x680/0x680 [ 321.642741] handle_mm_fault+0x2e6/0xa20 [ 321.642778] __get_user_pages+0x50d/0x1100 [ 321.642819] ? follow_page_mask+0x1a40/0x1a40 [ 321.642872] populate_vma_page_range+0x23d/0x320 [ 321.642906] __mm_populate+0x1ea/0x3e0 [ 321.642937] ? faultin_vma_page_range+0x300/0x300 [ 321.642969] ? up_write+0x148/0x460 [ 321.643000] __do_sys_mlockall+0x41f/0x4b0 [ 321.643036] do_syscall_64+0x3b/0x90 [ 321.643067] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 321.643102] RIP: 0033:0x7feee2155b19 [ 321.643119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 321.643139] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 321.643160] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 321.643174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 321.643186] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 321.643198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.643210] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 321.643251] [ 321.643375] memory: usage 307200kB, limit 307200kB, failcnt 2275 [ 321.643391] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 321.643403] Memory cgroup stats for /syz7: [ 321.650862] anon 288952320 [ 321.650862] file 20709376 [ 321.650862] kernel 4911104 [ 321.650862] kernel_stack 688128 [ 321.650862] pagetables 2908160 [ 321.650862] percpu 0 [ 321.650862] sock 0 [ 321.650862] vmalloc 0 [ 321.650862] shmem 0 [ 321.650862] file_mapped 20709376 [ 321.650862] file_dirty 0 [ 321.650862] file_writeback 0 [ 321.650862] swapcached 0 [ 321.650862] inactive_anon 261160960 [ 321.650862] active_anon 0 [ 321.650862] inactive_file 0 [ 321.650862] active_file 0 [ 321.650862] unevictable 48500736 [ 321.650862] slab_reclaimable 148864 [ 321.650862] slab_unreclaimable 780808 [ 321.650862] slab 929672 [ 321.650862] workingset_refault_anon 0 [ 321.650862] workingset_refault_file 19245 [ 321.650862] workingset_activate_anon 0 [ 321.650862] workingset_activate_file 18 [ 321.650862] workingset_restore_anon 0 [ 321.650862] workingset_restore_file 0 [ 321.650862] workingset_nodereclaim 0 [ 321.650862] pgfault 152388 [ 321.650862] pgmajfault 70 [ 321.650932] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=4958,uid=0 [ 321.651040] Memory cgroup out of memory: Killed process 4958 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:33:16 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4}) 04:33:16 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:33:16 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:33:16 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:33:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:33:16 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:33:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:16 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 04:33:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:16 executing program 3: syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 04:33:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:33:16 executing program 2: msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000000)=""/67) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:33:16 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:33:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:33:16 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:16 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 333.861496] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 333.861521] CPU: 0 PID: 5047 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 333.861533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 333.861545] Call Trace: [ 333.861549] [ 333.861554] dump_stack_lvl+0x8b/0xb3 [ 333.861578] dump_header+0x10b/0x7e4 [ 333.861596] oom_kill_process.cold+0x10/0x15 [ 333.861612] out_of_memory+0x358/0x14b0 [ 333.861633] ? find_held_lock+0x2c/0x110 [ 333.861648] ? oom_killer_disable+0x270/0x270 [ 333.861664] ? lock_is_held_type+0xd7/0x130 [ 333.861682] mem_cgroup_out_of_memory+0x1e5/0x250 [ 333.861703] ? mem_cgroup_margin+0x130/0x130 [ 333.861727] ? mem_cgroup_iter+0x28d/0x6e0 [ 333.861748] try_charge_memcg+0xed1/0x1360 [ 333.861767] ? mem_cgroup_handle_over_high+0x480/0x480 [ 333.861782] ? lock_release+0x3b2/0x750 [ 333.861801] ? lock_downgrade+0x6d0/0x6d0 [ 333.861831] charge_memcg+0x233/0x370 [ 333.861846] __mem_cgroup_charge+0x24/0x80 [ 333.861861] __handle_mm_fault+0x1103/0x3670 [ 333.861881] ? lock_is_held_type+0xd7/0x130 [ 333.861893] ? __pmd_alloc+0x680/0x680 [ 333.861929] handle_mm_fault+0x2e6/0xa20 [ 333.861949] __get_user_pages+0x50d/0x1100 [ 333.861972] ? follow_page_mask+0x1a40/0x1a40 [ 333.862000] populate_vma_page_range+0x23d/0x320 [ 333.862019] __mm_populate+0x1ea/0x3e0 [ 333.862035] ? faultin_vma_page_range+0x300/0x300 [ 333.862053] ? up_write+0x148/0x460 [ 333.862070] __do_sys_mlockall+0x41f/0x4b0 [ 333.862090] do_syscall_64+0x3b/0x90 [ 333.862107] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 333.862127] RIP: 0033:0x7feee2155b19 [ 333.862136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 333.862147] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 333.862159] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 333.862166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 333.862173] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 333.862180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.862187] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 333.862209] [ 333.862267] memory: usage 307200kB, limit 307200kB, failcnt 2320 [ 333.862275] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 333.862282] Memory cgroup stats for /syz7: [ 333.864645] anon 288944128 [ 333.864645] file 20709376 [ 333.864645] kernel 4919296 [ 333.864645] kernel_stack 688128 [ 333.864645] pagetables 2908160 [ 333.864645] percpu 0 [ 333.864645] sock 0 [ 333.864645] vmalloc 0 [ 333.864645] shmem 0 [ 333.864645] file_mapped 20709376 [ 333.864645] file_dirty 0 [ 333.864645] file_writeback 0 [ 333.864645] swapcached 0 [ 333.864645] inactive_anon 261169152 [ 333.864645] active_anon 0 [ 333.864645] inactive_file 0 [ 333.864645] active_file 0 [ 333.864645] unevictable 48484352 [ 333.864645] slab_reclaimable 148864 [ 333.864645] slab_unreclaimable 786968 [ 333.864645] slab 935832 [ 333.864645] workingset_refault_anon 0 [ 333.864645] workingset_refault_file 19245 [ 333.864645] workingset_activate_anon 0 [ 333.864645] workingset_activate_file 18 [ 333.864645] workingset_restore_anon 0 [ 333.864645] workingset_restore_file 0 [ 333.864645] workingset_nodereclaim 0 [ 333.864645] pgfault 159534 [ 333.864645] pgmajfault 70 [ 333.864683] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5024,uid=0 [ 333.864744] Memory cgroup out of memory: Killed process 5024 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:33:28 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:33:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:33:28 executing program 2: msgget(0x3, 0x480) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:33:28 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:33:28 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:33:28 executing program 3: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 04:33:28 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:28 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4}) 04:33:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x42000}, 0x20000881) 04:33:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x20000881) 04:33:28 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) msgctl$MSG_STAT(0x0, 0xb, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:33:28 executing program 3: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 04:33:28 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:28 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:33:28 executing program 2: msgget(0x3, 0x480) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:33:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 04:33:28 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 345.486180] Zero length message leads to an empty skb 04:33:28 executing program 3: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 04:33:28 executing program 1: msgget$private(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:33:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 04:33:28 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:28 executing program 2: msgget(0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000400)=""/203) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 345.893360] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 345.893399] CPU: 1 PID: 5098 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 345.893422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 345.893436] Call Trace: [ 345.893442] [ 345.893450] dump_stack_lvl+0x8b/0xb3 [ 345.893488] dump_header+0x10b/0x7e4 [ 345.893517] oom_kill_process.cold+0x10/0x15 [ 345.893552] out_of_memory+0x358/0x14b0 [ 345.893589] ? find_held_lock+0x2c/0x110 [ 345.893616] ? oom_killer_disable+0x270/0x270 [ 345.893645] ? lock_is_held_type+0xd7/0x130 [ 345.893677] mem_cgroup_out_of_memory+0x1e5/0x250 [ 345.893715] ? mem_cgroup_margin+0x130/0x130 [ 345.893759] ? mem_cgroup_iter+0x28d/0x6e0 [ 345.893797] try_charge_memcg+0xed1/0x1360 [ 345.893833] ? mem_cgroup_handle_over_high+0x480/0x480 [ 345.893858] ? lock_release+0x3b2/0x750 [ 345.893888] ? lock_downgrade+0x6d0/0x6d0 [ 345.893941] charge_memcg+0x233/0x370 [ 345.893969] __mem_cgroup_charge+0x24/0x80 [ 345.893997] __handle_mm_fault+0x1103/0x3670 [ 345.894034] ? lock_is_held_type+0xd7/0x130 [ 345.894055] ? __pmd_alloc+0x680/0x680 [ 345.894123] handle_mm_fault+0x2e6/0xa20 [ 345.894160] __get_user_pages+0x50d/0x1100 [ 345.894201] ? follow_page_mask+0x1a40/0x1a40 [ 345.894254] populate_vma_page_range+0x23d/0x320 [ 345.894288] __mm_populate+0x1ea/0x3e0 [ 345.894319] ? faultin_vma_page_range+0x300/0x300 [ 345.894351] ? up_write+0x148/0x460 [ 345.894382] __do_sys_mlockall+0x41f/0x4b0 [ 345.894419] do_syscall_64+0x3b/0x90 [ 345.894449] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 345.894484] RIP: 0033:0x7feee2155b19 [ 345.894501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 345.894521] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 345.894543] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 345.894557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 345.894569] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 345.894581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.894593] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 345.894635] [ 345.894748] memory: usage 307200kB, limit 307200kB, failcnt 2379 [ 345.894762] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 345.894774] Memory cgroup stats for /syz7: [ 345.908969] anon 289034240 [ 345.908969] file 20709376 [ 345.908969] kernel 4820992 [ 345.908969] kernel_stack 688128 [ 345.908969] pagetables 2908160 [ 345.908969] percpu 0 [ 345.908969] sock 0 [ 345.908969] vmalloc 0 [ 345.908969] shmem 0 [ 345.908969] file_mapped 20709376 [ 345.908969] file_dirty 0 [ 345.908969] file_writeback 0 [ 345.908969] swapcached 0 [ 345.908969] inactive_anon 261169152 [ 345.908969] active_anon 0 [ 345.908969] inactive_file 0 [ 345.908969] active_file 0 [ 345.908969] unevictable 48562176 [ 345.908969] slab_reclaimable 111512 [ 345.908969] slab_unreclaimable 727264 [ 345.908969] slab 838776 [ 345.908969] workingset_refault_anon 0 [ 345.908969] workingset_refault_file 19245 [ 345.908969] workingset_activate_anon 0 [ 345.908969] workingset_activate_file 18 [ 345.908969] workingset_restore_anon 0 [ 345.908969] workingset_restore_file 0 [ 345.908969] workingset_nodereclaim 0 [ 345.908969] pgfault 166702 [ 345.908969] pgmajfault 70 [ 345.909047] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5075,uid=0 [ 345.909187] Memory cgroup out of memory: Killed process 5075 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:33:41 executing program 1: msgget$private(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:33:41 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:33:41 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4}) 04:33:41 executing program 2: msgget(0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:33:41 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:33:41 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:33:41 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) [ 359.482422] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 359.482444] CPU: 0 PID: 5139 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 359.482457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 359.482465] Call Trace: [ 359.482468] [ 359.482473] dump_stack_lvl+0x8b/0xb3 [ 359.482498] dump_header+0x10b/0x7e4 [ 359.482515] oom_kill_process.cold+0x10/0x15 [ 359.482535] out_of_memory+0x358/0x14b0 [ 359.482558] ? find_held_lock+0x2c/0x110 [ 359.482579] ? oom_killer_disable+0x270/0x270 [ 359.482594] ? lock_is_held_type+0xd7/0x130 [ 359.482613] mem_cgroup_out_of_memory+0x1e5/0x250 [ 359.482634] ? mem_cgroup_margin+0x130/0x130 [ 359.482658] ? mem_cgroup_iter+0x28d/0x6e0 [ 359.482679] try_charge_memcg+0xed1/0x1360 [ 359.482698] ? mem_cgroup_handle_over_high+0x480/0x480 [ 359.482712] ? lock_release+0x3b2/0x750 [ 359.482729] ? lock_downgrade+0x6d0/0x6d0 [ 359.482757] charge_memcg+0x233/0x370 [ 359.482772] __mem_cgroup_charge+0x24/0x80 [ 359.482787] __handle_mm_fault+0x1103/0x3670 [ 359.482808] ? lock_is_held_type+0xd7/0x130 [ 359.482819] ? __pmd_alloc+0x680/0x680 [ 359.482855] handle_mm_fault+0x2e6/0xa20 [ 359.482875] __get_user_pages+0x50d/0x1100 [ 359.482898] ? follow_page_mask+0x1a40/0x1a40 [ 359.482927] populate_vma_page_range+0x23d/0x320 [ 359.482945] __mm_populate+0x1ea/0x3e0 [ 359.482961] ? faultin_vma_page_range+0x300/0x300 [ 359.482979] ? up_write+0x148/0x460 [ 359.482996] __do_sys_mlockall+0x41f/0x4b0 [ 359.483015] do_syscall_64+0x3b/0x90 [ 359.483034] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 359.483053] RIP: 0033:0x7feee2155b19 [ 359.483063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 359.483074] RSP: 002b:00007feedf6cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 359.483086] RAX: ffffffffffffffda RBX: 00007feee2268f60 RCX: 00007feee2155b19 [ 359.483093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 359.483100] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 359.483107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.483113] R13: 00007ffcb9eaa3af R14: 00007feedf6cb300 R15: 0000000000022000 [ 359.483136] [ 359.483203] memory: usage 307200kB, limit 307200kB, failcnt 2407 [ 359.483211] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 359.483218] Memory cgroup stats for /syz7: [ 359.486658] anon 289046528 [ 359.486658] file 20713472 [ 359.486658] kernel 4812800 [ 359.486658] kernel_stack 622592 [ 359.486658] pagetables 2908160 [ 359.486658] percpu 0 [ 359.486658] sock 0 [ 359.486658] vmalloc 0 [ 359.486658] shmem 0 [ 359.486658] file_mapped 20709376 [ 359.486658] file_dirty 4096 [ 359.486658] file_writeback 0 [ 359.486658] swapcached 0 [ 359.486658] inactive_anon 261169152 [ 359.486658] active_anon 0 [ 359.486658] inactive_file 0 [ 359.486658] active_file 4096 [ 359.486658] unevictable 48586752 [ 359.486658] slab_reclaimable 149104 [ 359.486658] slab_unreclaimable 754152 [ 359.486658] slab 903256 [ 359.486658] workingset_refault_anon 0 [ 359.486658] workingset_refault_file 19245 [ 359.486658] workingset_activate_anon 0 [ 359.486658] workingset_activate_file 18 [ 359.486658] workingset_restore_anon 0 [ 359.486658] workingset_restore_file 0 [ 359.486658] workingset_nodereclaim 0 [ 359.486658] pgfault 173871 [ 359.486658] pgmajfault 70 [ 359.486696] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5126,uid=0 [ 359.486759] Memory cgroup out of memory: Killed process 5126 (syz-executor.7) total-vm:93412kB, anon-rss:27264kB, file-rss:55624kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:33:54 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:33:54 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) 04:33:54 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:33:54 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:33:54 executing program 2: msgget(0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:33:54 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:33:54 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:54 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4}) 04:33:54 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:54 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:54 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 04:33:54 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:33:54 executing program 2: msgget(0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:33:54 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:33:54 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:33:54 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) [ 372.027904] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 372.027939] CPU: 0 PID: 5190 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 372.027962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 372.027976] Call Trace: [ 372.027982] [ 372.027990] dump_stack_lvl+0x8b/0xb3 [ 372.028028] dump_header+0x10b/0x7e4 [ 372.028059] oom_kill_process.cold+0x10/0x15 [ 372.028089] out_of_memory+0x358/0x14b0 [ 372.028126] ? find_held_lock+0x2c/0x110 [ 372.028153] ? oom_killer_disable+0x270/0x270 [ 372.028182] ? lock_is_held_type+0xd7/0x130 [ 372.028215] mem_cgroup_out_of_memory+0x1e5/0x250 [ 372.028252] ? mem_cgroup_margin+0x130/0x130 [ 372.028296] ? mem_cgroup_iter+0x28d/0x6e0 [ 372.028340] try_charge_memcg+0xed1/0x1360 [ 372.028376] ? mem_cgroup_handle_over_high+0x480/0x480 [ 372.028401] ? lock_release+0x3b2/0x750 [ 372.028432] ? lock_downgrade+0x6d0/0x6d0 [ 372.028484] charge_memcg+0x233/0x370 [ 372.028512] __mem_cgroup_charge+0x24/0x80 [ 372.028540] __handle_mm_fault+0x1103/0x3670 [ 372.028591] ? lock_is_held_type+0xd7/0x130 [ 372.028613] ? __pmd_alloc+0x680/0x680 [ 372.028680] handle_mm_fault+0x2e6/0xa20 [ 372.028717] __get_user_pages+0x50d/0x1100 [ 372.028759] ? follow_page_mask+0x1a40/0x1a40 [ 372.028812] populate_vma_page_range+0x23d/0x320 [ 372.028847] __mm_populate+0x1ea/0x3e0 [ 372.028877] ? faultin_vma_page_range+0x300/0x300 [ 372.028910] ? up_write+0x148/0x460 [ 372.028941] __do_sys_mlockall+0x41f/0x4b0 [ 372.028978] do_syscall_64+0x3b/0x90 [ 372.029010] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 372.029045] RIP: 0033:0x7feee2155b19 [ 372.029062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 372.029082] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 372.029103] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 372.029117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 372.029129] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 372.029142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.029154] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 372.029196] [ 372.029315] memory: usage 307200kB, limit 307200kB, failcnt 2458 [ 372.029329] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 372.029341] Memory cgroup stats for /syz7: [ 372.032902] anon 288968704 [ 372.032902] file 20709376 [ 372.032902] kernel 4894720 [ 372.032902] kernel_stack 688128 [ 372.032902] pagetables 2908160 [ 372.032902] percpu 0 [ 372.032902] sock 0 [ 372.032902] vmalloc 0 [ 372.032902] shmem 0 [ 372.032902] file_mapped 20709376 [ 372.032902] file_dirty 0 [ 372.032902] file_writeback 0 [ 372.032902] swapcached 0 [ 372.032902] inactive_anon 261169152 [ 372.032902] active_anon 0 [ 372.032902] inactive_file 0 [ 372.032902] active_file 0 [ 372.032902] unevictable 48500736 [ 372.032902] slab_reclaimable 149104 [ 372.032902] slab_unreclaimable 762688 [ 372.032902] slab 911792 [ 372.032902] workingset_refault_anon 0 [ 372.032902] workingset_refault_file 19245 [ 372.032902] workingset_activate_anon 0 [ 372.032902] workingset_activate_file 18 [ 372.032902] workingset_restore_anon 0 [ 372.032902] workingset_restore_file 0 [ 372.032902] workingset_nodereclaim 0 [ 372.032902] pgfault 181023 [ 372.032902] pgmajfault 70 [ 372.032970] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5165,uid=0 [ 372.033087] Memory cgroup out of memory: Killed process 5165 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:34:08 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:08 executing program 3: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000c010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:34:08 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4}) 04:34:08 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) 04:34:08 executing program 1: msgget(0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:34:08 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:34:08 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:34:08 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:34:08 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:08 executing program 1: msgget(0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:34:08 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:34:08 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:34:08 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:08 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x20}}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:34:08 executing program 1: msgget(0x3, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:34:08 executing program 3: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:08 executing program 6: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, 0x0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:34:08 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) [ 386.271971] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 386.271994] CPU: 1 PID: 5238 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 386.272007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 386.272015] Call Trace: [ 386.272019] [ 386.272024] dump_stack_lvl+0x8b/0xb3 [ 386.272046] dump_header+0x10b/0x7e4 [ 386.272063] oom_kill_process.cold+0x10/0x15 [ 386.272079] out_of_memory+0x358/0x14b0 [ 386.272100] ? find_held_lock+0x2c/0x110 [ 386.272115] ? oom_killer_disable+0x270/0x270 [ 386.272131] ? lock_is_held_type+0xd7/0x130 [ 386.272149] mem_cgroup_out_of_memory+0x1e5/0x250 [ 386.272170] ? mem_cgroup_margin+0x130/0x130 [ 386.272193] ? mem_cgroup_iter+0x28d/0x6e0 [ 386.272214] try_charge_memcg+0xed1/0x1360 [ 386.272234] ? mem_cgroup_handle_over_high+0x480/0x480 [ 386.272247] ? lock_release+0x3b2/0x750 [ 386.272264] ? lock_downgrade+0x6d0/0x6d0 [ 386.272292] charge_memcg+0x233/0x370 [ 386.272307] __mem_cgroup_charge+0x24/0x80 [ 386.272322] __handle_mm_fault+0x1103/0x3670 [ 386.272343] ? lock_is_held_type+0xd7/0x130 [ 386.272354] ? __pmd_alloc+0x680/0x680 [ 386.272390] handle_mm_fault+0x2e6/0xa20 [ 386.272410] __get_user_pages+0x50d/0x1100 [ 386.272433] ? follow_page_mask+0x1a40/0x1a40 [ 386.272461] populate_vma_page_range+0x23d/0x320 [ 386.272480] __mm_populate+0x1ea/0x3e0 [ 386.272496] ? faultin_vma_page_range+0x300/0x300 [ 386.272513] ? up_write+0x148/0x460 [ 386.272533] __do_sys_mlockall+0x41f/0x4b0 [ 386.272556] do_syscall_64+0x3b/0x90 [ 386.272574] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 386.272593] RIP: 0033:0x7feee2155b19 [ 386.272603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 386.272614] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 386.272626] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 386.272633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 386.272640] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 386.272646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.272653] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 386.272675] [ 386.272739] memory: usage 307200kB, limit 307200kB, failcnt 2488 [ 386.272747] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 386.272754] Memory cgroup stats for /syz7: [ 386.280772] anon 288948224 [ 386.280772] file 20709376 [ 386.280772] kernel 4878336 [ 386.280772] kernel_stack 688128 [ 386.280772] pagetables 2908160 [ 386.280772] percpu 0 [ 386.280772] sock 0 [ 386.280772] vmalloc 0 [ 386.280772] shmem 0 [ 386.280772] file_mapped 20709376 [ 386.280772] file_dirty 0 [ 386.280772] file_writeback 0 [ 386.280772] swapcached 0 [ 386.280772] inactive_anon 261169152 [ 386.280772] active_anon 0 [ 386.280772] inactive_file 0 [ 386.280772] active_file 0 [ 386.280772] unevictable 48488448 [ 386.280772] slab_reclaimable 136736 [ 386.280772] slab_unreclaimable 757160 [ 386.280772] slab 893896 [ 386.280772] workingset_refault_anon 0 [ 386.280772] workingset_refault_file 19245 [ 386.280772] workingset_activate_anon 0 [ 386.280772] workingset_activate_file 18 [ 386.280772] workingset_restore_anon 0 [ 386.280772] workingset_restore_file 0 [ 386.280772] workingset_nodereclaim 0 [ 386.280772] pgfault 188168 [ 386.280772] pgmajfault 70 [ 386.280817] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5219,uid=0 [ 386.280886] Memory cgroup out of memory: Killed process 5219 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:34:21 executing program 3: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:21 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4}) 04:34:21 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) 04:34:21 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:34:21 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:34:21 executing program 1: msgget(0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:34:21 executing program 6: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, 0x0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:34:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:21 executing program 3: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:21 executing program 1: msgget(0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:34:21 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:21 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:34:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:21 executing program 6: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, 0x0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:34:21 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:34:21 executing program 5: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:34:21 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) [ 398.735100] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 398.735124] CPU: 1 PID: 5278 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 398.735137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 398.735145] Call Trace: [ 398.735149] [ 398.735153] dump_stack_lvl+0x8b/0xb3 [ 398.735178] dump_header+0x10b/0x7e4 [ 398.735195] oom_kill_process.cold+0x10/0x15 [ 398.735211] out_of_memory+0x358/0x14b0 [ 398.735232] ? find_held_lock+0x2c/0x110 [ 398.735248] ? oom_killer_disable+0x270/0x270 [ 398.735264] ? lock_is_held_type+0xd7/0x130 [ 398.735282] mem_cgroup_out_of_memory+0x1e5/0x250 [ 398.735303] ? mem_cgroup_margin+0x130/0x130 [ 398.735327] ? mem_cgroup_iter+0x28d/0x6e0 [ 398.735348] try_charge_memcg+0xed1/0x1360 [ 398.735367] ? mem_cgroup_handle_over_high+0x480/0x480 [ 398.735381] ? lock_release+0x3b2/0x750 [ 398.735398] ? lock_downgrade+0x6d0/0x6d0 [ 398.735426] charge_memcg+0x233/0x370 [ 398.735441] __mem_cgroup_charge+0x24/0x80 [ 398.735456] __handle_mm_fault+0x1103/0x3670 [ 398.735477] ? lock_is_held_type+0xd7/0x130 [ 398.735489] ? __pmd_alloc+0x680/0x680 [ 398.735528] handle_mm_fault+0x2e6/0xa20 [ 398.735549] __get_user_pages+0x50d/0x1100 [ 398.735572] ? follow_page_mask+0x1a40/0x1a40 [ 398.735600] populate_vma_page_range+0x23d/0x320 [ 398.735619] __mm_populate+0x1ea/0x3e0 [ 398.735635] ? faultin_vma_page_range+0x300/0x300 [ 398.735653] ? up_write+0x148/0x460 [ 398.735670] __do_sys_mlockall+0x41f/0x4b0 [ 398.735689] do_syscall_64+0x3b/0x90 [ 398.735707] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 398.735726] RIP: 0033:0x7feee2155b19 [ 398.735736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 398.735747] RSP: 002b:00007feedf6cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 398.735758] RAX: ffffffffffffffda RBX: 00007feee2268f60 RCX: 00007feee2155b19 [ 398.735766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 398.735773] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 398.735780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.735786] R13: 00007ffcb9eaa3af R14: 00007feedf6cb300 R15: 0000000000022000 [ 398.735809] [ 398.735906] memory: usage 307200kB, limit 307200kB, failcnt 2511 [ 398.735915] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 398.735922] Memory cgroup stats for /syz7: [ 398.737359] anon 289050624 [ 398.737359] file 20709376 [ 398.737359] kernel 4812800 [ 398.737359] kernel_stack 622592 [ 398.737359] pagetables 2908160 [ 398.737359] percpu 0 [ 398.737359] sock 0 [ 398.737359] vmalloc 0 [ 398.737359] shmem 0 [ 398.737359] file_mapped 20709376 [ 398.737359] file_dirty 0 [ 398.737359] file_writeback 0 [ 398.737359] swapcached 0 [ 398.737359] inactive_anon 261169152 [ 398.737359] active_anon 0 [ 398.737359] inactive_file 0 [ 398.737359] active_file 0 [ 398.737359] unevictable 48553984 [ 398.737359] slab_reclaimable 148864 [ 398.737359] slab_unreclaimable 754152 [ 398.737359] slab 903016 [ 398.737359] workingset_refault_anon 0 [ 398.737359] workingset_refault_file 19245 [ 398.737359] workingset_activate_anon 0 [ 398.737359] workingset_activate_file 18 [ 398.737359] workingset_restore_anon 0 [ 398.737359] workingset_restore_file 0 [ 398.737359] workingset_nodereclaim 0 [ 398.737359] pgfault 195338 [ 398.737359] pgmajfault 70 [ 398.737397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5277,uid=0 [ 398.737457] Memory cgroup out of memory: Killed process 5277 (syz-executor.7) total-vm:93412kB, anon-rss:27264kB, file-rss:55624kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:34:34 executing program 1: msgget(0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:34:34 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:34 executing program 5: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:34:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:34 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:34:34 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) 04:34:34 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) 04:34:34 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:34 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:34:34 executing program 1: msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:34:34 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:34 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:34 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:34:34 executing program 5: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:34:34 executing program 1: msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:34:34 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:34:34 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) [ 411.767434] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 411.767471] CPU: 1 PID: 5329 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 411.767495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 411.767510] Call Trace: [ 411.767522] [ 411.767530] dump_stack_lvl+0x8b/0xb3 [ 411.767571] dump_header+0x10b/0x7e4 [ 411.767603] oom_kill_process.cold+0x10/0x15 [ 411.767635] out_of_memory+0x358/0x14b0 [ 411.767674] ? find_held_lock+0x2c/0x110 [ 411.767703] ? oom_killer_disable+0x270/0x270 [ 411.767734] ? lock_is_held_type+0xd7/0x130 [ 411.767769] mem_cgroup_out_of_memory+0x1e5/0x250 [ 411.767808] ? mem_cgroup_margin+0x130/0x130 [ 411.767856] ? mem_cgroup_iter+0x28d/0x6e0 [ 411.767897] try_charge_memcg+0xed1/0x1360 [ 411.767935] ? mem_cgroup_handle_over_high+0x480/0x480 [ 411.767962] ? lock_release+0x3b2/0x750 [ 411.767995] ? lock_downgrade+0x6d0/0x6d0 [ 411.768051] charge_memcg+0x233/0x370 [ 411.768081] __mem_cgroup_charge+0x24/0x80 [ 411.768111] __handle_mm_fault+0x1103/0x3670 [ 411.768151] ? lock_is_held_type+0xd7/0x130 [ 411.768174] ? __pmd_alloc+0x680/0x680 [ 411.768246] handle_mm_fault+0x2e6/0xa20 [ 411.768286] __get_user_pages+0x50d/0x1100 [ 411.768330] ? follow_page_mask+0x1a40/0x1a40 [ 411.768387] populate_vma_page_range+0x23d/0x320 [ 411.768424] __mm_populate+0x1ea/0x3e0 [ 411.768456] ? faultin_vma_page_range+0x300/0x300 [ 411.768491] ? up_write+0x148/0x460 [ 411.768525] __do_sys_mlockall+0x41f/0x4b0 [ 411.768564] do_syscall_64+0x3b/0x90 [ 411.768598] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 411.768636] RIP: 0033:0x7feee2155b19 [ 411.768653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 411.768674] RSP: 002b:00007feedf6cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 411.768696] RAX: ffffffffffffffda RBX: 00007feee2268f60 RCX: 00007feee2155b19 [ 411.768711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 411.768724] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 411.768738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.768751] R13: 00007ffcb9eaa3af R14: 00007feedf6cb300 R15: 0000000000022000 [ 411.768795] [ 411.768890] memory: usage 307200kB, limit 307200kB, failcnt 2569 [ 411.768905] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 411.768918] Memory cgroup stats for /syz7: [ 411.773800] anon 289075200 [ 411.773800] file 20709376 [ 411.773800] kernel 4788224 [ 411.773800] kernel_stack 622592 [ 411.773800] pagetables 2908160 [ 411.773800] percpu 0 [ 411.773800] sock 0 [ 411.773800] vmalloc 0 [ 411.773800] shmem 0 [ 411.773800] file_mapped 20709376 [ 411.773800] file_dirty 0 [ 411.773800] file_writeback 0 [ 411.773800] swapcached 0 [ 411.773800] inactive_anon 261169152 [ 411.773800] active_anon 0 [ 411.773800] inactive_file 0 [ 411.773800] active_file 0 [ 411.773800] unevictable 48615424 [ 411.773800] slab_reclaimable 148864 [ 411.773800] slab_unreclaimable 729608 [ 411.773800] slab 878472 [ 411.773800] workingset_refault_anon 0 [ 411.773800] workingset_refault_file 19245 [ 411.773800] workingset_activate_anon 0 [ 411.773800] workingset_activate_file 18 [ 411.773800] workingset_restore_anon 0 [ 411.773800] workingset_restore_file 0 [ 411.773800] workingset_nodereclaim 0 [ 411.773800] pgfault 202514 [ 411.773800] pgmajfault 70 [ 411.773874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5328,uid=0 [ 411.773988] Memory cgroup out of memory: Killed process 5328 (syz-executor.7) total-vm:93412kB, anon-rss:27264kB, file-rss:55624kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:34:46 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 04:34:46 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:34:46 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) 04:34:46 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) 04:34:46 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:34:46 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 04:34:46 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:34:46 executing program 1: msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 04:34:46 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:34:46 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:34:46 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:34:46 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:34:46 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 424.077545] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 424.077570] CPU: 0 PID: 5392 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 424.077583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 424.077591] Call Trace: [ 424.077595] [ 424.077600] dump_stack_lvl+0x8b/0xb3 [ 424.077623] dump_header+0x10b/0x7e4 [ 424.077639] oom_kill_process.cold+0x10/0x15 [ 424.077655] out_of_memory+0x358/0x14b0 [ 424.077676] ? find_held_lock+0x2c/0x110 [ 424.077691] ? oom_killer_disable+0x270/0x270 [ 424.077707] ? lock_is_held_type+0xd7/0x130 [ 424.077724] mem_cgroup_out_of_memory+0x1e5/0x250 [ 424.077745] ? mem_cgroup_margin+0x130/0x130 [ 424.077769] ? mem_cgroup_iter+0x28d/0x6e0 [ 424.077790] try_charge_memcg+0xed1/0x1360 [ 424.077809] ? mem_cgroup_handle_over_high+0x480/0x480 [ 424.077822] ? lock_release+0x3b2/0x750 [ 424.077839] ? lock_downgrade+0x6d0/0x6d0 [ 424.077867] charge_memcg+0x233/0x370 [ 424.077882] __mem_cgroup_charge+0x24/0x80 [ 424.077897] __handle_mm_fault+0x1103/0x3670 [ 424.077917] ? lock_is_held_type+0xd7/0x130 [ 424.077929] ? __pmd_alloc+0x680/0x680 [ 424.077965] handle_mm_fault+0x2e6/0xa20 [ 424.077985] __get_user_pages+0x50d/0x1100 [ 424.078007] ? follow_page_mask+0x1a40/0x1a40 [ 424.078035] populate_vma_page_range+0x23d/0x320 [ 424.078053] __mm_populate+0x1ea/0x3e0 [ 424.078070] ? faultin_vma_page_range+0x300/0x300 [ 424.078087] ? up_write+0x148/0x460 [ 424.078104] __do_sys_mlockall+0x41f/0x4b0 [ 424.078123] do_syscall_64+0x3b/0x90 [ 424.078140] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 424.078159] RIP: 0033:0x7feee2155b19 [ 424.078169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 424.078180] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 424.078192] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 424.078200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 424.078206] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 424.078213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.078219] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 424.078241] [ 424.078245] memory: usage 307200kB, limit 307200kB, failcnt 2614 [ 424.078252] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 424.078258] Memory cgroup stats for /syz7: [ 424.078402] anon 288972800 [ 424.078402] file 20709376 [ 424.078402] kernel 4890624 [ 424.078402] kernel_stack 688128 [ 424.078402] pagetables 2908160 [ 424.078402] percpu 0 [ 424.078402] sock 0 [ 424.078402] vmalloc 0 [ 424.078402] shmem 0 [ 424.078402] file_mapped 20709376 [ 424.078402] file_dirty 0 [ 424.078402] file_writeback 0 [ 424.078402] swapcached 0 [ 424.078402] inactive_anon 261169152 [ 424.078402] active_anon 0 [ 424.078402] inactive_file 0 [ 424.078402] active_file 0 [ 424.078402] unevictable 48500736 [ 424.078402] slab_reclaimable 148864 [ 424.078402] slab_unreclaimable 756528 [ 424.078402] slab 905392 [ 424.078402] workingset_refault_anon 0 [ 424.078402] workingset_refault_file 19245 [ 424.078402] workingset_activate_anon 0 [ 424.078402] workingset_activate_file 18 [ 424.078402] workingset_restore_anon 0 [ 424.078402] workingset_restore_file 0 [ 424.078402] workingset_nodereclaim 0 [ 424.078402] pgfault 209666 [ 424.078402] pgmajfault 70 [ 424.078438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5375,uid=0 [ 424.078498] Memory cgroup out of memory: Killed process 5375 (syz-executor.7) total-vm:93544kB, anon-rss:27268kB, file-rss:55624kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:35:00 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:35:00 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:35:00 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:35:00 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) 04:35:00 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:35:00 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:00 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 04:35:00 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:35:00 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:35:00 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:35:00 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:35:00 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:35:00 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 04:35:00 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:00 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:00 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) [ 438.164200] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 438.164234] CPU: 0 PID: 5436 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 438.164256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 438.164270] Call Trace: [ 438.164275] [ 438.164283] dump_stack_lvl+0x8b/0xb3 [ 438.164319] dump_header+0x10b/0x7e4 [ 438.164349] oom_kill_process.cold+0x10/0x15 [ 438.164379] out_of_memory+0x358/0x14b0 [ 438.164415] ? find_held_lock+0x2c/0x110 [ 438.164442] ? oom_killer_disable+0x270/0x270 [ 438.164471] ? lock_is_held_type+0xd7/0x130 [ 438.164502] mem_cgroup_out_of_memory+0x1e5/0x250 [ 438.164545] ? mem_cgroup_margin+0x130/0x130 [ 438.164589] ? mem_cgroup_iter+0x28d/0x6e0 [ 438.164627] try_charge_memcg+0xed1/0x1360 [ 438.164663] ? mem_cgroup_handle_over_high+0x480/0x480 [ 438.164688] ? lock_release+0x3b2/0x750 [ 438.164719] ? lock_downgrade+0x6d0/0x6d0 [ 438.164771] charge_memcg+0x233/0x370 [ 438.164799] __mem_cgroup_charge+0x24/0x80 [ 438.164827] __handle_mm_fault+0x1103/0x3670 [ 438.164864] ? lock_is_held_type+0xd7/0x130 [ 438.164886] ? __pmd_alloc+0x680/0x680 [ 438.164953] handle_mm_fault+0x2e6/0xa20 [ 438.164990] __get_user_pages+0x50d/0x1100 [ 438.165031] ? follow_page_mask+0x1a40/0x1a40 [ 438.165084] populate_vma_page_range+0x23d/0x320 [ 438.165118] __mm_populate+0x1ea/0x3e0 [ 438.165149] ? faultin_vma_page_range+0x300/0x300 [ 438.165181] ? up_write+0x148/0x460 [ 438.165212] __do_sys_mlockall+0x41f/0x4b0 [ 438.165249] do_syscall_64+0x3b/0x90 [ 438.165280] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 438.165315] RIP: 0033:0x7feee2155b19 [ 438.165331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 438.165351] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 438.165371] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 438.165385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 438.165398] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 438.165410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.165422] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 438.165463] [ 438.165552] memory: usage 307200kB, limit 307200kB, failcnt 2644 [ 438.165566] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 438.165578] Memory cgroup stats for /syz7: [ 438.176817] anon 289042432 [ 438.176817] file 20709376 [ 438.176817] kernel 4820992 [ 438.176817] kernel_stack 688128 [ 438.176817] pagetables 2908160 [ 438.176817] percpu 0 [ 438.176817] sock 0 [ 438.176817] vmalloc 0 [ 438.176817] shmem 0 [ 438.176817] file_mapped 20709376 [ 438.176817] file_dirty 0 [ 438.176817] file_writeback 0 [ 438.176817] swapcached 0 [ 438.176817] inactive_anon 261169152 [ 438.176817] active_anon 0 [ 438.176817] inactive_file 0 [ 438.176817] active_file 0 [ 438.176817] unevictable 48541696 [ 438.176817] slab_reclaimable 111512 [ 438.176817] slab_unreclaimable 727264 [ 438.176817] slab 838776 [ 438.176817] workingset_refault_anon 0 [ 438.176817] workingset_refault_file 19245 [ 438.176817] workingset_activate_anon 0 [ 438.176817] workingset_activate_file 18 [ 438.176817] workingset_restore_anon 0 [ 438.176817] workingset_restore_file 0 [ 438.176817] workingset_nodereclaim 0 [ 438.176817] pgfault 216835 [ 438.176817] pgmajfault 70 [ 438.176885] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5419,uid=0 [ 438.176993] Memory cgroup out of memory: Killed process 5419 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:35:12 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:35:12 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) 04:35:12 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:12 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:12 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) 04:35:12 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 04:35:12 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:35:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:12 executing program 2: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:35:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:12 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:35:12 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:12 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:12 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:35:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 450.425597] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 450.425621] CPU: 1 PID: 5499 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 450.425634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 450.425642] Call Trace: [ 450.425646] [ 450.425651] dump_stack_lvl+0x8b/0xb3 [ 450.425681] dump_header+0x10b/0x7e4 [ 450.425698] oom_kill_process.cold+0x10/0x15 [ 450.425714] out_of_memory+0x358/0x14b0 [ 450.425734] ? find_held_lock+0x2c/0x110 [ 450.425750] ? oom_killer_disable+0x270/0x270 [ 450.425765] ? lock_is_held_type+0xd7/0x130 [ 450.425783] mem_cgroup_out_of_memory+0x1e5/0x250 [ 450.425805] ? mem_cgroup_margin+0x130/0x130 [ 450.425828] ? mem_cgroup_iter+0x28d/0x6e0 [ 450.425852] try_charge_memcg+0xed1/0x1360 [ 450.425871] ? mem_cgroup_handle_over_high+0x480/0x480 [ 450.425885] ? lock_release+0x3b2/0x750 [ 450.425901] ? lock_downgrade+0x6d0/0x6d0 [ 450.425929] charge_memcg+0x233/0x370 [ 450.425944] __mem_cgroup_charge+0x24/0x80 [ 450.425959] __handle_mm_fault+0x1103/0x3670 [ 450.425980] ? lock_is_held_type+0xd7/0x130 [ 450.425991] ? __pmd_alloc+0x680/0x680 [ 450.426027] handle_mm_fault+0x2e6/0xa20 [ 450.426047] __get_user_pages+0x50d/0x1100 [ 450.426069] ? follow_page_mask+0x1a40/0x1a40 [ 450.426098] populate_vma_page_range+0x23d/0x320 [ 450.426116] __mm_populate+0x1ea/0x3e0 [ 450.426132] ? faultin_vma_page_range+0x300/0x300 [ 450.426150] ? up_write+0x148/0x460 [ 450.426166] __do_sys_mlockall+0x41f/0x4b0 [ 450.426186] do_syscall_64+0x3b/0x90 [ 450.426204] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 450.426223] RIP: 0033:0x7feee2155b19 [ 450.426233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 450.426243] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 450.426255] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 450.426263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 450.426269] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 450.426276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.426282] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 450.426305] [ 450.426320] memory: usage 307200kB, limit 307200kB, failcnt 2690 [ 450.426327] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 450.426334] Memory cgroup stats for /syz7: [ 450.426434] anon 288952320 [ 450.426434] file 20709376 [ 450.426434] kernel 4911104 [ 450.426434] kernel_stack 688128 [ 450.426434] pagetables 2908160 [ 450.426434] percpu 0 [ 450.426434] sock 0 [ 450.426434] vmalloc 0 [ 450.426434] shmem 0 [ 450.426434] file_mapped 20709376 [ 450.426434] file_dirty 0 [ 450.426434] file_writeback 0 [ 450.426434] swapcached 0 [ 450.426434] inactive_anon 261169152 [ 450.426434] active_anon 0 [ 450.426434] inactive_file 0 [ 450.426434] active_file 0 [ 450.426434] unevictable 48492544 [ 450.426434] slab_reclaimable 148864 [ 450.426434] slab_unreclaimable 780808 [ 450.426434] slab 929672 [ 450.426434] workingset_refault_anon 0 [ 450.426434] workingset_refault_file 19245 [ 450.426434] workingset_activate_anon 0 [ 450.426434] workingset_activate_file 18 [ 450.426434] workingset_restore_anon 0 [ 450.426434] workingset_restore_file 0 [ 450.426434] workingset_nodereclaim 0 [ 450.426434] pgfault 223981 [ 450.426434] pgmajfault 70 [ 450.426471] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5467,uid=0 [ 450.426592] Memory cgroup out of memory: Killed process 5467 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:35:26 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:35:26 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:35:26 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:26 executing program 2: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:35:26 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 04:35:26 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:35:26 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:35:26 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) 04:35:26 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:35:26 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:35:26 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 04:35:26 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 04:35:26 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:26 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:35:26 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 04:35:26 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:35:26 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:35:26 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:26 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) [ 464.258097] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 464.258123] CPU: 1 PID: 5542 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 464.258136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 464.258144] Call Trace: [ 464.258148] [ 464.258153] dump_stack_lvl+0x8b/0xb3 [ 464.258178] dump_header+0x10b/0x7e4 [ 464.258195] oom_kill_process.cold+0x10/0x15 [ 464.258212] out_of_memory+0x358/0x14b0 [ 464.258233] ? find_held_lock+0x2c/0x110 [ 464.258248] ? oom_killer_disable+0x270/0x270 [ 464.258264] ? lock_is_held_type+0xd7/0x130 [ 464.258282] mem_cgroup_out_of_memory+0x1e5/0x250 [ 464.258307] ? mem_cgroup_margin+0x130/0x130 [ 464.258331] ? mem_cgroup_iter+0x28d/0x6e0 [ 464.258352] try_charge_memcg+0xed1/0x1360 [ 464.258372] ? mem_cgroup_handle_over_high+0x480/0x480 [ 464.258385] ? lock_release+0x3b2/0x750 [ 464.258402] ? lock_downgrade+0x6d0/0x6d0 [ 464.258431] charge_memcg+0x233/0x370 [ 464.258446] __mem_cgroup_charge+0x24/0x80 [ 464.258461] __handle_mm_fault+0x1103/0x3670 [ 464.258482] ? lock_is_held_type+0xd7/0x130 [ 464.258494] ? __pmd_alloc+0x680/0x680 [ 464.258530] handle_mm_fault+0x2e6/0xa20 [ 464.258550] __get_user_pages+0x50d/0x1100 [ 464.258573] ? follow_page_mask+0x1a40/0x1a40 [ 464.258601] populate_vma_page_range+0x23d/0x320 [ 464.258620] __mm_populate+0x1ea/0x3e0 [ 464.258636] ? faultin_vma_page_range+0x300/0x300 [ 464.258654] ? up_write+0x148/0x460 [ 464.258671] __do_sys_mlockall+0x41f/0x4b0 [ 464.258691] do_syscall_64+0x3b/0x90 [ 464.258708] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 464.258728] RIP: 0033:0x7feee2155b19 [ 464.258738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.258749] RSP: 002b:00007feedf6cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 464.258761] RAX: ffffffffffffffda RBX: 00007feee2268f60 RCX: 00007feee2155b19 [ 464.258769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 464.258776] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 464.258783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.258789] R13: 00007ffcb9eaa3af R14: 00007feedf6cb300 R15: 0000000000022000 [ 464.258812] [ 464.258921] memory: usage 307200kB, limit 307200kB, failcnt 2719 [ 464.258929] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 464.258936] Memory cgroup stats for /syz7: [ 464.264634] anon 289140736 [ 464.264634] file 20709376 [ 464.264634] kernel 4722688 [ 464.264634] kernel_stack 622592 [ 464.264634] pagetables 2908160 [ 464.264634] percpu 0 [ 464.264634] sock 0 [ 464.264634] vmalloc 0 [ 464.264634] shmem 0 [ 464.264634] file_mapped 20709376 [ 464.264634] file_dirty 0 [ 464.264634] file_writeback 0 [ 464.264634] swapcached 0 [ 464.264634] inactive_anon 261169152 [ 464.264634] active_anon 0 [ 464.264634] inactive_file 0 [ 464.264634] active_file 0 [ 464.264634] unevictable 48680960 [ 464.264634] slab_reclaimable 111512 [ 464.264634] slab_unreclaimable 700344 [ 464.264634] slab 811856 [ 464.264634] workingset_refault_anon 0 [ 464.264634] workingset_refault_file 19245 [ 464.264634] workingset_activate_anon 0 [ 464.264634] workingset_activate_file 18 [ 464.264634] workingset_restore_anon 0 [ 464.264634] workingset_restore_file 0 [ 464.264634] workingset_nodereclaim 0 [ 464.264634] pgfault 231173 [ 464.264634] pgmajfault 70 [ 464.264672] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5536,uid=0 [ 464.264751] Memory cgroup out of memory: Killed process 5536 (syz-executor.7) total-vm:93412kB, anon-rss:27528kB, file-rss:55624kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:35:42 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 04:35:42 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 04:35:42 executing program 2: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:35:42 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:35:42 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 04:35:42 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:42 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 04:35:42 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) 04:35:42 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:35:42 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 04:35:42 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:42 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 04:35:42 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:35:42 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:35:43 executing program 1: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:35:43 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) [ 480.503784] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 480.503806] CPU: 1 PID: 5615 Comm: syz-executor.4 Not tainted 5.18.0-next-20220527 #1 [ 480.503819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 480.503827] Call Trace: [ 480.503830] [ 480.503835] dump_stack_lvl+0x8b/0xb3 [ 480.503858] dump_header+0x10b/0x7e4 [ 480.503875] oom_kill_process.cold+0x10/0x15 [ 480.503891] out_of_memory+0x358/0x14b0 [ 480.503912] ? find_held_lock+0x2c/0x110 [ 480.503928] ? oom_killer_disable+0x270/0x270 [ 480.503943] ? lock_is_held_type+0xd7/0x130 [ 480.503961] mem_cgroup_out_of_memory+0x1e5/0x250 [ 480.503982] ? mem_cgroup_margin+0x130/0x130 [ 480.504006] ? mem_cgroup_iter+0x28d/0x6e0 [ 480.504027] try_charge_memcg+0xed1/0x1360 [ 480.504046] ? mem_cgroup_handle_over_high+0x480/0x480 [ 480.504060] ? lock_release+0x3b2/0x750 [ 480.504076] ? lock_downgrade+0x6d0/0x6d0 [ 480.504105] charge_memcg+0x233/0x370 [ 480.504120] __mem_cgroup_charge+0x24/0x80 [ 480.504135] __handle_mm_fault+0x1103/0x3670 [ 480.504156] ? lock_is_held_type+0xd7/0x130 [ 480.504167] ? __pmd_alloc+0x680/0x680 [ 480.504203] handle_mm_fault+0x2e6/0xa20 [ 480.504223] __get_user_pages+0x50d/0x1100 [ 480.504246] ? follow_page_mask+0x1a40/0x1a40 [ 480.504263] ? lru_add_drain_cpu+0x415/0x840 [ 480.504290] populate_vma_page_range+0x23d/0x320 [ 480.504308] __mm_populate+0x1ea/0x3e0 [ 480.504325] ? faultin_vma_page_range+0x300/0x300 [ 480.504342] ? up_write+0x148/0x460 [ 480.504359] __do_sys_mlockall+0x41f/0x4b0 [ 480.504379] do_syscall_64+0x3b/0x90 [ 480.504396] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 480.504416] RIP: 0033:0x7fc8ef8bdb19 [ 480.504425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 480.504436] RSP: 002b:00007fc8ece33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 480.504448] RAX: ffffffffffffffda RBX: 00007fc8ef9d0f60 RCX: 00007fc8ef8bdb19 [ 480.504456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 480.504462] RBP: 00007fc8ef917f6d R08: 0000000000000000 R09: 0000000000000000 [ 480.504469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.504475] R13: 00007ffddb6592af R14: 00007fc8ece33300 R15: 0000000000022000 [ 480.504501] [ 480.504632] memory: usage 307200kB, limit 307200kB, failcnt 59 [ 480.504640] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 480.504647] Memory cgroup stats for /syz4: [ 480.507080] anon 292737024 [ 480.507080] file 16654336 [ 480.507080] kernel 5181440 [ 480.507080] kernel_stack 720896 [ 480.507080] pagetables 2961408 [ 480.507080] percpu 0 [ 480.507080] sock 0 [ 480.507080] vmalloc 0 [ 480.507080] shmem 0 [ 480.507080] file_mapped 16646144 [ 480.507080] file_dirty 8192 [ 480.507080] file_writeback 0 [ 480.507080] swapcached 0 [ 480.507080] inactive_anon 269848576 [ 480.507080] active_anon 0 [ 480.507080] inactive_file 4096 [ 480.507080] active_file 4096 [ 480.507080] unevictable 39534592 [ 480.507080] slab_reclaimable 209776 [ 480.507080] slab_unreclaimable 848992 [ 480.507080] slab 1058768 [ 480.507080] workingset_refault_anon 0 [ 480.507080] workingset_refault_file 0 [ 480.507080] workingset_activate_anon 0 [ 480.507080] workingset_activate_file 0 [ 480.507080] workingset_restore_anon 0 [ 480.507080] workingset_restore_file 0 [ 480.507080] workingset_nodereclaim 0 [ 480.507080] pgfault 83014 [ 480.507080] pgmajfault 0 [ 480.507118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5603,uid=0 [ 480.507178] Memory cgroup out of memory: Killed process 5603 (syz-executor.4) total-vm:93412kB, anon-rss:22572kB, file-rss:51200kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 480.624117] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 480.624137] CPU: 1 PID: 5634 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 480.624150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 480.624158] Call Trace: [ 480.624161] [ 480.624166] dump_stack_lvl+0x8b/0xb3 [ 480.624192] dump_header+0x10b/0x7e4 [ 480.624209] oom_kill_process.cold+0x10/0x15 [ 480.624226] out_of_memory+0x358/0x14b0 [ 480.624247] ? find_held_lock+0x2c/0x110 [ 480.624263] ? oom_killer_disable+0x270/0x270 [ 480.624278] ? lock_is_held_type+0xd7/0x130 [ 480.624297] mem_cgroup_out_of_memory+0x1e5/0x250 [ 480.624318] ? mem_cgroup_margin+0x130/0x130 [ 480.624342] ? mem_cgroup_iter+0x28d/0x6e0 [ 480.624363] try_charge_memcg+0xed1/0x1360 [ 480.624382] ? mem_cgroup_handle_over_high+0x480/0x480 [ 480.624396] ? lock_release+0x3b2/0x750 [ 480.624413] ? lock_downgrade+0x6d0/0x6d0 [ 480.624442] charge_memcg+0x233/0x370 [ 480.624457] __mem_cgroup_charge+0x24/0x80 [ 480.624472] __handle_mm_fault+0x1103/0x3670 [ 480.624497] ? lock_is_held_type+0xd7/0x130 [ 480.624509] ? __pmd_alloc+0x680/0x680 [ 480.624545] handle_mm_fault+0x2e6/0xa20 [ 480.624565] __get_user_pages+0x50d/0x1100 [ 480.624588] ? follow_page_mask+0x1a40/0x1a40 [ 480.624617] populate_vma_page_range+0x23d/0x320 [ 480.624635] __mm_populate+0x1ea/0x3e0 [ 480.624652] ? faultin_vma_page_range+0x300/0x300 [ 480.624669] ? up_write+0x148/0x460 [ 480.624686] __do_sys_mlockall+0x41f/0x4b0 [ 480.624706] do_syscall_64+0x3b/0x90 [ 480.624724] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 480.624743] RIP: 0033:0x7feee2155b19 [ 480.624753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 480.624764] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 480.624775] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 480.624783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 480.624790] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 480.624797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.624803] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 480.624826] [ 480.624921] memory: usage 307200kB, limit 307200kB, failcnt 2773 [ 480.624929] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 480.624936] Memory cgroup stats for /syz7: [ 480.626375] anon 289038336 [ 480.626375] file 20713472 [ 480.626375] kernel 4820992 [ 480.626375] kernel_stack 688128 [ 480.626375] pagetables 2908160 [ 480.626375] percpu 0 [ 480.626375] sock 0 [ 480.626375] vmalloc 0 [ 480.626375] shmem 0 [ 480.626375] file_mapped 20709376 [ 480.626375] file_dirty 4096 [ 480.626375] file_writeback 0 [ 480.626375] swapcached 0 [ 480.626375] inactive_anon 261169152 [ 480.626375] active_anon 0 [ 480.626375] inactive_file 4096 [ 480.626375] active_file 0 [ 480.626375] unevictable 48578560 [ 480.626375] slab_reclaimable 111752 [ 480.626375] slab_unreclaimable 727264 [ 480.626375] slab 839016 [ 480.626375] workingset_refault_anon 0 [ 480.626375] workingset_refault_file 19245 [ 480.626375] workingset_activate_anon 0 [ 480.626375] workingset_activate_file 18 [ 480.626375] workingset_restore_anon 0 [ 480.626375] workingset_restore_file 0 [ 480.626375] workingset_nodereclaim 0 [ 480.626375] pgfault 238340 [ 480.626375] pgmajfault 70 [ 480.626415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5604,uid=0 [ 480.626482] Memory cgroup out of memory: Killed process 5604 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:35:57 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:35:57 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 04:35:57 executing program 2: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 04:35:57 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:35:57 executing program 1: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:35:57 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:57 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) 04:35:57 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r0, 0xdf2e1651284d287b, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x29}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@random_vendor={0xdd, 0x62, "2be4fc4fac31b0f28020b66201a4741791180ffc2a4ad755ae59668abea9618934b984276237ff00a984a327ef1697dd05aa4cfc1f0bf4be56837d7cfdc3c447162c02c59daf6f3f9d53fbe4836fb8468759bcdc59361ef3d38364ab138d6736286b"}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x57, @ext={{0x1, 0x1}, 0x40, 0x6, 0x3ff, @device_a, 0x2ad6, @device_a, 0x1, 0x7, 0x5, [{{}, @device_a, 0xd59}, {{0x1}, @device_a, 0x97}, {{}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0xfffffffc}]}}, @channel_switch={0x25, 0x3, {0x0, 0x34, 0x1}}, @mic={0x8c, 0x10, {0xc63, "2f13e26dfc3d", @short="2a7175cb43c22a77"}}, @gcr_ga={0xbd, 0x6, @device_b}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x3}}]}, @NL80211_ATTR_IE={0xdd, 0x2a, [@mic={0x8c, 0x18, {0x1b9, "46f20172de4a", @long="cb864854c6d1ad01b09afc6e2ecfe63e"}}, @mesh_chsw={0x76, 0x6, {0x2b, 0x8, 0xa, 0x40}}, @random={0x3, 0xad, "ab6b1b2e9120385dc0e0834e44bb62c586539ef97afb8d4a3d0401dbf1b8907b3b2e7c6bc780d707cbc532eb6488f2bb920b54e4034819c3bb79add244bf51223664c2138072adadc1559a6e11cccc932277519bf6a4f605a6ea76ed29b33cc22d1a0cd5fa87e67af347e96756157aec466bbc1c73adf937dc930ff133ecc1d4b5aebf1f81546b2623abd0816782adab8f38dda5d4125c057c879b470d98ecb76ff23ff54e355baf402fcce09d"}, @peer_mgmt={0x75, 0x6, {0x1, 0x401, @val=0x1000, @void, @void}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4008090}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:35:57 executing program 1: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:35:57 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:35:57 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 04:35:57 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:35:57 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:57 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:35:57 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:35:58 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) [ 495.475559] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 495.475581] CPU: 1 PID: 5692 Comm: syz-executor.4 Not tainted 5.18.0-next-20220527 #1 [ 495.475594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 495.475602] Call Trace: [ 495.475606] [ 495.475611] dump_stack_lvl+0x8b/0xb3 [ 495.475635] dump_header+0x10b/0x7e4 [ 495.475652] oom_kill_process.cold+0x10/0x15 [ 495.475669] out_of_memory+0x358/0x14b0 [ 495.475690] ? find_held_lock+0x2c/0x110 [ 495.475705] ? oom_killer_disable+0x270/0x270 [ 495.475721] ? lock_is_held_type+0xd7/0x130 [ 495.475740] mem_cgroup_out_of_memory+0x1e5/0x250 [ 495.475761] ? mem_cgroup_margin+0x130/0x130 [ 495.475784] ? mem_cgroup_iter+0x28d/0x6e0 [ 495.475806] try_charge_memcg+0xed1/0x1360 [ 495.475825] ? mem_cgroup_handle_over_high+0x480/0x480 [ 495.475839] ? lock_release+0x3b2/0x750 [ 495.475856] ? lock_downgrade+0x6d0/0x6d0 [ 495.475884] charge_memcg+0x233/0x370 [ 495.475899] __mem_cgroup_charge+0x24/0x80 [ 495.475914] __handle_mm_fault+0x1103/0x3670 [ 495.475934] ? lock_is_held_type+0xd7/0x130 [ 495.475946] ? __pmd_alloc+0x680/0x680 [ 495.475982] handle_mm_fault+0x2e6/0xa20 [ 495.476002] __get_user_pages+0x50d/0x1100 [ 495.476024] ? follow_page_mask+0x1a40/0x1a40 [ 495.476042] ? lru_add_drain_cpu+0x415/0x840 [ 495.476069] populate_vma_page_range+0x23d/0x320 [ 495.476088] __mm_populate+0x1ea/0x3e0 [ 495.476107] ? faultin_vma_page_range+0x300/0x300 [ 495.476124] ? up_write+0x148/0x460 [ 495.476141] __do_sys_mlockall+0x41f/0x4b0 [ 495.476161] do_syscall_64+0x3b/0x90 [ 495.476178] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 495.476198] RIP: 0033:0x7fc8ef8bdb19 [ 495.476207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 495.476218] RSP: 002b:00007fc8ece12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 495.476230] RAX: ffffffffffffffda RBX: 00007fc8ef9d1020 RCX: 00007fc8ef8bdb19 [ 495.476237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 495.476244] RBP: 00007fc8ef917f6d R08: 0000000000000000 R09: 0000000000000000 [ 495.476251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.476257] R13: 00007ffddb6592af R14: 00007fc8ece12300 R15: 0000000000022000 [ 495.476280] [ 495.476302] memory: usage 307200kB, limit 307200kB, failcnt 94 [ 495.476309] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 495.476316] Memory cgroup stats for /syz4: [ 495.477580] anon 292638720 [ 495.477580] file 16650240 [ 495.477580] kernel 5283840 [ 495.477580] kernel_stack 786432 [ 495.477580] pagetables 2965504 [ 495.477580] percpu 0 [ 495.477580] sock 0 [ 495.477580] vmalloc 0 [ 495.477580] shmem 0 [ 495.477580] file_mapped 16646144 [ 495.477580] file_dirty 0 [ 495.477580] file_writeback 0 [ 495.477580] swapcached 0 [ 495.477580] inactive_anon 269848576 [ 495.477580] active_anon 0 [ 495.477580] inactive_file 4096 [ 495.477580] active_file 0 [ 495.477580] unevictable 39436288 [ 495.477580] slab_reclaimable 201792 [ 495.477580] slab_unreclaimable 880752 [ 495.477580] slab 1082544 [ 495.477580] workingset_refault_anon 0 [ 495.477580] workingset_refault_file 0 [ 495.477580] workingset_activate_anon 0 [ 495.477580] workingset_activate_file 0 [ 495.477580] workingset_restore_anon 0 [ 495.477580] workingset_restore_file 0 [ 495.477580] workingset_nodereclaim 0 [ 495.477580] pgfault 88866 [ 495.477580] pgmajfault 0 [ 495.477580] pgrefill 73 [ 495.477618] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5669,uid=0 [ 495.477685] Memory cgroup out of memory: Killed process 5669 (syz-executor.4) total-vm:93544kB, anon-rss:22316kB, file-rss:51196kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 495.721296] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 495.721333] CPU: 0 PID: 5693 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 495.721356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 495.721370] Call Trace: [ 495.721375] [ 495.721384] dump_stack_lvl+0x8b/0xb3 [ 495.721421] dump_header+0x10b/0x7e4 [ 495.721450] oom_kill_process.cold+0x10/0x15 [ 495.721479] out_of_memory+0x358/0x14b0 [ 495.721526] ? find_held_lock+0x2c/0x110 [ 495.721553] ? oom_killer_disable+0x270/0x270 [ 495.721582] ? lock_is_held_type+0xd7/0x130 [ 495.721614] mem_cgroup_out_of_memory+0x1e5/0x250 [ 495.721651] ? mem_cgroup_margin+0x130/0x130 [ 495.721695] ? mem_cgroup_iter+0x28d/0x6e0 [ 495.721734] try_charge_memcg+0xed1/0x1360 [ 495.721770] ? mem_cgroup_handle_over_high+0x480/0x480 [ 495.721795] ? lock_release+0x3b2/0x750 [ 495.721825] ? lock_downgrade+0x6d0/0x6d0 [ 495.721878] charge_memcg+0x233/0x370 [ 495.721906] __mem_cgroup_charge+0x24/0x80 [ 495.721933] __handle_mm_fault+0x1103/0x3670 [ 495.721970] ? lock_is_held_type+0xd7/0x130 [ 495.721992] ? __pmd_alloc+0x680/0x680 [ 495.722059] handle_mm_fault+0x2e6/0xa20 [ 495.722096] __get_user_pages+0x50d/0x1100 [ 495.722138] ? follow_page_mask+0x1a40/0x1a40 [ 495.722191] populate_vma_page_range+0x23d/0x320 [ 495.722225] __mm_populate+0x1ea/0x3e0 [ 495.722255] ? faultin_vma_page_range+0x300/0x300 [ 495.722288] ? up_write+0x148/0x460 [ 495.722327] __do_sys_mlockall+0x41f/0x4b0 [ 495.722364] do_syscall_64+0x3b/0x90 [ 495.722395] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 495.722430] RIP: 0033:0x7feee2155b19 [ 495.722447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 495.722466] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 495.722487] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 495.722502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 495.722514] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 495.722526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.722538] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 495.722579] [ 495.722662] memory: usage 307200kB, limit 307200kB, failcnt 2808 [ 495.722676] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 495.722689] Memory cgroup stats for /syz7: [ 495.733011] anon 289042432 [ 495.733011] file 20709376 [ 495.733011] kernel 4820992 [ 495.733011] kernel_stack 688128 [ 495.733011] pagetables 2908160 [ 495.733011] percpu 0 [ 495.733011] sock 0 [ 495.733011] vmalloc 0 [ 495.733011] shmem 0 [ 495.733011] file_mapped 20709376 [ 495.733011] file_dirty 0 [ 495.733011] file_writeback 0 [ 495.733011] swapcached 0 [ 495.733011] inactive_anon 261169152 [ 495.733011] active_anon 0 [ 495.733011] inactive_file 0 [ 495.733011] active_file 0 [ 495.733011] unevictable 48578560 [ 495.733011] slab_reclaimable 111752 [ 495.733011] slab_unreclaimable 727264 [ 495.733011] slab 839016 [ 495.733011] workingset_refault_anon 0 [ 495.733011] workingset_refault_file 19245 [ 495.733011] workingset_activate_anon 0 [ 495.733011] workingset_activate_file 18 [ 495.733011] workingset_restore_anon 0 [ 495.733011] workingset_restore_file 0 [ 495.733011] workingset_nodereclaim 0 [ 495.733011] pgfault 245508 [ 495.733011] pgmajfault 70 [ 495.733157] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5667,uid=0 [ 495.733276] Memory cgroup out of memory: Killed process 5667 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:36:11 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:36:11 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:36:11 executing program 2: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 04:36:11 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:11 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:11 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 04:36:11 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:11 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) 04:36:11 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:36:12 executing program 5: r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:36:12 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:12 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:36:12 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:12 executing program 5: r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:36:12 executing program 1: r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:36:12 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 509.807933] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 509.807955] CPU: 0 PID: 5760 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 509.807968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 509.807976] Call Trace: [ 509.807979] [ 509.807984] dump_stack_lvl+0x8b/0xb3 [ 509.808007] dump_header+0x10b/0x7e4 [ 509.808023] oom_kill_process.cold+0x10/0x15 [ 509.808039] out_of_memory+0x358/0x14b0 [ 509.808060] ? find_held_lock+0x2c/0x110 [ 509.808075] ? oom_killer_disable+0x270/0x270 [ 509.808091] ? lock_is_held_type+0xd7/0x130 [ 509.808109] mem_cgroup_out_of_memory+0x1e5/0x250 [ 509.808129] ? mem_cgroup_margin+0x130/0x130 [ 509.808153] ? mem_cgroup_iter+0x28d/0x6e0 [ 509.808174] try_charge_memcg+0xed1/0x1360 [ 509.808193] ? mem_cgroup_handle_over_high+0x480/0x480 [ 509.808207] ? lock_release+0x3b2/0x750 [ 509.808223] ? lock_downgrade+0x6d0/0x6d0 [ 509.808251] charge_memcg+0x233/0x370 [ 509.808267] __mem_cgroup_charge+0x24/0x80 [ 509.808281] __handle_mm_fault+0x1103/0x3670 [ 509.808302] ? lock_is_held_type+0xd7/0x130 [ 509.808313] ? __pmd_alloc+0x680/0x680 [ 509.808349] handle_mm_fault+0x2e6/0xa20 [ 509.808369] __get_user_pages+0x50d/0x1100 [ 509.808392] ? follow_page_mask+0x1a40/0x1a40 [ 509.808424] populate_vma_page_range+0x23d/0x320 [ 509.808442] __mm_populate+0x1ea/0x3e0 [ 509.808458] ? faultin_vma_page_range+0x300/0x300 [ 509.808476] ? up_write+0x148/0x460 [ 509.808493] __do_sys_mlockall+0x41f/0x4b0 [ 509.808512] do_syscall_64+0x3b/0x90 [ 509.808529] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 509.808549] RIP: 0033:0x7feee2155b19 [ 509.808558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.808569] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 509.808581] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 509.808588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 509.808595] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 509.808601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.808608] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 509.808630] [ 509.808689] memory: usage 307200kB, limit 307200kB, failcnt 2858 [ 509.808698] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 509.808705] Memory cgroup stats for /syz7: [ 509.808828] anon 288948224 [ 509.808828] file 20709376 [ 509.808828] kernel 4915200 [ 509.808828] kernel_stack 688128 [ 509.808828] pagetables 2908160 [ 509.808828] percpu 0 [ 509.808828] sock 0 [ 509.808828] vmalloc 0 [ 509.808828] shmem 0 [ 509.808828] file_mapped 20709376 [ 509.808828] file_dirty 0 [ 509.808828] file_writeback 0 [ 509.808828] swapcached 0 [ 509.808828] inactive_anon 261169152 [ 509.808828] active_anon 0 [ 509.808828] inactive_file 0 [ 509.808828] active_file 0 [ 509.808828] unevictable 48488448 [ 509.808828] slab_reclaimable 149104 [ 509.808828] slab_unreclaimable 780808 [ 509.808828] slab 929912 [ 509.808828] workingset_refault_anon 0 [ 509.808828] workingset_refault_file 19245 [ 509.808828] workingset_activate_anon 0 [ 509.808828] workingset_activate_file 18 [ 509.808828] workingset_restore_anon 0 [ 509.808828] workingset_restore_file 0 [ 509.808828] workingset_nodereclaim 0 [ 509.808828] pgfault 252653 [ 509.808828] pgmajfault 70 [ 509.808864] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5727,uid=0 [ 509.808924] Memory cgroup out of memory: Killed process 5727 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 509.844975] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 509.844999] CPU: 1 PID: 5750 Comm: syz-executor.4 Not tainted 5.18.0-next-20220527 #1 [ 509.845013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 509.845023] Call Trace: [ 509.845027] [ 509.845032] dump_stack_lvl+0x8b/0xb3 [ 509.845061] dump_header+0x10b/0x7e4 [ 509.845081] oom_kill_process.cold+0x10/0x15 [ 509.845101] out_of_memory+0x358/0x14b0 [ 509.845126] ? find_held_lock+0x2c/0x110 [ 509.845144] ? oom_killer_disable+0x270/0x270 [ 509.845163] ? lock_is_held_type+0xd7/0x130 [ 509.845184] mem_cgroup_out_of_memory+0x1e5/0x250 [ 509.845209] ? mem_cgroup_margin+0x130/0x130 [ 509.845236] ? mem_cgroup_iter+0x28d/0x6e0 [ 509.845261] try_charge_memcg+0xed1/0x1360 [ 509.845283] ? mem_cgroup_handle_over_high+0x480/0x480 [ 509.845299] ? lock_release+0x3b2/0x750 [ 509.845319] ? lock_downgrade+0x6d0/0x6d0 [ 509.845352] charge_memcg+0x233/0x370 [ 509.845369] __mem_cgroup_charge+0x24/0x80 [ 509.845386] __handle_mm_fault+0x1103/0x3670 [ 509.845411] ? lock_is_held_type+0xd7/0x130 [ 509.845424] ? __pmd_alloc+0x680/0x680 [ 509.845466] handle_mm_fault+0x2e6/0xa20 [ 509.845494] __get_user_pages+0x50d/0x1100 [ 509.845520] ? follow_page_mask+0x1a40/0x1a40 [ 509.845540] ? lru_add_drain_cpu+0x415/0x840 [ 509.845572] populate_vma_page_range+0x23d/0x320 [ 509.845594] __mm_populate+0x1ea/0x3e0 [ 509.845613] ? faultin_vma_page_range+0x300/0x300 [ 509.845633] ? up_write+0x148/0x460 [ 509.845652] __do_sys_mlockall+0x41f/0x4b0 [ 509.845675] do_syscall_64+0x3b/0x90 [ 509.845696] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 509.845719] RIP: 0033:0x7fc8ef8bdb19 [ 509.845730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.845742] RSP: 002b:00007fc8ece12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 509.845756] RAX: ffffffffffffffda RBX: 00007fc8ef9d1020 RCX: 00007fc8ef8bdb19 [ 509.845765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 509.845773] RBP: 00007fc8ef917f6d R08: 0000000000000000 R09: 0000000000000000 [ 509.845781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.845789] R13: 00007ffddb6592af R14: 00007fc8ece12300 R15: 0000000000022000 [ 509.845815] [ 509.845906] memory: usage 307200kB, limit 307200kB, failcnt 153 [ 509.845915] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 509.845922] Memory cgroup stats for /syz4: [ 509.848293] anon 292638720 [ 509.848293] file 16654336 [ 509.848293] kernel 5279744 [ 509.848293] kernel_stack 786432 [ 509.848293] pagetables 2965504 [ 509.848293] percpu 0 [ 509.848293] sock 0 [ 509.848293] vmalloc 0 [ 509.848293] shmem 0 [ 509.848293] file_mapped 16646144 [ 509.848293] file_dirty 0 [ 509.848293] file_writeback 0 [ 509.848293] swapcached 0 [ 509.848293] inactive_anon 269848576 [ 509.848293] active_anon 0 [ 509.848293] inactive_file 4096 [ 509.848293] active_file 4096 [ 509.848293] unevictable 39436288 [ 509.848293] slab_reclaimable 198064 [ 509.848293] slab_unreclaimable 879456 [ 509.848293] slab 1077520 [ 509.848293] workingset_refault_anon 0 [ 509.848293] workingset_refault_file 0 [ 509.848293] workingset_activate_anon 0 [ 509.848293] workingset_activate_file 0 [ 509.848293] workingset_restore_anon 0 [ 509.848293] workingset_restore_file 0 [ 509.848293] workingset_nodereclaim 0 [ 509.848293] pgfault 94718 [ 509.848293] pgmajfault 0 [ 509.848336] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5733,uid=0 [ 509.848415] Memory cgroup out of memory: Killed process 5733 (syz-executor.4) total-vm:93544kB, anon-rss:22316kB, file-rss:51196kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 04:36:25 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:36:25 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) 04:36:25 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:25 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:25 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:25 executing program 5: r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) 04:36:25 executing program 2: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 04:36:25 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:36:25 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20004880) 04:36:25 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:36:25 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:25 executing program 1: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:36:25 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) 04:36:25 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:25 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:25 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:25 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) [ 523.221121] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 523.221146] CPU: 0 PID: 5783 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 523.221159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 523.221166] Call Trace: [ 523.221170] [ 523.221175] dump_stack_lvl+0x8b/0xb3 [ 523.221198] dump_header+0x10b/0x7e4 [ 523.221214] oom_kill_process.cold+0x10/0x15 [ 523.221230] out_of_memory+0x358/0x14b0 [ 523.221250] ? find_held_lock+0x2c/0x110 [ 523.221266] ? oom_killer_disable+0x270/0x270 [ 523.221281] ? lock_is_held_type+0xd7/0x130 [ 523.221298] mem_cgroup_out_of_memory+0x1e5/0x250 [ 523.221319] ? mem_cgroup_margin+0x130/0x130 [ 523.221343] ? mem_cgroup_iter+0x28d/0x6e0 [ 523.221364] try_charge_memcg+0xed1/0x1360 [ 523.221383] ? mem_cgroup_handle_over_high+0x480/0x480 [ 523.221397] ? lock_release+0x3b2/0x750 [ 523.221413] ? lock_downgrade+0x6d0/0x6d0 [ 523.221441] charge_memcg+0x233/0x370 [ 523.221456] __mem_cgroup_charge+0x24/0x80 [ 523.221471] __handle_mm_fault+0x1103/0x3670 [ 523.221494] ? lock_is_held_type+0xd7/0x130 [ 523.221506] ? __pmd_alloc+0x680/0x680 [ 523.221542] handle_mm_fault+0x2e6/0xa20 [ 523.221562] __get_user_pages+0x50d/0x1100 [ 523.221584] ? follow_page_mask+0x1a40/0x1a40 [ 523.221612] populate_vma_page_range+0x23d/0x320 [ 523.221630] __mm_populate+0x1ea/0x3e0 [ 523.221647] ? faultin_vma_page_range+0x300/0x300 [ 523.221664] ? up_write+0x148/0x460 [ 523.221681] __do_sys_mlockall+0x41f/0x4b0 [ 523.221700] do_syscall_64+0x3b/0x90 [ 523.221717] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 523.221737] RIP: 0033:0x7feee2155b19 [ 523.221746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.221757] RSP: 002b:00007feedf6cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 523.221769] RAX: ffffffffffffffda RBX: 00007feee2268f60 RCX: 00007feee2155b19 [ 523.221777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 523.221783] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 523.221791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.221799] R13: 00007ffcb9eaa3af R14: 00007feedf6cb300 R15: 0000000000022000 [ 523.221824] [ 523.221896] memory: usage 307200kB, limit 307200kB, failcnt 2906 [ 523.221903] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 523.221910] Memory cgroup stats for /syz7: [ 523.232824] anon 289050624 [ 523.232824] file 20709376 [ 523.232824] kernel 4812800 [ 523.232824] kernel_stack 622592 [ 523.232824] pagetables 2908160 [ 523.232824] percpu 0 [ 523.232824] sock 0 [ 523.232824] vmalloc 0 [ 523.232824] shmem 0 [ 523.232824] file_mapped 20709376 [ 523.232824] file_dirty 0 [ 523.232824] file_writeback 0 [ 523.232824] swapcached 0 [ 523.232824] inactive_anon 261169152 [ 523.232824] active_anon 0 [ 523.232824] inactive_file 0 [ 523.232824] active_file 0 [ 523.232824] unevictable 48590848 [ 523.232824] slab_reclaimable 148864 [ 523.232824] slab_unreclaimable 753888 [ 523.232824] slab 902752 [ 523.232824] workingset_refault_anon 0 [ 523.232824] workingset_refault_file 19245 [ 523.232824] workingset_activate_anon 0 [ 523.232824] workingset_activate_file 18 [ 523.232824] workingset_restore_anon 0 [ 523.232824] workingset_restore_file 0 [ 523.232824] workingset_nodereclaim 0 [ 523.232824] pgfault 259823 [ 523.232824] pgmajfault 70 [ 523.232865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5781,uid=0 [ 523.232934] Memory cgroup out of memory: Killed process 5781 (syz-executor.7) total-vm:93412kB, anon-rss:27264kB, file-rss:55624kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 523.303092] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 523.303112] CPU: 0 PID: 5811 Comm: syz-executor.4 Not tainted 5.18.0-next-20220527 #1 [ 523.303124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 523.303132] Call Trace: [ 523.303136] [ 523.303141] dump_stack_lvl+0x8b/0xb3 [ 523.303167] dump_header+0x10b/0x7e4 [ 523.303183] oom_kill_process.cold+0x10/0x15 [ 523.303199] out_of_memory+0x358/0x14b0 [ 523.303219] ? find_held_lock+0x2c/0x110 [ 523.303234] ? oom_killer_disable+0x270/0x270 [ 523.303250] ? lock_is_held_type+0xd7/0x130 [ 523.303268] mem_cgroup_out_of_memory+0x1e5/0x250 [ 523.303288] ? mem_cgroup_margin+0x130/0x130 [ 523.303311] ? mem_cgroup_iter+0x28d/0x6e0 [ 523.303333] try_charge_memcg+0xed1/0x1360 [ 523.303352] ? mem_cgroup_handle_over_high+0x480/0x480 [ 523.303365] ? lock_release+0x3b2/0x750 [ 523.303382] ? lock_downgrade+0x6d0/0x6d0 [ 523.303410] charge_memcg+0x233/0x370 [ 523.303425] __mem_cgroup_charge+0x24/0x80 [ 523.303440] __handle_mm_fault+0x1103/0x3670 [ 523.303460] ? lock_is_held_type+0xd7/0x130 [ 523.303473] ? __pmd_alloc+0x680/0x680 [ 523.303509] handle_mm_fault+0x2e6/0xa20 [ 523.303529] __get_user_pages+0x50d/0x1100 [ 523.303551] ? follow_page_mask+0x1a40/0x1a40 [ 523.303568] ? lru_add_drain_cpu+0x415/0x840 [ 523.303595] populate_vma_page_range+0x23d/0x320 [ 523.303613] __mm_populate+0x1ea/0x3e0 [ 523.303629] ? faultin_vma_page_range+0x300/0x300 [ 523.303647] ? up_write+0x148/0x460 [ 523.303663] __do_sys_mlockall+0x41f/0x4b0 [ 523.303683] do_syscall_64+0x3b/0x90 [ 523.303699] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 523.303718] RIP: 0033:0x7fc8ef8bdb19 [ 523.303728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.303739] RSP: 002b:00007fc8ece12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 523.303750] RAX: ffffffffffffffda RBX: 00007fc8ef9d1020 RCX: 00007fc8ef8bdb19 [ 523.303758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 523.303765] RBP: 00007fc8ef917f6d R08: 0000000000000000 R09: 0000000000000000 [ 523.303771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.303778] R13: 00007ffddb6592af R14: 00007fc8ece12300 R15: 0000000000022000 [ 523.303800] [ 523.303847] memory: usage 307200kB, limit 307200kB, failcnt 175 [ 523.303855] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 523.303861] Memory cgroup stats for /syz4: [ 523.309667] anon 292548608 [ 523.309667] file 16654336 [ 523.309667] kernel 5369856 [ 523.309667] kernel_stack 786432 [ 523.309667] pagetables 2965504 [ 523.309667] percpu 0 [ 523.309667] sock 0 [ 523.309667] vmalloc 0 [ 523.309667] shmem 0 [ 523.309667] file_mapped 16646144 [ 523.309667] file_dirty 0 [ 523.309667] file_writeback 0 [ 523.309667] swapcached 0 [ 523.309667] inactive_anon 269848576 [ 523.309667] active_anon 0 [ 523.309667] inactive_file 4096 [ 523.309667] active_file 4096 [ 523.309667] unevictable 39346176 [ 523.309667] slab_reclaimable 235416 [ 523.309667] slab_unreclaimable 933000 [ 523.309667] slab 1168416 [ 523.309667] workingset_refault_anon 0 [ 523.309667] workingset_refault_file 0 [ 523.309667] workingset_activate_anon 0 [ 523.309667] workingset_activate_file 0 [ 523.309667] workingset_restore_anon 0 [ 523.309667] workingset_restore_file 0 [ 523.309667] workingset_nodereclaim 0 [ 523.309667] pgfault 100548 [ 523.309667] pgmajfault 0 [ 523.309706] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5777,uid=0 [ 523.309768] Memory cgroup out of memory: Killed process 5777 (syz-executor.4) total-vm:93544kB, anon-rss:22316kB, file-rss:51196kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 04:36:26 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) fork() 04:36:26 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:26 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) 04:36:26 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:26 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:26 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) [ 524.032971] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 524.033012] CPU: 1 PID: 5849 Comm: syz-executor.4 Not tainted 5.18.0-next-20220527 #1 [ 524.033043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 524.033063] Call Trace: [ 524.033071] [ 524.033083] dump_stack_lvl+0x8b/0xb3 [ 524.033123] dump_header+0x10b/0x7e4 [ 524.033152] oom_kill_process.cold+0x10/0x15 [ 524.033182] out_of_memory+0x358/0x14b0 [ 524.033218] ? find_held_lock+0x2c/0x110 [ 524.033246] ? oom_killer_disable+0x270/0x270 [ 524.033275] ? lock_is_held_type+0xd7/0x130 [ 524.033307] mem_cgroup_out_of_memory+0x1e5/0x250 [ 524.033343] ? mem_cgroup_margin+0x130/0x130 [ 524.033387] ? mem_cgroup_iter+0x28d/0x6e0 [ 524.033426] try_charge_memcg+0xed1/0x1360 [ 524.033461] ? mem_cgroup_handle_over_high+0x480/0x480 [ 524.033492] ? lock_release+0x3b2/0x750 [ 524.033522] ? lock_downgrade+0x6d0/0x6d0 [ 524.033574] charge_memcg+0x233/0x370 [ 524.033603] __mem_cgroup_charge+0x24/0x80 [ 524.033630] __handle_mm_fault+0x1103/0x3670 [ 524.033667] ? lock_is_held_type+0xd7/0x130 [ 524.033689] ? __pmd_alloc+0x680/0x680 [ 524.033756] handle_mm_fault+0x2e6/0xa20 [ 524.033793] __get_user_pages+0x50d/0x1100 [ 524.033834] ? follow_page_mask+0x1a40/0x1a40 [ 524.033866] ? lru_add_drain_cpu+0x415/0x840 [ 524.033916] populate_vma_page_range+0x23d/0x320 [ 524.033950] __mm_populate+0x1ea/0x3e0 [ 524.033980] ? faultin_vma_page_range+0x300/0x300 [ 524.034018] ? up_write+0x148/0x460 [ 524.034060] __do_sys_mlockall+0x41f/0x4b0 [ 524.034097] do_syscall_64+0x3b/0x90 [ 524.034128] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 524.034163] RIP: 0033:0x7fc8ef8bdb19 [ 524.034181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 524.034201] RSP: 002b:00007fc8ece33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 524.034222] RAX: ffffffffffffffda RBX: 00007fc8ef9d0f60 RCX: 00007fc8ef8bdb19 [ 524.034236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 524.034248] RBP: 00007fc8ef917f6d R08: 0000000000000000 R09: 0000000000000000 [ 524.034261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.034272] R13: 00007ffddb6592af R14: 00007fc8ece33300 R15: 0000000000022000 [ 524.034314] [ 524.034399] memory: usage 307200kB, limit 307200kB, failcnt 211 [ 524.034414] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 524.034427] Memory cgroup stats for /syz4: [ 524.039687] anon 292605952 [ 524.039687] file 16654336 [ 524.039687] kernel 5312512 [ 524.039687] kernel_stack 720896 [ 524.039687] pagetables 2961408 [ 524.039687] percpu 0 [ 524.039687] sock 0 [ 524.039687] vmalloc 0 [ 524.039687] shmem 0 [ 524.039687] file_mapped 16646144 [ 524.039687] file_dirty 0 [ 524.039687] file_writeback 0 [ 524.039687] swapcached 0 [ 524.039687] inactive_anon 269848576 [ 524.039687] active_anon 0 [ 524.039687] inactive_file 4096 [ 524.039687] active_file 4096 [ 524.039687] unevictable 39403520 [ 524.039687] slab_reclaimable 260640 [ 524.039687] slab_unreclaimable 921736 [ 524.039687] slab 1182376 [ 524.039687] workingset_refault_anon 0 [ 524.039687] workingset_refault_file 0 [ 524.039687] workingset_activate_anon 0 [ 524.039687] workingset_activate_file 0 [ 524.039687] workingset_restore_anon 0 [ 524.039687] workingset_restore_file 0 [ 524.039687] workingset_nodereclaim 0 [ 524.039687] pgfault 106392 [ 524.039687] pgmajfault 0 [ 524.039757] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5848,uid=0 [ 524.039861] Memory cgroup out of memory: Killed process 5848 (syz-executor.4) total-vm:93412kB, anon-rss:22308kB, file-rss:51200kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 524.193971] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 524.194004] CPU: 1 PID: 5855 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 524.194027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 524.194040] Call Trace: [ 524.194046] [ 524.194054] dump_stack_lvl+0x8b/0xb3 [ 524.194091] dump_header+0x10b/0x7e4 [ 524.194119] oom_kill_process.cold+0x10/0x15 [ 524.194149] out_of_memory+0x358/0x14b0 [ 524.194185] ? find_held_lock+0x2c/0x110 [ 524.194212] ? oom_killer_disable+0x270/0x270 [ 524.194240] ? lock_is_held_type+0xd7/0x130 [ 524.194271] mem_cgroup_out_of_memory+0x1e5/0x250 [ 524.194309] ? mem_cgroup_margin+0x130/0x130 [ 524.194352] ? mem_cgroup_iter+0x28d/0x6e0 [ 524.194390] try_charge_memcg+0xed1/0x1360 [ 524.194425] ? mem_cgroup_handle_over_high+0x480/0x480 [ 524.194450] ? lock_release+0x3b2/0x750 [ 524.194485] ? lock_downgrade+0x6d0/0x6d0 [ 524.194537] charge_memcg+0x233/0x370 [ 524.194565] __mem_cgroup_charge+0x24/0x80 [ 524.194592] __handle_mm_fault+0x1103/0x3670 [ 524.194628] ? lock_is_held_type+0xd7/0x130 [ 524.194650] ? __pmd_alloc+0x680/0x680 [ 524.194723] handle_mm_fault+0x2e6/0xa20 [ 524.194760] __get_user_pages+0x50d/0x1100 [ 524.194801] ? follow_page_mask+0x1a40/0x1a40 [ 524.194853] populate_vma_page_range+0x23d/0x320 [ 524.194887] __mm_populate+0x1ea/0x3e0 [ 524.194917] ? faultin_vma_page_range+0x300/0x300 [ 524.194949] ? up_write+0x148/0x460 [ 524.194979] __do_sys_mlockall+0x41f/0x4b0 [ 524.195015] do_syscall_64+0x3b/0x90 [ 524.195046] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 524.195081] RIP: 0033:0x7feee2155b19 [ 524.195097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 524.195117] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 524.195138] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 524.195152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 524.195163] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 524.195176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.195187] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 524.195228] [ 524.195302] memory: usage 307200kB, limit 307200kB, failcnt 2955 [ 524.195316] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 524.195329] Memory cgroup stats for /syz7: [ 524.197130] anon 288956416 [ 524.197130] file 20709376 [ 524.197130] kernel 4907008 [ 524.197130] kernel_stack 688128 [ 524.197130] pagetables 2908160 [ 524.197130] percpu 0 [ 524.197130] sock 0 [ 524.197130] vmalloc 0 [ 524.197130] shmem 0 [ 524.197130] file_mapped 20709376 [ 524.197130] file_dirty 0 [ 524.197130] file_writeback 0 [ 524.197130] swapcached 0 [ 524.197130] inactive_anon 261169152 [ 524.197130] active_anon 0 [ 524.197130] inactive_file 0 [ 524.197130] active_file 0 [ 524.197130] unevictable 48476160 [ 524.197130] slab_reclaimable 148864 [ 524.197130] slab_unreclaimable 767968 [ 524.197130] slab 916832 [ 524.197130] workingset_refault_anon 0 [ 524.197130] workingset_refault_file 19245 [ 524.197130] workingset_activate_anon 0 [ 524.197130] workingset_activate_file 18 [ 524.197130] workingset_restore_anon 0 [ 524.197130] workingset_restore_file 0 [ 524.197130] workingset_nodereclaim 0 [ 524.197130] pgfault 266970 [ 524.197130] pgmajfault 70 [ 524.197197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5838,uid=0 [ 524.197299] Memory cgroup out of memory: Killed process 5838 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:36:40 executing program 1: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:36:40 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:40 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:36:40 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:40 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) fork() 04:36:40 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:40 executing program 0: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:40 executing program 2: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:36:41 executing program 0: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:41 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:41 executing program 5: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:36:41 executing program 3: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 04:36:41 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:41 executing program 0: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:41 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:41 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x70bd29, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) [ 539.324566] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 539.324601] CPU: 0 PID: 5889 Comm: syz-executor.4 Not tainted 5.18.0-next-20220527 #1 [ 539.324623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 539.324637] Call Trace: [ 539.324643] [ 539.324651] dump_stack_lvl+0x8b/0xb3 [ 539.324689] dump_header+0x10b/0x7e4 [ 539.324718] oom_kill_process.cold+0x10/0x15 [ 539.324748] out_of_memory+0x358/0x14b0 [ 539.324784] ? find_held_lock+0x2c/0x110 [ 539.324811] ? oom_killer_disable+0x270/0x270 [ 539.324839] ? lock_is_held_type+0xd7/0x130 [ 539.324871] mem_cgroup_out_of_memory+0x1e5/0x250 [ 539.324908] ? mem_cgroup_margin+0x130/0x130 [ 539.324952] ? mem_cgroup_iter+0x28d/0x6e0 [ 539.324990] try_charge_memcg+0xed1/0x1360 [ 539.325026] ? mem_cgroup_handle_over_high+0x480/0x480 [ 539.325051] ? lock_release+0x3b2/0x750 [ 539.325081] ? lock_downgrade+0x6d0/0x6d0 [ 539.325133] charge_memcg+0x233/0x370 [ 539.325161] __mem_cgroup_charge+0x24/0x80 [ 539.325189] __handle_mm_fault+0x1103/0x3670 [ 539.325230] ? lock_is_held_type+0xd7/0x130 [ 539.325252] ? __pmd_alloc+0x680/0x680 [ 539.325318] handle_mm_fault+0x2e6/0xa20 [ 539.325356] __get_user_pages+0x50d/0x1100 [ 539.325397] ? follow_page_mask+0x1a40/0x1a40 [ 539.325428] ? lru_add_drain_cpu+0x415/0x840 [ 539.325478] populate_vma_page_range+0x23d/0x320 [ 539.325512] __mm_populate+0x1ea/0x3e0 [ 539.325542] ? faultin_vma_page_range+0x300/0x300 [ 539.325574] ? up_write+0x148/0x460 [ 539.325605] __do_sys_mlockall+0x41f/0x4b0 [ 539.325642] do_syscall_64+0x3b/0x90 [ 539.325672] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 539.325708] RIP: 0033:0x7fc8ef8bdb19 [ 539.325725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 539.325745] RSP: 002b:00007fc8ece12188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 539.325766] RAX: ffffffffffffffda RBX: 00007fc8ef9d1020 RCX: 00007fc8ef8bdb19 [ 539.325780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 539.325792] RBP: 00007fc8ef917f6d R08: 0000000000000000 R09: 0000000000000000 [ 539.325804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.325816] R13: 00007ffddb6592af R14: 00007fc8ece12300 R15: 0000000000022000 [ 539.325857] [ 539.325955] memory: usage 307200kB, limit 307200kB, failcnt 258 [ 539.325969] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 539.325981] Memory cgroup stats for /syz4: [ 539.342404] anon 292630528 [ 539.342404] file 16654336 [ 539.342404] kernel 5287936 [ 539.342404] kernel_stack 786432 [ 539.342404] pagetables 2965504 [ 539.342404] percpu 0 [ 539.342404] sock 0 [ 539.342404] vmalloc 0 [ 539.342404] shmem 0 [ 539.342404] file_mapped 16646144 [ 539.342404] file_dirty 0 [ 539.342404] file_writeback 0 [ 539.342404] swapcached 0 [ 539.342404] inactive_anon 269848576 [ 539.342404] active_anon 0 [ 539.342404] inactive_file 4096 [ 539.342404] active_file 4096 [ 539.342404] unevictable 39428096 [ 539.342404] slab_reclaimable 198304 [ 539.342404] slab_unreclaimable 890248 [ 539.342404] slab 1088552 [ 539.342404] workingset_refault_anon 0 [ 539.342404] workingset_refault_file 0 [ 539.342404] workingset_activate_anon 0 [ 539.342404] workingset_activate_file 0 [ 539.342404] workingset_restore_anon 0 [ 539.342404] workingset_restore_file 0 [ 539.342404] workingset_nodereclaim 0 [ 539.342404] pgfault 112242 [ 539.342404] pgmajfault 0 [ 539.342538] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5880,uid=0 [ 539.342670] Memory cgroup out of memory: Killed process 5880 (syz-executor.4) total-vm:93544kB, anon-rss:22316kB, file-rss:51196kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 539.911609] syz-executor.7 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 539.911644] CPU: 0 PID: 5887 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 539.911666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 539.911680] Call Trace: [ 539.911686] [ 539.911694] dump_stack_lvl+0x8b/0xb3 [ 539.911732] dump_header+0x10b/0x7e4 [ 539.911761] oom_kill_process.cold+0x10/0x15 [ 539.911791] out_of_memory+0x358/0x14b0 [ 539.911827] ? find_held_lock+0x2c/0x110 [ 539.911854] ? oom_killer_disable+0x270/0x270 [ 539.911883] ? lock_is_held_type+0xd7/0x130 [ 539.911915] mem_cgroup_out_of_memory+0x1e5/0x250 [ 539.911952] ? mem_cgroup_margin+0x130/0x130 [ 539.911996] ? mem_cgroup_iter+0x28d/0x6e0 [ 539.912035] try_charge_memcg+0xed1/0x1360 [ 539.912071] ? mem_cgroup_handle_over_high+0x480/0x480 [ 539.912097] ? lock_release+0x3b2/0x750 [ 539.912128] ? lock_downgrade+0x6d0/0x6d0 [ 539.912180] charge_memcg+0x233/0x370 [ 539.912208] __mem_cgroup_charge+0x24/0x80 [ 539.912236] __handle_mm_fault+0x1103/0x3670 [ 539.912273] ? lock_is_held_type+0xd7/0x130 [ 539.912295] ? __pmd_alloc+0x680/0x680 [ 539.912362] handle_mm_fault+0x2e6/0xa20 [ 539.912399] __get_user_pages+0x50d/0x1100 [ 539.912441] ? follow_page_mask+0x1a40/0x1a40 [ 539.912498] populate_vma_page_range+0x23d/0x320 [ 539.912532] __mm_populate+0x1ea/0x3e0 [ 539.912563] ? faultin_vma_page_range+0x300/0x300 [ 539.912595] ? up_write+0x148/0x460 [ 539.912626] __do_sys_mlockall+0x41f/0x4b0 [ 539.912663] do_syscall_64+0x3b/0x90 [ 539.912694] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 539.912729] RIP: 0033:0x7feee2155b19 [ 539.912745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 539.912765] RSP: 002b:00007feedf6aa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 539.912786] RAX: ffffffffffffffda RBX: 00007feee2269020 RCX: 00007feee2155b19 [ 539.912800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 539.912812] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 539.912825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.912836] R13: 00007ffcb9eaa3af R14: 00007feedf6aa300 R15: 0000000000022000 [ 539.912878] [ 539.912964] memory: usage 307200kB, limit 307200kB, failcnt 2978 [ 539.912978] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 539.912991] Memory cgroup stats for /syz7: [ 539.926518] anon 289026048 [ 539.926518] file 20709376 [ 539.926518] kernel 4837376 [ 539.926518] kernel_stack 688128 [ 539.926518] pagetables 2908160 [ 539.926518] percpu 0 [ 539.926518] sock 0 [ 539.926518] vmalloc 0 [ 539.926518] shmem 0 [ 539.926518] file_mapped 20709376 [ 539.926518] file_dirty 0 [ 539.926518] file_writeback 0 [ 539.926518] swapcached 0 [ 539.926518] inactive_anon 261169152 [ 539.926518] active_anon 0 [ 539.926518] inactive_file 0 [ 539.926518] active_file 0 [ 539.926518] unevictable 48566272 [ 539.926518] slab_reclaimable 115096 [ 539.926518] slab_unreclaimable 739352 [ 539.926518] slab 854448 [ 539.926518] workingset_refault_anon 0 [ 539.926518] workingset_refault_file 19245 [ 539.926518] workingset_activate_anon 0 [ 539.926518] workingset_activate_file 18 [ 539.926518] workingset_restore_anon 0 [ 539.926518] workingset_restore_file 0 [ 539.926518] workingset_nodereclaim 0 [ 539.926518] pgfault 274134 [ 539.926518] pgmajfault 70 [ 539.926588] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz-executor.7,pid=5866,uid=0 [ 539.926702] Memory cgroup out of memory: Killed process 5866 (syz-executor.7) total-vm:93544kB, anon-rss:27272kB, file-rss:55620kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 04:36:56 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x70bd29, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:56 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) fork() 04:36:56 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:56 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:36:56 executing program 2: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:36:56 executing program 3: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:36:56 executing program 5: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:36:56 executing program 1: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:36:57 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x0, 0x70bd29, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:36:57 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:36:57 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) [ 555.351616] syz-executor.3 (5942) used greatest stack depth: 24208 bytes left [ 555.802787] kworker/u4:1: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 555.802925] CPU: 1 PID: 29 Comm: kworker/u4:1 Not tainted 5.18.0-next-20220527 #1 [ 555.802947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 555.802961] Workqueue: phy17 ieee80211_iface_work [ 555.802991] Call Trace: [ 555.802996] [ 555.803004] dump_stack_lvl+0x8b/0xb3 [ 555.803035] warn_alloc.cold+0x95/0x18a [ 555.803066] ? zone_watermark_ok_safe+0x240/0x240 [ 555.803089] ? find_held_lock+0x2c/0x110 [ 555.803128] ? wakeup_kswapd+0x161/0x600 [ 555.803174] ? __zone_watermark_ok+0x2d0/0x2d0 [ 555.803205] ? wake_all_kswapds+0x12d/0x2d0 [ 555.803260] __alloc_pages_slowpath.constprop.0+0x1abd/0x1f90 [ 555.803316] ? warn_alloc+0x190/0x190 [ 555.803348] ? __zone_watermark_ok+0x2d0/0x2d0 [ 555.803373] ? prepare_alloc_pages+0x371/0x500 [ 555.803402] ? lock_is_held_type+0xd7/0x130 [ 555.803432] __alloc_pages+0x421/0x4f0 [ 555.803450] ? __local_bh_enable_ip+0xa0/0x120 [ 555.803484] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 555.803514] ? lock_is_held_type+0xd7/0x130 [ 555.803543] ? lock_release+0x3b2/0x750 [ 555.803568] ? __slab_alloc.constprop.0+0x45/0x80 [ 555.803609] alloc_pages+0x1a0/0x2f0 [ 555.803631] ? mark_held_locks+0x9e/0xe0 [ 555.803662] allocate_slab+0x249/0x300 [ 555.803697] ___slab_alloc+0xa09/0xe50 [ 555.803730] ? ieee802_11_parse_elems_crc+0xd2/0xf70 [ 555.803785] ? ieee802_11_parse_elems_crc+0xd2/0xf70 [ 555.803817] __slab_alloc.constprop.0+0x45/0x80 [ 555.803849] ? ieee802_11_parse_elems_crc+0xd2/0xf70 [ 555.803882] kmem_cache_alloc_trace+0x2db/0x3c0 [ 555.803923] ieee802_11_parse_elems_crc+0xd2/0xf70 [ 555.803959] ? cfg80211_inform_bss_frame_data+0xf2/0xb90 [ 555.804004] ? lock_release+0x3b2/0x750 [ 555.804031] ? ieee80211_wake_vif_queues+0x40/0x40 [ 555.804062] ? cfg80211_inform_single_bss_frame_data+0xef0/0xef0 [ 555.804088] ? lock_is_held_type+0xd7/0x130 [ 555.804108] ? find_held_lock+0x2c/0x110 [ 555.804146] ieee80211_bss_info_update+0x433/0xb10 [ 555.804188] ? ieee80211_rx_bss_put+0x50/0x50 [ 555.804216] ? ieee80211_ibss_rx_queued_mgmt+0x19cd/0x3200 [ 555.804268] ieee80211_ibss_rx_queued_mgmt+0x1a1b/0x3200 [ 555.804319] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 555.804342] ? lock_release+0x3b2/0x750 [ 555.804366] ? kcov_remote_start+0x25e/0x6c0 [ 555.804407] ? mark_held_locks+0x9e/0xe0 [ 555.804438] ? kcov_remote_start+0x15a/0x6c0 [ 555.804470] ? lockdep_hardirqs_on+0x79/0x100 [ 555.804491] ? kcov_remote_start+0x15a/0x6c0 [ 555.804519] ? _raw_spin_unlock_irqrestore+0x33/0x50 [ 555.804559] ieee80211_iface_work+0xa6a/0xce0 [ 555.804597] process_one_work+0xa1c/0x16a0 [ 555.804642] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 555.804678] ? rwlock_bug.part.0+0x90/0x90 [ 555.804703] ? _raw_spin_lock_irq+0x41/0x50 [ 555.804748] worker_thread+0x637/0x1250 [ 555.804796] ? process_one_work+0x16a0/0x16a0 [ 555.804827] kthread+0x2f2/0x3b0 [ 555.804848] ? kthread_complete_and_exit+0x40/0x40 [ 555.804877] ret_from_fork+0x22/0x30 [ 555.804926] [ 555.804986] Mem-Info: [ 555.804993] active_anon:1556 inactive_anon:226401 isolated_anon:0 [ 555.804993] active_file:53 inactive_file:13945 isolated_file:0 [ 555.804993] unevictable:27197 dirty:6 writeback:0 [ 555.804993] slab_reclaimable:7968 slab_unreclaimable:60484 [ 555.804993] mapped:76494 shmem:112 pagetables:2924 bounce:0 [ 555.804993] kernel_misc_reclaimable:0 [ 555.804993] free:1605 free_pcp:77 free_cma:0 [ 555.805046] Node 0 active_anon:6224kB inactive_anon:905604kB active_file:212kB inactive_file:55780kB unevictable:108788kB isolated(anon):0kB isolated(file):0kB mapped:305976kB dirty:24kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:6048kB pagetables:11696kB all_unreclaimable? no [ 555.805090] Node 0 DMA free:6476kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:4368kB active_file:0kB inactive_file:1656kB unevictable:2520kB writepending:0kB present:15992kB managed:15360kB mlocked:2520kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 555.805148] lowmem_reserve[]: 0 1615 1615 1615 [ 555.805173] Node 0 DMA32 free:0kB boost:2396kB min:7516kB low:9168kB high:10820kB reserved_highatomic:4096KB active_anon:6224kB inactive_anon:901140kB active_file:284kB inactive_file:54372kB unevictable:105896kB writepending:24kB present:2080640kB managed:1658276kB mlocked:105896kB bounce:0kB free_pcp:296kB local_pcp:256kB free_cma:0kB [ 555.805232] lowmem_reserve[]: 0 0 0 0 [ 555.805256] Node 0 DMA: 1*4kB (M) 9*8kB (UM) 8*16kB (UME) 2*32kB (ME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6476kB [ 555.805396] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 555.805516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 555.805532] 20964 total pagecache pages [ 555.805538] 0 pages in swap cache [ 555.805543] Swap cache stats: add 0, delete 0, find 0/0 [ 555.805555] Free swap = 0kB [ 555.805560] Total swap = 0kB [ 555.805566] 524158 pages RAM [ 555.805571] 0 pages HighMem/MovableOnly [ 555.805576] 105749 pages reserved [ 555.805616] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 555.805632] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 555.805650] node 0: slabs: 362, objs: 5596, free: 0 [ 555.806306] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 555.806323] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 555.806341] node 0: slabs: 362, objs: 5596, free: 0 [ 555.806431] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 555.806446] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 555.806507] node 0: slabs: 362, objs: 5596, free: 0 [ 555.806578] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 555.806594] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 555.806611] node 0: slabs: 362, objs: 5596, free: 0 [ 555.806675] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 555.806690] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 555.806707] node 0: slabs: 362, objs: 5596, free: 0 [ 555.806782] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 555.806797] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 555.806814] node 0: slabs: 362, objs: 5596, free: 0 [ 555.806877] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 555.806892] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 555.806909] node 0: slabs: 362, objs: 5596, free: 0 [ 555.806971] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 555.806986] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 555.807003] node 0: slabs: 362, objs: 5596, free: 0 [ 555.807065] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 555.807080] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 555.807097] node 0: slabs: 362, objs: 5596, free: 0 [ 555.904337] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 555.904367] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 555.904386] node 0: slabs: 365, objs: 5602, free: 0 [ 558.602759] modprobe (5971) used greatest stack depth: 23568 bytes left [ 558.612572] modprobe (5967) used greatest stack depth: 23232 bytes left 04:37:01 executing program 3: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:37:14 executing program 3: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:37:14 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:37:14 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:37:14 executing program 5: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r4, r4}) 04:37:14 executing program 2: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:37:14 executing program 1: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) 04:37:14 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000000)) 04:37:14 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) [ 573.617696] warn_alloc: 53 callbacks suppressed [ 573.617719] kworker/u4:11: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 573.617861] CPU: 1 PID: 588 Comm: kworker/u4:11 Not tainted 5.18.0-next-20220527 #1 [ 573.617883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 573.617897] Workqueue: phy10 ieee80211_iface_work [ 573.617932] Call Trace: [ 573.617938] [ 573.617946] dump_stack_lvl+0x8b/0xb3 [ 573.617977] warn_alloc.cold+0x95/0x18a [ 573.618008] ? zone_watermark_ok_safe+0x240/0x240 [ 573.618031] ? find_held_lock+0x2c/0x110 [ 573.618070] ? wakeup_kswapd+0x161/0x600 [ 573.618096] ? __zone_watermark_ok+0x2d0/0x2d0 [ 573.618120] ? wake_all_kswapds+0x12d/0x2d0 [ 573.618163] __alloc_pages_slowpath.constprop.0+0x1abd/0x1f90 [ 573.618219] ? warn_alloc+0x190/0x190 [ 573.618252] ? __zone_watermark_ok+0x2d0/0x2d0 [ 573.618276] ? prepare_alloc_pages+0x371/0x500 [ 573.618305] ? lock_is_held_type+0xd7/0x130 [ 573.618335] __alloc_pages+0x421/0x4f0 [ 573.618358] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 573.618388] ? lock_is_held_type+0xd7/0x130 [ 573.618417] ? lock_release+0x3b2/0x750 [ 573.618442] ? __slab_alloc.constprop.0+0x45/0x80 [ 573.618484] alloc_pages+0x1a0/0x2f0 [ 573.618505] ? mark_held_locks+0x9e/0xe0 [ 573.618537] allocate_slab+0x249/0x300 [ 573.618572] ___slab_alloc+0xa09/0xe50 [ 573.618606] ? ieee802_11_parse_elems_crc+0xd2/0xf70 [ 573.618647] ? lock_acquire+0x1b2/0x530 [ 573.618682] ? ieee802_11_parse_elems_crc+0xd2/0xf70 [ 573.618714] __slab_alloc.constprop.0+0x45/0x80 [ 573.618747] ? ieee802_11_parse_elems_crc+0xd2/0xf70 [ 573.618780] kmem_cache_alloc_trace+0x2db/0x3c0 [ 573.618820] ieee802_11_parse_elems_crc+0xd2/0xf70 [ 573.618853] ? __mutex_lock+0x231/0x14c0 [ 573.618884] ? lock_chain_count+0x20/0x20 [ 573.618922] ? mutex_lock_io_nested+0x1310/0x1310 [ 573.618946] ? __lock_acquire+0x164e/0x6120 [ 573.618976] ? ieee80211_wake_vif_queues+0x40/0x40 [ 573.619018] ? mark_lock.part.0+0xef/0x2f60 [ 573.619054] ieee80211_ibss_rx_queued_mgmt+0xdae/0x3200 [ 573.619106] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 573.619130] ? lock_release+0x3b2/0x750 [ 573.619154] ? kcov_remote_start+0x25e/0x6c0 [ 573.619194] ? mark_held_locks+0x9e/0xe0 [ 573.619226] ? kcov_remote_start+0x15a/0x6c0 [ 573.619258] ? lockdep_hardirqs_on+0x79/0x100 [ 573.619278] ? kcov_remote_start+0x15a/0x6c0 [ 573.619307] ? _raw_spin_unlock_irqrestore+0x33/0x50 [ 573.619346] ieee80211_iface_work+0xa6a/0xce0 [ 573.619393] process_one_work+0xa1c/0x16a0 [ 573.619439] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 573.619476] ? rwlock_bug.part.0+0x90/0x90 [ 573.619501] ? _raw_spin_lock_irq+0x41/0x50 [ 573.619545] worker_thread+0x637/0x1250 [ 573.619594] ? process_one_work+0x16a0/0x16a0 [ 573.619625] kthread+0x2f2/0x3b0 [ 573.619646] ? kthread_complete_and_exit+0x40/0x40 [ 573.619675] ret_from_fork+0x22/0x30 [ 573.619725] [ 573.620136] slab_out_of_memory: 44 callbacks suppressed [ 573.620154] SLUB: Unable to allocate memory on node -1, gfp=0x820(GFP_ATOMIC) [ 573.620171] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 573.620191] node 0: slabs: 443, objs: 5316, free: 0 [ 573.620224] SLUB: Unable to allocate memory on node -1, gfp=0x820(GFP_ATOMIC) [ 573.620238] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 573.620256] node 0: slabs: 443, objs: 5316, free: 0 [ 573.620288] SLUB: Unable to allocate memory on node -1, gfp=0x820(GFP_ATOMIC) [ 573.620302] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 573.620320] node 0: slabs: 443, objs: 5316, free: 0 [ 573.620352] SLUB: Unable to allocate memory on node -1, gfp=0x820(GFP_ATOMIC) [ 573.620366] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 573.620384] node 0: slabs: 443, objs: 5316, free: 0 [ 573.620417] Mem-Info: [ 573.620424] active_anon:1556 inactive_anon:240912 isolated_anon:0 [ 573.620424] active_file:167 inactive_file:16087 isolated_file:0 [ 573.620424] unevictable:10287 dirty:8 writeback:0 [ 573.620424] slab_reclaimable:7378 slab_unreclaimable:61056 [ 573.620424] mapped:70005 shmem:112 pagetables:2940 bounce:0 [ 573.620424] kernel_misc_reclaimable:0 [ 573.620424] free:1925 free_pcp:3 free_cma:0 [ 573.620533] Node 0 active_anon:6224kB inactive_anon:963648kB active_file:668kB inactive_file:64348kB unevictable:41148kB isolated(anon):0kB isolated(file):0kB mapped:280020kB dirty:32kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:5984kB pagetables:11760kB all_unreclaimable? no [ 573.620579] Node 0 DMA free:6480kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:5820kB active_file:4kB inactive_file:2208kB unevictable:300kB writepending:0kB present:15992kB managed:15360kB mlocked:300kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 573.620638] lowmem_reserve[]: 0 1615 1615 1615 [ 573.620664] Node 0 DMA32 free:1220kB boost:0kB min:5120kB low:6772kB high:8424kB reserved_highatomic:2048KB active_anon:6224kB inactive_anon:957492kB active_file:444kB inactive_file:62504kB unevictable:40260kB writepending:32kB present:2080640kB managed:1658276kB mlocked:40260kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 573.620722] lowmem_reserve[]: 0 0 0 0 [ 573.620745] Node 0 DMA: 2*4kB (UM) 5*8kB (U) 8*16kB (UME) 5*32kB (UME) 10*64kB (UME) 3*128kB (UME) 2*256kB (ME) 1*512kB (E) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 6480kB [ 573.620885] Node 0 DMA32: 0*4kB 1*8kB (H) 0*16kB 6*32kB (H) 9*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 776kB [ 573.620991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 573.621007] 16666 total pagecache pages [ 573.621014] 0 pages in swap cache [ 573.621019] Swap cache stats: add 0, delete 0, find 0/0 [ 573.621030] Free swap = 0kB [ 573.621036] Total swap = 0kB [ 573.621041] 524158 pages RAM [ 573.621047] 0 pages HighMem/MovableOnly [ 573.621052] 105749 pages reserved [ 573.621059] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 573.621075] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 573.621093] node 0: slabs: 529, objs: 5832, free: 0 [ 573.621779] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 573.621796] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 573.621814] node 0: slabs: 529, objs: 5832, free: 0 [ 573.621884] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 573.621899] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 573.621916] node 0: slabs: 529, objs: 5832, free: 0 [ 573.622003] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 573.622019] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 573.622036] node 0: slabs: 529, objs: 5832, free: 0 [ 573.622086] SLUB: Unable to allocate memory on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 573.622112] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 573.622130] node 0: slabs: 529, objs: 5832, free: 0 [ 573.719706] SLUB: Unable to allocate memory on node -1, gfp=0x820(GFP_ATOMIC) [ 573.719731] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 573.719750] node 0: slabs: 443, objs: 5316, free: 0 04:37:18 executing program 3: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:37:18 executing program 5: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(r0, r0) 04:37:18 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000000)) 04:37:18 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:37:18 executing program 2: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:37:18 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:37:18 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) 04:37:18 executing program 1: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) 04:37:18 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:37:18 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 577.454067] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 577.454093] CPU: 1 PID: 6022 Comm: syz-executor.5 Not tainted 5.18.0-next-20220527 #1 [ 577.454104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 577.454112] Call Trace: [ 577.454116] [ 577.454120] dump_stack_lvl+0x8b/0xb3 [ 577.454143] dump_header+0x10b/0x7e4 [ 577.454158] oom_kill_process.cold+0x10/0x15 [ 577.454173] out_of_memory+0x11ec/0x14b0 [ 577.454194] ? oom_killer_disable+0x270/0x270 [ 577.454209] ? lock_is_held_type+0xd7/0x130 [ 577.454225] __alloc_pages_slowpath.constprop.0+0x1935/0x1f90 [ 577.454255] ? warn_alloc+0x190/0x190 [ 577.454265] ? lock_is_held_type+0xd7/0x130 [ 577.454283] ? prepare_alloc_pages+0x371/0x500 [ 577.454300] ? find_held_lock+0x2c/0x110 [ 577.454318] __alloc_pages+0x421/0x4f0 [ 577.454330] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 577.454352] ? rcu_read_lock_sched_held+0x3a/0x70 [ 577.454374] copy_process+0x65c/0x6d90 [ 577.454389] ? wp_page_copy+0x4e3/0x2550 [ 577.454412] ? do_page_mkwrite+0x650/0x650 [ 577.454425] ? lock_downgrade+0x6d0/0x6d0 [ 577.454444] ? __cleanup_sighand+0xb0/0xb0 [ 577.454468] ? do_wp_page+0x1a5/0x2b50 [ 577.454489] kernel_clone+0xe7/0xa60 [ 577.454507] ? create_io_thread+0xe0/0xe0 [ 577.454522] ? lock_is_held_type+0xd7/0x130 [ 577.454536] ? lock_is_held_type+0xd7/0x130 [ 577.454546] ? find_held_lock+0x2c/0x110 [ 577.454561] ? lock_release+0x3b2/0x750 [ 577.454579] __do_sys_clone+0xba/0x100 [ 577.454595] ? __do_sys_vfork+0xc0/0xc0 [ 577.454623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 577.454640] do_syscall_64+0x3b/0x90 [ 577.454655] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 577.454673] RIP: 0033:0x7f78d4c4ff41 [ 577.454682] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 577.454692] RSP: 002b:00007ffe7d8932e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 577.454703] RAX: ffffffffffffffda RBX: 00007f78d2182700 RCX: 00007f78d4c4ff41 [ 577.454710] RDX: 00007f78d21829d0 RSI: 00007f78d21822f0 RDI: 00000000003d0f00 [ 577.454717] RBP: 00007ffe7d893520 R08: 00007f78d2182700 R09: 00007f78d2182700 [ 577.454723] R10: 00007f78d21829d0 R11: 0000000000000206 R12: 00007ffe7d89339e [ 577.454730] R13: 00007ffe7d89339f R14: 00007f78d2182300 R15: 0000000000022000 [ 577.454750] [ 577.454798] Mem-Info: [ 577.454801] active_anon:1556 inactive_anon:240802 isolated_anon:0 [ 577.454801] active_file:136 inactive_file:6434 isolated_file:22 [ 577.454801] unevictable:20270 dirty:5 writeback:0 [ 577.454801] slab_reclaimable:7369 slab_unreclaimable:60641 [ 577.454801] mapped:70306 shmem:112 pagetables:3007 bounce:0 [ 577.454801] kernel_misc_reclaimable:0 [ 577.454801] free:1788 free_pcp:0 free_cma:0 [ 577.454829] Node 0 active_anon:6224kB inactive_anon:963208kB active_file:544kB inactive_file:25736kB unevictable:81080kB isolated(anon):0kB isolated(file):88kB mapped:281224kB dirty:20kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:6176kB pagetables:12028kB all_unreclaimable? no [ 577.454853] Node 0 DMA free:7152kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:5820kB active_file:4kB inactive_file:48kB unevictable:1164kB writepending:0kB present:15992kB managed:15360kB mlocked:1164kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.454884] lowmem_reserve[]: 0 1615 1615 1615 [ 577.454898] Node 0 DMA32 free:0kB boost:0kB min:5120kB low:6772kB high:8424kB reserved_highatomic:4096KB active_anon:6224kB inactive_anon:957388kB active_file:244kB inactive_file:25856kB unevictable:79160kB writepending:20kB present:2080640kB managed:1658276kB mlocked:79160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.454929] lowmem_reserve[]: 0 0 0 0 [ 577.454942] Node 0 DMA: 44*4kB (UM) 41*8kB (UMH) 11*16kB (MH) 18*32kB (UMH) 12*64kB (UMH) 2*128kB (M) 3*256kB (UMH) 2*512kB (MH) 3*1024kB (UMH) 0*2048kB 0*4096kB = 7144kB [ 577.455046] Node 0 DMA32: 23*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 108kB [ 577.455099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 577.455108] 7334 total pagecache pages [ 577.455113] 0 pages in swap cache [ 577.455117] Swap cache stats: add 0, delete 0, find 0/0 [ 577.455124] Free swap = 0kB [ 577.455127] Total swap = 0kB [ 577.455131] 524158 pages RAM [ 577.455134] 0 pages HighMem/MovableOnly [ 577.455137] 105749 pages reserved [ 577.455141] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=6022,uid=0 [ 577.455764] Out of memory (oom_kill_allocating_task): Killed process 6022 (syz-executor.5) total-vm:93676kB, anon-rss:16744kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 578.271886] syz-executor.7 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=1000 [ 578.271925] CPU: 0 PID: 6029 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 578.271946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 578.271959] Call Trace: [ 578.271965] [ 578.271973] dump_stack_lvl+0x8b/0xb3 [ 578.272008] dump_header+0x10b/0x7e4 [ 578.272035] oom_kill_process.cold+0x10/0x15 [ 578.272062] out_of_memory+0x11ec/0x14b0 [ 578.272100] ? oom_killer_disable+0x270/0x270 [ 578.272126] ? lock_is_held_type+0xd7/0x130 [ 578.272156] __alloc_pages_slowpath.constprop.0+0x1935/0x1f90 [ 578.272210] ? warn_alloc+0x190/0x190 [ 578.272230] ? lock_is_held_type+0xd7/0x130 [ 578.272263] ? prepare_alloc_pages+0x371/0x500 [ 578.272292] ? lock_is_held_type+0xd7/0x130 [ 578.272320] __alloc_pages+0x421/0x4f0 [ 578.272342] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 578.272379] ? lock_is_held_type+0xd7/0x130 [ 578.272407] ? lock_release+0x3b2/0x750 [ 578.272433] ? __slab_alloc.constprop.0+0x45/0x80 [ 578.272478] alloc_pages+0x1a0/0x2f0 [ 578.272508] allocate_slab+0x249/0x300 [ 578.272542] ___slab_alloc+0xa09/0xe50 [ 578.272575] ? copy_process+0x5c8/0x6d90 [ 578.272608] ? refill_obj_stock+0x315/0x670 [ 578.272642] ? copy_process+0x5c8/0x6d90 [ 578.272669] __slab_alloc.constprop.0+0x45/0x80 [ 578.272702] ? copy_process+0x5c8/0x6d90 [ 578.272730] kmem_cache_alloc_node+0x370/0x490 [ 578.272769] copy_process+0x5c8/0x6d90 [ 578.272796] ? wp_page_copy+0x4e3/0x2550 [ 578.272836] ? do_page_mkwrite+0x650/0x650 [ 578.272860] ? lock_downgrade+0x6d0/0x6d0 [ 578.272895] ? __cleanup_sighand+0xb0/0xb0 [ 578.272934] ? do_wp_page+0x1a5/0x2b50 [ 578.272973] kernel_clone+0xe7/0xa60 [ 578.273006] ? create_io_thread+0xe0/0xe0 [ 578.273034] ? lock_is_held_type+0xd7/0x130 [ 578.273059] ? lock_is_held_type+0xd7/0x130 [ 578.273078] ? find_held_lock+0x2c/0x110 [ 578.273107] ? lock_release+0x3b2/0x750 [ 578.273139] __do_sys_clone+0xba/0x100 [ 578.273169] ? __do_sys_vfork+0xc0/0xc0 [ 578.273221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 578.273252] do_syscall_64+0x3b/0x90 [ 578.273280] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 578.273312] RIP: 0033:0x7feee2156f41 [ 578.273328] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 578.273346] RSP: 002b:00007ffcb9eaa2f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 578.273366] RAX: ffffffffffffffda RBX: 00007feedf689700 RCX: 00007feee2156f41 [ 578.273380] RDX: 00007feedf6899d0 RSI: 00007feedf6892f0 RDI: 00000000003d0f00 [ 578.273392] RBP: 00007ffcb9eaa530 R08: 00007feedf689700 R09: 00007feedf689700 [ 578.273404] R10: 00007feedf6899d0 R11: 0000000000000206 R12: 00007ffcb9eaa3ae [ 578.273416] R13: 00007ffcb9eaa3af R14: 00007feedf689300 R15: 0000000000022000 [ 578.273453] [ 578.273654] Mem-Info: [ 578.273661] active_anon:1556 inactive_anon:245039 isolated_anon:0 [ 578.273661] active_file:161 inactive_file:2992 isolated_file:1 [ 578.273661] unevictable:19549 dirty:0 writeback:0 [ 578.273661] slab_reclaimable:7369 slab_unreclaimable:60667 [ 578.273661] mapped:72580 shmem:112 pagetables:3064 bounce:0 [ 578.273661] kernel_misc_reclaimable:0 [ 578.273661] free:1735 free_pcp:37 free_cma:0 [ 578.273713] Node 0 active_anon:6224kB inactive_anon:980156kB active_file:644kB inactive_file:11968kB unevictable:78196kB isolated(anon):0kB isolated(file):4kB mapped:290320kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:6080kB pagetables:12256kB all_unreclaimable? no [ 578.273757] Node 0 DMA free:6940kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:6100kB active_file:4kB inactive_file:44kB unevictable:884kB writepending:0kB present:15992kB managed:15360kB mlocked:884kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 578.273814] lowmem_reserve[]: 0 1615 1615 1615 [ 578.273839] Node 0 DMA32 free:0kB boost:12636kB min:17756kB low:19408kB high:21060kB reserved_highatomic:2048KB active_anon:6224kB inactive_anon:974056kB active_file:516kB inactive_file:11820kB unevictable:76472kB writepending:0kB present:2080640kB managed:1658276kB mlocked:76472kB bounce:0kB free_pcp:148kB local_pcp:0kB free_cma:0kB [ 578.273897] lowmem_reserve[]: 0 0 0 0 [ 578.273920] Node 0 DMA: 40*4kB (M) 40*8kB (M) 12*16kB (UMH) 16*32kB (MH) 10*64kB (UM) 2*128kB (M) 3*256kB (UMH) 2*512kB (UH) 3*1024kB (UMH) 0*2048kB 0*4096kB = 6944kB [ 578.274052] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 578.274142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 578.274158] 6147 total pagecache pages [ 578.274164] 0 pages in swap cache [ 578.274169] Swap cache stats: add 0, delete 0, find 0/0 [ 578.274180] Free swap = 0kB [ 578.274185] Total swap = 0kB [ 578.274191] 524158 pages RAM [ 578.274196] 0 pages HighMem/MovableOnly [ 578.274201] 105749 pages reserved [ 578.274206] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=6029,uid=0 [ 578.274297] Out of memory (oom_kill_allocating_task): Killed process 6029 (syz-executor.7) total-vm:93676kB, anon-rss:16764kB, file-rss:36660kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 578.280542] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 578.280566] CPU: 1 PID: 6020 Comm: syz-executor.3 Not tainted 5.18.0-next-20220527 #1 [ 578.280580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 578.280588] Call Trace: [ 578.280592] [ 578.280596] dump_stack_lvl+0x8b/0xb3 [ 578.280622] dump_header+0x10b/0x7e4 [ 578.280639] oom_kill_process.cold+0x10/0x15 [ 578.280655] out_of_memory+0x11ec/0x14b0 [ 578.280678] ? oom_killer_disable+0x270/0x270 [ 578.280693] ? lock_is_held_type+0xd7/0x130 [ 578.280710] __alloc_pages_slowpath.constprop.0+0x1935/0x1f90 [ 578.280741] ? warn_alloc+0x190/0x190 [ 578.280752] ? lock_is_held_type+0xd7/0x130 [ 578.280769] ? prepare_alloc_pages+0x371/0x500 [ 578.280787] ? find_held_lock+0x2c/0x110 [ 578.280807] __alloc_pages+0x421/0x4f0 [ 578.280818] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 578.280841] ? rcu_read_lock_sched_held+0x3a/0x70 [ 578.280862] copy_process+0x65c/0x6d90 [ 578.280879] ? wp_page_copy+0x4e3/0x2550 [ 578.280903] ? do_page_mkwrite+0x650/0x650 [ 578.280916] ? lock_downgrade+0x6d0/0x6d0 [ 578.280935] ? __cleanup_sighand+0xb0/0xb0 [ 578.280957] ? do_wp_page+0x1a5/0x2b50 [ 578.280978] kernel_clone+0xe7/0xa60 [ 578.280997] ? create_io_thread+0xe0/0xe0 [ 578.281012] ? lock_is_held_type+0xd7/0x130 [ 578.281026] ? lock_is_held_type+0xd7/0x130 [ 578.281036] ? find_held_lock+0x2c/0x110 [ 578.281051] ? lock_release+0x3b2/0x750 [ 578.281069] __do_sys_clone+0xba/0x100 [ 578.281085] ? __do_sys_vfork+0xc0/0xc0 [ 578.281113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 578.281130] do_syscall_64+0x3b/0x90 [ 578.281146] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 578.281165] RIP: 0033:0x7f924c157f41 [ 578.281174] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 578.281185] RSP: 002b:00007ffc62b5aaa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 578.281196] RAX: ffffffffffffffda RBX: 00007f924968a700 RCX: 00007f924c157f41 [ 578.281203] RDX: 00007f924968a9d0 RSI: 00007f924968a2f0 RDI: 00000000003d0f00 [ 578.281210] RBP: 00007ffc62b5ace0 R08: 00007f924968a700 R09: 00007f924968a700 [ 578.281217] R10: 00007f924968a9d0 R11: 0000000000000206 R12: 00007ffc62b5ab5e [ 578.281224] R13: 00007ffc62b5ab5f R14: 00007f924968a300 R15: 0000000000022000 [ 578.281245] [ 578.281248] Mem-Info: [ 578.281252] active_anon:1556 inactive_anon:245039 isolated_anon:0 [ 578.281252] active_file:139 inactive_file:2990 isolated_file:0 [ 578.281252] unevictable:19549 dirty:0 writeback:0 [ 578.281252] slab_reclaimable:7369 slab_unreclaimable:60667 [ 578.281252] mapped:72601 shmem:112 pagetables:3064 bounce:0 [ 578.281252] kernel_misc_reclaimable:0 [ 578.281252] free:1732 free_pcp:46 free_cma:0 [ 578.281282] Node 0 active_anon:6224kB inactive_anon:980156kB active_file:556kB inactive_file:11960kB unevictable:78196kB isolated(anon):0kB isolated(file):0kB mapped:290404kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:6016kB pagetables:12256kB all_unreclaimable? no [ 578.281307] Node 0 DMA free:6928kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:6100kB active_file:4kB inactive_file:44kB unevictable:884kB writepending:0kB present:15992kB managed:15360kB mlocked:884kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 578.281340] lowmem_reserve[]: 0 1615 1615 1615 [ 578.281354] Node 0 DMA32 free:0kB boost:12636kB min:17756kB low:19408kB high:21060kB reserved_highatomic:2048KB active_anon:6224kB inactive_anon:974056kB active_file:516kB inactive_file:11820kB unevictable:76472kB writepending:0kB present:2080640kB managed:1658276kB mlocked:76472kB bounce:0kB free_pcp:184kB local_pcp:148kB free_cma:0kB [ 578.281386] lowmem_reserve[]: 0 0 0 0 [ 578.281398] Node 0 DMA: 39*4kB (M) 41*8kB (UM) 11*16kB (MH) 16*32kB (MH) 10*64kB (UM) 2*128kB (M) 3*256kB (UMH) 2*512kB (UH) 3*1024kB (UMH) 0*2048kB 0*4096kB = 6932kB [ 578.281515] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 578.281566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 578.281590] 6126 total pagecache pages [ 578.281595] 0 pages in swap cache [ 578.281598] Swap cache stats: add 0, delete 0, find 0/0 [ 578.281605] Free swap = 0kB [ 578.281608] Total swap = 0kB [ 578.281612] 524158 pages RAM [ 578.281615] 0 pages HighMem/MovableOnly [ 578.281619] 105749 pages reserved [ 578.281624] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=6020,uid=0 [ 578.281967] Out of memory (oom_kill_allocating_task): Killed process 6020 (syz-executor.3) total-vm:93676kB, anon-rss:16744kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 578.338777] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 578.338795] CPU: 1 PID: 6025 Comm: syz-executor.2 Not tainted 5.18.0-next-20220527 #1 [ 578.338806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 578.338813] Call Trace: [ 578.338816] [ 578.338820] dump_stack_lvl+0x8b/0xb3 [ 578.338837] dump_header+0x10b/0x7e4 [ 578.338851] oom_kill_process.cold+0x10/0x15 [ 578.338867] out_of_memory+0x11ec/0x14b0 [ 578.338886] ? oom_killer_disable+0x270/0x270 [ 578.338901] ? lock_is_held_type+0xd7/0x130 [ 578.338917] __alloc_pages_slowpath.constprop.0+0x1935/0x1f90 [ 578.338945] ? warn_alloc+0x190/0x190 [ 578.338956] ? lock_is_held_type+0xd7/0x130 [ 578.338974] ? prepare_alloc_pages+0x371/0x500 [ 578.338991] ? find_held_lock+0x2c/0x110 [ 578.339008] __alloc_pages+0x421/0x4f0 [ 578.339020] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 578.339042] ? rcu_read_lock_sched_held+0x3a/0x70 [ 578.339063] copy_process+0x65c/0x6d90 [ 578.339077] ? wp_page_copy+0x4e3/0x2550 [ 578.339099] ? do_page_mkwrite+0x650/0x650 [ 578.339112] ? lock_downgrade+0x6d0/0x6d0 [ 578.339131] ? __cleanup_sighand+0xb0/0xb0 [ 578.339153] ? do_wp_page+0x1a5/0x2b50 [ 578.339174] kernel_clone+0xe7/0xa60 [ 578.339192] ? create_io_thread+0xe0/0xe0 [ 578.339207] ? lock_is_held_type+0xd7/0x130 [ 578.339220] ? lock_is_held_type+0xd7/0x130 [ 578.339231] ? find_held_lock+0x2c/0x110 [ 578.339247] ? lock_release+0x3b2/0x750 [ 578.339264] __do_sys_clone+0xba/0x100 [ 578.339280] ? __do_sys_vfork+0xc0/0xc0 [ 578.339309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 578.339325] do_syscall_64+0x3b/0x90 [ 578.339341] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 578.339358] RIP: 0033:0x7fc755a83f41 [ 578.339367] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 578.339376] RSP: 002b:00007ffc54dc48c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 578.339386] RAX: ffffffffffffffda RBX: 00007fc752fb6700 RCX: 00007fc755a83f41 [ 578.339393] RDX: 00007fc752fb69d0 RSI: 00007fc752fb62f0 RDI: 00000000003d0f00 [ 578.339400] RBP: 00007ffc54dc4b00 R08: 00007fc752fb6700 R09: 00007fc752fb6700 [ 578.339407] R10: 00007fc752fb69d0 R11: 0000000000000206 R12: 00007ffc54dc497e [ 578.339413] R13: 00007ffc54dc497f R14: 00007fc752fb6300 R15: 0000000000022000 [ 578.339434] [ 578.339437] Mem-Info: [ 578.339440] active_anon:1556 inactive_anon:250205 isolated_anon:0 [ 578.339440] active_file:146 inactive_file:2947 isolated_file:0 [ 578.339440] unevictable:14488 dirty:0 writeback:0 [ 578.339440] slab_reclaimable:7369 slab_unreclaimable:60667 [ 578.339440] mapped:72664 shmem:112 pagetables:3064 bounce:0 [ 578.339440] kernel_misc_reclaimable:0 [ 578.339440] free:1710 free_pcp:0 free_cma:0 [ 578.339507] Node 0 active_anon:6224kB inactive_anon:1000820kB active_file:584kB inactive_file:11788kB unevictable:57952kB isolated(anon):0kB isolated(file):0kB mapped:290656kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:5952kB pagetables:12256kB all_unreclaimable? no [ 578.339532] Node 0 DMA free:6840kB boost:2048kB min:2092kB low:2104kB high:2116kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:6388kB active_file:4kB inactive_file:68kB unevictable:596kB writepending:0kB present:15992kB managed:15360kB mlocked:596kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 578.339564] lowmem_reserve[]: 0 1615 1615 1615 [ 578.339578] Node 0 DMA32 free:0kB boost:0kB min:5120kB low:6772kB high:8424kB reserved_highatomic:2048KB active_anon:6224kB inactive_anon:993712kB active_file:516kB inactive_file:11820kB unevictable:57824kB writepending:0kB present:2080640kB managed:1658276kB mlocked:57824kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 578.339610] lowmem_reserve[]: 0 0 0 0 [ 578.339623] Node 0 DMA: 31*4kB (UM) 41*8kB (UM) 11*16kB (UMH) 16*32kB (UMH) 9*64kB (M) 2*128kB (M) 3*256kB (UH) 2*512kB (UH) 3*1024kB (UH) 0*2048kB 0*4096kB = 6836kB [ 578.339696] Node 0 DMA32: 16*4kB (M) 3*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 88kB [ 578.339750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 578.339759] 6168 total pagecache pages [ 578.339763] 0 pages in swap cache [ 578.339767] Swap cache stats: add 0, delete 0, find 0/0 [ 578.339773] Free swap = 0kB [ 578.339777] Total swap = 0kB [ 578.339780] 524158 pages RAM [ 578.339783] 0 pages HighMem/MovableOnly [ 578.339787] 105749 pages reserved [ 578.339791] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=6025,uid=0 [ 578.340444] Out of memory (oom_kill_allocating_task): Killed process 6025 (syz-executor.2) total-vm:93676kB, anon-rss:16764kB, file-rss:39804kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 579.346755] modprobe (6053) used greatest stack depth: 23136 bytes left [ 598.035287] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 598.035315] CPU: 1 PID: 6074 Comm: syz-executor.3 Not tainted 5.18.0-next-20220527 #1 [ 598.035328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 598.035339] Call Trace: [ 598.035343] [ 598.035348] dump_stack_lvl+0x8b/0xb3 [ 598.035372] dump_header+0x10b/0x7e4 [ 598.035389] oom_kill_process.cold+0x10/0x15 [ 598.035405] out_of_memory+0x11ec/0x14b0 [ 598.035428] ? oom_killer_disable+0x270/0x270 [ 598.035443] ? lock_is_held_type+0xd7/0x130 [ 598.035464] __alloc_pages_slowpath.constprop.0+0x1935/0x1f90 [ 598.035495] ? warn_alloc+0x190/0x190 [ 598.035507] ? lock_is_held_type+0xd7/0x130 [ 598.035525] ? prepare_alloc_pages+0x371/0x500 [ 598.035550] __alloc_pages+0x421/0x4f0 [ 598.035563] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 598.035577] ? lock_is_held_type+0xd7/0x130 [ 598.035603] alloc_pages+0x1a0/0x2f0 [ 598.035621] __get_free_pages+0xc/0xa0 [ 598.035638] pgd_alloc+0x84/0x4b0 [ 598.035655] ? lock_downgrade+0x6d0/0x6d0 [ 598.035672] ? pgd_page_get_mm+0x40/0x40 [ 598.035688] ? lockdep_init_map_type+0x21a/0x7e0 [ 598.035704] ? lockdep_init_map_type+0x21a/0x7e0 [ 598.035734] mm_init+0x5cf/0xa70 [ 598.035752] dup_mm+0xd5/0x1250 [ 598.035770] ? lock_release+0x3b2/0x750 [ 598.035785] ? copy_process+0x286e/0x6d90 [ 598.035806] ? replace_mm_exe_file+0x490/0x490 [ 598.035825] ? __raw_spin_lock_init+0x36/0x110 [ 598.035846] copy_process+0x6bc7/0x6d90 [ 598.035866] ? futex_unqueue+0xb3/0x120 [ 598.035896] ? __cleanup_sighand+0xb0/0xb0 [ 598.035912] ? futex_hash+0x12/0x200 [ 598.035941] kernel_clone+0xe7/0xa60 [ 598.035958] ? find_held_lock+0x2c/0x110 [ 598.035973] ? create_io_thread+0xe0/0xe0 [ 598.035993] ? do_futex+0x136/0x380 [ 598.036011] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 598.036028] ? mlock_page_drain_local+0x269/0x4a0 [ 598.036054] __do_sys_fork+0x7c/0xb0 [ 598.036072] ? kernel_clone+0xa60/0xa60 [ 598.036100] ? lockdep_hardirqs_on+0x79/0x100 [ 598.036112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 598.036125] do_syscall_64+0x3b/0x90 [ 598.036142] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 598.036162] RIP: 0033:0x7f924c156b19 [ 598.036171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 598.036182] RSP: 002b:00007f92496cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 598.036194] RAX: ffffffffffffffda RBX: 00007f924c269f60 RCX: 00007f924c156b19 [ 598.036202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.036209] RBP: 00007f924c1b0f6d R08: 0000000000000000 R09: 0000000000000000 [ 598.036215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.036222] R13: 00007ffc62b5ab5f R14: 00007f92496cc300 R15: 0000000000022000 [ 598.036243] [ 598.036316] Mem-Info: [ 598.036319] active_anon:1555 inactive_anon:257540 isolated_anon:0 [ 598.036319] active_file:172 inactive_file:4547 isolated_file:20 [ 598.036319] unevictable:4431 dirty:0 writeback:0 [ 598.036319] slab_reclaimable:7294 slab_unreclaimable:61219 [ 598.036319] mapped:70029 shmem:112 pagetables:2988 bounce:0 [ 598.036319] kernel_misc_reclaimable:0 [ 598.036319] free:2404 free_pcp:0 free_cma:0 [ 598.036350] Node 0 active_anon:6220kB inactive_anon:1030160kB active_file:688kB inactive_file:18188kB unevictable:17724kB isolated(anon):0kB isolated(file):80kB mapped:280116kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:5920kB pagetables:11952kB all_unreclaimable? no [ 598.036376] Node 0 DMA free:7540kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:6912kB active_file:4kB inactive_file:72kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.036410] lowmem_reserve[]: 0 1615 1615 1615 [ 598.036425] Node 0 DMA32 free:2076kB boost:12636kB min:17756kB low:19408kB high:21060kB reserved_highatomic:6144KB active_anon:6220kB inactive_anon:1023836kB active_file:516kB inactive_file:18428kB unevictable:17640kB writepending:0kB present:2080640kB managed:1658276kB mlocked:17640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.036476] lowmem_reserve[]: 0 0 0 0 [ 598.036490] Node 0 DMA: 33*4kB (UMEH) 26*8kB (UME) 20*16kB (UMEH) 23*32kB (UMEH) 8*64kB (UME) 4*128kB (UME) 2*256kB (MH) 3*512kB (UMH) 3*1024kB (UEH) 0*2048kB 0*4096kB = 7540kB [ 598.036567] Node 0 DMA32: 64*4kB (UM) 52*8kB (UM) 25*16kB (UM) 28*32kB (UM) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2224kB [ 598.036632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 598.036642] 5049 total pagecache pages [ 598.036646] 0 pages in swap cache [ 598.036650] Swap cache stats: add 0, delete 0, find 0/0 [ 598.036657] Free swap = 0kB [ 598.036660] Total swap = 0kB [ 598.036664] 524158 pages RAM [ 598.036668] 0 pages HighMem/MovableOnly [ 598.036671] 105749 pages reserved [ 598.036675] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=6074,uid=0 [ 598.036743] Out of memory (oom_kill_allocating_task): Killed process 6072 (syz-executor.3) total-vm:93544kB, anon-rss:5656kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 598.257359] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 598.257399] CPU: 1 PID: 6076 Comm: syz-executor.1 Not tainted 5.18.0-next-20220527 #1 [ 598.257411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 598.257418] Call Trace: [ 598.257422] [ 598.257426] dump_stack_lvl+0x8b/0xb3 [ 598.257449] dump_header+0x10b/0x7e4 [ 598.257466] oom_kill_process.cold+0x10/0x15 [ 598.257482] out_of_memory+0x11ec/0x14b0 [ 598.257506] ? oom_killer_disable+0x270/0x270 [ 598.257521] ? lock_is_held_type+0xd7/0x130 [ 598.257538] __alloc_pages_slowpath.constprop.0+0x1935/0x1f90 [ 598.257568] ? warn_alloc+0x190/0x190 [ 598.257579] ? lock_is_held_type+0xd7/0x130 [ 598.257597] ? prepare_alloc_pages+0x371/0x500 [ 598.257614] ? find_held_lock+0x2c/0x110 [ 598.257633] __alloc_pages+0x421/0x4f0 [ 598.257645] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 598.257667] ? rcu_read_lock_sched_held+0x3a/0x70 [ 598.257689] copy_process+0x65c/0x6d90 [ 598.257708] ? lock_is_held_type+0xd7/0x130 [ 598.257719] ? find_held_lock+0x2c/0x110 [ 598.257736] ? lock_is_held_type+0xd7/0x130 [ 598.257752] ? __cleanup_sighand+0xb0/0xb0 [ 598.257767] ? __handle_mm_fault+0x1837/0x3670 [ 598.257782] ? lock_downgrade+0x6d0/0x6d0 [ 598.257800] ? folio_add_lru+0x387/0x650 [ 598.257822] kernel_clone+0xe7/0xa60 [ 598.257841] ? create_io_thread+0xe0/0xe0 [ 598.257856] ? lock_is_held_type+0xd7/0x130 [ 598.257870] ? lock_is_held_type+0xd7/0x130 [ 598.257880] ? find_held_lock+0x2c/0x110 [ 598.257896] ? lock_release+0x3b2/0x750 [ 598.257913] __do_sys_clone+0xba/0x100 [ 598.257929] ? __do_sys_vfork+0xc0/0xc0 [ 598.257958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 598.257975] do_syscall_64+0x3b/0x90 [ 598.257991] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 598.258009] RIP: 0033:0x7f3c4a5acf41 [ 598.258017] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 598.258027] RSP: 002b:00007ffd09f44e78 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 598.258038] RAX: ffffffffffffffda RBX: 00007f3c47b00700 RCX: 00007f3c4a5acf41 [ 598.258046] RDX: 00007f3c47b009d0 RSI: 00007f3c47b002f0 RDI: 00000000003d0f00 [ 598.258052] RBP: 00007ffd09f450b0 R08: 00007f3c47b00700 R09: 00007f3c47b00700 [ 598.258059] R10: 00007f3c47b009d0 R11: 0000000000000206 R12: 00007ffd09f44f2e [ 598.258066] R13: 00007ffd09f44f2f R14: 00007f3c47b00300 R15: 0000000000022000 [ 598.258086] [ 598.258127] Mem-Info: [ 598.258131] active_anon:1555 inactive_anon:257650 isolated_anon:0 [ 598.258131] active_file:185 inactive_file:4169 isolated_file:0 [ 598.258131] unevictable:5232 dirty:6 writeback:0 [ 598.258131] slab_reclaimable:7289 slab_unreclaimable:61088 [ 598.258131] mapped:70825 shmem:112 pagetables:2976 bounce:0 [ 598.258131] kernel_misc_reclaimable:0 [ 598.258131] free:2074 free_pcp:0 free_cma:0 [ 598.258160] Node 0 active_anon:6220kB inactive_anon:1030600kB active_file:740kB inactive_file:16676kB unevictable:20928kB isolated(anon):0kB isolated(file):0kB mapped:283300kB dirty:24kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:5792kB pagetables:11904kB all_unreclaimable? no [ 598.258186] Node 0 DMA free:7540kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:6912kB active_file:4kB inactive_file:72kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.258218] lowmem_reserve[]: 0 1615 1615 1615 [ 598.258232] Node 0 DMA32 free:756kB boost:12636kB min:17756kB low:19408kB high:21060kB reserved_highatomic:2048KB active_anon:6220kB inactive_anon:1023688kB active_file:840kB inactive_file:16660kB unevictable:20592kB writepending:24kB present:2080640kB managed:1658276kB mlocked:20592kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.258264] lowmem_reserve[]: 0 0 0 0 [ 598.258277] Node 0 DMA: 33*4kB (UMEH) 26*8kB (UME) 20*16kB (UMEH) 23*32kB (UMEH) 8*64kB (UME) 4*128kB (UME) 2*256kB (MH) 3*512kB (UMH) 3*1024kB (UEH) 0*2048kB 0*4096kB = 7540kB [ 598.258350] Node 0 DMA32: 81*4kB (UME) 34*8kB (UME) 7*16kB (U) 4*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 836kB [ 598.258409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 598.258419] 5498 total pagecache pages [ 598.258423] 0 pages in swap cache [ 598.258427] Swap cache stats: add 0, delete 0, find 0/0 [ 598.258434] Free swap = 0kB [ 598.258437] Total swap = 0kB [ 598.258440] 524158 pages RAM [ 598.258443] 0 pages HighMem/MovableOnly [ 598.258460] 105749 pages reserved [ 598.258464] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0,global_oom,task_memcg=/syz1,task=syz-executor.1,pid=6076,uid=0 [ 598.258525] Out of memory (oom_kill_allocating_task): Killed process 6076 (syz-executor.1) total-vm:93544kB, anon-rss:16760kB, file-rss:37760kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 04:37:40 executing program 1: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) fork() 04:37:40 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 04:37:40 executing program 3: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:37:40 executing program 5: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) [ 600.239628] syz-fuzzer invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 600.239666] CPU: 1 PID: 269 Comm: syz-fuzzer Not tainted 5.18.0-next-20220527 #1 [ 600.239687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 600.239700] Call Trace: [ 600.239705] [ 600.239713] dump_stack_lvl+0x8b/0xb3 [ 600.239749] dump_header+0x10b/0x7e4 [ 600.239802] oom_kill_process.cold+0x10/0x15 [ 600.239830] out_of_memory+0x11ec/0x14b0 [ 600.239871] ? oom_killer_disable+0x270/0x270 [ 600.239911] __alloc_pages_slowpath.constprop.0+0x1935/0x1f90 [ 600.239965] ? warn_alloc+0x190/0x190 [ 600.240005] ? prepare_alloc_pages+0x371/0x500 [ 600.240049] __alloc_pages+0x421/0x4f0 [ 600.240071] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 600.240093] ? lock_is_held_type+0xd7/0x130 [ 600.240126] ? __filemap_get_folio+0x2d4/0xfe0 [ 600.240157] ? lock_downgrade+0x6d0/0x6d0 [ 600.240184] ? lock_is_held_type+0xd7/0x130 [ 600.240212] alloc_pages+0x1a0/0x2f0 [ 600.240242] __filemap_get_folio+0x65f/0xfe0 [ 600.240287] ? filemap_read+0xba0/0xba0 [ 600.240342] filemap_fault+0x156a/0x2140 [ 600.240387] ? __filemap_get_folio+0xfe0/0xfe0 [ 600.240444] __do_fault+0x113/0x5a0 [ 600.240476] __handle_mm_fault+0x13bc/0x3670 [ 600.240510] ? lock_is_held_type+0xd7/0x130 [ 600.240530] ? __pmd_alloc+0x680/0x680 [ 600.240592] handle_mm_fault+0x2e6/0xa20 [ 600.240626] do_user_addr_fault+0x54a/0x12a0 [ 600.240669] exc_page_fault+0xa2/0x1a0 [ 600.240691] asm_exc_page_fault+0x27/0x30 [ 600.240710] RIP: 0033:0x440c81 [ 600.240733] Code: Unable to access opcode bytes at RIP 0x440c57. [ 600.240740] RSP: 002b:000000c00003ff38 EFLAGS: 00010206 [ 600.240756] RAX: 000000c00001e000 RBX: 0000008b8eaaa4bd RCX: 0000000000000000 [ 600.240769] RDX: 0000000000000002 RSI: 000000c00001e000 RDI: 000000c00001e000 [ 600.240781] RBP: 000000c00003ffa0 R08: 0000008b8eaaa4bd R09: 00007ffcf89cb080 [ 600.240793] R10: 00007ffcf89cb090 R11: 000000000010c936 R12: 0000000000438880 [ 600.240805] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 600.240843] [ 600.240905] Mem-Info: [ 600.240911] active_anon:1555 inactive_anon:257449 isolated_anon:0 [ 600.240911] active_file:234 inactive_file:601 isolated_file:0 [ 600.240911] unevictable:9232 dirty:6 writeback:0 [ 600.240911] slab_reclaimable:7287 slab_unreclaimable:60928 [ 600.240911] mapped:69983 shmem:112 pagetables:3010 bounce:0 [ 600.240911] kernel_misc_reclaimable:0 [ 600.240911] free:1871 free_pcp:5 free_cma:0 [ 600.240963] Node 0 active_anon:6220kB inactive_anon:1029796kB active_file:936kB inactive_file:2404kB unevictable:36928kB isolated(anon):0kB isolated(file):0kB mapped:279932kB dirty:24kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:5952kB pagetables:12040kB all_unreclaimable? no [ 600.241017] Node 0 DMA free:7484kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:6912kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 600.241089] lowmem_reserve[]: 0 1615 1615 1615 [ 600.241122] Node 0 DMA32 free:0kB boost:6144kB min:11264kB low:12916kB high:14568kB reserved_highatomic:4096KB active_anon:6220kB inactive_anon:1022884kB active_file:888kB inactive_file:2560kB unevictable:36340kB writepending:24kB present:2080640kB managed:1658276kB mlocked:36340kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 600.241202] lowmem_reserve[]: 0 0 0 0 [ 600.241234] Node 0 DMA: 47*4kB (UMH) 26*8kB (UMH) 21*16kB (UMH) 19*32kB (UMH) 8*64kB (MH) 4*128kB (MH) 2*256kB (UM) 3*512kB (UM) 3*1024kB (UMH) 0*2048kB 0*4096kB = 7484kB [ 600.241965] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 600.242063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 600.242080] 1174 total pagecache pages [ 600.242086] 0 pages in swap cache [ 600.242091] Swap cache stats: add 0, delete 0, find 0/0 [ 600.242103] Free swap = 0kB [ 600.242108] Total swap = 0kB [ 600.242113] 524158 pages RAM [ 600.242118] 0 pages HighMem/MovableOnly [ 600.242123] 105749 pages reserved [ 600.242129] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=269,uid=0 [ 600.243340] Out of memory (oom_kill_allocating_task): Killed process 268 (syz-fuzzer) total-vm:963180kB, anon-rss:33288kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:392kB oom_score_adj:0 [ 600.636661] syz-executor.7 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 600.636695] CPU: 1 PID: 6085 Comm: syz-executor.7 Not tainted 5.18.0-next-20220527 #1 [ 600.636713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 600.636725] Call Trace: [ 600.636730] [ 600.636737] dump_stack_lvl+0x8b/0xb3 [ 600.636766] dump_header+0x10b/0x7e4 [ 600.636791] oom_kill_process.cold+0x10/0x15 [ 600.636815] out_of_memory+0x11ec/0x14b0 [ 600.636849] ? oom_killer_disable+0x270/0x270 [ 600.636883] __alloc_pages_slowpath.constprop.0+0x1935/0x1f90 [ 600.636929] ? warn_alloc+0x190/0x190 [ 600.636962] ? prepare_alloc_pages+0x371/0x500 [ 600.636988] ? lock_is_held_type+0xd7/0x130 [ 600.637014] __alloc_pages+0x421/0x4f0 [ 600.637034] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 600.637073] ? mark_lock.part.0+0xef/0x2f60 [ 600.637103] vma_alloc_folio+0xde/0x510 [ 600.637132] __handle_mm_fault+0x1047/0x3670 [ 600.637162] ? lock_is_held_type+0xd7/0x130 [ 600.637180] ? __pmd_alloc+0x680/0x680 [ 600.637237] handle_mm_fault+0x2e6/0xa20 [ 600.637268] __get_user_pages+0x50d/0x1100 [ 600.637301] ? follow_page_mask+0x1a40/0x1a40 [ 600.637327] ? lru_add_drain_cpu+0x415/0x840 [ 600.637368] populate_vma_page_range+0x23d/0x320 [ 600.637395] __mm_populate+0x1ea/0x3e0 [ 600.637420] ? faultin_vma_page_range+0x300/0x300 [ 600.637447] ? up_write+0x148/0x460 [ 600.637472] __do_sys_mlockall+0x41f/0x4b0 [ 600.637502] do_syscall_64+0x3b/0x90 [ 600.637528] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 600.637557] RIP: 0033:0x7feee2155b19 [ 600.637570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.637587] RSP: 002b:00007feedf6cb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 600.637604] RAX: ffffffffffffffda RBX: 00007feee2268f60 RCX: 00007feee2155b19 [ 600.637615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 600.637625] RBP: 00007feee21aff6d R08: 0000000000000000 R09: 0000000000000000 [ 600.637636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.637646] R13: 00007ffcb9eaa3af R14: 00007feedf6cb300 R15: 0000000000022000 [ 600.637679] [ 600.637734] Mem-Info: [ 600.637739] active_anon:1555 inactive_anon:257449 isolated_anon:0 [ 600.637739] active_file:13 inactive_file:93 isolated_file:0 [ 600.637739] unevictable:10030 dirty:6 writeback:0 [ 600.637739] slab_reclaimable:7287 slab_unreclaimable:60910 [ 600.637739] mapped:69878 shmem:112 pagetables:3010 bounce:0 [ 600.637739] kernel_misc_reclaimable:0 [ 600.637739] free:1846 free_pcp:61 free_cma:0 [ 600.637793] Node 0 active_anon:6220kB inactive_anon:1029796kB active_file:52kB inactive_file:372kB unevictable:40120kB isolated(anon):0kB isolated(file):0kB mapped:279512kB dirty:24kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:5664kB pagetables:12040kB all_unreclaimable? no [ 600.637847] Node 0 DMA free:7384kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:6912kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 600.637915] lowmem_reserve[]: 0 1615 1615 1615 [ 600.637945] Node 0 DMA32 free:0kB boost:0kB min:5120kB low:6772kB high:8424kB reserved_highatomic:4096KB active_anon:6220kB inactive_anon:1022884kB active_file:0kB inactive_file:492kB unevictable:39868kB writepending:24kB present:2080640kB managed:1658276kB mlocked:39868kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 600.638013] lowmem_reserve[]: 0 0 0 0 [ 600.638040] Node 0 DMA: 46*4kB (M) 26*8kB (MH) 21*16kB (MH) 16*32kB (M) 8*64kB (MH) 4*128kB (MH) 2*256kB (M) 3*512kB (MH) 3*1024kB (MH) 0*2048kB 0*4096kB = 7384kB [ 600.638196] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 600.638303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 600.638322] 460 total pagecache pages [ 600.638329] 0 pages in swap cache [ 600.638335] Swap cache stats: add 0, delete 0, find 0/0 [ 600.638349] Free swap = 0kB [ 600.638354] Total swap = 0kB [ 600.638361] 524158 pages RAM [ 600.638367] 0 pages HighMem/MovableOnly [ 600.638373] 105749 pages reserved [ 600.638380] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=6085,uid=0 [ 600.638973] Out of memory (oom_kill_allocating_task): Killed process 6084 (syz-executor.7) total-vm:93412kB, anon-rss:16208kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 600.735245] syz-executor.3 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 600.735283] CPU: 0 PID: 6093 Comm: syz-executor.3 Not tainted 5.18.0-next-20220527 #1 [ 600.735305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 600.735318] Call Trace: [ 600.735324] [ 600.735331] dump_stack_lvl+0x8b/0xb3 [ 600.735367] dump_header+0x10b/0x7e4 [ 600.735396] oom_kill_process.cold+0x10/0x15 [ 600.735426] out_of_memory+0x11ec/0x14b0 [ 600.735471] ? oom_killer_disable+0x270/0x270 [ 600.735513] __alloc_pages_slowpath.constprop.0+0x1935/0x1f90 [ 600.735570] ? warn_alloc+0x190/0x190 [ 600.735610] ? prepare_alloc_pages+0x371/0x500 [ 600.735643] ? lock_is_held_type+0xd7/0x130 [ 600.735674] __alloc_pages+0x421/0x4f0 [ 600.735697] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 600.735745] ? mark_lock.part.0+0xef/0x2f60 [ 600.735791] vma_alloc_folio+0xde/0x510 [ 600.735825] __handle_mm_fault+0x1047/0x3670 [ 600.735862] ? lock_is_held_type+0xd7/0x130 [ 600.735883] ? __pmd_alloc+0x680/0x680 [ 600.735949] handle_mm_fault+0x2e6/0xa20 [ 600.735986] __get_user_pages+0x50d/0x1100 [ 600.736026] ? follow_page_mask+0x1a40/0x1a40 [ 600.736058] ? lru_add_drain_cpu+0x415/0x840 [ 600.736107] populate_vma_page_range+0x23d/0x320 [ 600.736140] __mm_populate+0x1ea/0x3e0 [ 600.736171] ? faultin_vma_page_range+0x300/0x300 [ 600.736203] ? up_write+0x148/0x460 [ 600.736233] __do_sys_mlockall+0x41f/0x4b0 [ 600.736270] do_syscall_64+0x3b/0x90 [ 600.736301] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 600.736336] RIP: 0033:0x7f924c156b19 [ 600.736352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.736372] RSP: 002b:00007f92496ab188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 600.736393] RAX: ffffffffffffffda RBX: 00007f924c26a020 RCX: 00007f924c156b19 [ 600.736407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 600.736419] RBP: 00007f924c1b0f6d R08: 0000000000000000 R09: 0000000000000000 [ 600.736431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.736443] R13: 00007ffc62b5ab5f R14: 00007f92496ab300 R15: 0000000000022000 [ 600.736483] [ 600.736639] Mem-Info: [ 600.736646] active_anon:1555 inactive_anon:259003 isolated_anon:0 [ 600.736646] active_file:60 inactive_file:59 isolated_file:0 [ 600.736646] unevictable:6313 dirty:6 writeback:0 [ 600.736646] slab_reclaimable:7287 slab_unreclaimable:60910 [ 600.736646] mapped:69920 shmem:112 pagetables:3010 bounce:0 [ 600.736646] kernel_misc_reclaimable:0 [ 600.736646] free:3485 free_pcp:1 free_cma:0 [ 600.736700] Node 0 active_anon:6220kB inactive_anon:1035592kB active_file:240kB inactive_file:236kB unevictable:25252kB isolated(anon):0kB isolated(file):0kB mapped:279680kB dirty:24kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:5632kB pagetables:12040kB all_unreclaimable? no [ 600.736748] Node 0 DMA free:7388kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:6912kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 600.736809] lowmem_reserve[]: 0 1615 1615 1615 [ 600.736835] Node 0 DMA32 free:6552kB boost:12636kB min:17756kB low:19408kB high:21060kB reserved_highatomic:4096KB active_anon:6220kB inactive_anon:1028932kB active_file:352kB inactive_file:488kB unevictable:25252kB writepending:24kB present:2080640kB managed:1658276kB mlocked:25252kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 600.736898] lowmem_reserve[]: 0 0 0 0 [ 600.736923] Node 0 DMA: 43*4kB (UM) 28*8kB (UMH) 21*16kB (UMH) 16*32kB (UM) 8*64kB (UMH) 4*128kB (UMH) 2*256kB (M) 3*512kB (MH) 3*1024kB (UMH) 0*2048kB 0*4096kB = 7388kB [ 600.737063] Node 0 DMA32: 936*4kB (UME) 170*8kB (UME) 64*16kB (UME) 31*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7120kB [ 600.737179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 600.737196] 481 total pagecache pages [ 600.737202] 0 pages in swap cache [ 600.737208] Swap cache stats: add 0, delete 0, find 0/0 [ 600.737220] Free swap = 0kB [ 600.737225] Total swap = 0kB [ 600.737230] 524158 pages RAM [ 600.737236] 0 pages HighMem/MovableOnly [ 600.737241] 105749 pages reserved [ 600.737247] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=6093,uid=0 [ 600.737845] Out of memory (oom_kill_allocating_task): Killed process 6088 (syz-executor.3) total-vm:93544kB, anon-rss:8560kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 600.749527] syz-executor.5 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 600.749554] CPU: 1 PID: 6086 Comm: syz-executor.5 Not tainted 5.18.0-next-20220527 #1 [ 600.749571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 600.749581] Call Trace: [ 600.749586] [ 600.749592] dump_stack_lvl+0x8b/0xb3 [ 600.749618] dump_header+0x10b/0x7e4 [ 600.749640] oom_kill_process.cold+0x10/0x15 [ 600.749663] out_of_memory+0x11ec/0x14b0 [ 600.749692] ? oom_killer_disable+0x270/0x270 [ 600.749724] __alloc_pages_slowpath.constprop.0+0x1935/0x1f90 [ 600.749770] ? warn_alloc+0x190/0x190 [ 600.749787] ? lock_is_held_type+0xd7/0x130 [ 600.749814] ? prepare_alloc_pages+0x371/0x500 [ 600.749848] __alloc_pages+0x421/0x4f0 [ 600.749866] ? __alloc_pages_slowpath.constprop.0+0x1f90/0x1f90 [ 600.749902] ? mark_lock.part.0+0xef/0x2f60 [ 600.749929] vma_alloc_folio+0xde/0x510 [ 600.749955] __handle_mm_fault+0x1047/0x3670 [ 600.749983] ? lock_is_held_type+0xd7/0x130 [ 600.749999] ? __pmd_alloc+0x680/0x680 [ 600.750048] handle_mm_fault+0x2e6/0xa20 [ 600.750076] __get_user_pages+0x50d/0x1100 [ 600.750106] ? follow_page_mask+0x1a40/0x1a40 [ 600.750130] ? lru_add_drain_cpu+0x415/0x840 [ 600.750167] populate_vma_page_range+0x23d/0x320 [ 600.750192] __mm_populate+0x1ea/0x3e0 [ 600.750215] ? faultin_vma_page_range+0x300/0x300 [ 600.750239] ? up_write+0x148/0x460 [ 600.750262] __do_sys_mlockall+0x41f/0x4b0 [ 600.750289] do_syscall_64+0x3b/0x90 [ 600.750313] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 600.750339] RIP: 0033:0x7f78d4c4eb19 [ 600.750351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.750366] RSP: 002b:00007f78d21a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 600.750382] RAX: ffffffffffffffda RBX: 00007f78d4d62020 RCX: 00007f78d4c4eb19 [ 600.750392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 600.750401] RBP: 00007f78d4ca8f6d R08: 0000000000000000 R09: 0000000000000000 [ 600.750411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.750420] R13: 00007ffe7d89339f R14: 00007f78d21a3300 R15: 0000000000022000 [ 600.750450] [ 600.750556] Mem-Info: [ 600.750562] active_anon:1555 inactive_anon:257512 isolated_anon:0 [ 600.750562] active_file:8 inactive_file:48 isolated_file:0 [ 600.750562] unevictable:6250 dirty:6 writeback:0 [ 600.750562] slab_reclaimable:7287 slab_unreclaimable:60910 [ 600.750562] mapped:69878 shmem:112 pagetables:3010 bounce:0 [ 600.750562] kernel_misc_reclaimable:0 [ 600.750562] free:5503 free_pcp:62 free_cma:0 [ 600.750604] Node 0 active_anon:6220kB inactive_anon:1030048kB active_file:32kB inactive_file:192kB unevictable:25000kB isolated(anon):0kB isolated(file):0kB mapped:279512kB dirty:24kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:5536kB pagetables:12040kB all_unreclaimable? no [ 600.750640] Node 0 DMA free:7396kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:2048KB active_anon:0kB inactive_anon:6912kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 600.750687] lowmem_reserve[]: 0 1615 1615 1615 [ 600.750707] Node 0 DMA32 free:14616kB boost:12636kB min:17756kB low:19408kB high:21060kB reserved_highatomic:4096KB active_anon:6220kB inactive_anon:1022884kB active_file:352kB inactive_file:488kB unevictable:25252kB writepending:24kB present:2080640kB managed:1658276kB mlocked:25252kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 600.750756] lowmem_reserve[]: 0 0 0 0 [ 600.750775] Node 0 DMA: 45*4kB (UM) 28*8kB (UMH) 21*16kB (UMH) 16*32kB (UM) 8*64kB (UMH) 4*128kB (UMH) 2*256kB (M) 3*512kB (MH) 3*1024kB (UMH) 0*2048kB 0*4096kB = 7396kB [ 600.750882] Node 0 DMA32: 1659*4kB (ME) 417*8kB (ME) 138*16kB (UME) 70*32kB (UME) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 15060kB [ 600.750974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 600.750987] 439 total pagecache pages [ 600.750992] 0 pages in swap cache [ 600.750996] Swap cache stats: add 0, delete 0, find 0/0 [ 600.751006] Free swap = 0kB [ 600.751010] Total swap = 0kB [ 600.751014] 524158 pages RAM [ 600.751018] 0 pages HighMem/MovableOnly [ 600.751023] 105749 pages reserved [ 600.751028] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=6086,uid=0 [ 600.751121] Out of memory (oom_kill_allocating_task): Killed process 6082 (syz-executor.5) total-vm:93544kB, anon-rss:15160kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 04:37:40 executing program 7: mlockall(0x8) mlockall(0x7) mlockall(0x1) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3d}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7918, 0x6}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) setpgid(0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x20, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x8001, 0x0, 0x17d8, 0x3, 0x4, r3, r3}) 04:37:40 executing program 4: mlockall(0x8) mlockall(0x7) mlockall(0x1) ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000000)) 04:37:40 executing program 2: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 04:37:41 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x40000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6040090) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x54}}, 0x20004880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:37:41 executing program 3: mlockall(0x8) mlockall(0x7) mlockall(0x1) r0 = fork() ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/98, 0x62}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) VM DIAGNOSIS: 04:37:45 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000003fff RCX=00000000bed4e0a9 RDX=1ffff11001e367f3 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000af9 RSP=ffff88800f217b20 R8 =0000000000000000 R9 =ffffffff86a5d787 R10=fffffbfff0d4baf0 R11=0000000000000001 R12=ffffffff857c75a0 R13=0000000000000000 R14=ffffffff85204a80 R15=0000000000000000 RIP=ffffffff812924bf RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f839e0514c0 CR3=0000000008936000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 000000000000002f 002f2e2e2f002e2e YMM01=0000000000000000 0000000000000000 0000000000000000 696c61766e49002f YMM02=0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 YMM03=0000000000000000 0000000000000000 36706f6f6c2f6b63 6f6c622f6c617574 YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000557909770480 00005579097852e0 YMM06=0000000000000000 0000000000000000 0000557909771000 00000003ffffffff YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000046 RCX=ffff888008167590 RDX=1ffff1100102b132 RSI=0000000000000000 RDI=0000000000000000 RBP=ffffffff847e4500 RSP=ffff888008167510 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=ffffffff8466c8e0 R14=ffff888008158998 R15=ffff888008158000 RIP=ffffffff8416e99d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1bf5833900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd12408f5e0 CR3=0000000008dd2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000ff000000ff00 YMM02=0000000000000000 0000000000000000 7365636375732067 6e69646e6553006d YMM03=0000000000000000 0000000000000000 65530073746e6576 652e79726f6d656d YMM04=0000000000000000 0000000000000000 4040404040404040 4040404040404040 YMM05=0000000000000000 0000000000000000 5a5a5a5a5a5a5a5a 5a5a5a5a5a5a5a5a YMM06=0000000000000000 0000000000000000 2020202020202020 2020202020202020 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 4c4b4a4948474645 444342417a797877 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000200000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000